google-cloud-security_center-v1 0.2.0 → 0.3.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +4 -0
- data/lib/google/cloud/security_center/v1/security_center/client.rb +44 -19
- data/lib/google/cloud/security_center/v1/security_center/operations.rb +3 -1
- data/lib/google/cloud/security_center/v1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1/notification_message_pb.rb +2 -0
- data/lib/google/cloud/securitycenter/v1/resource_pb.rb +27 -0
- data/lib/google/cloud/securitycenter/v1/securitycenter_service_services_pb.rb +2 -2
- data/proto_docs/google/cloud/securitycenter/v1/asset.rb +26 -23
- data/proto_docs/google/cloud/securitycenter/v1/finding.rb +12 -12
- data/proto_docs/google/cloud/securitycenter/v1/notification_message.rb +3 -0
- data/proto_docs/google/cloud/securitycenter/v1/organization_settings.rb +2 -2
- data/proto_docs/google/cloud/securitycenter/v1/resource.rb +48 -0
- data/proto_docs/google/cloud/securitycenter/v1/security_marks.rb +3 -3
- data/proto_docs/google/cloud/securitycenter/v1/securitycenter_service.rb +37 -13
- data/proto_docs/google/cloud/securitycenter/v1/source.rb +1 -1
- metadata +7 -6
- data/lib/google/cloud/common_resources_pb.rb +0 -15
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1d53c5e2d59e992506ccea423ddd9599c2b133a0f8c8e00334671e24333a9c34
|
|
4
|
+
data.tar.gz: 8b9a707c63f9f152f9c602eebdd486d348d92ed31671d2744eb7d7eb38748694
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: ad84cfe7cf10bf1ebfd23a2e264e1f2d389d0f4e78effc9111a8587b3a2c05dd3daf1da78a66b6b44c78af04984769563d2e1d2067daa3007b2bfbc238884367
|
|
7
|
+
data.tar.gz: 29ba8761223c11415f3d1c48809dd52f33b5d0032a670b023196a66b917372850f35c87fa70410ad6595a1deb4d125b7a4dec1cdb3fd17d1345c5be1f8b81d3d
|
data/README.md
CHANGED
|
@@ -18,6 +18,7 @@ In order to use this library, you first need to go through the following steps:
|
|
|
18
18
|
|
|
19
19
|
1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
|
|
20
20
|
1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
|
|
21
|
+
1. [Enable the API.](https://console.cloud.google.com/apis/library/securitycenter.googleapis.com)
|
|
21
22
|
1. {file:AUTHENTICATION.md Set up authentication.}
|
|
22
23
|
|
|
23
24
|
## Quick Start
|
|
@@ -33,6 +34,9 @@ response = client.create_source request
|
|
|
33
34
|
View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-security_center-v1/latest)
|
|
34
35
|
for class and method documentation.
|
|
35
36
|
|
|
37
|
+
See also the [Product Documentation](https://cloud.google.com/security-command-center)
|
|
38
|
+
for general usage information.
|
|
39
|
+
|
|
36
40
|
## Enabling Logging
|
|
37
41
|
|
|
38
42
|
To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
|
|
@@ -105,7 +105,7 @@ module Google
|
|
|
105
105
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
|
106
106
|
}
|
|
107
107
|
|
|
108
|
-
default_config.rpcs.group_assets.timeout =
|
|
108
|
+
default_config.rpcs.group_assets.timeout = 480.0
|
|
109
109
|
default_config.rpcs.group_assets.retry_policy = {
|
|
110
110
|
initial_delay: 0.1,
|
|
111
111
|
max_delay: 60.0,
|
|
@@ -113,7 +113,7 @@ module Google
|
|
|
113
113
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
|
114
114
|
}
|
|
115
115
|
|
|
116
|
-
default_config.rpcs.group_findings.timeout =
|
|
116
|
+
default_config.rpcs.group_findings.timeout = 480.0
|
|
117
117
|
default_config.rpcs.group_findings.retry_policy = {
|
|
118
118
|
initial_delay: 0.1,
|
|
119
119
|
max_delay: 60.0,
|
|
@@ -121,7 +121,7 @@ module Google
|
|
|
121
121
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
|
122
122
|
}
|
|
123
123
|
|
|
124
|
-
default_config.rpcs.list_assets.timeout =
|
|
124
