google-apis-securitycenter_v1 0.83.0 → 0.85.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +9 -0
- data/lib/google/apis/securitycenter_v1/classes.rb +318 -92
- data/lib/google/apis/securitycenter_v1/gem_version.rb +3 -3
- data/lib/google/apis/securitycenter_v1/representations.rb +98 -0
- data/lib/google/apis/securitycenter_v1/service.rb +529 -520
- metadata +3 -3
@@ -383,8 +383,8 @@ module Google
|
|
383
383
|
include Google::Apis::Core::Hashable
|
384
384
|
|
385
385
|
# The resource name of the attack path simulation result that contains the
|
386
|
-
# details regarding this attack exposure score. Example: organizations/123/
|
387
|
-
# simulations/456/attackExposureResults/789
|
386
|
+
# details regarding this attack exposure score. Example: `organizations/123/
|
387
|
+
# simulations/456/attackExposureResults/789`
|
388
388
|
# Corresponds to the JSON property `attackExposureResult`
|
389
389
|
# @return [String]
|
390
390
|
attr_accessor :attack_exposure_result
|
@@ -519,14 +519,14 @@ module Google
|
|
519
519
|
attr_accessor :display_name
|
520
520
|
|
521
521
|
# The name of the resource at this point in the attack path. The format of the
|
522
|
-
# name follows the Cloud Asset Inventory [resource name format](
|
523
|
-
# google.com/asset-inventory/docs/resource-name-format
|
522
|
+
# name follows the Cloud Asset Inventory [resource name format](https://cloud.
|
523
|
+
# google.com/asset-inventory/docs/resource-name-format)
|
524
524
|
# Corresponds to the JSON property `resource`
|
525
525
|
# @return [String]
|
526
526
|
attr_accessor :resource
|
527
527
|
|
528
528
|
# The [supported resource type](https://cloud.google.com/asset-inventory/docs/
|
529
|
-
# supported-asset-types
|
529
|
+
# supported-asset-types)
|
530
530
|
# Corresponds to the JSON property `resourceType`
|
531
531
|
# @return [String]
|
532
532
|
attr_accessor :resource_type
|
@@ -788,8 +788,8 @@ module Google
|
|
788
788
|
# @return [String]
|
789
789
|
attr_accessor :display_name
|
790
790
|
|
791
|
-
# The UUID of the Azure management group, for example,
|
792
|
-
# 000000000000
|
791
|
+
# The UUID of the Azure management group, for example, `20000000-0001-0000-0000-
|
792
|
+
# 000000000000`.
|
793
793
|
# Corresponds to the JSON property `id`
|
794
794
|
# @return [String]
|
795
795
|
attr_accessor :id
|
@@ -866,8 +866,8 @@ module Google
|
|
866
866
|
# @return [String]
|
867
867
|
attr_accessor :display_name
|
868
868
|
|
869
|
-
# The UUID of the Azure subscription, for example,
|
870
|
-
# 3bdcb2a50a05
|
869
|
+
# The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-
|
870
|
+
# 3bdcb2a50a05`.
|
871
871
|
# Corresponds to the JSON property `id`
|
872
872
|
# @return [String]
|
873
873
|
attr_accessor :id
|
@@ -1144,6 +1144,13 @@ module Google
|
|
1144
1144
|
# @return [String]
|
1145
1145
|
attr_accessor :mute_annotation
|
1146
1146
|
|
1147
|
+
# Optional. All findings matching the given filter will have their mute state
|
1148
|
+
# set to this value. The default value is `MUTED`. Setting this to `UNDEFINED`
|
1149
|
+
# will clear the mute state on all matching findings.
|
1150
|
+
# Corresponds to the JSON property `muteState`
|
1151
|
+
# @return [String]
|
1152
|
+
attr_accessor :mute_state
|
1153
|
+
|
1147
1154
|
def initialize(**args)
|
1148
1155
|
update!(**args)
|
1149
1156
|
end
|
@@ -1152,6 +1159,7 @@ module Google
|
|
1152
1159
|
def update!(**args)
|
1153
1160
|
@filter = args[:filter] if args.key?(:filter)
|
1154
1161
|
@mute_annotation = args[:mute_annotation] if args.key?(:mute_annotation)
|
1162
|
+
@mute_state = args[:mute_state] if args.key?(:mute_state)
|
1155
1163
|
end
|
1156
1164
|
end
|
1157
1165
|
|
@@ -1637,6 +1645,11 @@ module Google
|
|
1637
1645
|
# @return [Google::Apis::SecuritycenterV1::Cvssv3]
|
1638
1646
|
attr_accessor :cvssv3
|
1639
1647
|
|
1648
|
+
# Date the first publicly available exploit or PoC was released.
|
1649
|
+
# Corresponds to the JSON property `exploitReleaseDate`
|
1650
|
+
# @return [String]
|
1651
|
+
attr_accessor :exploit_release_date
|
1652
|
+
|
1640
1653
|
# The exploitation activity of the vulnerability in the wild.
|
1641
1654
|
# Corresponds to the JSON property `exploitationActivity`
|
1642
1655
|
# @return [String]
|
@@ -1683,6 +1696,7 @@ module Google
|
|
1683
1696
|
# Update properties of this object
|
1684
1697
|
def update!(**args)
|
1685
1698
|
@cvssv3 = args[:cvssv3] if args.key?(:cvssv3)
|
1699
|
+
@exploit_release_date = args[:exploit_release_date] if args.key?(:exploit_release_date)
|
1686
1700
|
@exploitation_activity = args[:exploitation_activity] if args.key?(:exploitation_activity)
|
1687
1701
|
@id = args[:id] if args.key?(:id)
|
1688
1702
|
@impact = args[:impact] if args.key?(:impact)
