google-apis-securitycenter_v1 0.9.0 → 0.13.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: d7a62353a2a9285185bbade980756274c54738aebcb6d066fb4cc79fca8b61c9
|
4
|
+
data.tar.gz: ec5529b7c9f206f59daeb0d32f7f6d3dc28f6021fa252eb209c72463b76ae76d
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 42d5fced72d0ef9777a1118e80ff1140b525c06c765669aff6641f442e924cfbe895c2be56800141b6d1330720c27b9004dd71b510532c2a9f76dc98aac17de4
|
7
|
+
data.tar.gz: eca66a7f886e6fbfd892fe1f7447510fbd5e5fa6bb1067363d45777a2eff96326c0348512e5819cf9c840f0cd4a1c08583ec213d45f9770ec4f1a23076535339
|
data/CHANGELOG.md
CHANGED
@@ -1,5 +1,21 @@
|
|
1
1
|
# Release history for google-apis-securitycenter_v1
|
2
2
|
|
3
|
+
### v0.13.0 (2021-10-12)
|
4
|
+
|
5
|
+
* Regenerated from discovery document revision 20211007
|
6
|
+
|
7
|
+
### v0.12.0 (2021-10-05)
|
8
|
+
|
9
|
+
* Regenerated from discovery document revision 20210930
|
10
|
+
|
11
|
+
### v0.11.0 (2021-09-01)
|
12
|
+
|
13
|
+
* Regenerated from discovery document revision 20210820
|
14
|
+
|
15
|
+
### v0.10.0 (2021-07-20)
|
16
|
+
|
17
|
+
* Regenerated from discovery document revision 20210716
|
18
|
+
|
3
19
|
### v0.9.0 (2021-06-29)
|
4
20
|
|
5
21
|
* Regenerated using generator version 0.4.0
|
@@ -202,7 +202,7 @@ module Google
|
|
202
202
|
end
|
203
203
|
end
|
204
204
|
|
205
|
-
# Associates `members
|
205
|
+
# Associates `members`, or principals, with a `role`.
|
206
206
|
class Binding
|
207
207
|
include Google::Apis::Core::Hashable
|
208
208
|
|
@@ -225,7 +225,7 @@ module Google
|
|
225
225
|
# @return [Google::Apis::SecuritycenterV1::Expr]
|
226
226
|
attr_accessor :condition
|
227
227
|
|
228
|
-
# Specifies the
|
228
|
+
# Specifies the principals requesting access for a Cloud Platform resource. `
|
229
229
|
# members` can have the following values: * `allUsers`: A special identifier
|
230
230
|
# that represents anyone who is on the internet; with or without a Google
|
231
231
|
# account. * `allAuthenticatedUsers`: A special identifier that represents
|
@@ -255,8 +255,8 @@ module Google
|
|
255
255
|
# @return [Array<String>]
|
256
256
|
attr_accessor :members
|
257
257
|
|
258
|
-
# Role that is assigned to `members
|
259
|
-
#
|
258
|
+
# Role that is assigned to the list of `members`, or principals. For example, `
|
259
|
+
# roles/viewer`, `roles/editor`, or `roles/owner`.
|
260
260
|
# Corresponds to the JSON property `role`
|
261
261
|
# @return [String]
|
262
262
|
attr_accessor :role
|
@@ -273,6 +273,116 @@ module Google
|
|
273
273
|
end
|
274
274
|
end
|
275
275
|
|
276
|
+
# CVE stands for Common Vulnerabilities and Exposures. More information: https://
|
277
|
+
# cve.mitre.org
|
278
|
+
class Cve
|
279
|
+
include Google::Apis::Core::Hashable
|
280
|
+
|
281
|
+
# Common Vulnerability Scoring System version 3.
|
282
|
+
# Corresponds to the JSON property `cvssv3`
|
283
|
+
# @return [Google::Apis::SecuritycenterV1::Cvssv3]
|
284
|
+
attr_accessor :cvssv3
|
285
|
+
|
286
|
+
# The unique identifier for the vulnerability. e.g. CVE-2021-34527
|
287
|
+
# Corresponds to the JSON property `id`
|
288
|
+
# @return [String]
|
289
|
+
attr_accessor :id
|
290
|
+
|
291
|
+
# Additional information about the CVE. e.g. https://cve.mitre.org/cgi-bin/
|
292
|
+
# cvename.cgi?name=CVE-2021-34527
|
293
|
+
# Corresponds to the JSON property `references`
|
294
|
+
# @return [Array<Google::Apis::SecuritycenterV1::Reference>]
|
295
|
+
attr_accessor :references
|
296
|
+
|
297
|
+
def initialize(**args)
|
298
|
+
update!(**args)
|
299
|
+
end
|
300
|
+
|
301
|
+
# Update properties of this object
|
302
|
+
def update!(**args)
|
303
|
+
@cvssv3 = args[:cvssv3] if args.key?(:cvssv3)
|
304
|
+
@id = args[:id] if args.key?(:id)
|
305
|
+
@references = args[:references] if args.key?(:references)
