google-cloud-security_center-v1p1beta1 0.1.0 → 0.3.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (39) hide show
  1. checksums.yaml +4 -4
  2. data/AUTHENTICATION.md +6 -6
  3. data/README.md +1 -1
  4. data/lib/google/cloud/security_center/v1p1beta1.rb +1 -1
  5. data/lib/google/cloud/security_center/v1p1beta1/security_center.rb +1 -1
  6. data/lib/google/cloud/security_center/v1p1beta1/security_center/client.rb +554 -529
  7. data/lib/google/cloud/security_center/v1p1beta1/security_center/credentials.rb +1 -1
  8. data/lib/google/cloud/security_center/v1p1beta1/security_center/operations.rb +109 -103
  9. data/lib/google/cloud/security_center/v1p1beta1/security_center/paths.rb +16 -16
  10. data/lib/google/cloud/security_center/v1p1beta1/version.rb +1 -1
  11. data/lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb +2 -0
  12. data/lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb +27 -0
  13. data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb +0 -4
  14. data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_services_pb.rb +1 -3
  15. data/proto_docs/google/api/resource.rb +12 -12
  16. data/proto_docs/google/cloud/securitycenter/v1p1beta1/asset.rb +51 -48
  17. data/proto_docs/google/cloud/securitycenter/v1p1beta1/finding.rb +29 -29
  18. data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb +17 -16
  19. data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb +8 -5
  20. data/proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb +11 -11
  21. data/proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb +48 -0
  22. data/proto_docs/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response.rb +4 -4
  23. data/proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb +11 -11
  24. data/proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb +220 -204
  25. data/proto_docs/google/cloud/securitycenter/v1p1beta1/source.rb +7 -7
  26. data/proto_docs/google/iam/v1/iam_policy.rb +15 -15
  27. data/proto_docs/google/iam/v1/options.rb +3 -3
  28. data/proto_docs/google/iam/v1/policy.rb +26 -26
  29. data/proto_docs/google/longrunning/operations.rb +30 -30
  30. data/proto_docs/google/protobuf/any.rb +4 -4
  31. data/proto_docs/google/protobuf/duration.rb +4 -4
  32. data/proto_docs/google/protobuf/empty.rb +2 -2
  33. data/proto_docs/google/protobuf/field_mask.rb +3 -3
  34. data/proto_docs/google/protobuf/struct.rb +18 -18
  35. data/proto_docs/google/protobuf/timestamp.rb +4 -4
  36. data/proto_docs/google/rpc/status.rb +6 -6
  37. data/proto_docs/google/type/expr.rb +6 -6
  38. metadata +35 -6
  39. data/lib/google/cloud/common_resources_pb.rb +0 -15
@@ -21,41 +21,42 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center (Cloud SCC) notification configs.
24
+ # Security Command Center notification configs.
25
25
  #
26
- # A notification config is a Cloud SCC resource that contains the configuration
27
- # to send notifications for create/update events of findings, assets and etc.
26
+ # A notification config is a Security Command Center resource that contains the
27
+ # configuration to send notifications for create/update events of findings,
28
+ # assets and etc.
28
29
  # @!attribute [rw] name
29
- # @return [String]
30
+ # @return [::String]
30
31
  # The relative resource name of this notification config. See:
31
32
  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
32
33
  # Example:
33
34
  # "organizations/\\{organization_id}/notificationConfigs/notify_public_bucket".
34
35
  # @!attribute [rw] description
35
- # @return [String]
36
+ # @return [::String]
36
37
  # The description of the notification config (max of 1024 characters).
37
38
  # @!attribute [rw] event_type
38
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::EventType]
39
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::EventType]
39
40
  # The type of events the config is for, e.g. FINDING.
40
41
  # @!attribute [rw] pubsub_topic
41
- # @return [String]
42
- # The PubSub topic to send notifications to. Its format is
42
+ # @return [::String]
43
+ # The Pub/Sub topic to send notifications to. Its format is
43
44
  # "projects/[project_id]/topics/[topic]".
44
45
  # @!attribute [r] service_account
45
- # @return [String]
46
+ # @return [::String]
46
47
  # Output only. The service account that needs "pubsub.topics.publish"
47
- # permission to publish to the PubSub topic.
48
+ # permission to publish to the Pub/Sub topic.
48
49
  # @!attribute [rw] streaming_config
49
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
50
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
50
51
  # The config for triggering streaming-based notifications.
51
52
  class NotificationConfig
52
- include Google::Protobuf::MessageExts
53
- extend Google::Protobuf::MessageExts::ClassMethods
53
+ include ::Google::Protobuf::MessageExts
54
+ extend ::Google::Protobuf::MessageExts::ClassMethods
54
55
 
55
56
  # The config for streaming-based notifications, which send each event as soon
56
57
  # as it is detected.
57
58
  # @!attribute [rw] filter
58
- # @return [String]
59
+ # @return [::String]
59
60
  # Expression that defines the filter to apply across create/update events
60
61
  # of assets or findings as specified by the event type. The expression is a
61
62
  # list of zero or more restrictions combined via logical operators `AND`
@@ -78,8 +79,8 @@ module Google
78
79
  # * integer literals without quotes.
79
80
  # * boolean literals `true` and `false` without quotes.
80
81
  class StreamingConfig
81
- include Google::Protobuf::MessageExts
82
- extend Google::Protobuf::MessageExts::ClassMethods
82
+ include ::Google::Protobuf::MessageExts
83
+ extend ::Google::Protobuf::MessageExts::ClassMethods
83
84
  end
84
85
 
85
86
  # The type of events.
@@ -21,17 +21,20 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud SCC's Notification
24
+ # Security Command Center's Notification
25
25
  # @!attribute [rw] notification_config_name
26
- # @return [String]
26
+ # @return [::String]
27
27
  # Name of the notification config that generated current notification.
28
28
  # @!attribute [rw] finding
29
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
29
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
30
30
  # If it's a Finding based notification config, this field will be
31
31
  # populated.
32
+ # @!attribute [rw] resource
33
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Resource]
34
+ # The Cloud resource tied to the notification.
32
35
  class NotificationMessage
33
- include Google::Protobuf::MessageExts
34
- extend Google::Protobuf::MessageExts::ClassMethods
36
+ include ::Google::Protobuf::MessageExts
37
+ extend ::Google::Protobuf::MessageExts::ClassMethods
35
38
  end
36
39
  end
37
40
  end
@@ -21,37 +21,37 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # User specified settings that are attached to the Cloud Security Command
25
- # Center (Cloud SCC) organization.
24
+ # User specified settings that are attached to the Security Command
25
+ # Center organization.
26
26
  # @!attribute [rw] name
27
- # @return [String]
27
+ # @return [::String]
28
28
  # The relative resource name of the settings. See:
29
29
  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
30
30
  # Example:
31
31
  # "organizations/\\{organization_id}/organizationSettings".
32
32
  # @!attribute [rw] enable_asset_discovery
33
- # @return [Boolean]
33
+ # @return [::Boolean]
34
34
  # A flag that indicates if Asset Discovery should be enabled. If the flag is
35
35
  # set to `true`, then discovery of assets will occur. If it is set to `false,
36
36
  # all historical assets will remain, but discovery of future assets will not
37
37
  # occur.
38
38
  # @!attribute [rw] asset_discovery_config
39
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig]
39
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig]
40
40
  # The configuration used for Asset Discovery runs.
41
41
  class OrganizationSettings
42
- include Google::Protobuf::MessageExts
43
- extend Google::Protobuf::MessageExts::ClassMethods
42
+ include ::Google::Protobuf::MessageExts
43
+ extend ::Google::Protobuf::MessageExts::ClassMethods
44
44
 