|
@@ -1885,6 +1899,33 @@ module Google
|
|
1885
1899
|
end
|
1886
1900
|
end
|
1887
1901
|
|
1902
|
+
# The record of a dynamic mute rule that matches the finding.
|
1903
|
+
class DynamicMuteRecord
|
1904
|
+
include Google::Apis::Core::Hashable
|
1905
|
+
|
1906
|
+
# When the dynamic mute rule first matched the finding.
|
1907
|
+
# Corresponds to the JSON property `matchTime`
|
1908
|
+
# @return [String]
|
1909
|
+
attr_accessor :match_time
|
1910
|
+
|
1911
|
+
# The relative resource name of the mute rule, represented by a mute config,
|
1912
|
+
# that created this record, for example `organizations/123/muteConfigs/
|
1913
|
+
# mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
|
1914
|
+
# Corresponds to the JSON property `muteConfig`
|
1915
|
+
# @return [String]
|
1916
|
+
attr_accessor :mute_config
|
1917
|
+
|
1918
|
+
def initialize(**args)
|
1919
|
+
update!(**args)
|
1920
|
+
end
|
1921
|
+
|
1922
|
+
# Update properties of this object
|
1923
|
+
def update!(**args)
|
1924
|
+
@match_time = args[:match_time] if args.key?(:match_time)
|
1925
|
+
@mute_config = args[:mute_config] if args.key?(:mute_config)
|
1926
|
+
end
|
1927
|
+
end
|
1928
|
+
|
1888
1929
|
# An EffectiveEventThreatDetectionCustomModule is the representation of an Event
|
1889
1930
|
# Threat Detection custom module at a specified level of the resource hierarchy:
|
1890
1931
|
# organization, folder, or project. If a custom module is inherited from a
|
@@ -1919,10 +1960,10 @@ module Google
|
|
1919
1960
|
attr_accessor :enablement_state
|
1920
1961
|
|
1921
1962
|
# Output only. The resource name of the effective ETD custom module. Its format
|
1922
|
-
# is: *
|
1923
|
-
# effectiveCustomModules/`module
|
1924
|
-
# eventThreatDetectionSettings/effectiveCustomModules/`module
|
1925
|
-
# project`/eventThreatDetectionSettings/effectiveCustomModules/`module
|
1963
|
+
# is: * `organizations/`organization`/eventThreatDetectionSettings/
|
1964
|
+
# effectiveCustomModules/`module``. * `folders/`folder`/
|
1965
|
+
# eventThreatDetectionSettings/effectiveCustomModules/`module``. * `projects/`
|
1966
|
+
# project`/eventThreatDetectionSettings/effectiveCustomModules/`module``.
|
1926
1967
|
# Corresponds to the JSON property `name`
|
1927
1968
|
# @return [String]
|
1928
1969
|
attr_accessor :name
|
@@ -2032,10 +2073,10 @@ module Google
|
|
2032
2073
|
attr_accessor :last_editor
|
2033
2074
|
|
2034
2075
|
# Immutable. The resource name of the Event Threat Detection custom module. Its
|
2035
|
-
# format is: *
|
2036
|
-
# customModules/`module
|
2037
|
-
# customModules/`module
|
2038
|
-
# customModules/`module
|
2076
|
+
# format is: * `organizations/`organization`/eventThreatDetectionSettings/
|
2077
|
+
# customModules/`module``. * `folders/`folder`/eventThreatDetectionSettings/
|
2078
|
+
# customModules/`module``. * `projects/`project`/eventThreatDetectionSettings/
|
2079
|
+
# customModules/`module``.
|
2039
2080
|
# Corresponds to the JSON property `name`
|
2040
2081
|
# @return [String]
|
2041
2082
|
attr_accessor :name
|
@@ -2457,6 +2498,12 @@ module Google
|
|
2457
2498
|
# @return [String]
|
2458
2499
|
attr_accessor :mute
|
2459
2500
|
|
2501
|
+
# Mute information about the finding, including whether the finding has a static
|
2502
|
+
# mute or any matching dynamic mute rules.
|
2503
|
+
# Corresponds to the JSON property `muteInfo`
|
2504
|
+
# @return [Google::Apis::SecuritycenterV1::MuteInfo]
|
2505
|
+
attr_accessor :mute_info
|
2506
|
+
|
2460
2507
|
# Records additional information about the mute operation, for example, the [
|
2461
2508
|
# mute configuration](/security-command-center/docs/how-to-mute-findings) that
|
2462
2509
|
# muted the finding and the user who muted the finding.
|
@@ -2608,6 +2655,7 @@ module Google
|
|
2608
2655
|
@mitre_attack = args[:mitre_attack] if args.key?(:mitre_attack)
|
2609
2656
|
@module_name = args[:module_name] if args.key?(:module_name)
|
2610
2657
|
@mute = args[:mute] if args.key?(:mute)
|
2658
|
+
@mute_info = args[:mute_info] if args.key?(:mute_info)
|
2611
2659
|
@mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
|
2612
2660
|
@mute_update_time = args[:mute_update_time] if args.key?(:mute_update_time)
|
2613
2661
|
@name = args[:name] if args.key?(:name)
