google-cloud-security_center-v1p1beta1 0.1.0 → 0.3.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/AUTHENTICATION.md +6 -6
- data/README.md +1 -1
- data/lib/google/cloud/security_center/v1p1beta1.rb +1 -1
- data/lib/google/cloud/security_center/v1p1beta1/security_center.rb +1 -1
- data/lib/google/cloud/security_center/v1p1beta1/security_center/client.rb +554 -529
- data/lib/google/cloud/security_center/v1p1beta1/security_center/credentials.rb +1 -1
- data/lib/google/cloud/security_center/v1p1beta1/security_center/operations.rb +109 -103
- data/lib/google/cloud/security_center/v1p1beta1/security_center/paths.rb +16 -16
- data/lib/google/cloud/security_center/v1p1beta1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb +2 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb +27 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb +0 -4
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_services_pb.rb +1 -3
- data/proto_docs/google/api/resource.rb +12 -12
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/asset.rb +51 -48
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/finding.rb +29 -29
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb +17 -16
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb +8 -5
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb +11 -11
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb +48 -0
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response.rb +4 -4
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb +11 -11
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb +220 -204
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/source.rb +7 -7
- data/proto_docs/google/iam/v1/iam_policy.rb +15 -15
- data/proto_docs/google/iam/v1/options.rb +3 -3
- data/proto_docs/google/iam/v1/policy.rb +26 -26
- data/proto_docs/google/longrunning/operations.rb +30 -30
- data/proto_docs/google/protobuf/any.rb +4 -4
- data/proto_docs/google/protobuf/duration.rb +4 -4
- data/proto_docs/google/protobuf/empty.rb +2 -2
- data/proto_docs/google/protobuf/field_mask.rb +3 -3
- data/proto_docs/google/protobuf/struct.rb +18 -18
- data/proto_docs/google/protobuf/timestamp.rb +4 -4
- data/proto_docs/google/rpc/status.rb +6 -6
- data/proto_docs/google/type/expr.rb +6 -6
- metadata +35 -6
- data/lib/google/cloud/common_resources_pb.rb +0 -15
@@ -21,41 +21,42 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
24
|
+
# Security Command Center notification configs.
|
25
25
|
#
|
26
|
-
# A notification config is a
|
27
|
-
# to send notifications for create/update events of findings,
|
26
|
+
# A notification config is a Security Command Center resource that contains the
|
27
|
+
# configuration to send notifications for create/update events of findings,
|
28
|
+
# assets and etc.
|
28
29
|
# @!attribute [rw] name
|
29
|
-
# @return [String]
|
30
|
+
# @return [::String]
|
30
31
|
# The relative resource name of this notification config. See:
|
31
32
|
# https://cloud.google.com/apis/design/resource_names#relative_resource_name
|
32
33
|
# Example:
|
33
34
|
# "organizations/\\{organization_id}/notificationConfigs/notify_public_bucket".
|
34
35
|
# @!attribute [rw] description
|
35
|
-
# @return [String]
|
36
|
+
# @return [::String]
|
36
37
|
# The description of the notification config (max of 1024 characters).
|
37
38
|
# @!attribute [rw] event_type
|
38
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::EventType]
|
39
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::EventType]
|
39
40
|
# The type of events the config is for, e.g. FINDING.
|
40
41
|
# @!attribute [rw] pubsub_topic
|
41
|
-
# @return [String]
|
42
|
-
# The
|
42
|
+
# @return [::String]
|
43
|
+
# The Pub/Sub topic to send notifications to. Its format is
|
43
44
|
# "projects/[project_id]/topics/[topic]".
|
44
45
|
# @!attribute [r] service_account
|
45
|
-
# @return [String]
|
46
|
+
# @return [::String]
|
46
47
|
# Output only. The service account that needs "pubsub.topics.publish"
|
47
|
-
# permission to publish to the
|
48
|
+
# permission to publish to the Pub/Sub topic.
|
48
49
|
# @!attribute [rw] streaming_config
|
49
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
|
50
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
|
50
51
|
# The config for triggering streaming-based notifications.
|
51
52
|
class NotificationConfig
|
52
|
-
include Google::Protobuf::MessageExts
|
53
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
53
|
+
include ::Google::Protobuf::MessageExts
|
54
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
54
55
|
|
55
56
|
# The config for streaming-based notifications, which send each event as soon
|
56
57
|
# as it is detected.
|
57
58
|
# @!attribute [rw] filter
|
58
|
-
# @return [String]
|
59
|
+
# @return [::String]
|
59
60
|
# Expression that defines the filter to apply across create/update events
|
60
61
|
# of assets or findings as specified by the event type. The expression is a
|
61
62
|
# list of zero or more restrictions combined via logical operators `AND`
|
@@ -78,8 +79,8 @@ module Google
|
|
78
79
|
# * integer literals without quotes.
|
79
80
|
# * boolean literals `true` and `false` without quotes.
|
80
81
|
class StreamingConfig
|
81
|
-
include Google::Protobuf::MessageExts
|
82
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
82
|
+
include ::Google::Protobuf::MessageExts
|
83
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
83
84
|
end
|
84
85
|
|
85
86
|
# The type of events.
|
@@ -21,17 +21,20 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
24
|
+
# Security Command Center's Notification
|
25
25
|
# @!attribute [rw] notification_config_name
|
26
|
-
# @return [String]
|
26
|
+
# @return [::String]
|
27
27
|
# Name of the notification config that generated current notification.
|
28
28
|
# @!attribute [rw] finding
|
29
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
29
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
30
30
|
# If it's a Finding based notification config, this field will be
|
31
31
|
# populated.
|
32
|
+
# @!attribute [rw] resource
|
33
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Resource]