|
+
default_config.rpcs.list_assets.timeout = 480.0
|
|
125
125
|
default_config.rpcs.list_assets.retry_policy = {
|
|
126
126
|
initial_delay: 0.1,
|
|
127
127
|
max_delay: 60.0,
|
|
@@ -129,7 +129,7 @@ module Google
|
|
|
129
129
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
|
130
130
|
}
|
|
131
131
|
|
|
132
|
-
default_config.rpcs.list_findings.timeout =
|
|
132
|
+
default_config.rpcs.list_findings.timeout = 480.0
|
|
133
133
|
default_config.rpcs.list_findings.retry_policy = {
|
|
134
134
|
initial_delay: 0.1,
|
|
135
135
|
max_delay: 60.0,
|
|
@@ -175,7 +175,7 @@ module Google
|
|
|
175
175
|
|
|
176
176
|
default_config.rpcs.update_source.timeout = 60.0
|
|
177
177
|
|
|
178
|
-
default_config.rpcs.update_security_marks.timeout =
|
|
178
|
+
default_config.rpcs.update_security_marks.timeout = 480.0
|
|
179
179
|
|
|
180
180
|
default_config
|
|
181
181
|
end
|
|
@@ -883,15 +883,15 @@ module Google
|
|
|
883
883
|
#
|
|
884
884
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
885
885
|
# Examples:
|
|
886
|
-
#
|
|
887
|
-
#
|
|
886
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
887
|
+
# `update_time = 1560208038000`
|
|
888
888
|
#
|
|
889
889
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
890
890
|
#
|
|
891
891
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
892
892
|
# Examples:
|
|
893
|
-
#
|
|
894
|
-
#
|
|
893
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
894
|
+
# `create_time = 1560208038000`
|
|
895
895
|
#
|
|
896
896
|
# * iam_policy.policy_blob: `=`, `:`
|
|
897
897
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -906,6 +906,12 @@ module Google
|
|
|
906
906
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
907
907
|
#
|
|
908
908
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
909
|
+
#
|
|
910
|
+
# Use a partial match on the empty string to filter based on a property
|
|
911
|
+
# existing:`resource_properties.my_property : ""`
|
|
912
|
+
#
|
|
913
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
914
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
909
915
|
# @param group_by [::String]
|
|
910
916
|
# Required. Expression that defines what assets fields to use for grouping.
|
|
911
917
|
# The string value should follow SQL syntax: comma separated list of fields.
|
|
@@ -1076,13 +1082,19 @@ module Google
|
|
|
1076
1082
|
#
|
|
1077
1083
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1078
1084
|
# Examples:
|
|
1079
|
-
#
|
|
1080
|
-
#
|
|
1085
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
1086
|
+
# `event_time = 1560208038000`
|
|
1081
1087
|
#
|
|
1082
1088
|
# * security_marks.marks: `=`, `:`
|
|
1083
1089
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
1084
1090
|
#
|
|
1085
1091
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
1092
|
+
#
|
|
1093
|
+
# Use a partial match on the empty string to filter based on a property
|
|
1094
|
+
# existing: `source_properties.my_property : ""`
|
|
1095
|
+
#
|
|
1096
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
1097
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
1086
1098
|
# @param group_by [::String]
|
|
1087
1099
|
# Required. Expression that defines what assets fields to use for grouping
|
|
1088
1100
|
# (including `state_change`). The string value should follow SQL syntax:
|
|
@@ -1245,15 +1257,15 @@ module Google
|
|
|
1245
1257
|
#
|
|
1246
1258
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1247
1259
|
# Examples:
|
|
1248
|
-
#
|
|
1249
|
-
#
|
|
1260
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
1261
|
+
# `update_time = 1560208038000`
|
|
1250
1262
|
#
|
|
1251
1263
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