45
45
  # The configuration used for Asset Discovery runs.
46
46
  # @!attribute [rw] project_ids
47
- # @return [Array<String>]
47
+ # @return [::Array<::String>]
48
48
  # The project ids to use for filtering asset discovery.
49
49
  # @!attribute [rw] inclusion_mode
50
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig::InclusionMode]
50
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig::InclusionMode]
51
51
  # The mode to use for filtering asset discovery.
52
52
  class AssetDiscoveryConfig
53
- include Google::Protobuf::MessageExts
54
- extend Google::Protobuf::MessageExts::ClassMethods
53
+ include ::Google::Protobuf::MessageExts
54
+ extend ::Google::Protobuf::MessageExts::ClassMethods
55
55
 
56
56
  # The mode of inclusion when running Asset Discovery.
57
57
  # Asset discovery can be limited by explicitly identifying projects to be
@@ -0,0 +1,48 @@
1
+ # frozen_string_literal: true
2
+
3
+ # Copyright 2020 Google LLC
4
+ #
5
+ # Licensed under the Apache License, Version 2.0 (the "License");
6
+ # you may not use this file except in compliance with the License.
7
+ # You may obtain a copy of the License at
8
+ #
9
+ # https://www.apache.org/licenses/LICENSE-2.0
10
+ #
11
+ # Unless required by applicable law or agreed to in writing, software
12
+ # distributed under the License is distributed on an "AS IS" BASIS,
13
+ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
+ # See the License for the specific language governing permissions and
15
+ # limitations under the License.
16
+
17
+ # Auto-generated by gapic-generator-ruby. DO NOT EDIT!
18
+
19
+
20
+ module Google
21
+ module Cloud
22
+ module SecurityCenter
23
+ module V1p1beta1
24
+ # Information related to the Google Cloud resource.
25
+ # @!attribute [rw] name
26
+ # @return [::String]
27
+ # The full resource name of the resource. See:
28
+ # https://cloud.google.com/apis/design/resource_names#full_resource_name
29
+ # @!attribute [rw] project
30
+ # @return [::String]
31
+ # The full resource name of project that the resource belongs to.
32
+ # @!attribute [rw] project_display_name
33
+ # @return [::String]
34
+ # The human readable name of project that the resource belongs to.
35
+ # @!attribute [rw] parent
36
+ # @return [::String]
37
+ # The full resource name of resource's parent.
38
+ # @!attribute [rw] parent_display_name
39
+ # @return [::String]
40
+ # The human readable name of resource's parent.
41
+ class Resource
42
+ include ::Google::Protobuf::MessageExts
43
+ extend ::Google::Protobuf::MessageExts::ClassMethods
44
+ end
45
+ end
46
+ end
47
+ end
48
+ end
@@ -23,14 +23,14 @@ module Google
23
23
  module V1p1beta1
24
24
  # Response of asset discovery run
25
25
  # @!attribute [rw] state
26
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::RunAssetDiscoveryResponse::State]
26
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::RunAssetDiscoveryResponse::State]
27
27
  # The state of an asset discovery run.
28
28
  # @!attribute [rw] duration
29
- # @return [Google::Protobuf::Duration]
29
+ # @return [::Google::Protobuf::Duration]
30
30
  # The duration between asset discovery run start and end
31
31
  class RunAssetDiscoveryResponse
32
- include Google::Protobuf::MessageExts
33
- extend Google::Protobuf::MessageExts::ClassMethods
32
+ include ::Google::Protobuf::MessageExts
33
+ extend ::Google::Protobuf::MessageExts::ClassMethods
34
34
 
35
35
  # The state of an asset discovery run.
36
36
  module State
@@ -21,19 +21,19 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # User specified security marks that are attached to the parent Cloud Security
25
- # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
26
- # SCC organization -- they can be modified and viewed by all users who have
24
+ # User specified security marks that are attached to the parent Security
25
+ # Command Center resource. Security marks are scoped within a Security Command
26
+ # Center organization -- they can be modified and viewed by all users who have
27
27
  # proper permissions on the organization.
28
28
  # @!attribute [rw] name
29
- # @return [String]
29
+ # @return [::String]
30
30
  # The relative resource name of the SecurityMarks. See:
31
31
  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
32
32
  # Examples:
33
33
  # "organizations/\\{organization_id}/assets/\\{asset_id}/securityMarks"
34
34
  # "organizations/\\{organization_id}/sources/\\{source_id}/findings/\\{finding_id}/securityMarks".
35
35
  # @!attribute [rw] marks
36
- # @return [Google::Protobuf::Map{String => String}]
36
+ # @return [::Google::Protobuf::Map{::String => ::String}]
37
37
  # Mutable user specified security marks belonging to the parent resource.
38
38
  # Constraints are as follows:
39
39
  #
@@ -43,16 +43,16 @@ module Google
43
43
  # * Values have leading and trailing whitespace trimmed, remaining
44
44
  # characters must be between 1 - 4096 characters (inclusive)
45
45
  class SecurityMarks
46
- include Google::Protobuf::MessageExts
47
- extend Google::Protobuf::MessageExts::ClassMethods
46
+ include ::Google::Protobuf::MessageExts
47
+ extend ::Google::Protobuf::MessageExts::ClassMethods
48
48
 
49
49
  # @!attribute [rw] key
50
- # @return [String]
50
+ # @return [::String]
51
51
  # @!attribute [rw] value
52
- # @return [String]
52
+ # @return [::String]
53
53
  class MarksEntry
54
- include Google::Protobuf::MessageExts
55
- extend Google::Protobuf::MessageExts::ClassMethods
54
+ include ::Google::Protobuf::MessageExts
55
+ extend ::Google::Protobuf::MessageExts::ClassMethods
56
56
  end
57
57
  end
58
58
  end
@@ -23,105 +23,105 @@ module Google
23
23
  module V1p1beta1
24
24
  # Request message for creating a finding.
25
25
  # @!attribute [rw] parent
26
- # @return [String]
26
+ # @return [::String]
27
27
  # Required. Resource name of the new finding's parent. Its format should be
28
28
  # "organizations/[organization_id]/sources/[source_id]".
29
29
  # @!attribute [rw] finding_id
30
- # @return [String]
30
+ # @return [::String]
31
31
  # Required. Unique identifier provided by the client within the parent scope.
32
32
  # It must be alphanumeric and less than or equal to 32 characters and
33
33
  # greater than 0 characters in length.
34
34
  # @!attribute [rw] finding
35
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
35
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
36
36
  # Required. The Finding being created. The name and security_marks will be
37
37
  # ignored as they are both output only fields on this resource.
38
38
  class CreateFindingRequest
39
- include Google::Protobuf::MessageExts
40
- extend Google::Protobuf::MessageExts::ClassMethods
39
+ include ::Google::Protobuf::MessageExts
40
+ extend ::Google::Protobuf::MessageExts::ClassMethods
41
41
  end
42
42
 