|
@@ -3162,6 +3210,12 @@ module Google
|
|
3162
3210
|
# @return [String]
|
3163
3211
|
attr_accessor :display_name
|
3164
3212
|
|
3213
|
+
# Optional. The expiry of the mute config. Only applicable for dynamic configs.
|
3214
|
+
# If the expiry is set, when the config expires, it is removed from all findings.
|
3215
|
+
# Corresponds to the JSON property `expiryTime`
|
3216
|
+
# @return [String]
|
3217
|
+
attr_accessor :expiry_time
|
3218
|
+
|
3165
3219
|
# Required. An expression that defines the filter to apply across create/update
|
3166
3220
|
# events of findings. While creating a filter string, be mindful of the scope in
|
3167
3221
|
# which the mute configuration is being created. E.g., If a filter contains
|
@@ -3183,16 +3237,24 @@ module Google
|
|
3183
3237
|
# @return [String]
|
3184
3238
|
attr_accessor :most_recent_editor
|
3185
3239
|
|
3186
|
-
# This field will be ignored if provided on config creation. Format
|
3187
|
-
# organizations/`organization`/muteConfigs/`mute_config`
|
3188
|
-
# muteConfigs/`mute_config`
|
3189
|
-
# organizations/`organization`/locations/global/muteConfigs/`mute_config`
|
3190
|
-
# folders/`folder`/locations/global/muteConfigs/`mute_config`
|
3191
|
-
# project`/locations/global/muteConfigs/`mute_config
|
3240
|
+
# This field will be ignored if provided on config creation. Format `
|
3241
|
+
# organizations/`organization`/muteConfigs/`mute_config`` `folders/`folder`/
|
3242
|
+
# muteConfigs/`mute_config`` `projects/`project`/muteConfigs/`mute_config`` `
|
3243
|
+
# organizations/`organization`/locations/global/muteConfigs/`mute_config`` `
|
3244
|
+
# folders/`folder`/locations/global/muteConfigs/`mute_config`` `projects/`
|
3245
|
+
# project`/locations/global/muteConfigs/`mute_config``
|
3192
3246
|
# Corresponds to the JSON property `name`
|
3193
3247
|
# @return [String]
|
3194
3248
|
attr_accessor :name
|
3195
3249
|
|
3250
|
+
# Optional. The type of the mute config, which determines what type of mute
|
3251
|
+
# state the config affects. The static mute state takes precedence over the
|
3252
|
+
# dynamic mute state. Immutable after creation. STATIC by default if not set
|
3253
|
+
# during creation.
|
3254
|
+
# Corresponds to the JSON property `type`
|
3255
|
+
# @return [String]
|
3256
|
+
attr_accessor :type
|
3257
|
+
|
3196
3258
|
# Output only. The most recent time at which the mute config was updated. This
|
3197
3259
|
# field is set by the server and will be ignored if provided on config creation
|
3198
3260
|
# or update.
|
@@ -3209,9 +3271,11 @@ module Google
|
|
3209
3271
|
@create_time = args[:create_time] if args.key?(:create_time)
|
3210
3272
|
@description = args[:description] if args.key?(:description)
|
3211
3273
|
@display_name = args[:display_name] if args.key?(:display_name)
|
3274
|
+
@expiry_time = args[:expiry_time] if args.key?(:expiry_time)
|
3212
3275
|
@filter = args[:filter] if args.key?(:filter)
|
3213
3276
|
@most_recent_editor = args[:most_recent_editor] if args.key?(:most_recent_editor)
|
3214
3277
|
@name = args[:name] if args.key?(:name)
|
3278
|
+
@type = args[:type] if args.key?(:type)
|
3215
3279
|
@update_time = args[:update_time] if args.key?(:update_time)