|
306
|
+
end
|
307
|
+
end
|
308
|
+
|
309
|
+
# Common Vulnerability Scoring System version 3.
|
310
|
+
class Cvssv3
|
311
|
+
include Google::Apis::Core::Hashable
|
312
|
+
|
313
|
+
# This metric describes the conditions beyond the attacker's control that must
|
314
|
+
# exist in order to exploit the vulnerability.
|
315
|
+
# Corresponds to the JSON property `attackComplexity`
|
316
|
+
# @return [String]
|
317
|
+
attr_accessor :attack_complexity
|
318
|
+
|
319
|
+
# Base Metrics Represents the intrinsic characteristics of a vulnerability that
|
320
|
+
# are constant over time and across user environments. This metric reflects the
|
321
|
+
# context by which vulnerability exploitation is possible.
|
322
|
+
# Corresponds to the JSON property `attackVector`
|
323
|
+
# @return [String]
|
324
|
+
attr_accessor :attack_vector
|
325
|
+
|
326
|
+
# This metric measures the impact to the availability of the impacted component
|
327
|
+
# resulting from a successfully exploited vulnerability.
|
328
|
+
# Corresponds to the JSON property `availabilityImpact`
|
329
|
+
# @return [String]
|
330
|
+
attr_accessor :availability_impact
|
331
|
+
|
332
|
+
# The base score is a function of the base metric scores.
|
333
|
+
# Corresponds to the JSON property `baseScore`
|
334
|
+
# @return [Float]
|
335
|
+
attr_accessor :base_score
|
336
|
+
|
337
|
+
# This metric measures the impact to the confidentiality of the information
|
338
|
+
# resources managed by a software component due to a successfully exploited
|
339
|
+
# vulnerability.
|
340
|
+
# Corresponds to the JSON property `confidentialityImpact`
|
341
|
+
# @return [String]
|
342
|
+
attr_accessor :confidentiality_impact
|
343
|
+
|
344
|
+
# This metric measures the impact to integrity of a successfully exploited
|
345
|
+
# vulnerability.
|
346
|
+
# Corresponds to the JSON property `integrityImpact`
|
347
|
+
# @return [String]
|
348
|
+
attr_accessor :integrity_impact
|
349
|
+
|
350
|
+
# This metric describes the level of privileges an attacker must possess before
|
351
|
+
# successfully exploiting the vulnerability.
|
352
|
+
# Corresponds to the JSON property `privilegesRequired`
|
353
|
+
# @return [String]
|
354
|
+
attr_accessor :privileges_required
|
355
|
+
|
356
|
+
# The Scope metric captures whether a vulnerability in one vulnerable component
|
357
|
+
# impacts resources in components beyond its security scope.
|
358
|
+
# Corresponds to the JSON property `scope`
|
359
|
+
# @return [String]
|
360
|
+
attr_accessor :scope
|
361
|
+
|
362
|
+
# This metric captures the requirement for a human user, other than the attacker,
|
363
|
+
# to participate in the successful compromise of the vulnerable component.
|
364
|
+
# Corresponds to the JSON property `userInteraction`
|
365
|
+
# @return [String]
|
366
|
+
attr_accessor :user_interaction
|
367
|
+
|
368
|
+
def initialize(**args)
|
369
|
+
update!(**args)
|
370
|
+
end
|
371
|
+
|
372
|
+
# Update properties of this object
|
373
|
+
def update!(**args)
|
374
|
+
@attack_complexity = args[:attack_complexity] if args.key?(:attack_complexity)
|
375
|
+
@attack_vector = args[:attack_vector] if args.key?(:attack_vector)
|
376
|
+
@availability_impact = args[:availability_impact] if args.key?(:availability_impact)
|
377
|
+
@base_score = args[:base_score] if args.key?(:base_score)
|
378
|
+
@confidentiality_impact = args[:confidentiality_impact] if args.key?(:confidentiality_impact)
|
379
|
+
@integrity_impact = args[:integrity_impact] if args.key?(:integrity_impact)
|
380
|
+
@privileges_required = args[:privileges_required] if args.key?(:privileges_required)
|
381
|
+
@scope = args[:scope] if args.key?(:scope)
|
382
|
+
@user_interaction = args[:user_interaction] if args.key?(:user_interaction)
