google-cloud-security_center-v1 0.27.0 → 0.28.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/google/cloud/security_center/v1/security_center/client.rb +1 -1
- data/lib/google/cloud/security_center/v1/security_center/paths.rb +82 -0
- data/lib/google/cloud/security_center/v1/security_center/rest/client.rb +1 -1
- data/lib/google/cloud/security_center/v1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1/cloud_dlp_data_profile_pb.rb +24 -0
- data/lib/google/cloud/securitycenter/v1/cloud_dlp_inspection_pb.rb +27 -0
- data/lib/google/cloud/securitycenter/v1/finding_pb.rb +4 -0
- data/lib/google/cloud/securitycenter/v1/securitycenter_service_services_pb.rb +1 -1
- data/proto_docs/google/cloud/securitycenter/v1/access.rb +28 -29
- data/proto_docs/google/cloud/securitycenter/v1/cloud_dlp_data_profile.rb +37 -0
- data/proto_docs/google/cloud/securitycenter/v1/cloud_dlp_inspection.rb +50 -0
- data/proto_docs/google/cloud/securitycenter/v1/finding.rb +30 -21
- data/proto_docs/google/cloud/securitycenter/v1/securitycenter_service.rb +11 -11
- metadata +6 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 559e3272e743a433aa6930f5b419aca4d9f451b18d00a9508890b6db2b82f256
|
|
4
|
+
data.tar.gz: dc333632c73e9a2067d66067c8e0dc70c17809843684515021216047c6730056
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 52f3774810daa55cd14ab0937e09632cab50410f21c8f8285f1a4d63d31df25147d1ff793786016fcf323a056fb88449f68017c4ab7c74ffcb959a10969d5b19
|
|
7
|
+
data.tar.gz: 284d65dc82f1db1e0714bcff8e17120129d726dede6fa4b4a2d8f9f9f74307679fab8cb8b1ca7a463a58e7a03c5798416cf61a2316916f606b4260a5faf633d7
|
|
@@ -4242,7 +4242,7 @@ module Google
|
|
|
4242
4242
|
# Updates the SecurityHealthAnalyticsCustomModule under the given name based
|
|
4243
4243
|
# on the given update mask. Updating the enablement state is supported on
|
|
4244
4244
|
# both resident and inherited modules (though resident modules cannot have an
|
|
4245
|
-
# enablement state of
|
|
4245
|
+
# enablement state of "inherited"). Updating the display name and custom
|
|
4246
4246
|
# config of a module is supported on resident modules only.
|
|
4247
4247
|
#
|
|
4248
4248
|
# @overload update_security_health_analytics_custom_module(request, options = nil)
|
|
@@ -76,6 +76,47 @@ module Google
|
|
|
76
76
|
resource.call(**args)
|
|
77
77
|
end
|
|
78
78
|
|
|
79
|
+
##
|
|
80
|
+
# Create a fully-qualified DlpJob resource string.
|
|
81
|
+
#
|
|
82
|
+
# @overload dlp_job_path(project:, dlp_job:)
|
|
83
|
+
# The resource will be in the following format:
|
|
84
|
+
#
|
|
85
|
+
# `projects/{project}/dlpJobs/{dlp_job}`
|
|
86
|
+
#
|
|
87
|
+
# @param project [String]
|
|
88
|
+
# @param dlp_job [String]
|
|
89
|
+
#
|
|
90
|
+
# @overload dlp_job_path(project:, location:, dlp_job:)
|
|
91
|
+
# The resource will be in the following format:
|
|
92
|
+
#
|
|
93
|
+
# `projects/{project}/locations/{location}/dlpJobs/{dlp_job}`
|
|
94
|
+
#
|
|
95
|
+
# @param project [String]
|
|
96
|
+
# @param location [String]
|
|
97
|
+
# @param dlp_job [String]
|
|
98
|
+
#
|
|
99
|
+
# @return [::String]
|
|
100
|
+
def dlp_job_path **args
|
|
101
|
+
resources = {
|
|
102
|
+
"dlp_job:project" => (proc do |project:, dlp_job:|
|
|
103
|
+
raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
|
|
104
|
+
|
|
105
|
+
"projects/#{project}/dlpJobs/#{dlp_job}"
|
|
106
|
+
end),
|
|
107
|
+
"dlp_job:location:project" => (proc do |project:, location:, dlp_job:|
|
|
108
|
+
raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
|
|
109
|
+
raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
|
|
110
|
+
|
|
111
|
+
"projects/#{project}/locations/#{location}/dlpJobs/#{dlp_job}"
|
|
112
|
+
end)
|
|
113
|
+
}
|
|
114
|
+
|
|
115
|
+
resource = resources[args.keys.sort.join(":")]
|
|
116
|
+
raise ::ArgumentError, "no resource found for values #{args.keys}" if resource.nil?