|
34
|
+
# The Cloud resource tied to the notification.
|
32
35
|
class NotificationMessage
|
33
|
-
include Google::Protobuf::MessageExts
|
34
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
36
|
+
include ::Google::Protobuf::MessageExts
|
37
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
35
38
|
end
|
36
39
|
end
|
37
40
|
end
|
@@ -21,37 +21,37 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
# User specified settings that are attached to the
|
25
|
-
# Center
|
24
|
+
# User specified settings that are attached to the Security Command
|
25
|
+
# Center organization.
|
26
26
|
# @!attribute [rw] name
|
27
|
-
# @return [String]
|
27
|
+
# @return [::String]
|
28
28
|
# The relative resource name of the settings. See:
|
29
29
|
# https://cloud.google.com/apis/design/resource_names#relative_resource_name
|
30
30
|
# Example:
|
31
31
|
# "organizations/\\{organization_id}/organizationSettings".
|
32
32
|
# @!attribute [rw] enable_asset_discovery
|
33
|
-
# @return [Boolean]
|
33
|
+
# @return [::Boolean]
|
34
34
|
# A flag that indicates if Asset Discovery should be enabled. If the flag is
|
35
35
|
# set to `true`, then discovery of assets will occur. If it is set to `false,
|
36
36
|
# all historical assets will remain, but discovery of future assets will not
|
37
37
|
# occur.
|
38
38
|
# @!attribute [rw] asset_discovery_config
|
39
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig]
|
39
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig]
|
40
40
|
# The configuration used for Asset Discovery runs.
|
41
41
|
class OrganizationSettings
|
42
|
-
include Google::Protobuf::MessageExts
|
43
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
42
|
+
include ::Google::Protobuf::MessageExts
|
43
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
44
44
|
|
45
45
|
# The configuration used for Asset Discovery runs.
|
46
46
|
# @!attribute [rw] project_ids
|
47
|
-
# @return [Array
|
47
|
+
# @return [::Array<::String>]
|
48
48
|
# The project ids to use for filtering asset discovery.
|
49
49
|
# @!attribute [rw] inclusion_mode
|
50
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig::InclusionMode]
|
50
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings::AssetDiscoveryConfig::InclusionMode]
|
51
51
|
# The mode to use for filtering asset discovery.
|
52
52
|
class AssetDiscoveryConfig
|
53
|
-
include Google::Protobuf::MessageExts
|
54
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
53
|
+
include ::Google::Protobuf::MessageExts
|
54
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
55
55
|
|
56
56
|
# The mode of inclusion when running Asset Discovery.
|
57
57
|
# Asset discovery can be limited by explicitly identifying projects to be
|
@@ -0,0 +1,48 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
# Copyright 2020 Google LLC
|
4
|
+
#
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
6
|
+
# you may not use this file except in compliance with the License.
|
7
|
+
# You may obtain a copy of the License at
|
8
|
+
#
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
10
|
+
#
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
14
|
+
# See the License for the specific language governing permissions and
|
15
|
+
# limitations under the License.
|
16
|
+
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
18
|
+
|
19
|
+
|
20
|
+
module Google
|
21
|
+
module Cloud
|
22
|
+
module SecurityCenter
|
23
|
+
module V1p1beta1
|
24
|
+
# Information related to the Google Cloud resource.
|
25
|
+
# @!attribute [rw] name
|
26
|
+
# @return [::String]
|
27
|
+
# The full resource name of the resource. See:
|
28
|
+
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
29
|
+
# @!attribute [rw] project
|
30
|
+
# @return [::String]
|
31
|
+
# The full resource name of project that the resource belongs to.
|
32
|
+
# @!attribute [rw] project_display_name
|
33
|
+
# @return [::String]
|
34
|
+
# The human readable name of project that the resource belongs to.
|
35
|
+
# @!attribute [rw] parent
|
36
|
+
# @return [::String]
|
37
|
+
# The full resource name of resource's parent.
|
38
|
+
# @!attribute [rw] parent_display_name
|
39
|
+
# @return [::String]
|
40
|
+
# The human readable name of resource's parent.
|
41
|
+
class Resource
|
42
|
+
include ::Google::Protobuf::MessageExts
|
43
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
44
|
+
end
|
45
|
+
end
|
46
|
+
end
|
47
|
+
end
|
48
|
+
end
|
@@ -23,14 +23,14 @@ module Google
|
|
23
23
|
module V1p1beta1
|
24
24
|
# Response of asset discovery run
|
25
25
|
# @!attribute [rw] state
|
26
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::RunAssetDiscoveryResponse::State]
|
26
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::RunAssetDiscoveryResponse::State]