1252
1264
|
#
|
|
1253
1265
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1254
1266
|
# Examples:
|
|
1255
|
-
#
|
|
1256
|
-
#
|
|
1267
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
1268
|
+
# `create_time = 1560208038000`
|
|
1257
1269
|
#
|
|
1258
1270
|
# * iam_policy.policy_blob: `=`, `:`
|
|
1259
1271
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -1268,6 +1280,12 @@ module Google
|
|
|
1268
1280
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
1269
1281
|
#
|
|
1270
1282
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
1283
|
+
#
|
|
1284
|
+
# Use a partial match on the empty string to filter based on a property
|
|
1285
|
+
# existing: `resource_properties.my_property : ""`
|
|
1286
|
+
#
|
|
1287
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
1288
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
1271
1289
|
# @param order_by [::String]
|
|
1272
1290
|
# Expression that defines what fields and order to use for sorting. The
|
|
1273
1291
|
# string value should follow SQL syntax: comma separated list of fields. For
|
|
@@ -1440,13 +1458,19 @@ module Google
|
|
|
1440
1458
|
#
|
|
1441
1459
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1442
1460
|
# Examples:
|
|
1443
|
-
#
|
|
1444
|
-
#
|
|
1461
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
1462
|
+
# `event_time = 1560208038000`
|
|
1445
1463
|
#
|
|
1446
1464
|
# security_marks.marks: `=`, `:`
|
|
1447
1465
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
1448
1466
|
#
|
|
1449
1467
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
1468
|
+
#
|
|
1469
|
+
# Use a partial match on the empty string to filter based on a property
|
|
1470
|
+
# existing: `source_properties.my_property : ""`
|
|
1471
|
+
#
|
|
1472
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
1473
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
1450
1474
|
# @param order_by [::String]
|
|
1451
1475
|
# Expression that defines what fields and order to use for sorting. The
|
|
1452
1476
|
# string value should follow SQL syntax: comma separated list of fields. For
|
|
@@ -2080,7 +2104,8 @@ module Google
|
|
|
2080
2104
|
end
|
|
2081
2105
|
|
|
2082
2106
|
##
|
|
2083
|
-
# Updates a notification config.
|
|
2107
|
+
# Updates a notification config. The following update
|
|
2108
|
+
# fields are allowed: description, pubsub_topic, streaming_config.filter
|
|
2084
2109
|
#
|
|
2085
2110
|
# @overload update_notification_config(request, options = nil)
|
|
2086
2111
|
# Pass arguments to `update_notification_config` via a request object, either of type
|
|
@@ -2478,7 +2503,7 @@ module Google
|
|
|
2478
2503
|
def rpcs
|
|
2479
2504
|
@rpcs ||= begin
|
|
2480
2505
|
parent_rpcs = nil
|
|
2481
|
-
parent_rpcs = @parent_config.rpcs if @parent_config&.respond_to?
|
|
2506
|
+
parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
|
|
2482
2507
|
Rpcs.new parent_rpcs
|
|
2483
2508
|
end
|
|
2484
2509
|
end
|
|
@@ -85,6 +85,8 @@ module Google
|
|
|
85
85
|
if credentials.is_a?(String) || credentials.is_a?(Hash)
|
|
86
86
|
credentials = Credentials.new credentials, scope: @config.scope
|
|
87
87
|
end
|
|
88
|
+
@quota_project_id = @config.quota_project
|
|
89
|
+
@quota_project_id ||= credentials.quota_project_id if credentials.respond_to? :quota_project_id
|
|
88
90
|
|
|
89
91
|
@operations_stub = ::Gapic::ServiceStub.new(
|
|
90
92
|
::Google::Longrunning::Operations::Stub,
|
|
@@ -501,7 +503,7 @@ module Google
|
|
|
501
503
|
def rpcs
|
|
502
504
|
@rpcs ||= begin
|
|
503
505
|
parent_rpcs = nil
|
|
504
|
-
parent_rpcs = @parent_config.rpcs if @parent_config&.respond_to?