|
3216
3280
|
end
|
3217
3281
|
end
|
@@ -3367,13 +3431,14 @@ module Google
|
|
3367
3431
|
attr_accessor :resource_path
|
3368
3432
|
|
3369
3433
|
# A string representation of the resource path. For Google Cloud, it has the
|
3370
|
-
# format of organizations/`organization_id`/folders/`folder_id`/folders/`
|
3371
|
-
# folder_id`/projects/`project_id
|
3372
|
-
# AWS, it has the format of org/`organization_id`/ou/`
|
3373
|
-
#
|
3374
|
-
# organizational units. For Azure, it has the
|
3375
|
-
# mg/`management_group_id`/
|
3376
|
-
# resource_group_name
|
3434
|
+
# format of `organizations/`organization_id`/folders/`folder_id`/folders/`
|
3435
|
+
# folder_id`/projects/`project_id`` where there can be any number of folders.
|
3436
|
+
# For AWS, it has the format of `org/`organization_id`/ou/`
|
3437
|
+
# organizational_unit_id`/ou/`organizational_unit_id`/account/`account_id``
|
3438
|
+
# where there can be any number of organizational units. For Azure, it has the
|
3439
|
+
# format of `mg/`management_group_id`/mg/`management_group_id`/subscription/`
|
3440
|
+
# subscription_id`/rg/`resource_group_name`` where there can be any number of
|
3441
|
+
# management groups.
|
3377
3442
|
# Corresponds to the JSON property `resourcePathString`
|
3378
3443
|
# @return [String]
|
3379
3444
|
attr_accessor :resource_path_string
|
@@ -3458,18 +3523,18 @@ module Google
|
|
3458
3523
|
# @return [String]
|
3459
3524
|
attr_accessor :name
|
3460
3525
|
|
3461
|
-
# List of resource labels to search for, evaluated with AND
|
3462
|
-
# resource_labels_selector": `"key": "value", "env": "prod"
|
3463
|
-
# resources with labels "key": "value" AND "env": "prod" https://cloud.google.
|
3526
|
+
# List of resource labels to search for, evaluated with `AND`. For example, `"
|
3527
|
+
# resource_labels_selector": `"key": "value", "env": "prod"`` will match
|
3528
|
+
# resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.
|
3464
3529
|
# com/resource-manager/docs/creating-managing-labels
|
3465
3530
|
# Corresponds to the JSON property `resourceLabelsSelector`
|
3466
3531
|
# @return [Hash<String,String>]
|
3467
3532
|
attr_accessor :resource_labels_selector
|
3468
3533
|
|
3469
3534
|
# Apply resource_value only to resources that match resource_type. resource_type
|
3470
|
-
# will be checked with AND of other resources. For example, "storage.
|
3471
|
-
# com/Bucket" with resource_value "HIGH" will apply "HIGH" value only
|
3472
|
-
# storage.googleapis.com/Bucket" resources.
|
3535
|
+
# will be checked with `AND` of other resources. For example, "storage.
|
3536
|
+
# googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only
|
3537
|
+
# to "storage.googleapis.com/Bucket" resources.
|
3473
3538
|
# Corresponds to the JSON property `resourceType`
|
3474
3539
|
# @return [String]
|
3475
3540
|
attr_accessor :resource_type
|
@@ -3481,7 +3546,7 @@ module Google
|
|
3481
3546
|
|
3482
3547
|
# Project or folder to scope this configuration to. For example, "project/456"
|
3483
3548
|
# would apply this configuration only to resources in "project/456" scope will
|
3484
|
-
# be checked with AND of other resources.
|
3549
|
+
# be checked with `AND` of other resources.
|
3485
3550
|
# Corresponds to the JSON property `scope`
|
3486
3551
|
# @return [String]
|
3487
3552
|
attr_accessor :scope
|
@@ -3493,9 +3558,10 @@ module Google
|
|
3493
3558
|
# @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping]
|
3494
3559
|
attr_accessor :sensitive_data_protection_mapping
|
3495
3560
|
|
3496
|
-
# Required. Tag values combined with AND to check against. Values in the form "
|
3497
|
-
# tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ]
|
3498
|
-
# https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-
|
3561
|
+
# Required. Tag values combined with `AND` to check against. Values in the form "
|
3562
|
+
# tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]`
|
3563
|
+
# https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-
|
3564
|
+
# managing
|
3499
3565
|
# Corresponds to the JSON property `tagValues`
|
3500
3566
|
# @return [Array<String>]
|
3501
3567
|
attr_accessor :tag_values
|
@@ -4229,8 +4295,8 @@ module Google
|
|
4229
4295
|
include Google::Apis::Core::Hashable
|
4230
4296
|
|
4231
4297
|
# The resource name of the attack path simulation result that contains the
|
4232
|
-
# details regarding this attack exposure score. Example: organizations/123/
|
4233
|
-
# simulations/456/attackExposureResults/789
|
4298
|
+
# details regarding this attack exposure score. Example: `organizations/123/
|
4299
|
+
# simulations/456/attackExposureResults/789`
|
4234
4300
|
# Corresponds to the JSON property `attackExposureResult`
|
4235
4301
|
# @return [String]
|
4236
4302
|
attr_accessor :attack_exposure_result
|
@@ -4410,8 +4476,8 @@ module Google
|
|
4410
4476
|
# @return [String]
|
4411
4477
|
attr_accessor :display_name
|
4412
4478
|
|
4413
|
-
# The UUID of the Azure management group, for example,
|
4414
|
-
# 000000000000
|
4479
|
+
# The UUID of the Azure management group, for example, `20000000-0001-0000-0000-
|
4480
|
+
# 000000000000`.
|
4415
4481
|
# Corresponds to the JSON property `id`
|
4416
4482
|
# @return [String]
|
4417
4483
|
attr_accessor :id
|
@@ -4488,8 +4554,8 @@ module Google
|
|
4488
4554
|
# @return [String]
|
4489
4555
|
attr_accessor :display_name
|
4490
4556
|
|
4491
|
-
# The UUID of the Azure subscription, for example,
|
4492
|
-
# 3bdcb2a50a05
|
4557
|
+
# The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-
|
4558
|
+
# 3bdcb2a50a05`.
|
4493
4559
|
# Corresponds to the JSON property `id`
|
4494