|
27
27
|
# The state of an asset discovery run.
|
28
28
|
# @!attribute [rw] duration
|
29
|
-
# @return [Google::Protobuf::Duration]
|
29
|
+
# @return [::Google::Protobuf::Duration]
|
30
30
|
# The duration between asset discovery run start and end
|
31
31
|
class RunAssetDiscoveryResponse
|
32
|
-
include Google::Protobuf::MessageExts
|
33
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
32
|
+
include ::Google::Protobuf::MessageExts
|
33
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
34
34
|
|
35
35
|
# The state of an asset discovery run.
|
36
36
|
module State
|
@@ -21,19 +21,19 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
# User specified security marks that are attached to the parent
|
25
|
-
# Command Center
|
26
|
-
#
|
24
|
+
# User specified security marks that are attached to the parent Security
|
25
|
+
# Command Center resource. Security marks are scoped within a Security Command
|
26
|
+
# Center organization -- they can be modified and viewed by all users who have
|
27
27
|
# proper permissions on the organization.
|
28
28
|
# @!attribute [rw] name
|
29
|
-
# @return [String]
|
29
|
+
# @return [::String]
|
30
30
|
# The relative resource name of the SecurityMarks. See:
|
31
31
|
# https://cloud.google.com/apis/design/resource_names#relative_resource_name
|
32
32
|
# Examples:
|
33
33
|
# "organizations/\\{organization_id}/assets/\\{asset_id}/securityMarks"
|
34
34
|
# "organizations/\\{organization_id}/sources/\\{source_id}/findings/\\{finding_id}/securityMarks".
|
35
35
|
# @!attribute [rw] marks
|
36
|
-
# @return [Google::Protobuf::Map{String => String}]
|
36
|
+
# @return [::Google::Protobuf::Map{::String => ::String}]
|
37
37
|
# Mutable user specified security marks belonging to the parent resource.
|
38
38
|
# Constraints are as follows:
|
39
39
|
#
|
@@ -43,16 +43,16 @@ module Google
|
|
43
43
|
# * Values have leading and trailing whitespace trimmed, remaining
|
44
44
|
# characters must be between 1 - 4096 characters (inclusive)
|
45
45
|
class SecurityMarks
|
46
|
-
include Google::Protobuf::MessageExts
|
47
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
46
|
+
include ::Google::Protobuf::MessageExts
|
47
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
48
48
|
|
49
49
|
# @!attribute [rw] key
|
50
|
-
# @return [String]
|
50
|
+
# @return [::String]
|
51
51
|
# @!attribute [rw] value
|
52
|
-
# @return [String]
|
52
|
+
# @return [::String]
|
53
53
|
class MarksEntry
|
54
|
-
include Google::Protobuf::MessageExts
|
55
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
54
|
+
include ::Google::Protobuf::MessageExts
|
55
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
56
56
|
end
|
57
57
|
end
|
58
58
|
end
|
@@ -23,105 +23,105 @@ module Google
|
|
23
23
|
module V1p1beta1
|
24
24
|
# Request message for creating a finding.
|
25
25
|
# @!attribute [rw] parent
|
26
|
-
# @return [String]
|
26
|
+
# @return [::String]
|
27
27
|
# Required. Resource name of the new finding's parent. Its format should be
|
28
28
|
# "organizations/[organization_id]/sources/[source_id]".
|
29
29
|
# @!attribute [rw] finding_id
|
30
|
-
# @return [String]
|
30
|
+
# @return [::String]
|
31
31
|
# Required. Unique identifier provided by the client within the parent scope.
|
32
32
|
# It must be alphanumeric and less than or equal to 32 characters and
|
33
33
|
# greater than 0 characters in length.
|
34
34
|
# @!attribute [rw] finding
|
35
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
35
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
36
36
|
# Required. The Finding being created. The name and security_marks will be
|
37
37
|
# ignored as they are both output only fields on this resource.
|
38
38
|
class CreateFindingRequest
|
39
|
-
include Google::Protobuf::MessageExts
|
40
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
39
|
+
include ::Google::Protobuf::MessageExts
|
40
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
41
41
|
end
|
42
42
|
|
43
43
|
# Request message for creating a notification config.
|
44
44
|
# @!attribute [rw] parent
|
45
|
-
# @return [String]
|
45
|
+
# @return [::String]
|
46
46
|
# Required. Resource name of the new notification config's parent. Its format
|
47
47
|
# is "organizations/[organization_id]".
|
48
48
|
# @!attribute [rw] config_id
|
49
|
-
# @return [String]
|
49
|
+
# @return [::String]
|
50
50
|
# Required.
|
51
51
|
# Unique identifier provided by the client within the parent scope.
|
52
52
|
# It must be between 1 and 128 characters, and contains alphanumeric
|
53
53
|
# characters, underscores or hyphens only.
|
54
54
|
# @!attribute [rw] notification_config
|
55
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
|
55
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
|
56
56
|
# Required. The notification config being created. The name and the service
|
57
57
|
# account will be ignored as they are both output only fields on this
|
58
58
|
# resource.
|
59
59
|
class CreateNotificationConfigRequest
|
60
|
-
include Google::Protobuf::MessageExts
|
61
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
60
|
+
include ::Google::Protobuf::MessageExts
|
61
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
62
62
|
end
|
63
63
|
|
64
64
|
# Request message for creating a source.
|
65
65
|
# @!attribute [rw] parent
|
66
|
-
# @return [String]
|
66
|
+
# @return [::String]
|
67
67
|
# Required. Resource name of the new source's parent. Its format should be
|
68
68
|
# "organizations/[organization_id]".
|
69
69
|
# @!attribute [rw] source
|
70
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Source]
|
70
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Source]