|
|
117
|
+
resource.call(**args)
|
|
118
|
+
end
|
|
119
|
+
|
|
79
120
|
##
|
|
80
121
|
# Create a fully-qualified EffectiveSecurityHealthAnalyticsCustomModule resource string.
|
|
81
122
|
#
|
|
@@ -654,6 +695,47 @@ module Google
|
|
|
654
695
|
resource.call(**args)
|
|
655
696
|
end
|
|
656
697
|
|
|
698
|
+
##
|
|
699
|
+
# Create a fully-qualified TableDataProfile resource string.
|
|
700
|
+
#
|
|
701
|
+
# @overload table_data_profile_path(project:, table_profile:)
|
|
702
|
+
# The resource will be in the following format:
|
|
703
|
+
#
|
|
704
|
+
# `projects/{project}/tableProfiles/{table_profile}`
|
|
705
|
+
#
|
|
706
|
+
# @param project [String]
|
|
707
|
+
# @param table_profile [String]
|
|
708
|
+
#
|
|
709
|
+
# @overload table_data_profile_path(project:, location:, table_profile:)
|
|
710
|
+
# The resource will be in the following format:
|
|
711
|
+
#
|
|
712
|
+
# `projects/{project}/locations/{location}/tableProfiles/{table_profile}`
|
|
713
|
+
#
|
|
714
|
+
# @param project [String]
|
|
715
|
+
# @param location [String]
|
|
716
|
+
# @param table_profile [String]
|
|
717
|
+
#
|
|
718
|
+
# @return [::String]
|
|
719
|
+
def table_data_profile_path **args
|
|
720
|
+
resources = {
|
|
721
|
+
"project:table_profile" => (proc do |project:, table_profile:|
|
|
722
|
+
raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
|
|
723
|
+
|
|
724
|
+
"projects/#{project}/tableProfiles/#{table_profile}"
|
|
725
|
+
end),
|
|
726
|
+
"location:project:table_profile" => (proc do |project:, location:, table_profile:|
|
|
727
|
+
raise ::ArgumentError, "project cannot contain /" if project.to_s.include? "/"
|
|
728
|
+
raise ::ArgumentError, "location cannot contain /" if location.to_s.include? "/"
|
|
729
|
+
|
|
730
|
+
"projects/#{project}/locations/#{location}/tableProfiles/#{table_profile}"
|
|
731
|
+
end)
|
|
732
|
+
}
|
|
733
|
+
|
|
734
|
+
resource = resources[args.keys.sort.join(":")]
|
|
735
|
+
raise ::ArgumentError, "no resource found for values #{args.keys}" if resource.nil?
|
|
736
|
+
resource.call(**args)