4560
|
# @return [String]
|
4495
4561
|
attr_accessor :id
|
@@ -4613,7 +4679,7 @@ module Google
|
|
4613
4679
|
attr_accessor :create_time
|
4614
4680
|
|
4615
4681
|
# The dataset to write findings' updates to. Its format is "projects/[project_id]
|
4616
|
-
# /datasets/[bigquery_dataset_id]". BigQuery
|
4682
|
+
# /datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only
|
4617
4683
|
# letters (a-z, A-Z), numbers (0-9), or underscores (_).
|
4618
4684
|
# Corresponds to the JSON property `dataset`
|
4619
4685
|
# @return [String]
|
@@ -4645,13 +4711,13 @@ module Google
|
|
4645
4711
|
# @return [String]
|
4646
4712
|
attr_accessor :most_recent_editor
|
4647
4713
|
|
4648
|
-
# The relative resource name of this export. See: https://cloud.
|
4649
|
-
# design/resource_names#relative_resource_name. The following
|
4650
|
-
# examples: + `organizations/`organization_id`/locations/`
|
4651
|
-
# bigQueryExports/`export_id`` + `folders/`folder_id`/locations/`
|
4652
|
-
# bigQueryExports/`export_id`` + `projects/`project_id`/locations/`
|
4653
|
-
# bigQueryExports/`export_id`` This field is provided in responses,
|
4654
|
-
# ignored when provided in create requests.
|
4714
|
+
# Identifier. The relative resource name of this export. See: https://cloud.
|
4715
|
+
# google.com/apis/design/resource_names#relative_resource_name. The following
|
4716
|
+
# list shows some examples: + `organizations/`organization_id`/locations/`
|
4717
|
+
# location_id`/bigQueryExports/`export_id`` + `folders/`folder_id`/locations/`
|
4718
|
+
# location_id`/bigQueryExports/`export_id`` + `projects/`project_id`/locations/`
|
4719
|
+
# location_id`/bigQueryExports/`export_id`` This field is provided in responses,
|
4720
|
+
# and is ignored when provided in create requests.
|
4655
4721
|
# Corresponds to the JSON property `name`
|
4656
4722
|
# @return [String]
|
4657
4723
|
attr_accessor :name
|
@@ -5073,6 +5139,11 @@ module Google
|
|
5073
5139
|
# @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV2Cvssv3]
|
5074
5140
|
attr_accessor :cvssv3
|
5075
5141
|
|
5142
|
+
# Date the first publicly available exploit or PoC was released.
|
5143
|
+
# Corresponds to the JSON property `exploitReleaseDate`
|
5144
|
+
# @return [String]
|
5145
|
+
attr_accessor :exploit_release_date
|
5146
|
+
|
5076
5147
|
# The exploitation activity of the vulnerability in the wild.
|
5077
5148
|
# Corresponds to the JSON property `exploitationActivity`
|
5078
5149
|
# @return [String]
|
@@ -5119,6 +5190,7 @@ module Google
|
|
5119
5190
|
# Update properties of this object
|
5120
5191
|
def update!(**args)
|
5121
5192
|
@cvssv3 = args[:cvssv3] if args.key?(:cvssv3)
|
5193
|
+
@exploit_release_date = args[:exploit_release_date] if args.key?(:exploit_release_date)
|
5122
5194
|
@exploitation_activity = args[:exploitation_activity] if args.key?(:exploitation_activity)
|
5123
5195
|
@id = args[:id] if args.key?(:id)
|
5124
5196
|
@impact = args[:impact] if args.key?(:impact)
|
@@ -5321,6 +5393,33 @@ module Google
|
|
5321
5393
|
end
|
5322
5394
|
end
|
5323
5395
|
|
5396
|
+
# The record of a dynamic mute rule that matches the finding.
|
5397
|
+
class GoogleCloudSecuritycenterV2DynamicMuteRecord
|
5398
|
+
include Google::Apis::Core::Hashable
|
5399
|
+
|
5400
|
+
# When the dynamic mute rule first matched the finding.
|
5401
|
+
# Corresponds to the JSON property `matchTime`
|
5402
|
+
# @return [String]
|
5403
|
+
attr_accessor :match_time
|
5404
|
+
|
5405
|
+
# The relative resource name of the mute rule, represented by a mute config,
|
5406
|
+
# that created this record, for example `organizations/123/muteConfigs/
|
5407
|
+
# mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
|
5408
|
+
# Corresponds to the JSON property `muteConfig`
|
5409
|
+
# @return [String]
|
5410
|
+
attr_accessor :mute_config
|
5411
|
+
|
5412
|
+
def initialize(**args)
|
5413
|
+
update!(**args)
|
5414
|
+
end
|
5415
|
+
|
5416
|
+
# Update properties of this object
|
5417
|
+
def update!(**args)
|
5418
|
+
@match_time = args[:match_time] if args.key?(:match_time)
|
5419
|
+
@mute_config = args[:mute_config] if args.key?(:mute_config)
|
5420
|
+
end
|
5421
|
+
end
|
5422
|
+
|
5324
5423
|
# A name-value pair representing an environment variable used in an operating
|
5325
5424
|
# system process.
|
5326
5425
|
class GoogleCloudSecuritycenterV2EnvironmentVariable
|
@@ -5776,6 +5875,12 @@ module Google
|
|
5776
5875
|
# @return [String]
|
5777
5876
|
attr_accessor :mute
|
5778
5877
|
|
5878
|
+
# Mute information about the finding, including whether the finding has a static
|
5879
|
+
# mute or any matching dynamic mute rules.
|
5880
|
+
# Corresponds to the JSON property `muteInfo`
|
5881
|
+
# @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV2MuteInfo]
|
5882
|
+
attr_accessor :mute_info
|
5883
|
+
|
5779
5884
|
# Records additional information about the mute operation, for example, the [
|
5780
5885
|
# mute configuration](https://cloud.google.com/security-command-center/docs/how-
|
5781
5886
|
# to-mute-findings) that muted the finding and the user who muted the finding.
|
@@ -5936,6 +6041,7 @@ module Google
|
|
5936
6041
|
@mitre_attack = args[:mitre_attack] if args.key?(:mitre_attack)
|
5937
6042
|
@module_name = args[:module_name] if args.key?(:module_name)
|
5938
6043
|
@mute = args[:mute] if args.key?(:mute)
|
6044
|
+
@mute_info = args[:mute_info] if args.key?(:mute_info)
|
5939
6045
|
@mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
|
5940
6046
|
@mute_update_time = args[:mute_update_time] if args.key?(:mute_update_time)
|
5941
6047
|
@name = args[:name] if args.key?(:name)