|
71
71
|
# Required. The Source being created, only the display_name and description
|
72
72
|
# will be used. All other fields will be ignored.
|
73
73
|
class CreateSourceRequest
|
74
|
-
include Google::Protobuf::MessageExts
|
75
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
74
|
+
include ::Google::Protobuf::MessageExts
|
75
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
76
76
|
end
|
77
77
|
|
78
78
|
# Request message for deleting a notification config.
|
79
79
|
# @!attribute [rw] name
|
80
|
-
# @return [String]
|
80
|
+
# @return [::String]
|
81
81
|
# Required. Name of the notification config to delete. Its format is
|
82
82
|
# "organizations/[organization_id]/notificationConfigs/[config_id]".
|
83
83
|
class DeleteNotificationConfigRequest
|
84
|
-
include Google::Protobuf::MessageExts
|
85
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
84
|
+
include ::Google::Protobuf::MessageExts
|
85
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
86
86
|
end
|
87
87
|
|
88
88
|
# Request message for getting a notification config.
|
89
89
|
# @!attribute [rw] name
|
90
|
-
# @return [String]
|
90
|
+
# @return [::String]
|
91
91
|
# Required. Name of the notification config to get. Its format is
|
92
92
|
# "organizations/[organization_id]/notificationConfigs/[config_id]".
|
93
93
|
class GetNotificationConfigRequest
|
94
|
-
include Google::Protobuf::MessageExts
|
95
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
94
|
+
include ::Google::Protobuf::MessageExts
|
95
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
96
96
|
end
|
97
97
|
|
98
98
|
# Request message for getting organization settings.
|
99
99
|
# @!attribute [rw] name
|
100
|
-
# @return [String]
|
100
|
+
# @return [::String]
|
101
101
|
# Required. Name of the organization to get organization settings for. Its
|
102
102
|
# format is "organizations/[organization_id]/organizationSettings".
|
103
103
|
class GetOrganizationSettingsRequest
|
104
|
-
include Google::Protobuf::MessageExts
|
105
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
104
|
+
include ::Google::Protobuf::MessageExts
|
105
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
106
106
|
end
|
107
107
|
|
108
108
|
# Request message for getting a source.
|
109
109
|
# @!attribute [rw] name
|
110
|
-
# @return [String]
|
110
|
+
# @return [::String]
|
111
111
|
# Required. Relative resource name of the source. Its format is
|
112
112
|
# "organizations/[organization_id]/source/[source_id]".
|
113
113
|
class GetSourceRequest
|
114
|
-
include Google::Protobuf::MessageExts
|
115
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
114
|
+
include ::Google::Protobuf::MessageExts
|
115
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
116
116
|
end
|
117
117
|
|
118
118
|
# Request message for grouping by assets.
|
119
119
|
# @!attribute [rw] parent
|
120
|
-
# @return [String]
|
120
|
+
# @return [::String]
|
121
121
|
# Required. Name of the organization to groupBy. Its format is
|
122
122
|
# "organizations/[organization_id]".
|
123
123
|
# @!attribute [rw] filter
|
124
|
-
# @return [String]
|
124
|
+
# @return [::String]
|
125
125
|
# Expression that defines the filter to apply across assets.
|
126
126
|
# The expression is a list of zero or more restrictions combined via logical
|
127
127
|
# operators `AND` and `OR`.
|
@@ -155,15 +155,15 @@ module Google
|
|
155
155
|
#
|
156
156
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
157
157
|
# Examples:
|
158
|
-
#
|
159
|
-
#
|
158
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
159
|
+
# `update_time = 1560208038000`
|
160
160
|
#
|
161
161
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
162
162
|
#
|
163
163
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
164
164
|
# Examples:
|
165
|
-
#
|
166
|
-
#
|
165
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
166
|
+
# `create_time = 1560208038000`
|
167
167
|
#
|
168
168
|
# * iam_policy.policy_blob: `=`, `:`
|
169
169
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
@@ -178,8 +178,14 @@ module Google
|
|
178
178
|
# * security_center_properties.resource_owners: `=`, `:`
|
179
179
|
#
|
180
180
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
181
|
+
#
|
182
|
+
# Use a partial match on the empty string to filter based on a property
|
183
|
+
# existing: `resource_properties.my_property : ""`
|
184
|
+
#
|
185
|
+
# Use a negated partial match on the empty string to filter based on a
|
186
|
+
# property not existing: `-resource_properties.my_property : ""`
|
181
187
|
# @!attribute [rw] group_by
|
182
|
-
# @return [String]
|
188
|
+
# @return [::String]
|
183
189
|
# Required. Expression that defines what assets fields to use for grouping.
|
184
190
|
# The string value should follow SQL syntax: comma separated list of fields.
|
185
191
|
# For example:
|
@@ -199,7 +205,7 @@ module Google
|
|
199
205
|
# * security_center_properties.resource_project_display_name
|
200
206
|
# * security_center_properties.resource_parent_display_name
|
201
207
|
# @!attribute [rw] compare_duration
|
202
|
-
# @return [Google::Protobuf::Duration]
|
208
|
+
# @return [::Google::Protobuf::Duration]
|
203
209
|
# When compare_duration is set, the GroupResult's "state_change" property is
|
204
210
|
# updated to indicate whether the asset was added, removed, or remained
|
205
211
|
# present during the compare_duration period of time that precedes the
|
@@ -228,60 +234,55 @@ module Google
|
|
228
234
|
# If this field is set then `state_change` must be a specified field in
|
229
235
|
# `group_by`.
|
230
236
|
# @!attribute [rw] read_time
|
231
|
-
# @return [Google::Protobuf::Timestamp]
|
237
|
+
# @return [::Google::Protobuf::Timestamp]
|
232
238
|
# Time used as a reference point when filtering assets. The filter is limited
|
233
239
|
# to assets existing at the supplied time and their values are those at that
|
234
240
|
# specific time. Absence of this field will default to the API's version of
|
235
241
|
# NOW.
|
236
|
-
# @!attribute [rw] having
|
237
|
-
# @return [String]
|
238
|
-
# Filter that specifies what fields to further filter on *after* the query
|
239
|
-
# filter has been executed. Currently only `state_change` is supported and
|
240
|
-
# requires compare_duration to be specified.
|
241
242
|
# @!attribute [rw] page_token
|
242
|
-
# @return [String]
|
243
|
+
# @return [::String]
|
243
244
|
# The value returned by the last `GroupAssetsResponse`; indicates
|
244
245
|
# that this is a continuation of a prior `GroupAssets` call, and that the
|
245
246
|
# system should return the next page of data.
|
246
247
|
# @!attribute [rw] page_size
|
247
|
-
# @return [Integer]
|
248
|
+
# @return [::Integer]
|
248
249
|
# The maximum number of results to return in a single response. Default is
|
249
250
|
# 10, minimum is 1, maximum is 1000.
|
250
251
|
class GroupAssetsRequest
|
251
|
-
include Google::Protobuf::MessageExts
|
252
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
252
|
+
include ::Google::Protobuf::MessageExts
|
253
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
253
254
|
end
|
254
255
|
|
255
256
|
# Response message for grouping by assets.
|
256
257
|
# @!attribute [rw] group_by_results
|
257
|
-
# @return [Array
|
258
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::GroupResult>]