|
|
506
|
+
parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
|
|
505
507
|
Rpcs.new parent_rpcs
|
|
506
508
|
end
|
|
507
509
|
end
|
|
@@ -5,10 +5,12 @@ require 'google/protobuf'
|
|
|
5
5
|
|
|
6
6
|
require 'google/api/annotations_pb'
|
|
7
7
|
require 'google/cloud/securitycenter/v1/finding_pb'
|
|
8
|
+
require 'google/cloud/securitycenter/v1/resource_pb'
|
|
8
9
|
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
9
10
|
add_file("google/cloud/securitycenter/v1/notification_message.proto", :syntax => :proto3) do
|
|
10
11
|
add_message "google.cloud.securitycenter.v1.NotificationMessage" do
|
|
11
12
|
optional :notification_config_name, :string, 1
|
|
13
|
+
optional :resource, :message, 3, "google.cloud.securitycenter.v1.Resource"
|
|
12
14
|
oneof :event do
|
|
13
15
|
optional :finding, :message, 2, "google.cloud.securitycenter.v1.Finding"
|
|
14
16
|
end
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1/resource.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
require 'google/api/annotations_pb'
|
|
7
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
8
|
+
add_file("google/cloud/securitycenter/v1/resource.proto", :syntax => :proto3) do
|
|
9
|
+
add_message "google.cloud.securitycenter.v1.Resource" do
|
|
10
|
+
optional :name, :string, 1
|
|
11
|
+
optional :project, :string, 2
|
|
12
|
+
optional :project_display_name, :string, 3
|
|
13
|
+
optional :parent, :string, 4
|
|
14
|
+
optional :parent_display_name, :string, 5
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
module Google
|
|
20
|
+
module Cloud
|
|
21
|
+
module SecurityCenter
|
|
22
|
+
module V1
|
|
23
|
+
Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.Resource").msgclass
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
@@ -86,8 +86,8 @@ module Google
|
|
|
86
86
|
# Creates or updates a finding. The corresponding source must exist for a
|
|
87
87
|
# finding creation to succeed.
|
|
88
88
|
rpc :UpdateFinding, Google::Cloud::SecurityCenter::V1::UpdateFindingRequest, Google::Cloud::SecurityCenter::V1::Finding
|
|
89
|
-
#
|
|
90
|
-
#
|
|
89
|
+
# Updates a notification config. The following update
|
|
90
|
+
# fields are allowed: description, pubsub_topic, streaming_config.filter
|
|
91
91
|
rpc :UpdateNotificationConfig, Google::Cloud::SecurityCenter::V1::UpdateNotificationConfigRequest, Google::Cloud::SecurityCenter::V1::NotificationConfig
|
|
92
92
|
# Updates an organization's settings.
|
|
93
93
|
rpc :UpdateOrganizationSettings, Google::Cloud::SecurityCenter::V1::UpdateOrganizationSettingsRequest, Google::Cloud::SecurityCenter::V1::OrganizationSettings