|
383
|
+
end
|
384
|
+
end
|
385
|
+
|
276
386
|
# A generic empty message that you can re-use to avoid defining duplicated empty
|
277
387
|
# messages in your APIs. A typical example is to use it as the request or the
|
278
388
|
# response type of an API method. For instance: service Foo ` rpc Bar(google.
|
@@ -389,6 +499,19 @@ module Google
|
|
389
499
|
# @return [String]
|
390
500
|
attr_accessor :external_uri
|
391
501
|
|
502
|
+
# The class of the finding.
|
503
|
+
# Corresponds to the JSON property `findingClass`
|
504
|
+
# @return [String]
|
505
|
+
attr_accessor :finding_class
|
506
|
+
|
507
|
+
# Represents what's commonly known as an Indicator of compromise (IoC) in
|
508
|
+
# computer forensics. This is an artifact observed on a network or in an
|
509
|
+
# operating system that, with high confidence, indicates a computer intrusion.
|
510
|
+
# Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
|
511
|
+
# Corresponds to the JSON property `indicator`
|
512
|
+
# @return [Google::Apis::SecuritycenterV1::Indicator]
|
513
|
+
attr_accessor :indicator
|
514
|
+
|
392
515
|
# The relative resource name of this finding. See: https://cloud.google.com/apis/
|
393
516
|
# design/resource_names#relative_resource_name Example: "organizations/`
|
394
517
|
# organization_id`/sources/`source_id`/findings/`finding_id`"
|
@@ -440,6 +563,11 @@ module Google
|
|
440
563
|
# @return [String]
|
441
564
|
attr_accessor :state
|
442
565
|
|
566
|
+
# Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
|
567
|
+
# Corresponds to the JSON property `vulnerability`
|
568
|
+
# @return [Google::Apis::SecuritycenterV1::Vulnerability]
|
569
|
+
attr_accessor :vulnerability
|
570
|
+
|
443
571
|
def initialize(**args)
|
444
572
|
update!(**args)
|
445
573
|
end
|
@@ -451,6 +579,8 @@ module Google
|
|
451
579
|
@create_time = args[:create_time] if args.key?(:create_time)
|
452
580
|
@event_time = args[:event_time] if args.key?(:event_time)
|
453
581
|
@external_uri = args[:external_uri] if args.key?(:external_uri)
|
582
|
+
@finding_class = args[:finding_class] if args.key?(:finding_class)
|
583
|
+
@indicator = args[:indicator] if args.key?(:indicator)
|
454
584
|
@name = args[:name] if args.key?(:name)
|
455
585
|
@parent = args[:parent] if args.key?(:parent)
|
456
586
|
@resource_name = args[:resource_name] if args.key?(:resource_name)
|
@@ -458,6 +588,7 @@ module Google
|
|
458
588
|
@severity = args[:severity] if args.key?(:severity)
|
459
589
|
@source_properties = args[:source_properties] if args.key?(:source_properties)
|
460
590
|
@state = args[:state] if args.key?(:state)
|
591
|
+
@vulnerability = args[:vulnerability] if args.key?(:vulnerability)
|
461
592
|
end
|
462
593
|
end
|
463
594
|
|
@@ -603,6 +734,11 @@ module Google
|
|
603
734
|
# @return [String]
|
604
735
|
attr_accessor :project_display_name
|
605
736
|
|
737
|
+
# The full resource type of the resource.
|
738
|
+
# Corresponds to the JSON property `type`
|
739
|
+
# @return [String]
|
740
|
+
attr_accessor :type
|
741
|
+
|
606
742
|
def initialize(**args)
|
607
743
|
update!(**args)
|
608
744
|
end
|
@@ -615,6 +751,7 @@ module Google
|
|
615
751
|
@parent_display_name = args[:parent_display_name] if args.key?(:parent_display_name)
|
616
752
|
@project = args[:project] if args.key?(:project)
|
617
753
|
@project_display_name = args[:project_display_name] if args.key?(:project_display_name)
|
754
|
+
@type = args[:type] if args.key?(:type)