|
|
737
|
+
end
|
|
738
|
+
|
|
657
739
|
##
|
|
658
740
|
# Create a fully-qualified Topic resource string.
|
|
659
741
|
#
|
|
@@ -3328,7 +3328,7 @@ module Google
|
|
|
3328
3328
|
# Updates the SecurityHealthAnalyticsCustomModule under the given name based
|
|
3329
3329
|
# on the given update mask. Updating the enablement state is supported on
|
|
3330
3330
|
# both resident and inherited modules (though resident modules cannot have an
|
|
3331
|
-
# enablement state of
|
|
3331
|
+
# enablement state of "inherited"). Updating the display name and custom
|
|
3332
3332
|
# config of a module is supported on resident modules only.
|
|
3333
3333
|
#
|
|
3334
3334
|
# @overload update_security_health_analytics_custom_module(request, options = nil)
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1/cloud_dlp_data_profile.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
require 'google/api/resource_pb'
|
|
7
|
+
|
|
8
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
9
|
+
add_file("google/cloud/securitycenter/v1/cloud_dlp_data_profile.proto", :syntax => :proto3) do
|
|
10
|
+
add_message "google.cloud.securitycenter.v1.CloudDlpDataProfile" do
|
|
11
|
+
optional :data_profile, :string, 1
|
|
12
|
+
end
|
|
13
|
+
end
|
|
14
|
+
end
|
|
15
|
+
|
|
16
|
+
module Google
|
|
17
|
+
module Cloud
|
|
18
|
+
module SecurityCenter
|
|
19
|
+
module V1
|
|
20
|
+
CloudDlpDataProfile = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.CloudDlpDataProfile").msgclass
|
|
21
|
+
end
|
|
22
|
+
end
|
|
23
|
+
end
|
|
24
|
+
end
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1/cloud_dlp_inspection.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
require 'google/api/resource_pb'
|
|
7
|
+
|
|
8
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
9
|
+
add_file("google/cloud/securitycenter/v1/cloud_dlp_inspection.proto", :syntax => :proto3) do
|
|
10
|
+
add_message "google.cloud.securitycenter.v1.CloudDlpInspection" do
|
|
11
|
+
optional :inspect_job, :string, 1
|
|
12
|
+
optional :info_type, :string, 2
|
|
13
|
+
optional :info_type_count, :int64, 3
|
|
14
|
+
optional :full_scan, :bool, 4
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
module Google
|
|
20
|
+
module Cloud
|
|
21
|
+
module SecurityCenter
|
|
22
|
+
module V1
|
|
23
|
+
CloudDlpInspection = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1.CloudDlpInspection").msgclass
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
@@ -6,6 +6,8 @@ require 'google/protobuf'
|
|
|
6
6
|
require 'google/api/field_behavior_pb'
|
|
7
7
|
require 'google/api/resource_pb'
|
|
8
8
|
require 'google/cloud/securitycenter/v1/access_pb'
|
|
9
|
+
require 'google/cloud/securitycenter/v1/cloud_dlp_data_profile_pb'
|
|
10
|
+
require 'google/cloud/securitycenter/v1/cloud_dlp_inspection_pb'
|
|
9
11
|
require 'google/cloud/securitycenter/v1/compliance_pb'
|
|
10
12
|
require 'google/cloud/securitycenter/v1/connection_pb'
|
|
11
13
|
require 'google/cloud/securitycenter/v1/contact_details_pb'
|
|
@@ -63,6 +65,8 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
63
65
|
optional :kubernetes, :message, 43, "google.cloud.securitycenter.v1.Kubernetes"
|
|
64
66
|
optional :database, :message, 44, "google.cloud.securitycenter.v1.Database"
|
|
65
67
|
repeated :files, :message, 46, "google.cloud.securitycenter.v1.File"
|
|
68
|
+
optional :cloud_dlp_inspection, :message, 48, "google.cloud.securitycenter.v1.CloudDlpInspection"
|
|
69
|
+
optional :cloud_dlp_data_profile, :message, 49, "google.cloud.securitycenter.v1.CloudDlpDataProfile"
|
|
66
70
|
optional :kernel_rootkit, :message, 50, "google.cloud.securitycenter.v1.KernelRootkit"
|
|
67
71
|
end
|
|
68
72
|
add_enum "google.cloud.securitycenter.v1.Finding.State" do
|
|
@@ -141,7 +141,7 @@ module Google
|
|
|
141
141
|
# Updates the SecurityHealthAnalyticsCustomModule under the given name based
|
|
142
142
|
# on the given update mask. Updating the enablement state is supported on
|
|
143
143
|
# both resident and inherited modules (though resident modules cannot have an
|
|
144
|
-
# enablement state of
|
|
144
|
+
# enablement state of "inherited"). Updating the display name and custom
|
|
145
145
|
# config of a module is supported on resident modules only.
|
|
146
146
|
rpc :UpdateSecurityHealthAnalyticsCustomModule, ::Google::Cloud::SecurityCenter::V1::UpdateSecurityHealthAnalyticsCustomModuleRequest, ::Google::Cloud::SecurityCenter::V1::SecurityHealthAnalyticsCustomModule