43
43
  # Request message for creating a notification config.
44
44
  # @!attribute [rw] parent
45
- # @return [String]
45
+ # @return [::String]
46
46
  # Required. Resource name of the new notification config's parent. Its format
47
47
  # is "organizations/[organization_id]".
48
48
  # @!attribute [rw] config_id
49
- # @return [String]
49
+ # @return [::String]
50
50
  # Required.
51
51
  # Unique identifier provided by the client within the parent scope.
52
52
  # It must be between 1 and 128 characters, and contains alphanumeric
53
53
  # characters, underscores or hyphens only.
54
54
  # @!attribute [rw] notification_config
55
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
55
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
56
56
  # Required. The notification config being created. The name and the service
57
57
  # account will be ignored as they are both output only fields on this
58
58
  # resource.
59
59
  class CreateNotificationConfigRequest
60
- include Google::Protobuf::MessageExts
61
- extend Google::Protobuf::MessageExts::ClassMethods
60
+ include ::Google::Protobuf::MessageExts
61
+ extend ::Google::Protobuf::MessageExts::ClassMethods
62
62
  end
63
63
 
64
64
  # Request message for creating a source.
65
65
  # @!attribute [rw] parent
66
- # @return [String]
66
+ # @return [::String]
67
67
  # Required. Resource name of the new source's parent. Its format should be
68
68
  # "organizations/[organization_id]".
69
69
  # @!attribute [rw] source
70
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Source]
70
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Source]
71
71
  # Required. The Source being created, only the display_name and description
72
72
  # will be used. All other fields will be ignored.
73
73
  class CreateSourceRequest
74
- include Google::Protobuf::MessageExts
75
- extend Google::Protobuf::MessageExts::ClassMethods
74
+ include ::Google::Protobuf::MessageExts
75
+ extend ::Google::Protobuf::MessageExts::ClassMethods
76
76
  end
77
77
 
78
78
  # Request message for deleting a notification config.
79
79
  # @!attribute [rw] name
80
- # @return [String]
80
+ # @return [::String]
81
81
  # Required. Name of the notification config to delete. Its format is
82
82
  # "organizations/[organization_id]/notificationConfigs/[config_id]".
83
83
  class DeleteNotificationConfigRequest
84
- include Google::Protobuf::MessageExts
85
- extend Google::Protobuf::MessageExts::ClassMethods
84
+ include ::Google::Protobuf::MessageExts
85
+ extend ::Google::Protobuf::MessageExts::ClassMethods
86
86
  end
87
87
 
88
88
  # Request message for getting a notification config.
89
89
  # @!attribute [rw] name
90
- # @return [String]
90
+ # @return [::String]
91
91
  # Required. Name of the notification config to get. Its format is
92
92
  # "organizations/[organization_id]/notificationConfigs/[config_id]".
93
93
  class GetNotificationConfigRequest
94
- include Google::Protobuf::MessageExts
95
- extend Google::Protobuf::MessageExts::ClassMethods
94
+ include ::Google::Protobuf::MessageExts
95
+ extend ::Google::Protobuf::MessageExts::ClassMethods
96
96
  end
97
97
 
98
98
  # Request message for getting organization settings.
99
99
  # @!attribute [rw] name
100
- # @return [String]
100
+ # @return [::String]
101
101
  # Required. Name of the organization to get organization settings for. Its
102
102
  # format is "organizations/[organization_id]/organizationSettings".
103
103
  class GetOrganizationSettingsRequest
104
- include Google::Protobuf::MessageExts
105
- extend Google::Protobuf::MessageExts::ClassMethods
104
+ include ::Google::Protobuf::MessageExts
105
+ extend ::Google::Protobuf::MessageExts::ClassMethods
106
106
  end
107
107
 
108
108
  # Request message for getting a source.
109
109
  # @!attribute [rw] name
110
- # @return [String]
110
+ # @return [::String]
111
111
  # Required. Relative resource name of the source. Its format is
112
112
  # "organizations/[organization_id]/source/[source_id]".
113
113
  class GetSourceRequest
114
- include Google::Protobuf::MessageExts
115
- extend Google::Protobuf::MessageExts::ClassMethods
114
+ include ::Google::Protobuf::MessageExts
115
+ extend ::Google::Protobuf::MessageExts::ClassMethods
116
116
  end
117
117
 
118
118
  # Request message for grouping by assets.
119
119
  # @!attribute [rw] parent
120
- # @return [String]
120
+ # @return [::String]
121
121
  # Required. Name of the organization to groupBy. Its format is
122
122
  # "organizations/[organization_id]".
123
123
  # @!attribute [rw] filter
124
- # @return [String]
124
+ # @return [::String]
125
125
  # Expression that defines the filter to apply across assets.
126
126
  # The expression is a list of zero or more restrictions combined via logical
127
127
  # operators `AND` and `OR`.
@@ -155,15 +155,15 @@ module Google
155
155
  #
156
156
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
157
157
  # Examples:
158
- # "update_time = \"2019-06-10T16:07:18-07:00\""
159
- # "update_time = 1560208038000"
158
+ # `update_time = "2019-06-10T16:07:18-07:00"`
159
+ # `update_time = 1560208038000`
160
160
  #
161
161
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
162
162
  #
163
163
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
164
164
  # Examples:
165
- # "create_time = \"2019-06-10T16:07:18-07:00\""
166
- # "create_time = 1560208038000"
165
+ # `create_time = "2019-06-10T16:07:18-07:00"`
166
+ # `create_time = 1560208038000`
167
167
  #
168
168
  # * iam_policy.policy_blob: `=`, `:`
169
169
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -178,8 +178,14 @@ module Google
178
178
  # * security_center_properties.resource_owners: `=`, `:`
179
179
  #
180
180
  # For example, `resource_properties.size = 100` is a valid filter string.
181
+ #
182
+ # Use a partial match on the empty string to filter based on a property
183
+ # existing: `resource_properties.my_property : ""`
184
+ #
185
+ # Use a negated partial match on the empty string to filter based on a
186
+ # property not existing: `-resource_properties.my_property : ""`
181
187
  # @!attribute [rw] group_by
182
- # @return [String]
188
+ # @return [::String]
183
189
  # Required. Expression that defines what assets fields to use for grouping.
184
190
  # The string value should follow SQL syntax: comma separated list of fields.
185
191
  # For example:
@@ -199,7 +205,7 @@ module Google
199
205
  # * security_center_properties.resource_project_display_name
200
206
  # * security_center_properties.resource_parent_display_name
201
207
  # @!attribute [rw] compare_duration
202
- # @return [Google::Protobuf::Duration]
208
+ # @return [::Google::Protobuf::Duration]
203
209
  # When compare_duration is set, the GroupResult's "state_change" property is
204
210
  # updated to indicate whether the asset was added, removed, or remained
205
211
  # present during the compare_duration period of time that precedes the
@@ -228,60 +234,55 @@ module Google
228
234
  # If this field is set then `state_change` must be a specified field in
229
235
  # `group_by`.
230
236
  # @!attribute [rw] read_time
231
- # @return [Google::Protobuf::Timestamp]
237
+ # @return [::Google::Protobuf::Timestamp]
232
238
  # Time used as a reference point when filtering assets. The filter is limited
233
239
  # to assets existing at the supplied time and their values are those at that
234
240
  # specific time. Absence of this field will default to the API's version of
235
241
  # NOW.
236
- # @!attribute [rw] having
237
- # @return [String]
238
- # Filter that specifies what fields to further filter on *after* the query
239
- # filter has been executed. Currently only `state_change` is supported and
240
- # requires compare_duration to be specified.
241
242
  # @!attribute [rw] page_token
242
- # @return [String]
243
+ # @return [::String]
243
244
  # The value returned by the last `GroupAssetsResponse`; indicates
244
245
  # that this is a continuation of a prior `GroupAssets` call, and that the
245
246
  # system should return the next page of data.
246
247
  # @!attribute [rw] page_size
247
- # @return [Integer]
248
+ # @return [::Integer]
248
249
  # The maximum number of results to return in a single response. Default is
249
250
  # 10, minimum is 1, maximum is 1000.
250
251
  class GroupAssetsRequest
251
- include Google::Protobuf::MessageExts
252
- extend Google::Protobuf::MessageExts::ClassMethods
252
+ include ::Google::Protobuf::MessageExts
253
+ extend ::Google::Protobuf::MessageExts::ClassMethods
253
254
  end
254
255
 