|
618
755
|
end
|
619
756
|
end
|
620
757
|
|
@@ -1307,6 +1444,34 @@ module Google
|
|
1307
1444
|
end
|
1308
1445
|
end
|
1309
1446
|
|
1447
|
+
# Represents what's commonly known as an Indicator of compromise (IoC) in
|
1448
|
+
# computer forensics. This is an artifact observed on a network or in an
|
1449
|
+
# operating system that, with high confidence, indicates a computer intrusion.
|
1450
|
+
# Reference: https://en.wikipedia.org/wiki/Indicator_of_compromise
|
1451
|
+
class Indicator
|
1452
|
+
include Google::Apis::Core::Hashable
|
1453
|
+
|
1454
|
+
# List of domains associated to the Finding.
|
1455
|
+
# Corresponds to the JSON property `domains`
|
1456
|
+
# @return [Array<String>]
|
1457
|
+
attr_accessor :domains
|
1458
|
+
|
1459
|
+
# List of ip addresses associated to the Finding.
|
1460
|
+
# Corresponds to the JSON property `ipAddresses`
|
1461
|
+
# @return [Array<String>]
|
1462
|
+
attr_accessor :ip_addresses
|
1463
|
+
|
1464
|
+
def initialize(**args)
|
1465
|
+
update!(**args)
|
1466
|
+
end
|
1467
|
+
|
1468
|
+
# Update properties of this object
|
1469
|
+
def update!(**args)
|
1470
|
+
@domains = args[:domains] if args.key?(:domains)
|
1471
|
+
@ip_addresses = args[:ip_addresses] if args.key?(:ip_addresses)