|
|
@@ -21,12 +21,13 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1
|
|
24
|
-
#
|
|
25
|
-
#
|
|
24
|
+
# Security Command Center representation of a Google Cloud
|
|
25
|
+
# resource.
|
|
26
26
|
#
|
|
27
|
-
# The Asset is a
|
|
28
|
-
#
|
|
29
|
-
#
|
|
27
|
+
# The Asset is a Security Command Center resource that captures information
|
|
28
|
+
# about a single Google Cloud resource. All modifications to an Asset are only
|
|
29
|
+
# within the context of Security Command Center and don't affect the referenced
|
|
30
|
+
# Google Cloud resource.
|
|
30
31
|
# @!attribute [rw] name
|
|
31
32
|
# @return [::String]
|
|
32
33
|
# The relative resource name of this asset. See:
|
|
@@ -35,45 +36,46 @@ module Google
|
|
|
35
36
|
# "organizations/\\{organization_id}/assets/\\{asset_id}".
|
|
36
37
|
# @!attribute [rw] security_center_properties
|
|
37
38
|
# @return [::Google::Cloud::SecurityCenter::V1::Asset::SecurityCenterProperties]
|
|
38
|
-
#
|
|
39
|
-
#
|
|
39
|
+
# Security Command Center managed properties. These properties are managed by
|
|
40
|
+
# Security Command Center and cannot be modified by the user.
|
|
40
41
|
# @!attribute [rw] resource_properties
|
|
41
42
|
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
|
42
43
|
# Resource managed properties. These properties are managed and defined by
|
|
43
|
-
# the
|
|
44
|
+
# the Google Cloud resource and cannot be modified by the user.
|
|
44
45
|
# @!attribute [rw] security_marks
|
|
45
46
|
# @return [::Google::Cloud::SecurityCenter::V1::SecurityMarks]
|
|
46
47
|
# User specified security marks. These marks are entirely managed by the user
|
|
47
48
|
# and come from the SecurityMarks resource that belongs to the asset.
|
|
48
49
|
# @!attribute [rw] create_time
|
|
49
50
|
# @return [::Google::Protobuf::Timestamp]
|
|
50
|
-
# The time at which the asset was created in
|
|
51
|
+
# The time at which the asset was created in Security Command Center.
|
|
51
52
|
# @!attribute [rw] update_time
|
|
52
53
|
# @return [::Google::Protobuf::Timestamp]
|
|
53
|
-
# The time at which the asset was last updated, added, or deleted in
|
|
54
|
-
#
|
|
54
|
+
# The time at which the asset was last updated, added, or deleted in Security
|
|
55
|
+
# Command Center.
|
|
55
56
|
# @!attribute [rw] iam_policy
|
|
56
57
|
# @return [::Google::Cloud::SecurityCenter::V1::Asset::IamPolicy]
|
|
57
|
-
# IAM Policy information associated with the
|
|
58
|
-
#
|
|
59
|
-
# resource and cannot be modified by the
|
|
58
|
+
# Cloud IAM Policy information associated with the Google Cloud resource
|
|
59
|
+
# described by the Security Command Center asset. This information is managed
|
|
60
|
+
# and defined by the Google Cloud resource and cannot be modified by the
|
|
61
|
+
# user.
|
|
60
62
|
class Asset
|
|
61
63
|
include ::Google::Protobuf::MessageExts
|
|
62
64
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
63
65
|
|
|
64
|
-
#
|
|
65
|
-
# cannot be modified by the user.
|
|
66
|
+
# Security Command Center managed properties. These properties are managed by
|
|
67
|
+
# Security Command Center and cannot be modified by the user.
|
|
66
68
|
# @!attribute [rw] resource_name
|
|
67
69
|
# @return [::String]
|
|
68
|
-
# The full resource name of the
|
|
70
|
+
# The full resource name of the Google Cloud resource this asset
|
|
69
71
|
# represents. This field is immutable after create time. See:
|
|
70
72
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
|
71
73
|
# @!attribute [rw] resource_type
|
|
72
74
|
# @return [::String]
|
|
73
|
-
# The type of the
|
|
75
|
+
# The type of the Google Cloud resource. Examples include: APPLICATION,
|
|
74
76
|
# PROJECT, and ORGANIZATION. This is a case insensitive field defined by
|
|
75
|
-
#
|
|
76
|
-
# after create time.
|
|
77
|
+
# Security Command Center and/or the producer of the resource and is
|
|
78
|
+
# immutable after create time.
|
|
77
79
|
# @!attribute [rw] resource_parent
|
|
78
80
|
# @return [::String]
|
|
79
81
|
# The full resource name of the immediate parent of the resource. See:
|
|
@@ -99,9 +101,10 @@ module Google
|
|
|
99
101
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
100
102
|
end
|
|
101
103
|
|
|
102
|
-
# IAM Policy information associated with the
|
|
103
|
-
#
|
|
104
|
-
# resource and cannot be modified by the
|
|
104
|
+