|
|
147
147
|
# Updates a source.
|
|
@@ -26,11 +26,11 @@ module Google
|
|
|
26
26
|
# @return [::String]
|
|
27
27
|
# Associated email, such as "foo@google.com".
|
|
28
28
|
#
|
|
29
|
-
# The email address of the authenticated user
|
|
30
|
-
# of third party principal
|
|
31
|
-
# callers, the `principal_subject` field is populated instead of
|
|
32
|
-
# For privacy reasons, the principal email address is sometimes
|
|
33
|
-
# For more information, see [Caller identities in audit
|
|
29
|
+
# The email address of the authenticated user or a service account acting on
|
|
30
|
+
# behalf of a third party principal making the request. For third party
|
|
31
|
+
# identity callers, the `principal_subject` field is populated instead of
|
|
32
|
+
# this field. For privacy reasons, the principal email address is sometimes
|
|
33
|
+
# redacted. For more information, see [Caller identities in audit
|
|
34
34
|
# logs](https://cloud.google.com/logging/docs/audit#user-id).
|
|
35
35
|
# @!attribute [rw] caller_ip
|
|
36
36
|
# @return [::String]
|
|
@@ -40,8 +40,8 @@ module Google
|
|
|
40
40
|
# The caller IP's geolocation, which identifies where the call came from.
|
|
41
41
|
# @!attribute [rw] user_agent_family
|
|
42
42
|
# @return [::String]
|
|
43
|
-
#
|
|
44
|
-
# embedded or
|
|
43
|
+
# Type of user agent associated with the finding. For example, an operating
|
|
44
|
+
# system shell or an embedded or standalone application.
|
|
45
45
|
# @!attribute [rw] service_name
|
|
46
46
|
# @return [::String]
|
|
47
47
|
# This is the API service that the service account made a call to, e.g.
|
|
@@ -51,36 +51,35 @@ module Google
|
|
|
51
51
|
# The method that the service account called, e.g. "SetIamPolicy".
|
|
52
52
|
# @!attribute [rw] principal_subject
|
|
53
53
|
# @return [::String]
|
|
54
|
-
# A string
|
|
55
|
-
#
|
|
56
|
-
# associated with email addresses, such as third party
|
|
57
|
-
# identities, the format
|
|
58
|
-
# pool name}/
|
|
59
|
-
#
|
|
60
|
-
# format `serviceAccount:{identity pool
|
|
54
|
+
# A string that represents the principal_subject that is associated with the
|
|
55
|
+
# identity. Unlike `principal_email`, `principal_subject` supports principals
|
|
56
|
+
# that aren't associated with email addresses, such as third party
|
|
57
|
+
# principals. For most identities, the format is
|
|
58
|
+
# `principal://iam.googleapis.com/{identity pool name}/subject/{subject}`.
|
|
59
|
+
# Some GKE identities, such as GKE_WORKLOAD, FREEFORM, and GKE_HUB_WORKLOAD,
|
|
60
|
+
# still use the legacy format `serviceAccount:{identity pool
|
|
61
|
+
# name}[\\{subject}]`.
|
|
61
62
|
# @!attribute [rw] service_account_key_name
|
|
62
63
|
# @return [::String]
|
|
63
|
-
# The name of the service account key used to create or exchange
|
|
64
|
-
# credentials
|
|
64
|
+
# The name of the service account key that was used to create or exchange
|
|
65
|
+
# credentials when authenticating the service account that made the request.
|
|
65
66
|
# This is a scheme-less URI full resource name. For example:
|
|
66
67
|
#
|
|
67
|
-
# "//iam.googleapis.com/projects/\\{PROJECT_ID}/serviceAccounts/\\{ACCOUNT}/keys/\\{key}"
|
|
68
|
+
# "//iam.googleapis.com/projects/\\{PROJECT_ID}/serviceAccounts/\\{ACCOUNT}/keys/\\{key}".
|
|
68
69
|
# @!attribute [rw] service_account_delegation_info
|
|
69
70
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::ServiceAccountDelegationInfo>]