255
256
  # Response message for grouping by assets.
256
257
  # @!attribute [rw] group_by_results
257
- # @return [Array<Google::Cloud::SecurityCenter::V1p1beta1::GroupResult>]
258
+ # @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::GroupResult>]
258
259
  # Group results. There exists an element for each existing unique
259
260
  # combination of property/values. The element contains a count for the number
260
261
  # of times those specific property/values appear.
261
262
  # @!attribute [rw] read_time
262
- # @return [Google::Protobuf::Timestamp]
263
+ # @return [::Google::Protobuf::Timestamp]
263
264
  # Time used for executing the groupBy request.
264
265
  # @!attribute [rw] next_page_token
265
- # @return [String]
266
+ # @return [::String]
266
267
  # Token to retrieve the next page of results, or empty if there are no more
267
268
  # results.
268
269
  # @!attribute [rw] total_size
269
- # @return [Integer]
270
+ # @return [::Integer]
270
271
  # The total number of results matching the query.
271
272
  class GroupAssetsResponse
272
- include Google::Protobuf::MessageExts
273
- extend Google::Protobuf::MessageExts::ClassMethods
273
+ include ::Google::Protobuf::MessageExts
274
+ extend ::Google::Protobuf::MessageExts::ClassMethods
274
275
  end
275
276
 
276
277
  # Request message for grouping by findings.
277
278
  # @!attribute [rw] parent
278
- # @return [String]
279
+ # @return [::String]
279
280
  # Required. Name of the source to groupBy. Its format is
280
281
  # "organizations/[organization_id]/sources/[source_id]". To groupBy across
281
282
  # all sources provide a source_id of `-`. For example:
282
283
  # organizations/\\{organization_id}/sources/-
283
284
  # @!attribute [rw] filter
284
- # @return [String]
285
+ # @return [::String]
285
286
  # Expression that defines the filter to apply across findings.
286
287
  # The expression is a list of one or more restrictions combined via logical
287
288
  # operators `AND` and `OR`.
@@ -318,15 +319,21 @@ module Google
318
319
  #
319
320
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
320
321
  # Examples:
321
- # "event_time = \"2019-06-10T16:07:18-07:00\""
322
- # "event_time = 1560208038000"
322
+ # `event_time = "2019-06-10T16:07:18-07:00"`
323
+ # `event_time = 1560208038000`
323
324
  #
324
325
  # * security_marks.marks: `=`, `:`
325
326
  # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
326
327
  #
327
328
  # For example, `source_properties.size = 100` is a valid filter string.
329
+ #
330
+ # Use a partial match on the empty string to filter based on a property
331
+ # existing: `source_properties.my_property : ""`
332
+ #
333
+ # Use a negated partial match on the empty string to filter based on a
334
+ # property not existing: `-source_properties.my_property : ""`
328
335
  # @!attribute [rw] group_by
329
- # @return [String]
336
+ # @return [::String]
330
337
  # Required. Expression that defines what assets fields to use for grouping
331
338
  # (including `state_change`). The string value should follow SQL syntax:
332
339
  # comma separated list of fields. For example: "parent,resource_name".
@@ -342,13 +349,13 @@ module Google
342
349
  #
343
350
  # * state_change
344
351
  # @!attribute [rw] read_time
345
- # @return [Google::Protobuf::Timestamp]
352
+ # @return [::Google::Protobuf::Timestamp]
346
353
  # Time used as a reference point when filtering findings. The filter is
347
354
  # limited to findings existing at the supplied time and their values are
348
355
  # those at that specific time. Absence of this field will default to the
349
356
  # API's version of NOW.
350
357
  # @!attribute [rw] compare_duration
351
- # @return [Google::Protobuf::Duration]
358
+ # @return [::Google::Protobuf::Duration]
352
359
  # When compare_duration is set, the GroupResult's "state_change" attribute is
353
360
  # updated to indicate whether the finding had its state changed, the
354
361
  # finding's state remained unchanged, or if the finding was added during the
@@ -362,12 +369,18 @@ module Google
362
369
  #
363
370
  # Possible "state_change" values when compare_duration is specified:
364
371
  #
365
- # * "CHANGED": indicates that the finding was present at the start of
366
- # compare_duration, but changed its state at read_time.
367
- # * "UNCHANGED": indicates that the finding was present at the start of
368
- # compare_duration and did not change state at read_time.
369
- # * "ADDED": indicates that the finding was not present at the start
370
- # of compare_duration, but was present at read_time.
372
+ # * "CHANGED": indicates that the finding was present and matched the given
373
+ # filter at the start of compare_duration, but changed its
374
+ # state at read_time.
375
+ # * "UNCHANGED": indicates that the finding was present and matched the given
376
+ # filter at the start of compare_duration and did not change
377
+ # state at read_time.
378
+ # * "ADDED": indicates that the finding did not match the given filter or
379
+ # was not present at the start of compare_duration, but was
380
+ # present at read_time.
381
+ # * "REMOVED": indicates that the finding was present and matched the
382
+ # filter at the start of compare_duration, but did not match
383
+ # the filter at read_time.
371
384
  #
372
385
  # If compare_duration is not specified, then the only possible state_change
373
386
  # is "UNUSED", which will be the state_change set for all findings present
@@ -375,138 +388,133 @@ module Google
375
388
  #
376
389
  # If this field is set then `state_change` must be a specified field in
377
390
  # `group_by`.
378
- # @!attribute [rw] having
379
- # @return [String]
380
- # Filter that specifies what fields to further filter on *after* the query
381
- # filter has been executed. Currently only `finding.state` and `state_change`
382
- # are supported and requires compare_duration to be specified.
383
391
  # @!attribute [rw] page_token
384
- # @return [String]
392
+ # @return [::String]
385
393
  # The value returned by the last `GroupFindingsResponse`; indicates
386
394
  # that this is a continuation of a prior `GroupFindings` call, and
387
395
  # that the system should return the next page of data.
388
396
  # @!attribute [rw] page_size
389
- # @return [Integer]
397
+ # @return [::Integer]
390
398
  # The maximum number of results to return in a single response. Default is
391
399
  # 10, minimum is 1, maximum is 1000.
392
400
  class GroupFindingsRequest
393
- include Google::Protobuf::MessageExts
394
- extend Google::Protobuf::MessageExts::ClassMethods
401
+ include ::Google::Protobuf::MessageExts
402
+ extend ::Google::Protobuf::MessageExts::ClassMethods
395
403
  end
396
404
 