# Cloud IAM Policy information associated with the Google Cloud resource
|
|
105
|
+
# described by the Security Command Center asset. This information is managed
|
|
106
|
+
# and defined by the Google Cloud resource and cannot be modified by the
|
|
107
|
+
# user.
|
|
105
108
|
# @!attribute [rw] policy_blob
|
|
106
109
|
# @return [::String]
|
|
107
110
|
# The JSON representation of the Policy associated with the asset.
|
|
@@ -21,11 +21,11 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1
|
|
24
|
-
#
|
|
24
|
+
# Security Command Center finding.
|
|
25
25
|
#
|
|
26
26
|
# A finding is a record of assessment data like security, risk, health, or
|
|
27
|
-
# privacy, that is ingested into
|
|
28
|
-
# analysis, policy testing, and enforcement. For example, a
|
|
27
|
+
# privacy, that is ingested into Security Command Center for presentation,
|
|
28
|
+
# notification, analysis, policy testing, and enforcement. For example, a
|
|
29
29
|
# cross-site scripting (XSS) vulnerability in an App Engine application is a
|
|
30
30
|
# finding.
|
|
31
31
|
# @!attribute [rw] name
|
|
@@ -43,12 +43,12 @@ module Google
|
|
|
43
43
|
# "organizations/\\{organization_id}/sources/\\{source_id}"
|
|
44
44
|
# @!attribute [rw] resource_name
|
|
45
45
|
# @return [::String]
|
|
46
|
-
# For findings on Google Cloud
|
|
47
|
-
# name of the
|
|
46
|
+
# For findings on Google Cloud resources, the full resource
|
|
47
|
+
# name of the Google Cloud resource this finding is for. See:
|
|
48
48
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
|
49
|
-
# When the finding is for a non-
|
|
50
|
-
# customer or partner defined string.
|
|
51
|
-
#
|
|
49
|
+
# When the finding is for a non-Google Cloud resource, the resourceName can
|
|
50
|
+
# be a customer or partner defined string. This field is immutable after
|
|
51
|
+
# creation time.
|
|
52
52
|
# @!attribute [rw] state
|
|
53
53
|
# @return [::Google::Cloud::SecurityCenter::V1::Finding::State]
|
|
54
54
|
# The state of the finding.
|
|
@@ -59,9 +59,9 @@ module Google
|
|
|
59
59
|
# Example: "XSS_FLASH_INJECTION"
|
|
60
60
|
# @!attribute [rw] external_uri
|
|
61
61
|
# @return [::String]
|
|
62
|
-
# The URI that, if available, points to a web page outside of
|
|
63
|
-
# where additional information about the finding can be found.
|
|
64
|
-
# guaranteed to be either empty or a well formed URL.
|
|
62
|
+
# The URI that, if available, points to a web page outside of Security
|
|
63
|
+
# Command Center where additional information about the finding can be found.
|
|
64
|
+
# This field is guaranteed to be either empty or a well formed URL.
|
|
65
65
|
# @!attribute [rw] source_properties
|
|
66
66
|
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
|
67
67
|
# Source specific properties. These properties are managed by the source
|
|
@@ -80,7 +80,7 @@ module Google
|
|
|
80
80
|
# the firewall became open. The accuracy is determined by the detector.
|
|
81
81
|
# @!attribute [rw] create_time
|
|
82
82
|
# @return [::Google::Protobuf::Timestamp]
|
|
83
|
-
# The time at which the finding was created in
|
|
83
|
+
# The time at which the finding was created in Security Command Center.
|
|
84
84
|
class Finding
|
|
85
85
|
include ::Google::Protobuf::MessageExts
|
|
86
86
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -29,6 +29,9 @@ module Google
|
|
|
29
29
|
# @return [::Google::Cloud::SecurityCenter::V1::Finding]
|
|
30
30
|
# If it's a Finding based notification config, this field will be
|
|
31
31
|
# populated.
|
|
32
|
+
# @!attribute [rw] resource
|
|
33
|
+
# @return [::Google::Cloud::SecurityCenter::V1::Resource]
|
|
34
|
+
# The Cloud resource tied to this notification's Finding.
|
|
32
35
|
class NotificationMessage
|
|
33
36
|
include ::Google::Protobuf::MessageExts
|
|
34
37
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -21,8 +21,8 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1
|
|
24
|
-
# User specified settings that are attached to the
|
|
25
|
-
# Center
|
|
24
|
+
# User specified settings that are attached to the Security Command
|
|
25
|
+
# Center organization.
|
|
26
26
|
# @!attribute [rw] name
|
|
27
27
|
# @return [::String]
|
|
28
28
|
# The relative resource name of the settings. See:
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2020 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1