|
@@ -6408,6 +6514,12 @@ module Google
|
|
6408
6514
|
# @return [String]
|
6409
6515
|
attr_accessor :description
|
6410
6516
|
|
6517
|
+
# Optional. The expiry of the mute config. Only applicable for dynamic configs.
|
6518
|
+
# If the expiry is set, when the config expires, it is removed from all findings.
|
6519
|
+
# Corresponds to the JSON property `expiryTime`
|
6520
|
+
# @return [String]
|
6521
|
+
attr_accessor :expiry_time
|
6522
|
+
|
6411
6523
|
# Required. An expression that defines the filter to apply across create/update
|
6412
6524
|
# events of findings. While creating a filter string, be mindful of the scope in
|
6413
6525
|
# which the mute configuration is being created. E.g., If a filter contains
|
@@ -6429,13 +6541,13 @@ module Google
|
|
6429
6541
|
# @return [String]
|
6430
6542
|
attr_accessor :most_recent_editor
|
6431
6543
|
|
6432
|
-
# This field will be ignored if provided on config creation. The
|
6433
|
-
# shows some examples of the format: + `organizations/`
|
6434
|
-
#
|
6435
|
-
# muteConfigs/`mute_config`` + `folders/`folder`/
|
6436
|
-
#
|
6437
|
-
#
|
6438
|
-
# muteConfigs/`mute_config``
|
6544
|
+
# Identifier. This field will be ignored if provided on config creation. The
|
6545
|
+
# following list shows some examples of the format: + `organizations/`
|
6546
|
+
# organization`/muteConfigs/`mute_config`` + `organizations/`organization`
|
6547
|
+
# locations/`location`//muteConfigs/`mute_config`` + `folders/`folder`/
|
6548
|
+
# muteConfigs/`mute_config`` + `folders/`folder`/locations/`location`/
|
6549
|
+
# muteConfigs/`mute_config`` + `projects/`project`/muteConfigs/`mute_config`` + `
|
6550
|
+
# projects/`project`/locations/`location`/muteConfigs/`mute_config``
|
6439
6551
|
# Corresponds to the JSON property `name`
|
6440
6552
|
# @return [String]
|
6441
6553
|
attr_accessor :name
|
@@ -6461,6 +6573,7 @@ module Google
|
|
6461
6573
|
def update!(**args)
|
6462
6574
|
@create_time = args[:create_time] if args.key?(:create_time)
|
6463
6575
|
@description = args[:description] if args.key?(:description)
|
6576
|
+
@expiry_time = args[:expiry_time] if args.key?(:expiry_time)
|
6464
6577
|
@filter = args[:filter] if args.key?(:filter)
|
6465
6578
|
@most_recent_editor = args[:most_recent_editor] if args.key?(:most_recent_editor)
|
6466
6579
|
@name = args[:name] if args.key?(:name)
|
@@ -6469,6 +6582,34 @@ module Google
|
|
6469
6582
|
end
|
6470
6583
|
end
|
6471
6584
|
|
6585
|
+
# Mute information about the finding, including whether the finding has a static
|
6586
|
+
# mute or any matching dynamic mute rules.
|
6587
|
+
class GoogleCloudSecuritycenterV2MuteInfo
|
6588
|
+
include Google::Apis::Core::Hashable
|
6589
|
+
|
6590
|
+
# The list of dynamic mute rules that currently match the finding.
|
6591
|
+
# Corresponds to the JSON property `dynamicMuteRecords`
|
6592
|
+
# @return [Array<Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV2DynamicMuteRecord>]
|
6593
|
+
attr_accessor :dynamic_mute_records
|
6594
|
+
|
6595
|
+
# Information about the static mute state. A static mute state overrides any
|
6596
|
+
# dynamic mute rules that apply to this finding. The static mute state can be
|
6597
|
+
# set by a static mute rule or by muting the finding directly.
|
6598
|
+
# Corresponds to the JSON property `staticMute`
|
6599
|
+
# @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV2StaticMute]
|
6600
|
+
attr_accessor :static_mute
|
6601
|
+
|
6602
|
+
def initialize(**args)
|
6603
|
+
update!(**args)
|
6604
|
+
end
|
6605
|
+
|
6606
|
+
# Update properties of this object
|
6607
|
+
def update!(**args)
|
6608
|
+
@dynamic_mute_records = args[:dynamic_mute_records] if args.key?(:dynamic_mute_records)
|
6609
|
+
@static_mute = args[:static_mute] if args.key?(:static_mute)