|
1472
|
+
end
|
1473
|
+
end
|
1474
|
+
|
1310
1475
|
# Response message for listing assets.
|
1311
1476
|
class ListAssetsResponse
|
1312
1477
|
include Google::Apis::Core::Hashable
|
@@ -1676,31 +1841,31 @@ module Google
|
|
1676
1841
|
|
1677
1842
|
# An Identity and Access Management (IAM) policy, which specifies access
|
1678
1843
|
# controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
|
1679
|
-
# A `binding` binds one or more `members
|
1680
|
-
# user accounts, service accounts, Google groups, and domains (
|
1681
|
-
# A `role` is a named list of permissions; each `role` can be
|
1682
|
-
# role or a user-created custom role. For some types of Google
|
1683
|
-
# a `binding` can also specify a `condition`, which is a
|
1684
|
-
# allows access to a resource only if the expression
|
1685
|
-
# condition can add constraints based on attributes of
|
1686
|
-
# or both. To learn which resources support
|
1687
|
-
# see the [IAM documentation](https://cloud.
|
1688
|
-
# resource-policies). **JSON example:** ` "
|
1689
|
-
# resourcemanager.organizationAdmin", "members": [
|
1690
|
-
# group:admins@example.com", "domain:google.com", "
|
1691
|
-
# appspot.gserviceaccount.com" ] `, ` "role": "
|
1692
|
-
# organizationViewer", "members": [ "user:eve@example.com"
|
1693
|
-
# title": "expirable access", "description": "Does not grant
|
1694
|
-
# 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
1695
|
-
# ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
1696
|
-
# members: - user:mike@example.com - group:admins@example.com -
|
1697
|
-
# com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
1698
|
-
# resourcemanager.organizationAdmin - members: - user:eve@example.
|
1699
|
-
# roles/resourcemanager.organizationViewer condition: title: expirable
|
1700
|
-
# description: Does not grant access after Sep 2020 expression: request.
|
1701
|
-
# timestamp('2020-10-01T00:00:00.000Z')
|
1702
|
-
# description of IAM and its features, see the [IAM documentation](https://
|
1703
|
-
# google.com/iam/docs/).
|
1844
|
+
# A `binding` binds one or more `members`, or principals, to a single `role`.
|
1845
|
+
# Principals can be user accounts, service accounts, Google groups, and domains (
|
1846
|
+
# such as G Suite). A `role` is a named list of permissions; each `role` can be
|
1847
|
+
# an IAM predefined role or a user-created custom role. For some types of Google
|
1848
|
+
# Cloud resources, a `binding` can also specify a `condition`, which is a
|
1849
|
+
# logical expression that allows access to a resource only if the expression
|
1850
|
+
# evaluates to `true`. A condition can add constraints based on attributes of
|
1851
|
+
# the request, the resource, or both. To learn which resources support
|
1852
|
+
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
|
1853
|
+
# google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
|
1854
|
+
# bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
|
1855
|
+
# "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
|
1856
|
+
# serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
|
1857
|
+
# roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
|
1858
|
+
# ], "condition": ` "title": "expirable access", "description": "Does not grant
|
1859
|
+
# access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
1860
|
+
# 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
1861
|
+
# bindings: - members: - user:mike@example.com - group:admins@example.com -
|
1862
|
+
# domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
1863
|
+
# role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
|
1864
|
+
# com role: roles/resourcemanager.organizationViewer condition: title: expirable
|
1865
|
+
# access description: Does not grant access after Sep 2020 expression: request.
|
1866
|
+
# time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
|
1867
|
+
# a description of IAM and its features, see the [IAM documentation](https://
|
1868
|
+
# cloud.google.com/iam/docs/).
|
1704
1869
|
class Policy
|
1705
1870
|
include Google::Apis::Core::Hashable
|
1706
1871
|
|
@@ -1709,9 +1874,14 @@ module Google
|
|
1709
1874
|
# @return [Array<Google::Apis::SecuritycenterV1::AuditConfig>]
|
1710
1875
|
attr_accessor :audit_configs
|
1711
1876
|
|
1712
|
-
# Associates a list of `members
|
1713
|
-
# condition` that determines how and when the `bindings` are applied.
|
1714
|
-
# the `bindings` must contain at least one
|
1877
|
+
# Associates a list of `members`, or principals, with a `role`. Optionally, may
|
1878
|
+
# specify a `condition` that determines how and when the `bindings` are applied.
|
1879
|
+
# Each of the `bindings` must contain at least one principal. The `bindings` in
|
1880
|
+
# a `Policy` can refer to up to 1,500 principals; up to 250 of these principals
|
1881
|
+
# can be Google groups. Each occurrence of a principal counts towards these
|
1882
|
+
# limits. For example, if the `bindings` grant 50 different roles to `user:alice@
|
1883
|
+
# example.com`, and not to any other principal, then you can add another 1,450
|
1884
|
+
# principals to the `bindings` in the `Policy`.
|
1715
1885
|
# Corresponds to the JSON property `bindings`
|
1716
1886
|
# @return [Array<Google::Apis::SecuritycenterV1::Binding>]
|
1717
1887
|
attr_accessor :bindings
|
@@ -1764,6 +1934,32 @@ module Google
|
|
1764
1934
|
end
|
1765
1935
|
end
|
1766
1936
|
|
1937
|
+
# Additional Links
|
1938
|
+
class Reference
|
1939
|
+
include Google::Apis::Core::Hashable
|
1940
|
+
|
1941
|
+
# Source of the reference e.g. NVD
|
1942
|
+
# Corresponds to the JSON property `source`
|
1943
|
+
# @return [String]
|
1944
|
+
attr_accessor :source
|
1945
|
+
|
1946
|
+
# Uri for the mentioned source e.g. https://cve.mitre.org/cgi-bin/cvename.cgi?
|
1947
|
+
# name=CVE-2021-34527.
|
1948
|
+
# Corresponds to the JSON property `uri`
|
1949
|
+
# @return [String]
|
1950
|
+
attr_accessor :uri
|
1951
|
+
|
1952
|
+
def initialize(**args)
|
1953
|
+
update!(**args)
|
1954
|
+
end
|
1955
|
+
|
1956
|
+
# Update properties of this object
|
1957
|
+
def update!(**args)
|
1958
|
+
@source = args[:source] if args.key?(:source)
|
1959
|
+
@uri = args[:uri] if args.key?(:uri)