|
|
24
|
+
# Information related to the Google Cloud resource.
|
|
25
|
+
# @!attribute [rw] name
|
|
26
|
+
# @return [::String]
|
|
27
|
+
# The full resource name of the resource. See:
|
|
28
|
+
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
|
29
|
+
# @!attribute [rw] project
|
|
30
|
+
# @return [::String]
|
|
31
|
+
# The full resource name of project that the resource belongs to.
|
|
32
|
+
# @!attribute [rw] project_display_name
|
|
33
|
+
# @return [::String]
|
|
34
|
+
# The human readable name of project that the resource belongs to.
|
|
35
|
+
# @!attribute [rw] parent
|
|
36
|
+
# @return [::String]
|
|
37
|
+
# The full resource name of resource's parent.
|
|
38
|
+
# @!attribute [rw] parent_display_name
|
|
39
|
+
# @return [::String]
|
|
40
|
+
# The human readable name of resource's parent.
|
|
41
|
+
class Resource
|
|
42
|
+
include ::Google::Protobuf::MessageExts
|
|
43
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
44
|
+
end
|
|
45
|
+
end
|
|
46
|
+
end
|
|
47
|
+
end
|
|
48
|
+
end
|
|
@@ -21,9 +21,9 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1
|
|
24
|
-
# User specified security marks that are attached to the parent
|
|
25
|
-
# Command Center
|
|
26
|
-
#
|
|
24
|
+
# User specified security marks that are attached to the parent Security
|
|
25
|
+
# Command Center resource. Security marks are scoped within a Security Command
|
|
26
|
+
# Center organization -- they can be modified and viewed by all users who have
|
|
27
27
|
# proper permissions on the organization.
|
|
28
28
|
# @!attribute [rw] name
|
|
29
29
|
# @return [::String]
|
|
@@ -155,15 +155,15 @@ module Google
|
|
|
155
155
|
#
|
|
156
156
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
157
157
|
# Examples:
|
|
158
|
-
#
|
|
159
|
-
#
|
|
158
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
159
|
+
# `update_time = 1560208038000`
|
|
160
160
|
#
|
|
161
161
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
162
162
|
#
|
|
163
163
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
164
164
|
# Examples:
|
|
165
|
-
#
|
|
166
|
-
#
|
|
165
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
166
|
+
# `create_time = 1560208038000`
|
|
167
167
|
#
|
|
168
168
|
# * iam_policy.policy_blob: `=`, `:`
|
|
169
169
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -178,6 +178,12 @@ module Google
|
|
|
178
178
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
179
179
|
#
|
|
180
180
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
181
|
+
#
|
|
182
|
+
# Use a partial match on the empty string to filter based on a property
|
|
183
|
+
# existing:`resource_properties.my_property : ""`
|
|
184
|
+
#
|
|
185
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
186
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
181
187
|
# @!attribute [rw] group_by
|
|
182
188
|
# @return [::String]
|
|
183
189
|
# Required. Expression that defines what assets fields to use for grouping.
|
|
@@ -313,13 +319,19 @@ module Google
|
|
|
313
319
|
#
|
|
314
320
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
315
321
|
# Examples:
|
|
316
|
-
#
|
|
317
|
-
#
|
|
322
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
323
|
+
# `event_time = 1560208038000`
|
|
318
324
|
#
|
|
319
325
|
# * security_marks.marks: `=`, `:`
|
|
320
326
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
321
327
|
#
|
|
322
328
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
329
|
+
#
|
|
330
|
+
# Use a partial match on the empty string to filter based on a property
|
|
331
|
+
# existing: `source_properties.my_property : ""`
|
|
332
|
+
#
|
|
333
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
334
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
323
335
|
# @!attribute [rw] group_by
|
|
324
336
|
# @return [::String]
|
|
325
337
|
# Required. Expression that defines what assets fields to use for grouping
|
|
@@ -536,15 +548,15 @@ module Google
|
|
|
536
548
|
#
|
|
537
549
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
538
550
|
# Examples:
|
|
539
|
-
#
|
|
540
|
-
#
|
|
551
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
552
|
+
# `update_time = 1560208038000`
|
|
541
553
|
#
|
|
542
554
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
543
555
|
#
|
|
544
556
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
545
557
|
# Examples:
|
|
546
|
-
#
|
|
547
|
-
#
|
|
558
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
559
|
+
# `create_time = 1560208038000`
|
|
548
560
|
#
|
|
549
561
|
# * iam_policy.policy_blob: `=`, `:`
|
|
550
562
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -559,6 +571,12 @@ module Google