|
6610
|
+
end
|
6611
|
+
end
|
6612
|
+
|
6472
6613
|
# Kubernetes nodes associated with the finding.
|
6473
6614
|
class GoogleCloudSecuritycenterV2Node
|
6474
6615
|
include Google::Apis::Core::Hashable
|
@@ -6988,13 +7129,14 @@ module Google
|
|
6988
7129
|
attr_accessor :resource_path
|
6989
7130
|
|
6990
7131
|
# A string representation of the resource path. For Google Cloud, it has the
|
6991
|
-
# format of organizations/`organization_id`/folders/`folder_id`/folders/`
|
6992
|
-
# folder_id`/projects/`project_id
|
6993
|
-
# AWS, it has the format of org/`organization_id`/ou/`
|
6994
|
-
#
|
6995
|
-
# organizational units. For Azure, it has the
|
6996
|
-
# mg/`management_group_id`/
|
6997
|
-
# resource_group_name
|
7132
|
+
# format of `organizations/`organization_id`/folders/`folder_id`/folders/`
|
7133
|
+
# folder_id`/projects/`project_id`` where there can be any number of folders.
|
7134
|
+
# For AWS, it has the format of `org/`organization_id`/ou/`
|
7135
|
+
# organizational_unit_id`/ou/`organizational_unit_id`/account/`account_id``
|
7136
|
+
# where there can be any number of organizational units. For Azure, it has the
|
7137
|
+
# format of `mg/`management_group_id`/mg/`management_group_id`/subscription/`
|
7138
|
+
# subscription_id`/rg/`resource_group_name`` where there can be any number of
|
7139
|
+
# management groups.
|
6998
7140
|
# Corresponds to the JSON property `resourcePathString`
|
6999
7141
|
# @return [String]
|
7000
7142
|
attr_accessor :resource_path_string
|
@@ -7102,36 +7244,36 @@ module Google
|
|
7102
7244
|
# @return [String]
|
7103
7245
|
attr_accessor :description
|
7104
7246
|
|
7105
|
-
# Name for the resource value configuration
|
7247
|
+
# Identifier. Name for the resource value configuration
|
7106
7248
|
# Corresponds to the JSON property `name`
|
7107
7249
|
# @return [String]
|
7108
7250
|
attr_accessor :name
|
7109
7251
|
|
7110
|
-
# List of resource labels to search for, evaluated with AND
|
7252
|
+
# List of resource labels to search for, evaluated with `AND`. For example, "
|
7111
7253
|
# resource_labels_selector": `"key": "value", "env": "prod"` will match
|
7112
|
-
# resources with labels "key": "value" AND "env": "prod" https://cloud.google.
|
7254
|
+
# resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.
|
7113
7255
|
# com/resource-manager/docs/creating-managing-labels
|
7114
7256
|
# Corresponds to the JSON property `resourceLabelsSelector`
|
7115
7257
|
# @return [Hash<String,String>]
|
7116
7258
|
attr_accessor :resource_labels_selector
|
7117
7259
|
|
7118
7260
|
# Apply resource_value only to resources that match resource_type. resource_type
|
7119
|
-
# will be checked with AND of other resources. For example, "storage.
|
7120
|
-
# com/Bucket" with resource_value "HIGH" will apply "HIGH" value only
|
7121
|
-
# storage.googleapis.com/Bucket" resources.
|
7261
|
+
# will be checked with `AND` of other resources. For example, "storage.
|
7262
|
+
# googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only
|
7263
|
+
# to "storage.googleapis.com/Bucket" resources.
|
7122
7264
|
# Corresponds to the JSON property `resourceType`
|
7123
7265
|
# @return [String]
|
7124
7266
|
attr_accessor :resource_type
|
7125
7267
|
|
7126
7268
|
# Resource value level this expression represents Only required when there is no
|
7127
|
-
#
|
7269
|
+
# Sensitive Data Protection mapping in the request
|
7128
7270
|
# Corresponds to the JSON property `resourceValue`
|
7129
7271
|
# @return [String]
|
7130
7272
|
attr_accessor :resource_value
|
7131
7273
|
|
7132
7274
|
# Project or folder to scope this configuration to. For example, "project/456"
|
7133
|
-
# would apply this configuration only to resources in "project/456" scope
|
7134
|
-
# be checked with AND of other resources.
|
7275
|
+
# would apply this configuration only to resources in "project/456" scope and
|
7276
|
+
# will be checked with `AND` of other resources.
|
7135
7277
|
# Corresponds to the JSON property `scope`
|
7136
7278
|
# @return [String]
|
7137
7279
|
attr_accessor :scope
|
@@ -7143,9 +7285,9 @@ module Google
|
|
7143
7285
|
# @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping]
|
7144
7286
|
attr_accessor :sensitive_data_protection_mapping
|
7145
7287
|
|
7146
|
-
#
|
7147
|
-
#
|
7148
|
-
#
|
7288
|
+
# Tag values combined with `AND` to check against. Values in the form "tagValues/
|
7289
|
+
# 123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://
|
7290
|
+
# cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
|
7149
7291
|
# Corresponds to the JSON property `tagValues`
|
7150
7292
|
# @return [Array<String>]
|
7151
7293
|
attr_accessor :tag_values
|
@@ -7455,6 +7597,34 @@ module Google
|
|
7455
7597
|
end
|
7456
7598
|
end
|
7457
7599
|
|
7600
|
+
# Information about the static mute state. A static mute state overrides any
|
7601
|
+
# dynamic mute rules that apply to this finding. The static mute state can be
|
7602
|
+
# set by a static mute rule or by muting the finding directly.
|
7603
|
+
class GoogleCloudSecuritycenterV2StaticMute
|
7604
|
+
include Google::Apis::Core::Hashable
|
7605
|
+
|
7606
|
+
# When the static mute was applied.
|
7607
|
+
# Corresponds to the JSON property `applyTime`
|
7608
|
+
# @return [String]
|
7609
|
+
attr_accessor :apply_time
|
7610
|
+
|
7611
|
+
# The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding'
|
7612
|
+
# s overall mute state will have the same value.
|
7613
|
+
# Corresponds to the JSON property `state`
|
7614
|
+
# @return [String]
|
7615
|
+
attr_accessor :state
|
7616
|
+
|
7617
|
+
def initialize(**args)
|
7618
|
+
update!(**args)
|
7619
|
+
end
|
7620
|
+
|
7621
|
+
# Update properties of this object
|
7622
|
+
def update!(**args)
|
7623
|
+
@apply_time = args[:apply_time] if args.key?(:apply_time)
|
7624
|
+
@state = args[:state] if args.key?(:state)