|
1960
|
+
end
|
1961
|
+
end
|
1962
|
+
|
1767
1963
|
# Information related to the Google Cloud resource that is associated with this
|
1768
1964
|
# finding.
|
1769
1965
|
class Resource
|
@@ -1984,31 +2180,31 @@ module Google
|
|
1984
2180
|
|
1985
2181
|
# An Identity and Access Management (IAM) policy, which specifies access
|
1986
2182
|
# controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
|
1987
|
-
# A `binding` binds one or more `members
|
1988
|
-
# user accounts, service accounts, Google groups, and domains (
|
1989
|
-
# A `role` is a named list of permissions; each `role` can be
|
1990
|
-
# role or a user-created custom role. For some types of Google
|
1991
|
-
# a `binding` can also specify a `condition`, which is a
|
1992
|
-
# allows access to a resource only if the expression
|
1993
|
-
# condition can add constraints based on attributes of
|
1994
|
-
# or both. To learn which resources support
|
1995
|
-
# see the [IAM documentation](https://cloud.
|
1996
|
-
# resource-policies). **JSON example:** ` "
|
1997
|
-
# resourcemanager.organizationAdmin", "members": [
|
1998
|
-
# group:admins@example.com", "domain:google.com", "
|
1999
|
-
# appspot.gserviceaccount.com" ] `, ` "role": "
|
2000
|
-
# organizationViewer", "members": [ "user:eve@example.com"
|
2001
|
-
# title": "expirable access", "description": "Does not grant
|
2002
|
-
# 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
2003
|
-
# ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
2004
|
-
# members: - user:mike@example.com - group:admins@example.com -
|
2005
|
-
# com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
2006
|
-
# resourcemanager.organizationAdmin - members: - user:eve@example.
|
2007
|
-
# roles/resourcemanager.organizationViewer condition: title: expirable
|
2008
|
-
# description: Does not grant access after Sep 2020 expression: request.
|
2009
|
-
# timestamp('2020-10-01T00:00:00.000Z')
|
2010
|
-
# description of IAM and its features, see the [IAM documentation](https://
|
2011
|
-
# google.com/iam/docs/).
|
2183
|
+
# A `binding` binds one or more `members`, or principals, to a single `role`.
|
2184
|
+
# Principals can be user accounts, service accounts, Google groups, and domains (
|
2185
|
+
# such as G Suite). A `role` is a named list of permissions; each `role` can be
|
2186
|
+
# an IAM predefined role or a user-created custom role. For some types of Google
|
2187
|
+
# Cloud resources, a `binding` can also specify a `condition`, which is a
|
2188
|
+
# logical expression that allows access to a resource only if the expression
|
2189
|
+
# evaluates to `true`. A condition can add constraints based on attributes of
|
2190
|
+
# the request, the resource, or both. To learn which resources support
|
2191
|
+
# conditions in their IAM policies, see the [IAM documentation](https://cloud.
|
2192
|
+
# google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
|
2193
|
+
# bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
|
2194
|
+
# "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
|
2195
|
+
# serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
|
2196
|
+
# roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
|
2197
|
+
# ], "condition": ` "title": "expirable access", "description": "Does not grant
|
2198
|
+
# access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
|
2199
|
+
# 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
|
2200
|
+
# bindings: - members: - user:mike@example.com - group:admins@example.com -
|
2201
|
+
# domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
|
2202
|
+
# role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
|
2203
|
+
# com role: roles/resourcemanager.organizationViewer condition: title: expirable
|
2204
|
+
# access description: Does not grant access after Sep 2020 expression: request.
|
2205
|
+
# time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
|
2206
|
+
# a description of IAM and its features, see the [IAM documentation](https://
|
2207
|
+
# cloud.google.com/iam/docs/).
|
2012
2208
|
# Corresponds to the JSON property `policy`
|
2013
2209
|
# @return [Google::Apis::SecuritycenterV1::Policy]
|
2014
2210
|
attr_accessor :policy
|
@@ -2189,6 +2385,26 @@ module Google
|
|
2189
2385
|
@permissions = args[:permissions] if args.key?(:permissions)
|
2190
2386
|
end
|
2191
2387
|
end
|
2388
|
+
|
2389
|
+
# Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
|
2390
|
+
class Vulnerability
|
2391
|
+
include Google::Apis::Core::Hashable
|
2392
|
+
|
2393
|
+
# CVE stands for Common Vulnerabilities and Exposures. More information: https://
|
2394
|
+
# cve.mitre.org
|
2395
|
+
# Corresponds to the JSON property `cve`
|
2396
|
+
# @return [Google::Apis::SecuritycenterV1::Cve]
|
2397
|
+
attr_accessor :cve
|
2398
|
+
|
2399
|
+
def initialize(**args)
|
2400
|
+
update!(**args)
|
2401
|
+
end
|
2402
|
+
|
2403
|
+
# Update properties of this object
|
2404
|
+
def update!(**args)
|
2405
|
+
@cve = args[:cve] if args.key?(:cve)
|
2406
|
+
end
|
2407
|
+
end
|
2192
2408
|
end
|
2193
2409
|
end
|
2194
2410
|
end
|
@@ -16,13 +16,13 @@ module Google
|
|
16
16
|
module Apis
|
17
17
|
module SecuritycenterV1
|
18
18
|
# Version of the google-apis-securitycenter_v1 gem
|
19
|
-
GEM_VERSION = "0.