|
258
259
|
# Group results. There exists an element for each existing unique
|
259
260
|
# combination of property/values. The element contains a count for the number
|
260
261
|
# of times those specific property/values appear.
|
261
262
|
# @!attribute [rw] read_time
|
262
|
-
# @return [Google::Protobuf::Timestamp]
|
263
|
+
# @return [::Google::Protobuf::Timestamp]
|
263
264
|
# Time used for executing the groupBy request.
|
264
265
|
# @!attribute [rw] next_page_token
|
265
|
-
# @return [String]
|
266
|
+
# @return [::String]
|
266
267
|
# Token to retrieve the next page of results, or empty if there are no more
|
267
268
|
# results.
|
268
269
|
# @!attribute [rw] total_size
|
269
|
-
# @return [Integer]
|
270
|
+
# @return [::Integer]
|
270
271
|
# The total number of results matching the query.
|
271
272
|
class GroupAssetsResponse
|
272
|
-
include Google::Protobuf::MessageExts
|
273
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
273
|
+
include ::Google::Protobuf::MessageExts
|
274
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
274
275
|
end
|
275
276
|
|
276
277
|
# Request message for grouping by findings.
|
277
278
|
# @!attribute [rw] parent
|
278
|
-
# @return [String]
|
279
|
+
# @return [::String]
|
279
280
|
# Required. Name of the source to groupBy. Its format is
|
280
281
|
# "organizations/[organization_id]/sources/[source_id]". To groupBy across
|
281
282
|
# all sources provide a source_id of `-`. For example:
|
282
283
|
# organizations/\\{organization_id}/sources/-
|
283
284
|
# @!attribute [rw] filter
|
284
|
-
# @return [String]
|
285
|
+
# @return [::String]
|
285
286
|
# Expression that defines the filter to apply across findings.
|
286
287
|
# The expression is a list of one or more restrictions combined via logical
|
287
288
|
# operators `AND` and `OR`.
|
@@ -318,15 +319,21 @@ module Google
|
|
318
319
|
#
|
319
320
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
320
321
|
# Examples:
|
321
|
-
#
|
322
|
-
#
|
322
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
323
|
+
# `event_time = 1560208038000`
|
323
324
|
#
|
324
325
|
# * security_marks.marks: `=`, `:`
|
325
326
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
326
327
|
#
|
327
328
|
# For example, `source_properties.size = 100` is a valid filter string.
|
329
|
+
#
|
330
|
+
# Use a partial match on the empty string to filter based on a property
|
331
|
+
# existing: `source_properties.my_property : ""`
|
332
|
+
#
|
333
|
+
# Use a negated partial match on the empty string to filter based on a
|
334
|
+
# property not existing: `-source_properties.my_property : ""`
|
328
335
|
# @!attribute [rw] group_by
|
329
|
-
# @return [String]
|
336
|
+
# @return [::String]
|
330
337
|
# Required. Expression that defines what assets fields to use for grouping
|
331
338
|
# (including `state_change`). The string value should follow SQL syntax:
|
332
339
|
# comma separated list of fields. For example: "parent,resource_name".
|
@@ -342,13 +349,13 @@ module Google
|
|
342
349
|
#
|
343
350
|
# * state_change
|
344
351
|
# @!attribute [rw] read_time
|
345
|
-
# @return [Google::Protobuf::Timestamp]
|
352
|
+
# @return [::Google::Protobuf::Timestamp]
|
346
353
|
# Time used as a reference point when filtering findings. The filter is
|
347
354
|
# limited to findings existing at the supplied time and their values are
|
348
355
|
# those at that specific time. Absence of this field will default to the
|
349
356
|
# API's version of NOW.
|
350
357
|
# @!attribute [rw] compare_duration
|
351
|
-
# @return [Google::Protobuf::Duration]
|
358
|
+
# @return [::Google::Protobuf::Duration]
|
352
359
|
# When compare_duration is set, the GroupResult's "state_change" attribute is
|
353
360
|
# updated to indicate whether the finding had its state changed, the
|
354
361
|
# finding's state remained unchanged, or if the finding was added during the
|
@@ -362,12 +369,18 @@ module Google
|
|
362
369
|
#
|
363
370
|
# Possible "state_change" values when compare_duration is specified:
|
364
371
|
#
|
365
|
-
# * "CHANGED": indicates that the finding was present
|
366
|
-
# compare_duration, but changed its
|
367
|
-
#
|
368
|
-
#
|
369
|
-
#
|
370
|
-
#
|
372
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
373
|
+
# filter at the start of compare_duration, but changed its
|
374
|
+
# state at read_time.
|
375
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
376
|
+
# filter at the start of compare_duration and did not change
|
377
|
+
# state at read_time.
|
378
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
379
|
+
# was not present at the start of compare_duration, but was
|
380
|
+
# present at read_time.
|
381
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
382
|
+
# filter at the start of compare_duration, but did not match
|
383
|
+
# the filter at read_time.
|
371
384
|
#
|
372
385
|
# If compare_duration is not specified, then the only possible state_change
|
373
386
|
# is "UNUSED", which will be the state_change set for all findings present
|
@@ -375,138 +388,133 @@ module Google
|
|
375
388
|
#
|
376
389
|
# If this field is set then `state_change` must be a specified field in
|
377
390
|
# `group_by`.
|
378
|
-
# @!attribute [rw] having
|
379
|
-
# @return [String]
|
380
|
-
# Filter that specifies what fields to further filter on *after* the query
|
381
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
382
|
-
# are supported and requires compare_duration to be specified.
|
383
391
|
# @!attribute [rw] page_token
|
384
|
-
# @return [String]
|
392
|
+
# @return [::String]
|
385
393
|
# The value returned by the last `GroupFindingsResponse`; indicates
|
386
394
|
# that this is a continuation of a prior `GroupFindings` call, and
|
387
395
|
# that the system should return the next page of data.
|
388
396
|
# @!attribute [rw] page_size
|
389
|
-
# @return [Integer]
|
397
|
+
# @return [::Integer]
|
390
398
|
# The maximum number of results to return in a single response. Default is
|
391
399
|
# 10, minimum is 1, maximum is 1000.
|
392
400
|
class GroupFindingsRequest
|
393
|
-
include Google::Protobuf::MessageExts
|
394
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
401
|
+
include ::Google::Protobuf::MessageExts
|
402
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
395
403
|
end
|
396
404
|
|
397
405
|
# Response message for group by findings.
|
398
406
|
# @!attribute [rw] group_by_results
|
399
|
-
# @return [Array
|
407
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::GroupResult>]
|
400
408
|
# Group results. There exists an element for each existing unique
|
401
409
|
# combination of property/values. The element contains a count for the number
|
402
410
|
# of times those specific property/values appear.
|
403
411
|
# @!attribute [rw] read_time
|
404
|
-
# @return [Google::Protobuf::Timestamp]
|
412
|
+
# @return [::Google::Protobuf::Timestamp]
|
405
413
|
# Time used for executing the groupBy request.
|
406
414
|
# @!attribute [rw] next_page_token
|
407
|
-
# @return [String]
|
415
|
+
# @return [::String]
|
408
416
|
# Token to retrieve the next page of results, or empty if there are no more
|
409
417
|
# results.
|
410
418
|
# @!attribute [rw] total_size
|
411
|
-
# @return [Integer]
|
419
|
+
# @return [::Integer]
|
412
420
|
# The total number of results matching the query.
|
413
421
|
class GroupFindingsResponse
|
414
|
-
include Google::Protobuf::MessageExts
|
415
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
422
|
+
include ::Google::Protobuf::MessageExts
|
423
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
416
424
|
end
|
417
425
|
|
418
426
|
# Result containing the properties and count of a groupBy request.
|
419
427
|
# @!attribute [rw] properties
|
420
|
-
# @return [Google::Protobuf::Map{String => Google::Protobuf::Value}]
|
428
|
+
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
421
429
|
# Properties matching the groupBy fields in the request.
|
422
430
|
# @!attribute [rw] count
|
423
|
-
# @return [Integer]
|
431
|
+
# @return [::Integer]
|
424
432
|
# Total count of resources for the given properties.
|
425
433
|
class GroupResult
|
426
|
-
include Google::Protobuf::MessageExts
|
427
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
434
|
+
include ::Google::Protobuf::MessageExts
|
435
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
428
436
|
|
429
437
|
# @!attribute [rw] key
|
430
|
-
# @return [String]
|
438
|
+
# @return [::String]
|
431
439
|
# @!attribute [rw] value
|
432
|
-
# @return [Google::Protobuf::Value]
|
440
|
+
# @return [::Google::Protobuf::Value]
|
433
441
|
class PropertiesEntry
|
434
|
-
include Google::Protobuf::MessageExts
|
435
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
442
|
+
include ::Google::Protobuf::MessageExts
|
443
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
436
444
|
end
|
437
445
|
end
|
438
446
|
|
439
447
|
# Request message for listing notification configs.
|
440
448
|
# @!attribute [rw] parent
|
441
|
-
# @return [String]
|
449
|
+
# @return [::String]
|
442
450
|
# Required. Name of the organization to list notification configs.
|
443
451
|
# Its format is "organizations/[organization_id]".
|
444
452
|
# @!attribute [rw] page_token
|
445
|
-
# @return [String]
|
453
|
+
# @return [::String]
|
446
454
|
# The value returned by the last `ListNotificationConfigsResponse`; indicates
|
447
455
|
# that this is a continuation of a prior `ListNotificationConfigs` call, and
|
448
456
|
# that the system should return the next page of data.
|
449
457
|
# @!attribute [rw] page_size
|
450
|
-
# @return [Integer]
|
458
|
+
# @return [::Integer]
|
451
459
|
# The maximum number of results to return in a single response. Default is
|
452
460
|
# 10, minimum is 1, maximum is 1000.
|
453
461
|
class ListNotificationConfigsRequest
|
454
|
-
include Google::Protobuf::MessageExts
|
455
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
462
|
+
include ::Google::Protobuf::MessageExts
|
463
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
456
464
|
end
|
457
465
|
|
458
466
|
# Response message for listing notification configs.
|
459
467
|
# @!attribute [rw] notification_configs
|
460
|
-
# @return [Array
|
468
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig>]