|
|
|
559
571
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
560
572
|
#
|
|
561
573
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
574
|
+
#
|
|
575
|
+
# Use a partial match on the empty string to filter based on a property
|
|
576
|
+
# existing: `resource_properties.my_property : ""`
|
|
577
|
+
#
|
|
578
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
579
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
562
580
|
# @!attribute [rw] order_by
|
|
563
581
|
# @return [::String]
|
|
564
582
|
# Expression that defines what fields and order to use for sorting. The
|
|
@@ -728,13 +746,19 @@ module Google
|
|
|
728
746
|
#
|
|
729
747
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
730
748
|
# Examples:
|
|
731
|
-
#
|
|
732
|
-
#
|
|
749
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
750
|
+
# `event_time = 1560208038000`
|
|
733
751
|
#
|
|
734
752
|
# security_marks.marks: `=`, `:`
|
|
735
753
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
736
754
|
#
|
|
737
755
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
756
|
+
#
|
|
757
|
+
# Use a partial match on the empty string to filter based on a property
|
|
758
|
+
# existing: `source_properties.my_property : ""`
|
|
759
|
+
#
|
|
760
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
761
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
738
762
|
# @!attribute [rw] order_by
|
|
739
763
|
# @return [::String]
|
|
740
764
|
# Expression that defines what fields and order to use for sorting. The
|
|
@@ -843,7 +867,7 @@ module Google
|
|
|
843
867
|
include ::Google::Protobuf::MessageExts
|
|
844
868
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
845
869
|
|
|
846
|
-
# Information related to the Google Cloud
|
|
870
|
+
# Information related to the Google Cloud resource that is
|
|
847
871
|
# associated with this finding.
|
|
848
872
|
# @!attribute [rw] name
|
|
849
873
|
# @return [::String]
|
|
@@ -21,7 +21,7 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1
|
|
24
|
-
#
|
|
24
|
+
# Security Command Center finding source. A finding source
|
|
25
25
|
# is an entity or a mechanism that can produce a finding. A source is like a
|
|
26
26
|
# container of findings that come from the same scanner, logger, monitor, and
|
|
27
27
|
# other tools.
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-security_center-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.2
|
|
4
|
+
version: 0.3.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2020-
|
|
11
|
+
date: 2020-07-16 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - "~>"
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: '0.
|
|
19
|
+
version: '0.3'
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - "~>"
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: '0.
|
|
26
|
+
version: '0.3'
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: google-cloud-errors
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -182,7 +182,6 @@ files:
|
|
|
182
182
|
- LICENSE.md
|
|
183
183
|
- README.md
|
|
184
184
|
- lib/google-cloud-security_center-v1.rb
|
|
185
|
-
- lib/google/cloud/common_resources_pb.rb
|
|
186
185
|
- lib/google/cloud/security_center/v1.rb
|
|
187
186
|
- lib/google/cloud/security_center/v1/security_center.rb
|
|
188
187
|
- lib/google/cloud/security_center/v1/security_center/client.rb
|
|
@@ -195,6 +194,7 @@ files:
|
|
|
195
194
|
- lib/google/cloud/securitycenter/v1/notification_config_pb.rb
|
|
196
195
|
- lib/google/cloud/securitycenter/v1/notification_message_pb.rb
|
|
197
196
|
- lib/google/cloud/securitycenter/v1/organization_settings_pb.rb
|
|
197
|
+
- lib/google/cloud/securitycenter/v1/resource_pb.rb
|
|
198
198
|
- lib/google/cloud/securitycenter/v1/run_asset_discovery_response_pb.rb
|
|
199
199
|
- lib/google/cloud/securitycenter/v1/security_marks_pb.rb
|
|
200
200
|
- lib/google/cloud/securitycenter/v1/securitycenter_service_pb.rb
|
|
@@ -208,6 +208,7 @@ files:
|
|
|
208
208
|
- proto_docs/google/cloud/securitycenter/v1/notification_config.rb
|
|
209
209
|
- proto_docs/google/cloud/securitycenter/v1/notification_message.rb
|
|
210
210
|
- proto_docs/google/cloud/securitycenter/v1/organization_settings.rb
|
|
211
|
+
- proto_docs/google/cloud/securitycenter/v1/resource.rb
|
|
211
212
|
- proto_docs/google/cloud/securitycenter/v1/run_asset_discovery_response.rb
|
|
212
213
|
- proto_docs/google/cloud/securitycenter/v1/security_marks.rb
|
|
213
214
|
- proto_docs/google/cloud/securitycenter/v1/securitycenter_service.rb
|
|
@@ -243,7 +244,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
243
244
|
- !ruby/object:Gem::Version
|
|
244
245
|
version: '0'
|
|
245
246
|
requirements: []
|
|
246
|
-
rubygems_version: 3.
|
|
247
|
+
rubygems_version: 3.1.3
|
|
247
248
|
signing_key:
|
|
248
249
|
specification_version: 4
|
|
249
250
|
summary: API Client library for the Cloud Security Command Center V1 API
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
-
# source: google/cloud/common_resources.proto
|
|
3
|
-
|
|
4
|
-
require 'google/protobuf'
|
|
5
|
-
|
|
6
|
-
require 'google/api/resource_pb'
|
|
7
|
-
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
8
|
-
add_file("google/cloud/common_resources.proto", :syntax => :proto3) do
|
|
9
|
-
end
|
|
10
|
-
end
|
|
11
|
-
|
|
12
|
-
module Google
|
|
13
|
-
module Cloud
|
|
14
|
-
end
|
|
15
|
-
end
|