|
|
70
|
-
#
|
|
71
|
-
# the request.
|
|
72
|
-
#
|
|
73
|
-
#
|
|
74
|
-
#
|
|
71
|
+
# The identity delegation history of an authenticated service account that
|
|
72
|
+
# made the request. The `serviceAccountDelegationInfo[]` object contains
|
|
73
|
+
# information about the real authorities that try to access Google Cloud
|
|
74
|
+
# resources by delegating on a service account. When multiple authorities are
|
|
75
|
+
# present, they are guaranteed to be sorted based on the original ordering of
|
|
76
|
+
# the identity delegation events.
|
|
75
77
|
# @!attribute [rw] user_name
|
|
76
78
|
# @return [::String]
|
|
77
|
-
# A string that represents
|
|
78
|
-
#
|
|
79
|
-
#
|
|
80
|
-
#
|
|
81
|
-
# logged into an operating system, if the finding is VM-related, or a user
|
|
82
|
-
# that is logged into some type of application that is involved in the
|
|
83
|
-
# access event.
|
|
79
|
+
# A string that represents a username. The username provided depends on the
|
|
80
|
+
# type of the finding and is likely not an IAM principal. For example, this
|
|
81
|
+
# can be a system username if the finding is related to a virtual machine, or
|
|
82
|
+
# it can be an application login username.
|
|
84
83
|
class Access
|
|
85
84
|
include ::Google::Protobuf::MessageExts
|
|
86
85
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2023 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1
|
|
24
|
+
# The [data profile](https://cloud.google.com/dlp/docs/data-profiles)
|
|
25
|
+
# associated with the finding.
|
|
26
|
+
# @!attribute [rw] data_profile
|
|
27
|
+
# @return [::String]
|
|
28
|
+
# Name of the data profile, for example,
|
|
29
|
+
# `projects/123/locations/europe/tableProfiles/8383929`.
|
|
30
|
+
class CloudDlpDataProfile
|
|
31
|
+
include ::Google::Protobuf::MessageExts
|
|
32
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
33
|
+
end
|
|
34
|
+
end
|
|
35
|
+
end
|
|
36
|
+
end
|
|
37
|
+
end
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2023 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1