|
461
469
|
# Notification configs belonging to the requested parent.
|
462
470
|
# @!attribute [rw] next_page_token
|
463
|
-
# @return [String]
|
471
|
+
# @return [::String]
|
464
472
|
# Token to retrieve the next page of results, or empty if there are no more
|
465
473
|
# results.
|
466
474
|
class ListNotificationConfigsResponse
|
467
|
-
include Google::Protobuf::MessageExts
|
468
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
475
|
+
include ::Google::Protobuf::MessageExts
|
476
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
469
477
|
end
|
470
478
|
|
471
479
|
# Request message for listing sources.
|
472
480
|
# @!attribute [rw] parent
|
473
|
-
# @return [String]
|
481
|
+
# @return [::String]
|
474
482
|
# Required. Resource name of the parent of sources to list. Its format should
|
475
483
|
# be "organizations/[organization_id]".
|
476
484
|
# @!attribute [rw] page_token
|
477
|
-
# @return [String]
|
485
|
+
# @return [::String]
|
478
486
|
# The value returned by the last `ListSourcesResponse`; indicates
|
479
487
|
# that this is a continuation of a prior `ListSources` call, and
|
480
488
|
# that the system should return the next page of data.
|
481
489
|
# @!attribute [rw] page_size
|
482
|
-
# @return [Integer]
|
490
|
+
# @return [::Integer]
|
483
491
|
# The maximum number of results to return in a single response. Default is
|
484
492
|
# 10, minimum is 1, maximum is 1000.
|
485
493
|
class ListSourcesRequest
|
486
|
-
include Google::Protobuf::MessageExts
|
487
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
494
|
+
include ::Google::Protobuf::MessageExts
|
495
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
488
496
|
end
|
489
497
|
|
490
498
|
# Response message for listing sources.
|
491
499
|
# @!attribute [rw] sources
|
492
|
-
# @return [Array
|
500
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::Source>]