|
7625
|
+
end
|
7626
|
+
end
|
7627
|
+
|
7458
7628
|
# Represents a Kubernetes subject.
|
7459
7629
|
class GoogleCloudSecuritycenterV2Subject
|
7460
7630
|
include Google::Apis::Core::Hashable
|
@@ -7551,7 +7721,7 @@ module Google
|
|
7551
7721
|
attr_accessor :attack_exposure_score
|
7552
7722
|
|
7553
7723
|
# List of resource names of findings associated with this toxic combination. For
|
7554
|
-
# example, organizations/123/sources/456/findings/789
|
7724
|
+
# example, `organizations/123/sources/456/findings/789`.
|
7555
7725
|
# Corresponds to the JSON property `relatedFindings`
|
7556
7726
|
# @return [Array<String>]
|
7557
7727
|
attr_accessor :related_findings
|
@@ -8865,6 +9035,34 @@ module Google
|
|
8865
9035
|
end
|
8866
9036
|
end
|
8867
9037
|
|
9038
|
+
# Mute information about the finding, including whether the finding has a static
|
9039
|
+
# mute or any matching dynamic mute rules.
|
9040
|
+
class MuteInfo
|
9041
|
+
include Google::Apis::Core::Hashable
|
9042
|
+
|
9043
|
+
# The list of dynamic mute rules that currently match the finding.
|
9044
|
+
# Corresponds to the JSON property `dynamicMuteRecords`
|
9045
|
+
# @return [Array<Google::Apis::SecuritycenterV1::DynamicMuteRecord>]
|
9046
|
+
attr_accessor :dynamic_mute_records
|
9047
|
+
|
9048
|
+
# Information about the static mute state. A static mute state overrides any
|
9049
|
+
# dynamic mute rules that apply to this finding. The static mute state can be
|
9050
|
+
# set by a static mute rule or by muting the finding directly.
|
9051
|
+
# Corresponds to the JSON property `staticMute`
|
9052
|
+
# @return [Google::Apis::SecuritycenterV1::StaticMute]
|
9053
|
+
attr_accessor :static_mute
|
9054
|
+
|
9055
|
+
def initialize(**args)
|
9056
|
+
update!(**args)
|
9057
|
+
end
|
9058
|
+
|
9059
|
+
# Update properties of this object
|
9060
|
+
def update!(**args)
|
9061
|
+
@dynamic_mute_records = args[:dynamic_mute_records] if args.key?(:dynamic_mute_records)
|
9062
|
+
@static_mute = args[:static_mute] if args.key?(:static_mute)
|
9063
|
+
end
|
9064
|
+
end
|
9065
|
+
|
8868
9066
|
# Kubernetes nodes associated with the finding.
|
8869
9067
|
class Node
|
8870
9068
|
include Google::Apis::Core::Hashable
|
@@ -9208,8 +9406,8 @@ module Google
|
|
9208
9406
|
class PathNodeAssociatedFinding
|
9209
9407
|
include Google::Apis::Core::Hashable
|
9210
9408
|
|
9211
|
-
# Canonical name of the associated findings. Example: organizations/123/sources/
|
9212
|
-
# 456/findings/789
|
9409
|
+
# Canonical name of the associated findings. Example: `organizations/123/sources/
|
9410
|
+
# 456/findings/789`
|
9213
9411
|
# Corresponds to the JSON property `canonicalFinding`
|
9214
9412
|
# @return [String]
|
9215
9413
|
attr_accessor :canonical_finding
|
@@ -9679,13 +9877,13 @@ module Google
|
|
9679
9877
|
attr_accessor :resource_path
|
9680
9878
|
|
9681
9879
|
# A string representation of the resource path. For Google Cloud, it has the
|
9682
|
-
# format of org/`organization_id`/folder/`folder_id`/folder/`folder_id`/project
|
9683
|
-
# project_id
|
9684
|
-
# format of org/`organization_id`/ou/`organizational_unit_id`/ou/`
|
9685
|
-
# organizational_unit_id`/account/`account_id
|
9686
|
-
# organizational units. For Azure, it has the format of mg/`management_group_id
|
9687
|
-
# mg/`management_group_id`/subscription/`subscription_id`/rg/`
|
9688
|
-
# resource_group_name
|
9880
|
+
# format of `org/`organization_id`/folder/`folder_id`/folder/`folder_id`/project/
|
9881
|
+
# `project_id`` where there can be any number of folders. For AWS, it has the
|
9882
|
+
# format of `org/`organization_id`/ou/`organizational_unit_id`/ou/`
|
9883
|
+
# organizational_unit_id`/account/`account_id`` where there can be any number of
|
9884
|
+
# organizational units. For Azure, it has the format of `mg/`management_group_id`
|
9885
|
+
# /mg/`management_group_id`/subscription/`subscription_id`/rg/`
|
9886
|
+
# resource_group_name`` where there can be any number of management groups.
|
9689
9887
|
# Corresponds to the JSON property `resourcePathString`
|
9690
9888
|
# @return [String]
|
9691
9889
|
attr_accessor :resource_path_string
|
@@ -10395,7 +10593,7 @@ module Google
|
|
10395
10593
|
# @return [String]
|
10396
10594
|
attr_accessor :create_time
|
10397
10595
|
|
10398
|
-
# Full resource name of the Simulation: organizations/123/simulations/456
|
10596
|
+
# Full resource name of the Simulation: `organizations/123/simulations/456`
|
10399
10597
|
# Corresponds to the JSON property `name`
|
10400
10598
|
# @return [String]
|
10401
10599
|
attr_accessor :name
|
@@ -10470,6 +10668,34 @@ module Google
|
|
10470
10668
|
end
|
10471
10669
|
end
|
10472
10670
|
|
10671
|
+
# Information about the static mute state. A static mute state overrides any
|
10672
|
+
# dynamic mute rules that apply to this finding. The static mute state can be
|
10673
|
+
# set by a static mute rule or by muting the finding directly.
|
10674
|
+
class StaticMute
|
10675
|
+
include Google::Apis::Core::Hashable
|
10676
|
+
|
10677
|
+
# When the static mute was applied.
|
10678
|
+
# Corresponds to the JSON property `applyTime`
|
10679
|
+
# @return [String]
|
10680
|
+
attr_accessor :apply_time
|
10681
|
+
|
10682
|
+
# The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding'
|
10683
|
+
# s overall mute state will have the same value.
|
10684
|
+
# Corresponds to the JSON property `state`
|
10685
|
+
# @return [String]
|
10686
|
+
attr_accessor :state
|
10687
|
+
|
10688
|
+
def initialize(**args)
|
10689
|
+
update!(**args)
|
10690
|
+
end
|
10691
|
+
|
10692
|
+
# Update properties of this object
|
10693
|
+
def update!(**args)
|
10694
|
+
@apply_time = args[:apply_time] if args.key?(:apply_time)
|
10695
|
+
@state = args[:state] if args.key?(:state)
|
10696
|
+
end
|
10697
|
+
end
|
10698
|
+
|
10473
10699
|
# The `Status` type defines a logical error model that is suitable for different
|
10474
10700
|
# programming environments, including REST APIs and RPC APIs. It is used by [
|
10475
10701
|
# gRPC](https://github.com/grpc). Each `Status` message contains three pieces of
|
@@ -10674,7 +10900,7 @@ module Google
|
|
10674
10900
|
attr_accessor :attack_exposure_score
|
10675
10901
|
|
10676
10902
|
# List of resource names of findings associated with this toxic combination. For
|
10677
|
-
# example, organizations/123/sources/456/findings/789
|
10903
|
+
# example, `organizations/123/sources/456/findings/789`.
|
10678
10904
|
# Corresponds to the JSON property `relatedFindings`
|
10679
10905
|
# @return [Array<String>]
|
10680
10906
|
attr_accessor :related_findings
|