|
|
24
|
+
# Details about the Cloud Data Loss Prevention (Cloud DLP) [inspection
|
|
25
|
+
# job](https://cloud.google.com/dlp/docs/concepts-job-triggers) that produced
|
|
26
|
+
# the finding.
|
|
27
|
+
# @!attribute [rw] inspect_job
|
|
28
|
+
# @return [::String]
|
|
29
|
+
# Name of the inspection job, for example,
|
|
30
|
+
# `projects/123/locations/europe/dlpJobs/i-8383929`.
|
|
31
|
+
# @!attribute [rw] info_type
|
|
32
|
+
# @return [::String]
|
|
33
|
+
# The [type of
|
|
34
|
+
# information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
|
|
35
|
+
# for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
|
|
36
|
+
# @!attribute [rw] info_type_count
|
|
37
|
+
# @return [::Integer]
|
|
38
|
+
# The number of times Cloud DLP found this infoType within this job
|
|
39
|
+
# and resource.
|
|
40
|
+
# @!attribute [rw] full_scan
|
|
41
|
+
# @return [::Boolean]
|
|
42
|
+
# Whether Cloud DLP scanned the complete resource or a sampled subset.
|
|
43
|
+
class CloudDlpInspection
|
|
44
|
+
include ::Google::Protobuf::MessageExts
|
|
45
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
46
|
+
end
|
|
47
|
+
end
|
|
48
|
+
end
|
|
49
|
+
end
|
|
50
|
+
end
|
|
@@ -30,10 +30,12 @@ module Google
|
|
|
30
30
|
# finding.
|
|
31
31
|
# @!attribute [rw] name
|
|
32
32
|
# @return [::String]
|
|
33
|
-
# The relative resource
|
|
34
|
-
# https://cloud.google.com/apis/design/resource_names#relative_resource_name
|
|
35
|
-
# Example:
|
|
36
|
-
# "organizations/\\{organization_id}/sources/\\{source_id}/findings/\\{finding_id}"
|
|
33
|
+
# The [relative resource
|
|
34
|
+
# name](https://cloud.google.com/apis/design/resource_names#relative_resource_name)
|
|
35
|
+
# of the finding. Example:
|
|
36
|
+
# "organizations/\\{organization_id}/sources/\\{source_id}/findings/\\{finding_id}",
|
|
37
|
+
# "folders/\\{folder_id}/sources/\\{source_id}/findings/\\{finding_id}",
|
|
38
|
+
# "projects/\\{project_id}/sources/\\{source_id}/findings/\\{finding_id}".
|
|
37
39
|
# @!attribute [rw] parent
|
|
38
40
|
# @return [::String]
|
|
39
41
|
# The relative resource name of the source the finding belongs to. See:
|
|
@@ -107,11 +109,11 @@ module Google
|
|
|
107
109
|
# The class of the finding.
|
|
108
110
|
# @!attribute [rw] indicator
|
|
109
111
|
# @return [::Google::Cloud::SecurityCenter::V1::Indicator]
|
|
110
|
-
# Represents what's commonly known as an
|
|
112
|
+
# Represents what's commonly known as an *indicator of compromise* (IoC) in
|
|
111
113
|
# computer forensics. This is an artifact observed on a network or in an
|
|
112
114
|
# operating system that, with high confidence, indicates a computer
|
|
113
|
-
# intrusion.
|
|
114
|
-
#
|
|
115
|
+
# intrusion. For more information, see [Indicator of
|
|
116
|
+
# compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
|
|
115
117
|
# @!attribute [rw] vulnerability
|
|
116
118
|
# @return [::Google::Cloud::SecurityCenter::V1::Vulnerability]
|
|
117
119
|
# Represents vulnerability-specific fields like CVE and CVSS scores.
|
|
@@ -130,17 +132,16 @@ module Google
|
|
|
130
132
|
# See: https://attack.mitre.org
|
|
131
133
|
# @!attribute [rw] access
|
|
132
134
|
# @return [::Google::Cloud::SecurityCenter::V1::Access]
|
|
133
|
-
# Access details associated
|
|
134
|
-
# caller, which method was accessed, from where
|
|
135
|
+
# Access details associated with the finding, such as more information on the
|
|
136
|
+
# caller, which method was accessed, and from where.
|
|
135
137
|
# @!attribute [rw] connections
|
|
136
138
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Connection>]
|
|
137
139
|
# Contains information about the IP connection associated with the finding.
|
|
138
140
|
# @!attribute [rw] mute_initiator
|
|
139
141
|
# @return [::String]
|
|
140
|
-
#
|
|
141
|
-
# mute
|
|
142
|
-
#
|
|
143
|
-
# shouldn't set the value of mute.
|
|
142
|
+
# Records additional information about the mute operation, for example, the
|
|
143
|
+
# [mute configuration](/security-command-center/docs/how-to-mute-findings)
|
|
144
|
+
# that muted the finding and the user who muted the finding.
|
|
144
145
|
# @!attribute [rw] processes
|
|
145
146
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Process>]
|
|
146
147
|
# Represents operating system processes associated with the Finding.
|
|
@@ -173,16 +174,16 @@ module Google
|
|
|
173
174
|
# "Event Threat Detection" or "Security Health Analytics".
|
|
174
175
|
# @!attribute [rw] description
|
|
175
176
|
# @return [::String]
|
|
176
|
-
# Contains more
|
|
177
|
+
# Contains more details about the finding.
|
|
177
178
|
# @!attribute [rw] exfiltration
|
|
178
179
|
# @return [::Google::Cloud::SecurityCenter::V1::Exfiltration]
|
|
179
|
-
# Represents
|
|
180
|
+
# Represents exfiltrations associated with the finding.
|
|
180
181
|
# @!attribute [rw] iam_bindings
|
|
181
182
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::IamBinding>]
|
|
182
|
-
# Represents IAM bindings associated with the
|
|
183
|
+
# Represents IAM bindings associated with the finding.
|
|
183
184
|
# @!attribute [rw] next_steps
|
|
184
185
|
# @return [::String]
|
|
185
|
-
#
|
|
186
|
+
# Steps to address the finding.
|
|
186
187
|
# @!attribute [rw] module_name
|
|
187
188
|
# @return [::String]
|
|
188
189
|
# Unique identifier of the module which generated the finding.
|
|
@@ -190,8 +191,8 @@ module Google
|
|
|
190
191
|
# folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885
|
|
191
192
|
# @!attribute [rw] containers
|
|
192
193
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::Container>]
|
|
193
|
-
# Containers associated with the finding.
|
|
194
|
-
#
|
|
194
|
+
# Containers associated with the finding. This field provides information for
|
|
195
|
+
# both Kubernetes and non-Kubernetes containers.
|
|
195
196
|
# @!attribute [rw] kubernetes
|
|
196
197
|
# @return [::Google::Cloud::SecurityCenter::V1::Kubernetes]
|
|
197
198
|
# Kubernetes resources associated with the finding.
|
|
@@ -201,9 +202,16 @@ module Google
|
|
|
201
202
|
# @!attribute [rw] files
|
|
202
203
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::File>]