|
493
501
|
# Sources belonging to the requested parent.
|
494
502
|
# @!attribute [rw] next_page_token
|
495
|
-
# @return [String]
|
503
|
+
# @return [::String]
|
496
504
|
# Token to retrieve the next page of results, or empty if there are no more
|
497
505
|
# results.
|
498
506
|
class ListSourcesResponse
|
499
|
-
include Google::Protobuf::MessageExts
|
500
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
507
|
+
include ::Google::Protobuf::MessageExts
|
508
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
501
509
|
end
|
502
510
|
|
503
511
|
# Request message for listing assets.
|
504
512
|
# @!attribute [rw] parent
|
505
|
-
# @return [String]
|
513
|
+
# @return [::String]
|
506
514
|
# Required. Name of the organization assets should belong to. Its format is
|
507
515
|
# "organizations/[organization_id]".
|
508
516
|
# @!attribute [rw] filter
|
509
|
-
# @return [String]
|
517
|
+
# @return [::String]
|
510
518
|
# Expression that defines the filter to apply across assets.
|
511
519
|
# The expression is a list of zero or more restrictions combined via logical
|
512
520
|
# operators `AND` and `OR`.
|
@@ -540,15 +548,15 @@ module Google
|
|
540
548
|
#
|
541
549
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
542
550
|
# Examples:
|
543
|
-
#
|
544
|
-
#
|
551
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
552
|
+
# `update_time = 1560208038000`
|
545
553
|
#
|
546
554
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
547
555
|
#
|
548
556
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
549
557
|
# Examples:
|
550
|
-
#
|
551
|
-
#
|
558
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
559
|
+
# `create_time = 1560208038000`
|
552
560
|
#
|
553
561
|
# * iam_policy.policy_blob: `=`, `:`
|
554
562
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
@@ -563,8 +571,14 @@ module Google
|
|
563
571
|
# * security_center_properties.resource_owners: `=`, `:`
|
564
572
|
#
|
565
573
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
574
|
+
#
|
575
|
+
# Use a partial match on the empty string to filter based on a property
|
576
|
+
# existing: `resource_properties.my_property : ""`
|
577
|
+
#
|
578
|
+
# Use a negated partial match on the empty string to filter based on a
|
579
|
+
# property not existing: `-resource_properties.my_property : ""`
|
566
580
|
# @!attribute [rw] order_by
|
567
|
-
# @return [String]
|
581
|
+
# @return [::String]
|
568
582
|
# Expression that defines what fields and order to use for sorting. The
|
569
583
|
# string value should follow SQL syntax: comma separated list of fields. For
|
570
584
|
# example: "name,resource_properties.a_property". The default sorting order
|
@@ -587,13 +601,13 @@ module Google
|
|
587
601
|
# security_center_properties.resource_project_display_name
|
588
602
|
# security_center_properties.resource_type
|
589
603
|
# @!attribute [rw] read_time
|
590
|
-
# @return [Google::Protobuf::Timestamp]
|
604
|
+
# @return [::Google::Protobuf::Timestamp]
|
591
605
|
# Time used as a reference point when filtering assets. The filter is limited
|
592
606
|
# to assets existing at the supplied time and their values are those at that
|
593
607
|
# specific time. Absence of this field will default to the API's version of
|
594
608
|
# NOW.
|
595
609
|
# @!attribute [rw] compare_duration
|
596
|
-
# @return [Google::Protobuf::Duration]
|
610
|
+
# @return [::Google::Protobuf::Duration]
|
597
611
|
# When compare_duration is set, the ListAssetsResult's "state_change"
|
598
612
|
# attribute is updated to indicate whether the asset was added, removed, or
|
599
613
|
# remained present during the compare_duration period of time that precedes
|
@@ -618,59 +632,54 @@ module Google
|
|
618
632
|
# If compare_duration is not specified, then the only possible state_change
|
619
633
|
# is "UNUSED", which will be the state_change set for all assets present at
|
620
634
|
# read_time.
|
621
|
-
# @!attribute [rw] having
|
622
|
-
# @return [String]
|
623
|
-
# Filter that specifies what fields to further filter on *after* the query
|
624
|
-
# filter has been executed. Currently only `state_change` is supported and
|
625
|
-
# requires compare_duration to be specified.
|
626
635
|
# @!attribute [rw] field_mask
|
627
|
-
# @return [Google::Protobuf::FieldMask]
|
636
|
+
# @return [::Google::Protobuf::FieldMask]
|
628
637
|
# Optional.
|
629
638
|
# A field mask to specify the ListAssetsResult fields to be listed in the
|
630
639
|
# response.
|
631
640
|
# An empty field mask will list all fields.
|
632
641
|
# @!attribute [rw] page_token
|
633
|
-
# @return [String]
|
642
|
+
# @return [::String]
|
634
643
|
# The value returned by the last `ListAssetsResponse`; indicates
|
635
644
|
# that this is a continuation of a prior `ListAssets` call, and
|
636
645
|
# that the system should return the next page of data.
|
637
646
|
# @!attribute [rw] page_size
|
638
|
-
# @return [Integer]
|
647
|
+
# @return [::Integer]
|
639
648
|
# The maximum number of results to return in a single response. Default is
|
640
649
|
# 10, minimum is 1, maximum is 1000.
|
641
650
|
class ListAssetsRequest
|
642
|
-
include Google::Protobuf::MessageExts
|
643
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
651
|
+
include ::Google::Protobuf::MessageExts
|
652
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
644
653
|
end
|
645
654
|
|
646
655
|
# Response message for listing assets.
|
647
656
|
# @!attribute [rw] list_assets_results
|
648
|
-
# @return [Array
|
657
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult>]
|
649
658
|
# Assets matching the list request.
|
650
659
|
# @!attribute [rw] read_time
|