|
19
|
+
GEM_VERSION = "0.13.0"
|
20
20
|
|
21
21
|
# Version of the code generator used to generate this client
|
22
22
|
GENERATOR_VERSION = "0.4.0"
|
23
23
|
|
24
24
|
# Revision of the discovery document this client was generated from
|
25
|
-
REVISION = "
|
25
|
+
REVISION = "20211007"
|
26
26
|
end
|
27
27
|
end
|
28
28
|
end
|
@@ -52,6 +52,18 @@ module Google
|
|
52
52
|
include Google::Apis::Core::JsonObjectSupport
|
53
53
|
end
|
54
54
|
|
55
|
+
class Cve
|
56
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
57
|
+
|
58
|
+
include Google::Apis::Core::JsonObjectSupport
|
59
|
+
end
|
60
|
+
|
61
|
+
class Cvssv3
|
62
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
63
|
+
|
64
|
+
include Google::Apis::Core::JsonObjectSupport
|
65
|
+
end
|
66
|
+
|
55
67
|
class Empty
|
56
68
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
57
69
|
|
@@ -184,6 +196,12 @@ module Google
|
|
184
196
|
include Google::Apis::Core::JsonObjectSupport
|
185
197
|
end
|
186
198
|
|
199
|
+
class Indicator
|
200
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
201
|
+
|
202
|
+
include Google::Apis::Core::JsonObjectSupport
|
203
|
+
end
|
204
|
+
|
187
205
|
class ListAssetsResponse
|
188
206
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
189
207
|
|
@@ -250,6 +268,12 @@ module Google
|
|
250
268
|
include Google::Apis::Core::JsonObjectSupport
|
251
269
|
end
|
252
270
|
|
271
|
+
class Reference
|
272
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
273
|
+
|
274
|
+
include Google::Apis::Core::JsonObjectSupport
|
275
|
+
end
|
276
|
+
|
253
277
|
class Resource
|
254
278
|
class Representation < Google::Apis::Core::JsonRepresentation; end
|
255
279
|
|
@@ -316,6 +340,12 @@ module Google
|
|
316
340
|
include Google::Apis::Core::JsonObjectSupport
|
317
341
|
end
|
318
342
|
|
343
|
+
class Vulnerability
|
344
|
+
class Representation < Google::Apis::Core::JsonRepresentation; end
|
345
|
+
|
346
|
+
include Google::Apis::Core::JsonObjectSupport
|
347
|
+
end
|
348
|
+
|
319
349
|
class Asset
|
320
350
|
# @private
|
321
351
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -369,6 +399,32 @@ module Google
|
|
369
399
|
end
|
370
400
|
end
|
371
401
|
|
402
|
+
class Cve
|
403
|
+
# @private
|
404
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
405
|
+
property :cvssv3, as: 'cvssv3', class: Google::Apis::SecuritycenterV1::Cvssv3, decorator: Google::Apis::SecuritycenterV1::Cvssv3::Representation
|
406
|
+
|
407
|
+
property :id, as: 'id'
|
408
|
+
collection :references, as: 'references', class: Google::Apis::SecuritycenterV1::Reference, decorator: Google::Apis::SecuritycenterV1::Reference::Representation
|
409
|
+
|
410
|
+
end
|
411
|
+
end
|
412
|
+
|
413
|
+
class Cvssv3
|
414
|
+
# @private
|
415
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
416
|
+
property :attack_complexity, as: 'attackComplexity'
|
417
|
+
property :attack_vector, as: 'attackVector'
|
418
|
+
property :availability_impact, as: 'availabilityImpact'
|
419
|
+
property :base_score, as: 'baseScore'
|
420
|
+
property :confidentiality_impact, as: 'confidentialityImpact'
|
421
|
+
property :integrity_impact, as: 'integrityImpact'
|
422
|
+
property :privileges_required, as: 'privilegesRequired'
|
423
|
+
property :scope, as: 'scope'
|
424
|
+
property :user_interaction, as: 'userInteraction'
|
425
|
+
end
|
426
|
+
end
|
427
|
+
|
372
428
|
class Empty
|
373
429
|
# @private
|
374
430
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -393,6 +449,9 @@ module Google
|
|
393
449
|
property :create_time, as: 'createTime'
|
394
450
|
property :event_time, as: 'eventTime'
|
395
451
|
property :external_uri, as: 'externalUri'
|
452
|
+