397
405
  # Response message for group by findings.
398
406
  # @!attribute [rw] group_by_results
399
- # @return [Array<Google::Cloud::SecurityCenter::V1p1beta1::GroupResult>]
407
+ # @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::GroupResult>]
400
408
  # Group results. There exists an element for each existing unique
401
409
  # combination of property/values. The element contains a count for the number
402
410
  # of times those specific property/values appear.
403
411
  # @!attribute [rw] read_time
404
- # @return [Google::Protobuf::Timestamp]
412
+ # @return [::Google::Protobuf::Timestamp]
405
413
  # Time used for executing the groupBy request.
406
414
  # @!attribute [rw] next_page_token
407
- # @return [String]
415
+ # @return [::String]
408
416
  # Token to retrieve the next page of results, or empty if there are no more
409
417
  # results.
410
418
  # @!attribute [rw] total_size
411
- # @return [Integer]
419
+ # @return [::Integer]
412
420
  # The total number of results matching the query.
413
421
  class GroupFindingsResponse
414
- include Google::Protobuf::MessageExts
415
- extend Google::Protobuf::MessageExts::ClassMethods
422
+ include ::Google::Protobuf::MessageExts
423
+ extend ::Google::Protobuf::MessageExts::ClassMethods
416
424
  end
417
425
 
418
426
  # Result containing the properties and count of a groupBy request.
419
427
  # @!attribute [rw] properties
420
- # @return [Google::Protobuf::Map{String => Google::Protobuf::Value}]
428
+ # @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
421
429
  # Properties matching the groupBy fields in the request.
422
430
  # @!attribute [rw] count
423
- # @return [Integer]
431
+ # @return [::Integer]
424
432
  # Total count of resources for the given properties.
425
433
  class GroupResult
426
- include Google::Protobuf::MessageExts
427
- extend Google::Protobuf::MessageExts::ClassMethods
434
+ include ::Google::Protobuf::MessageExts
435
+ extend ::Google::Protobuf::MessageExts::ClassMethods
428
436
 
429
437
  # @!attribute [rw] key
430
- # @return [String]
438
+ # @return [::String]
431
439
  # @!attribute [rw] value
432
- # @return [Google::Protobuf::Value]
440
+ # @return [::Google::Protobuf::Value]
433
441
  class PropertiesEntry
434
- include Google::Protobuf::MessageExts
435
- extend Google::Protobuf::MessageExts::ClassMethods
442
+ include ::Google::Protobuf::MessageExts
443
+ extend ::Google::Protobuf::MessageExts::ClassMethods
436
444
  end
437
445
  end
438
446
 
439
447
  # Request message for listing notification configs.
440
448
  # @!attribute [rw] parent
441
- # @return [String]
449
+ # @return [::String]
442
450
  # Required. Name of the organization to list notification configs.
443
451
  # Its format is "organizations/[organization_id]".
444
452
  # @!attribute [rw] page_token
445
- # @return [String]
453
+ # @return [::String]
446
454
  # The value returned by the last `ListNotificationConfigsResponse`; indicates
447
455
  # that this is a continuation of a prior `ListNotificationConfigs` call, and
448
456
  # that the system should return the next page of data.
449
457
  # @!attribute [rw] page_size
450
- # @return [Integer]
458
+ # @return [::Integer]
451
459
  # The maximum number of results to return in a single response. Default is
452
460
  # 10, minimum is 1, maximum is 1000.
453
461
  class ListNotificationConfigsRequest
454
- include Google::Protobuf::MessageExts
455
- extend Google::Protobuf::MessageExts::ClassMethods
462
+ include ::Google::Protobuf::MessageExts
463
+ extend ::Google::Protobuf::MessageExts::ClassMethods
456
464
  end
457
465
 
458
466
  # Response message for listing notification configs.
459
467
  # @!attribute [rw] notification_configs
460
- # @return [Array<Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig>]
468
+ # @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig>]
461
469
  # Notification configs belonging to the requested parent.
462
470
  # @!attribute [rw] next_page_token
463
- # @return [String]
471
+ # @return [::String]
464
472
  # Token to retrieve the next page of results, or empty if there are no more
465
473
  # results.
466
474
  class ListNotificationConfigsResponse
467
- include Google::Protobuf::MessageExts
468
- extend Google::Protobuf::MessageExts::ClassMethods
475
+ include ::Google::Protobuf::MessageExts
476
+ extend ::Google::Protobuf::MessageExts::ClassMethods
469
477
  end
470
478
 
471
479
  # Request message for listing sources.
472
480
  # @!attribute [rw] parent
473
- # @return [String]
481
+ # @return [::String]
474
482
  # Required. Resource name of the parent of sources to list. Its format should
475
483
  # be "organizations/[organization_id]".
476
484
  # @!attribute [rw] page_token
477
- # @return [String]
485
+ # @return [::String]
478
486
  # The value returned by the last `ListSourcesResponse`; indicates
479
487
  # that this is a continuation of a prior `ListSources` call, and
480
488
  # that the system should return the next page of data.
481
489
  # @!attribute [rw] page_size
482
- # @return [Integer]
490
+ # @return [::Integer]
483
491
  # The maximum number of results to return in a single response. Default is
484
492
  # 10, minimum is 1, maximum is 1000.
485
493
  class ListSourcesRequest
486
- include Google::Protobuf::MessageExts
487
- extend Google::Protobuf::MessageExts::ClassMethods
494
+ include ::Google::Protobuf::MessageExts
495
+ extend ::Google::Protobuf::MessageExts::ClassMethods
488
496
  end
489
497
 
490
498
  # Response message for listing sources.
491
499
  # @!attribute [rw] sources
492
- # @return [Array<Google::Cloud::SecurityCenter::V1p1beta1::Source>]
500
+ # @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::Source>]
493
501
  # Sources belonging to the requested parent.
494
502
  # @!attribute [rw] next_page_token
495
- # @return [String]
503
+ # @return [::String]
496
504
  # Token to retrieve the next page of results, or empty if there are no more
497
505
  # results.
498
506
  class ListSourcesResponse
499
- include Google::Protobuf::MessageExts
500
- extend Google::Protobuf::MessageExts::ClassMethods
507
+ include ::Google::Protobuf::MessageExts
508
+ extend ::Google::Protobuf::MessageExts::ClassMethods
501
509
  end
502
510
 