|
|
203
204
|
# File associated with the finding.
|
|
205
|
+
# @!attribute [rw] cloud_dlp_inspection
|
|
206
|
+
# @return [::Google::Cloud::SecurityCenter::V1::CloudDlpInspection]
|
|
207
|
+
# Cloud Data Loss Prevention (Cloud DLP) inspection results that are
|
|
208
|
+
# associated with the finding.
|
|
209
|
+
# @!attribute [rw] cloud_dlp_data_profile
|
|
210
|
+
# @return [::Google::Cloud::SecurityCenter::V1::CloudDlpDataProfile]
|
|
211
|
+
# Cloud DLP data profile that is associated with the finding.
|
|
204
212
|
# @!attribute [rw] kernel_rootkit
|
|
205
213
|
# @return [::Google::Cloud::SecurityCenter::V1::KernelRootkit]
|
|
206
|
-
#
|
|
214
|
+
# Signature of the kernel rootkit.
|
|
207
215
|
class Finding
|
|
208
216
|
include ::Google::Protobuf::MessageExts
|
|
209
217
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -259,7 +267,8 @@ module Google
|
|
|
259
267
|
# exploitable, and results in the direct ability to execute arbitrary code,
|
|
260
268
|
# exfiltrate data, and otherwise gain additional access and privileges to
|
|
261
269
|
# cloud resources and workloads. Examples include publicly accessible
|
|
262
|
-
# unprotected user data
|
|
270
|
+
# unprotected user data and public SSH access with weak or no
|
|
271
|
+
# passwords.
|
|
263
272
|
#
|
|
264
273
|
# Threat:
|
|
265
274
|
# Indicates a threat that is able to access, modify, or delete data or
|
|
@@ -130,7 +130,7 @@ module Google
|
|
|
130
130
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
131
131
|
end
|
|
132
132
|
|
|
133
|
-
# Request message for creating
|
|
133
|
+
# Request message for creating Security Health Analytics custom modules.
|
|
134
134
|
# @!attribute [rw] parent
|
|
135
135
|
# @return [::String]
|
|
136
136
|
# Required. Resource name of the new custom module's parent. Its format is
|
|
@@ -185,7 +185,7 @@ module Google
|
|
|
185
185
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
186
186
|
end
|
|
187
187
|
|
|
188
|
-
# Request message for deleting
|
|
188
|
+
# Request message for deleting Security Health Analytics custom modules.
|
|
189
189
|
# @!attribute [rw] name
|
|
190
190
|
# @return [::String]
|
|
191
191
|
# Required. Name of the custom module to delete. Its format is
|
|
@@ -244,7 +244,7 @@ module Google
|
|
|
244
244
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
245
245
|
end
|
|
246
246
|
|
|
247
|
-
# Request message for getting effective
|
|
247
|
+
# Request message for getting effective Security Health Analytics custom
|
|
248
248
|
# modules.
|
|
249
249
|
# @!attribute [rw] name
|
|
250
250
|
# @return [::String]
|
|
@@ -258,7 +258,7 @@ module Google
|
|
|
258
258
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
259
259
|
end
|
|
260
260
|
|
|
261
|
-
# Request message for getting
|
|
261
|
+
# Request message for getting Security Health Analytics custom modules.
|
|
262
262
|
# @!attribute [rw] name
|
|
263
263
|
# @return [::String]
|
|
264
264
|
# Required. Name of the custom module to get. Its format is
|
|
@@ -625,7 +625,7 @@ module Google
|
|
|
625
625
|
end
|
|
626
626
|
end
|
|
627
627
|
|
|
628
|
-
# Request message for listing descendant
|
|
628
|
+
# Request message for listing descendant Security Health Analytics custom
|
|
629
629
|
# modules.
|
|
630
630
|
# @!attribute [rw] parent
|
|
631
631
|
# @return [::String]
|
|
@@ -645,7 +645,7 @@ module Google
|
|
|
645
645
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
646
646
|
end
|
|
647
647
|
|
|
648
|
-
# Response message for listing descendant
|
|
648
|
+
# Response message for listing descendant Security Health Analytics custom
|
|
649
649
|
# modules.
|
|
650
650
|
# @!attribute [rw] security_health_analytics_custom_modules
|
|
651
651
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::SecurityHealthAnalyticsCustomModule>]