property :finding_class, as: 'findingClass'
|
453
|
+
property :indicator, as: 'indicator', class: Google::Apis::SecuritycenterV1::Indicator, decorator: Google::Apis::SecuritycenterV1::Indicator::Representation
|
454
|
+
|
396
455
|
property :name, as: 'name'
|
397
456
|
property :parent, as: 'parent'
|
398
457
|
property :resource_name, as: 'resourceName'
|
@@ -401,6 +460,8 @@ module Google
|
|
401
460
|
property :severity, as: 'severity'
|
402
461
|
hash :source_properties, as: 'sourceProperties'
|
403
462
|
property :state, as: 'state'
|
463
|
+
property :vulnerability, as: 'vulnerability', class: Google::Apis::SecuritycenterV1::Vulnerability, decorator: Google::Apis::SecuritycenterV1::Vulnerability::Representation
|
464
|
+
|
404
465
|
end
|
405
466
|
end
|
406
467
|
|
@@ -448,6 +509,7 @@ module Google
|
|
448
509
|
property :parent_display_name, as: 'parentDisplayName'
|
449
510
|
property :project, as: 'project'
|
450
511
|
property :project_display_name, as: 'projectDisplayName'
|
512
|
+
property :type, as: 'type'
|
451
513
|
end
|
452
514
|
end
|
453
515
|
|
@@ -596,6 +658,14 @@ module Google
|
|
596
658
|
end
|
597
659
|
end
|
598
660
|
|
661
|
+
class Indicator
|
662
|
+
# @private
|
663
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
664
|
+
collection :domains, as: 'domains'
|
665
|
+
collection :ip_addresses, as: 'ipAddresses'
|
666
|
+
end
|
667
|
+
end
|
668
|
+
|
599
669
|
class ListAssetsResponse
|
600
670
|
# @private
|
601
671
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -711,6 +781,14 @@ module Google
|
|
711
781
|
end
|
712
782
|
end
|
713
783
|
|
784
|
+
class Reference
|
785
|
+
# @private
|
786
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
787
|
+
property :source, as: 'source'
|
788
|
+
property :uri, as: 'uri'
|
789
|
+
end
|
790
|
+
end
|
791
|
+
|
714
792
|
class Resource
|
715
793
|
# @private
|
716
794
|
class Representation < Google::Apis::Core::JsonRepresentation
|
@@ -811,6 +889,14 @@ module Google
|
|
811
889
|
collection :permissions, as: 'permissions'
|
812
890
|
end
|
813
891
|
end
|
892
|
+
|
893
|
+
class Vulnerability
|
894
|
+
# @private
|
895
|
+
class Representation < Google::Apis::Core::JsonRepresentation
|
896
|
+
property :cve, as: 'cve', class: Google::Apis::SecuritycenterV1::Cve, decorator: Google::Apis::SecuritycenterV1::Cve::Representation
|
897
|
+
|
898
|
+
end
|
899
|
+
end
|
814
900
|
end
|
815
901
|
end
|
816
902
|
end
|
@@ -30,7 +30,7 @@ module Google
|
|
30
30
|
# This is NOT the gem version.
|
31
31
|
VERSION = 'V1'
|
32
32
|
|
33
|
-
# See, edit, configure, and delete your Google Cloud
|
33
|
+
# See, edit, configure, and delete your Google Cloud data and see the email address for your Google Account.
|
34
34
|
AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
|
35
35
|
end
|
36
36
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-apis-securitycenter_v1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.13.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-
|
11
|
+
date: 2021-10-18 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: google-apis-core
|
@@ -58,7 +58,7 @@ licenses:
|
|
58
58
|
metadata:
|
59
59
|
bug_tracker_uri: https://github.com/googleapis/google-api-ruby-client/issues
|
60
60
|
changelog_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-securitycenter_v1/CHANGELOG.md
|
61
|
-
documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1/v0.
|
61
|
+
documentation_uri: https://googleapis.dev/ruby/google-apis-securitycenter_v1/v0.13.0
|
62
62
|
source_code_uri: https://github.com/googleapis/google-api-ruby-client/tree/master/generated/google-apis-securitycenter_v1
|
63
63
|
post_install_message:
|
64
64
|
rdoc_options: []
|