503
511
  # Request message for listing assets.
504
512
  # @!attribute [rw] parent
505
- # @return [String]
513
+ # @return [::String]
506
514
  # Required. Name of the organization assets should belong to. Its format is
507
515
  # "organizations/[organization_id]".
508
516
  # @!attribute [rw] filter
509
- # @return [String]
517
+ # @return [::String]
510
518
  # Expression that defines the filter to apply across assets.
511
519
  # The expression is a list of zero or more restrictions combined via logical
512
520
  # operators `AND` and `OR`.
@@ -540,15 +548,15 @@ module Google
540
548
  #
541
549
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
542
550
  # Examples:
543
- # "update_time = \"2019-06-10T16:07:18-07:00\""
544
- # "update_time = 1560208038000"
551
+ # `update_time = "2019-06-10T16:07:18-07:00"`
552
+ # `update_time = 1560208038000`
545
553
  #
546
554
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
547
555
  #
548
556
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
549
557
  # Examples:
550
- # "create_time = \"2019-06-10T16:07:18-07:00\""
551
- # "create_time = 1560208038000"
558
+ # `create_time = "2019-06-10T16:07:18-07:00"`
559
+ # `create_time = 1560208038000`
552
560
  #
553
561
  # * iam_policy.policy_blob: `=`, `:`
554
562
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -563,8 +571,14 @@ module Google
563
571
  # * security_center_properties.resource_owners: `=`, `:`
564
572
  #
565
573
  # For example, `resource_properties.size = 100` is a valid filter string.
574
+ #
575
+ # Use a partial match on the empty string to filter based on a property
576
+ # existing: `resource_properties.my_property : ""`
577
+ #
578
+ # Use a negated partial match on the empty string to filter based on a
579
+ # property not existing: `-resource_properties.my_property : ""`
566
580
  # @!attribute [rw] order_by
567
- # @return [String]
581
+ # @return [::String]
568
582
  # Expression that defines what fields and order to use for sorting. The
569
583
  # string value should follow SQL syntax: comma separated list of fields. For
570
584
  # example: "name,resource_properties.a_property". The default sorting order
@@ -587,13 +601,13 @@ module Google
587
601
  # security_center_properties.resource_project_display_name
588
602
  # security_center_properties.resource_type
589
603
  # @!attribute [rw] read_time
590
- # @return [Google::Protobuf::Timestamp]
604
+ # @return [::Google::Protobuf::Timestamp]
591
605
  # Time used as a reference point when filtering assets. The filter is limited
592
606
  # to assets existing at the supplied time and their values are those at that
593
607
  # specific time. Absence of this field will default to the API's version of
594
608
  # NOW.
595
609
  # @!attribute [rw] compare_duration
596
- # @return [Google::Protobuf::Duration]
610
+ # @return [::Google::Protobuf::Duration]
597
611
  # When compare_duration is set, the ListAssetsResult's "state_change"
598
612
  # attribute is updated to indicate whether the asset was added, removed, or
599
613
  # remained present during the compare_duration period of time that precedes
@@ -618,59 +632,54 @@ module Google
618
632
  # If compare_duration is not specified, then the only possible state_change
619
633
  # is "UNUSED", which will be the state_change set for all assets present at
620
634
  # read_time.
621
- # @!attribute [rw] having
622
- # @return [String]
623
- # Filter that specifies what fields to further filter on *after* the query
624
- # filter has been executed. Currently only `state_change` is supported and
625
- # requires compare_duration to be specified.
626
635
  # @!attribute [rw] field_mask
627
- # @return [Google::Protobuf::FieldMask]
636
+ # @return [::Google::Protobuf::FieldMask]
628
637
  # Optional.
629
638
  # A field mask to specify the ListAssetsResult fields to be listed in the
630
639
  # response.
631
640
  # An empty field mask will list all fields.
632
641
  # @!attribute [rw] page_token
633
- # @return [String]
642
+ # @return [::String]
634
643
  # The value returned by the last `ListAssetsResponse`; indicates
635
644
  # that this is a continuation of a prior `ListAssets` call, and
636
645
  # that the system should return the next page of data.
637
646
  # @!attribute [rw] page_size
638
- # @return [Integer]
647
+ # @return [::Integer]
639
648
  # The maximum number of results to return in a single response. Default is
640
649
  # 10, minimum is 1, maximum is 1000.
641
650
  class ListAssetsRequest
642
- include Google::Protobuf::MessageExts
643
- extend Google::Protobuf::MessageExts::ClassMethods
651
+ include ::Google::Protobuf::MessageExts
652
+ extend ::Google::Protobuf::MessageExts::ClassMethods
644
653
  end
645
654
 
646
655
  # Response message for listing assets.
647
656
  # @!attribute [rw] list_assets_results
648
- # @return [Array<Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult>]
657
+ # @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult>]
649
658
  # Assets matching the list request.
650
659
  # @!attribute [rw] read_time
651
- # @return [Google::Protobuf::Timestamp]
660
+ # @return [::Google::Protobuf::Timestamp]
652
661
  # Time used for executing the list request.
653
662
  # @!attribute [rw] next_page_token
654
- # @return [String]
663
+ # @return [::String]
655
664
  # Token to retrieve the next page of results, or empty if there are no more
656
665
  # results.
657
666
  # @!attribute [rw] total_size
658
- # @return [Integer]
667
+ # @return [::Integer]
659
668
  # The total number of assets matching the query.
660
669
  class ListAssetsResponse
661
- include Google::Protobuf::MessageExts
662
- extend Google::Protobuf::MessageExts::ClassMethods
670
+ include ::Google::Protobuf::MessageExts
671
+ extend ::Google::Protobuf::MessageExts::ClassMethods
663
672
 
664
673
  # Result containing the Asset and its State.
665
674
  # @!attribute [rw] asset
666
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Asset]
675
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset]
667
676
  # Asset matching the search request.
668
677
  # @!attribute [rw] state_change
669
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult::StateChange]
678
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult::StateChange]
670
679
  # State change of the asset between the points in time.
671
680
  class ListAssetsResult
672
- include Google::Protobuf::MessageExts
673
- extend Google::Protobuf::MessageExts::ClassMethods
681
+ include ::Google::Protobuf::MessageExts
682
+ extend ::Google::Protobuf::MessageExts::ClassMethods
674
683
 
675
684
  # The change in state of the asset.
676
685
  #
@@ -696,13 +705,13 @@ module Google
696
705
 