|
|
@@ -730,7 +730,7 @@ module Google
|
|
|
730
730
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
731
731
|
end
|
|
732
732
|
|
|
733
|
-
# Request message for listing effective
|
|
733
|
+
# Request message for listing effective Security Health Analytics custom
|
|
734
734
|
# modules.
|
|
735
735
|
# @!attribute [rw] parent
|
|
736
736
|
# @return [::String]
|
|
@@ -750,7 +750,7 @@ module Google
|
|
|
750
750
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
751
751
|
end
|
|
752
752
|
|
|
753
|
-
# Response message for listing effective
|
|
753
|
+
# Response message for listing effective Security Health Analytics custom
|
|
754
754
|
# modules.
|
|
755
755
|
# @!attribute [rw] effective_security_health_analytics_custom_modules
|
|
756
756
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::EffectiveSecurityHealthAnalyticsCustomModule>]
|
|
@@ -764,7 +764,7 @@ module Google
|
|
|
764
764
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
765
765
|
end
|
|
766
766
|
|
|
767
|
-
# Request message for listing
|
|
767
|
+
# Request message for listing Security Health Analytics custom modules.
|
|
768
768
|
# @!attribute [rw] parent
|
|
769
769
|
# @return [::String]
|
|
770
770
|
# Required. Name of parent to list custom modules. Its format is
|
|
@@ -783,7 +783,7 @@ module Google
|
|
|
783
783
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
784
784
|
end
|
|
785
785
|
|
|
786
|
-
# Response message for listing
|
|
786
|
+
# Response message for listing Security Health Analytics custom modules.
|
|
787
787
|
# @!attribute [rw] security_health_analytics_custom_modules
|
|
788
788
|
# @return [::Array<::Google::Cloud::SecurityCenter::V1::SecurityHealthAnalyticsCustomModule>]
|
|
789
789
|
# Custom modules belonging to the requested parent.
|
|
@@ -1396,7 +1396,7 @@ module Google
|
|
|
1396
1396
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
1397
1397
|
end
|
|
1398
1398
|
|
|
1399
|
-
# Request message for updating
|
|
1399
|
+
# Request message for updating Security Health Analytics custom modules.
|
|
1400
1400
|
# @!attribute [rw] security_health_analytics_custom_module
|
|
1401
1401
|
# @return [::Google::Cloud::SecurityCenter::V1::SecurityHealthAnalyticsCustomModule]
|
|
1402
1402
|
# Required. The SecurityHealthAnalytics custom module to update.
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-security_center-v1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.28.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2023-04-
|
|
11
|
+
date: 2023-04-24 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -199,6 +199,8 @@ files:
|
|
|
199
199
|
- lib/google/cloud/securitycenter/v1/access_pb.rb
|
|
200
200
|
- lib/google/cloud/securitycenter/v1/asset_pb.rb
|
|
201
201
|
- lib/google/cloud/securitycenter/v1/bigquery_export_pb.rb
|
|
202
|
+
- lib/google/cloud/securitycenter/v1/cloud_dlp_data_profile_pb.rb
|
|
203
|
+
- lib/google/cloud/securitycenter/v1/cloud_dlp_inspection_pb.rb
|
|
202
204
|
- lib/google/cloud/securitycenter/v1/compliance_pb.rb
|
|
203
205
|
- lib/google/cloud/securitycenter/v1/connection_pb.rb
|
|
204
206
|
- lib/google/cloud/securitycenter/v1/contact_details_pb.rb
|
|
@@ -238,6 +240,8 @@ files:
|
|
|
238
240
|
- proto_docs/google/cloud/securitycenter/v1/access.rb
|
|
239
241
|
- proto_docs/google/cloud/securitycenter/v1/asset.rb
|
|
240
242
|
- proto_docs/google/cloud/securitycenter/v1/bigquery_export.rb
|
|
243
|
+
- proto_docs/google/cloud/securitycenter/v1/cloud_dlp_data_profile.rb
|
|
244
|
+
- proto_docs/google/cloud/securitycenter/v1/cloud_dlp_inspection.rb
|
|
241
245
|
- proto_docs/google/cloud/securitycenter/v1/compliance.rb
|
|
242
246
|
- proto_docs/google/cloud/securitycenter/v1/connection.rb
|
|
243
247
|
- proto_docs/google/cloud/securitycenter/v1/contact_details.rb
|