697
706
  # Request message for listing findings.
698
707
  # @!attribute [rw] parent
699
- # @return [String]
708
+ # @return [::String]
700
709
  # Required. Name of the source the findings belong to. Its format is
701
710
  # "organizations/[organization_id]/sources/[source_id]". To list across all
702
711
  # sources provide a source_id of `-`. For example:
703
712
  # organizations/\\{organization_id}/sources/-
704
713
  # @!attribute [rw] filter
705
- # @return [String]
714
+ # @return [::String]
706
715
  # Expression that defines the filter to apply across findings.
707
716
  # The expression is a list of one or more restrictions combined via logical
708
717
  # operators `AND` and `OR`.
@@ -739,15 +748,21 @@ module Google
739
748
  #
740
749
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
741
750
  # Examples:
742
- # "event_time = \"2019-06-10T16:07:18-07:00\""
743
- # "event_time = 1560208038000"
751
+ # `event_time = "2019-06-10T16:07:18-07:00"`
752
+ # `event_time = 1560208038000`
744
753
  #
745
754
  # security_marks.marks: `=`, `:`
746
755
  # source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
747
756
  #
748
757
  # For example, `source_properties.size = 100` is a valid filter string.
758
+ #
759
+ # Use a partial match on the empty string to filter based on a property
760
+ # existing: `source_properties.my_property : ""`
761
+ #
762
+ # Use a negated partial match on the empty string to filter based on a
763
+ # property not existing: `-source_properties.my_property : ""`
749
764
  # @!attribute [rw] order_by
750
- # @return [String]
765
+ # @return [::String]
751
766
  # Expression that defines what fields and order to use for sorting. The
752
767
  # string value should follow SQL syntax: comma separated list of fields. For
753
768
  # example: "name,resource_properties.a_property". The default sorting order
@@ -767,13 +782,13 @@ module Google
767
782
  # source_properties
768
783
  # security_marks.marks
769
784
  # @!attribute [rw] read_time
770
- # @return [Google::Protobuf::Timestamp]
785
+ # @return [::Google::Protobuf::Timestamp]
771
786
  # Time used as a reference point when filtering findings. The filter is
772
787
  # limited to findings existing at the supplied time and their values are
773
788
  # those at that specific time. Absence of this field will default to the
774
789
  # API's version of NOW.
775
790
  # @!attribute [rw] compare_duration
776
- # @return [Google::Protobuf::Duration]
791
+ # @return [::Google::Protobuf::Duration]
777
792
  # When compare_duration is set, the ListFindingsResult's "state_change"
778
793
  # attribute is updated to indicate whether the finding had its state changed,
779
794
  # the finding's state remained unchanged, or if the finding was added in any
@@ -788,93 +803,94 @@ module Google
788
803
  #
789
804
  # Possible "state_change" values when compare_duration is specified:
790
805
  #
791
- # * "CHANGED": indicates that the finding was present at the start of
792
- # compare_duration, but changed its state at read_time.
793
- # * "UNCHANGED": indicates that the finding was present at the start of
794
- # compare_duration and did not change state at read_time.
795
- # * "ADDED": indicates that the finding was not present at the start
796
- # of compare_duration, but was present at read_time.
806
+ # * "CHANGED": indicates that the finding was present and matched the given
807
+ # filter at the start of compare_duration, but changed its
808
+ # state at read_time.
809
+ # * "UNCHANGED": indicates that the finding was present and matched the given
810
+ # filter at the start of compare_duration and did not change
811
+ # state at read_time.
812
+ # * "ADDED": indicates that the finding did not match the given filter or
813
+ # was not present at the start of compare_duration, but was
814
+ # present at read_time.
815
+ # * "REMOVED": indicates that the finding was present and matched the
816
+ # filter at the start of compare_duration, but did not match
817
+ # the filter at read_time.
797
818
  #
798
819
  # If compare_duration is not specified, then the only possible state_change
799
820
  # is "UNUSED", which will be the state_change set for all findings present at
800
821
  # read_time.
801
- # @!attribute [rw] having
802
- # @return [String]
803
- # Filter that specifies what fields to further filter on *after* the query
804
- # filter has been executed. Currently only `finding.state` and `state_change`
805
- # are supported and requires compare_duration to be specified.
806
822
  # @!attribute [rw] field_mask
807
- # @return [Google::Protobuf::FieldMask]
823
+ # @return [::Google::Protobuf::FieldMask]
808
824
  # Optional.
809
825
  # A field mask to specify the Finding fields to be listed in the response.
810
826
  # An empty field mask will list all fields.
811
827
  # @!attribute [rw] page_token
812
- # @return [String]
828
+ # @return [::String]
813
829
  # The value returned by the last `ListFindingsResponse`; indicates
814
830
  # that this is a continuation of a prior `ListFindings` call, and
815
831
  # that the system should return the next page of data.
816
832
  # @!attribute [rw] page_size
817
- # @return [Integer]
833
+ # @return [::Integer]
818
834
  # The maximum number of results to return in a single response. Default is
819
835
  # 10, minimum is 1, maximum is 1000.
820
836
  class ListFindingsRequest
821
- include Google::Protobuf::MessageExts
822
- extend Google::Protobuf::MessageExts::ClassMethods
837
+ include ::Google::Protobuf::MessageExts
838
+ extend ::Google::Protobuf::MessageExts::ClassMethods
823
839
  end
824
840
 
825
841
  # Response message for listing findings.
826
842
  # @!attribute [rw] list_findings_results
827
- # @return [Array<Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult>]
843
+ # @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult>]
828
844
  # Findings matching the list request.
829
845
  # @!attribute [rw] read_time
830
- # @return [Google::Protobuf::Timestamp]
846
+ # @return [::Google::Protobuf::Timestamp]
831
847
  # Time used for executing the list request.
832
848
  # @!attribute [rw] next_page_token
833
- # @return [String]
849
+ # @return [::String]
834
850
  # Token to retrieve the next page of results, or empty if there are no more
835
851
  # results.
836
852
  # @!attribute [rw] total_size
837
- # @return [Integer]
853
+ # @return [::Integer]
838
854
  # The total number of findings matching the query.
839
855
  class ListFindingsResponse
840
- include Google::Protobuf::MessageExts
841
- extend Google::Protobuf::MessageExts::ClassMethods
856
+ include ::Google::Protobuf::MessageExts
857
+ extend ::Google::Protobuf::MessageExts::ClassMethods
842
858
 
843
859
  # Result containing the Finding and its StateChange.
844
860
  # @!attribute [rw] finding
845
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
861
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
846
862
  # Finding matching the search request.
847
863
  # @!attribute [rw] state_change
848
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::StateChange]
864
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::StateChange]
849
865
  # State change of the finding between the points in time.
850
866
  # @!attribute [rw] resource
851
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::Resource]
867
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::Resource]
852
868
  # Output only. Resource that is associated with this finding.
853
869
  class ListFindingsResult
854
- include Google::Protobuf::MessageExts
855
- extend Google::Protobuf::MessageExts::ClassMethods
870
+ include ::Google::Protobuf::MessageExts
871
+ extend ::Google::Protobuf::MessageExts::ClassMethods
856
872
 
857
- # Information related to the Google Cloud Platform (GCP) resource that is
873
+ # Information related to the Google Cloud resource that is
858
874
  # associated with this finding.
859
875
  # @!attribute [rw] name
860
- # @return [String]
876
+ # @return [::String]
861
877
  # The full resource name of the resource. See:
862
878
  # https://cloud.google.com/apis/design/resource_names#full_resource_name
863
879
  # @!attribute [rw] project_name
864
- # @return [String]
880
+ # @return [::String]
865
881
  # The full resource name of project that the resource belongs to.
866
882
  # @!attribute [rw] project_display_name
867
- # @return [String]
883
+ # @return [::String]
868
884
  # The human readable name of project that the resource belongs to.
869
885
  # @!attribute [rw] parent_name
870
- # @return [String]
886
+ # @return [::String]
871
887
  # The full resource name of resource's parent.
872
888
  # @!attribute [rw] parent_display_name
873
- # @return [String]
889
+ # @return [::String]
874
890
  # The human readable name of resource's parent.
875
891
  class Resource
876
- include Google::Protobuf::MessageExts
877
- extend Google::Protobuf::MessageExts::ClassMethods
892
+ include ::Google::Protobuf::MessageExts
893
+ extend ::Google::Protobuf::MessageExts::ClassMethods
878
894
  end
879
895
 
880
896
  # The change in state of the finding.
@@ -909,35 +925,35 @@ module Google
909
925
 
910
926
  # Request message for updating a finding's state.
911
927
  # @!attribute [rw] name
912
- # @return [String]
928
+ # @return [::String]
913
929
  # Required. The relative resource name of the finding. See:
914
930
  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
915
931
  # Example:
916
932
  # "organizations/\\{organization_id}/sources/\\{source_id}/finding/\\{finding_id}".
917
933
  # @!attribute [rw] state
918
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
934
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
919
935
  # Required. The desired State of the finding.
920
936
  # @!attribute [rw] start_time
921
- # @return [Google::Protobuf::Timestamp]
937
+ # @return [::Google::Protobuf::Timestamp]
922
938
  # Required. The time at which the updated state takes effect.
923
939
  class SetFindingStateRequest
924
- include Google::Protobuf::MessageExts
925
- extend Google::Protobuf::MessageExts::ClassMethods
940
+ include ::Google::Protobuf::MessageExts
941
+ extend ::Google::Protobuf::MessageExts::ClassMethods
926
942
  end
927
943
 
928
944
  # Request message for running asset discovery for an organization.
929
945
  # @!attribute [rw] parent
930
- # @return [String]
946
+ # @return [::String]
931
947
  # Required. Name of the organization to run asset discovery for. Its format
932
948
  # is "organizations/[organization_id]".
933
949
  class RunAssetDiscoveryRequest
934
- include Google::Protobuf::MessageExts
935
- extend Google::Protobuf::MessageExts::ClassMethods
950
+ include ::Google::Protobuf::MessageExts
951
+ extend ::Google::Protobuf::MessageExts::ClassMethods
936
952
  end
937
953
 
938
954
  # Request message for updating or creating a finding.
939
955
  # @!attribute [rw] finding
940
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
956
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
941
957
  # Required. The finding resource to update or create if it does not already
942
958
  # exist. parent, security_marks, and update_time will be ignored.
943
959
  #
@@ -945,7 +961,7 @@ module Google
945
961
  # alphanumeric and less than or equal to 32 characters and greater than 0
946
962
  # characters in length.
947
963
  # @!attribute [rw] update_mask
948
- # @return [Google::Protobuf::FieldMask]
964
+ # @return [::Google::Protobuf::FieldMask]
949
965
  # The FieldMask to use when updating the finding resource. This field should
950
966
  # not be specified when creating a finding.
951
967
  #
@@ -954,71 +970,71 @@ module Google
954
970
  # be added/updated by using "source_properties.<property key>" in the field
955
971
  # mask.
956
972
  class UpdateFindingRequest
957
- include Google::Protobuf::MessageExts
958
- extend Google::Protobuf::MessageExts::ClassMethods
973
+ include ::Google::Protobuf::MessageExts
974
+ extend ::Google::Protobuf::MessageExts::ClassMethods
959
975
  end
960
976
 
961
977
  # Request message for updating a notification config.
962
978
  # @!attribute [rw] notification_config
963
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
979
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
964
980
  # Required. The notification config to update.
965
981
  # @!attribute [rw] update_mask
966
- # @return [Google::Protobuf::FieldMask]
982
+ # @return [::Google::Protobuf::FieldMask]
967
983
  # The FieldMask to use when updating the notification config.
968
984
  #
969
985
  # If empty all mutable fields will be updated.
970
986
  class UpdateNotificationConfigRequest
971
- include Google::Protobuf::MessageExts
972
- extend Google::Protobuf::MessageExts::ClassMethods
987
+ include ::Google::Protobuf::MessageExts
988
+ extend ::Google::Protobuf::MessageExts::ClassMethods
973
989
  end
974
990
 
975
991
  # Request message for updating an organization's settings.
976
992
  # @!attribute [rw] organization_settings
977
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings]
993
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings]
978
994
  # Required. The organization settings resource to update.
979
995
  # @!attribute [rw] update_mask
980
- # @return [Google::Protobuf::FieldMask]
996
+ # @return [::Google::Protobuf::FieldMask]
981
997
  # The FieldMask to use when updating the settings resource.
982
998
  #
983
999
  # If empty all mutable fields will be updated.
984
1000
  class UpdateOrganizationSettingsRequest
985
- include Google::Protobuf::MessageExts
986
- extend Google::Protobuf::MessageExts::ClassMethods
1001
+ include ::Google::Protobuf::MessageExts
1002
+ extend ::Google::Protobuf::MessageExts::ClassMethods
987
1003
  end
988
1004
 
989
1005
  # Request message for updating a source.
990
1006
  # @!attribute [rw] source
991
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::Source]
1007
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Source]
992
1008
  # Required. The source resource to update.
993
1009
  # @!attribute [rw] update_mask
994
- # @return [Google::Protobuf::FieldMask]
1010
+ # @return [::Google::Protobuf::FieldMask]
995
1011
  # The FieldMask to use when updating the source resource.
996
1012
  #
997
1013
  # If empty all mutable fields will be updated.
998
1014
  class UpdateSourceRequest
999
- include Google::Protobuf::MessageExts
1000
- extend Google::Protobuf::MessageExts::ClassMethods
1015
+ include ::Google::Protobuf::MessageExts
1016
+ extend ::Google::Protobuf::MessageExts::ClassMethods
1001
1017
  end
1002
1018
 
1003
1019
  # Request message for updating a SecurityMarks resource.
1004
1020
  # @!attribute [rw] security_marks
1005
- # @return [Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
1021
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
1006
1022
  # Required. The security marks resource to update.
1007
1023
  # @!attribute [rw] update_mask
1008
- # @return [Google::Protobuf::FieldMask]
1024
+ # @return [::Google::Protobuf::FieldMask]
1009
1025
  # The FieldMask to use when updating the security marks resource.
1010
1026
  #
1011
1027
  # The field mask must not contain duplicate fields.
1012
1028
  # If empty or set to "marks", all marks will be replaced. Individual
1013
1029
  # marks can be updated using "marks.<mark_key>".
1014
1030
  # @!attribute [rw] start_time
1015
- # @return [Google::Protobuf::Timestamp]
1031
+ # @return [::Google::Protobuf::Timestamp]
1016
1032
  # The time at which the updated SecurityMarks take effect.
1017
1033
  # If not set uses current server time. Updates will be applied to the
1018
1034
  # SecurityMarks that are active immediately preceding this time.
1019
1035
  class UpdateSecurityMarksRequest
1020
- include Google::Protobuf::MessageExts
1021
- extend Google::Protobuf::MessageExts::ClassMethods
1036
+ include ::Google::Protobuf::MessageExts
1037
+ extend ::Google::Protobuf::MessageExts::ClassMethods
1022
1038
  end
1023
1039
  end
1024
1040
  end