651
|
-
# @return [Google::Protobuf::Timestamp]
|
660
|
+
# @return [::Google::Protobuf::Timestamp]
|
652
661
|
# Time used for executing the list request.
|
653
662
|
# @!attribute [rw] next_page_token
|
654
|
-
# @return [String]
|
663
|
+
# @return [::String]
|
655
664
|
# Token to retrieve the next page of results, or empty if there are no more
|
656
665
|
# results.
|
657
666
|
# @!attribute [rw] total_size
|
658
|
-
# @return [Integer]
|
667
|
+
# @return [::Integer]
|
659
668
|
# The total number of assets matching the query.
|
660
669
|
class ListAssetsResponse
|
661
|
-
include Google::Protobuf::MessageExts
|
662
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
670
|
+
include ::Google::Protobuf::MessageExts
|
671
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
663
672
|
|
664
673
|
# Result containing the Asset and its State.
|
665
674
|
# @!attribute [rw] asset
|
666
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Asset]
|
675
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset]
|
667
676
|
# Asset matching the search request.
|
668
677
|
# @!attribute [rw] state_change
|
669
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult::StateChange]
|
678
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListAssetsResponse::ListAssetsResult::StateChange]
|
670
679
|
# State change of the asset between the points in time.
|
671
680
|
class ListAssetsResult
|
672
|
-
include Google::Protobuf::MessageExts
|
673
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
681
|
+
include ::Google::Protobuf::MessageExts
|
682
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
674
683
|
|
675
684
|
# The change in state of the asset.
|
676
685
|
#
|
@@ -696,13 +705,13 @@ module Google
|
|
696
705
|
|
697
706
|
# Request message for listing findings.
|
698
707
|
# @!attribute [rw] parent
|
699
|
-
# @return [String]
|
708
|
+
# @return [::String]
|
700
709
|
# Required. Name of the source the findings belong to. Its format is
|
701
710
|
# "organizations/[organization_id]/sources/[source_id]". To list across all
|
702
711
|
# sources provide a source_id of `-`. For example:
|
703
712
|
# organizations/\\{organization_id}/sources/-
|
704
713
|
# @!attribute [rw] filter
|
705
|
-
# @return [String]
|
714
|
+
# @return [::String]
|
706
715
|
# Expression that defines the filter to apply across findings.
|
707
716
|
# The expression is a list of one or more restrictions combined via logical
|
708
717
|
# operators `AND` and `OR`.
|
@@ -739,15 +748,21 @@ module Google
|
|
739
748
|
#
|
740
749
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
741
750
|
# Examples:
|
742
|
-
#
|
743
|
-
#
|
751
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
752
|
+
# `event_time = 1560208038000`
|
744
753
|
#
|
745
754
|
# security_marks.marks: `=`, `:`
|
746
755
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
747
756
|
#
|
748
757
|
# For example, `source_properties.size = 100` is a valid filter string.
|
758
|
+
#
|
759
|
+
# Use a partial match on the empty string to filter based on a property
|
760
|
+
# existing: `source_properties.my_property : ""`
|
761
|
+
#
|
762
|
+
# Use a negated partial match on the empty string to filter based on a
|
763
|
+
# property not existing: `-source_properties.my_property : ""`
|
749
764
|
# @!attribute [rw] order_by
|
750
|
-
# @return [String]
|
765
|
+
# @return [::String]
|
751
766
|
# Expression that defines what fields and order to use for sorting. The
|
752
767
|
# string value should follow SQL syntax: comma separated list of fields. For
|
753
768
|
# example: "name,resource_properties.a_property". The default sorting order
|
@@ -767,13 +782,13 @@ module Google
|
|
767
782
|
# source_properties
|
768
783
|
# security_marks.marks
|
769
784
|
# @!attribute [rw] read_time
|
770
|
-
# @return [Google::Protobuf::Timestamp]
|
785
|
+
# @return [::Google::Protobuf::Timestamp]
|
771
786
|
# Time used as a reference point when filtering findings. The filter is
|
772
787
|
# limited to findings existing at the supplied time and their values are
|
773
788
|
# those at that specific time. Absence of this field will default to the
|
774
789
|
# API's version of NOW.
|
775
790
|
# @!attribute [rw] compare_duration
|
776
|
-
# @return [Google::Protobuf::Duration]
|
791
|
+
# @return [::Google::Protobuf::Duration]
|
777
792
|
# When compare_duration is set, the ListFindingsResult's "state_change"
|
778
793
|
# attribute is updated to indicate whether the finding had its state changed,
|
779
794
|
# the finding's state remained unchanged, or if the finding was added in any
|
@@ -788,93 +803,94 @@ module Google
|
|
788
803
|
#
|
789
804
|
# Possible "state_change" values when compare_duration is specified:
|
790
805
|
#
|
791
|
-
# * "CHANGED": indicates that the finding was present
|
792
|
-
# compare_duration, but changed its
|
793
|
-
#
|
794
|
-
#
|
795
|
-
#
|
796
|
-
#
|
806
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
807
|
+
# filter at the start of compare_duration, but changed its
|
808
|
+
# state at read_time.
|
809
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
810
|
+
# filter at the start of compare_duration and did not change
|
811
|
+
# state at read_time.
|
812
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
813
|
+
# was not present at the start of compare_duration, but was
|
814
|
+
# present at read_time.
|
815
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
816
|
+
# filter at the start of compare_duration, but did not match
|
817
|
+
# the filter at read_time.
|
797
818
|
#
|
798
819
|
# If compare_duration is not specified, then the only possible state_change
|
799
820
|
# is "UNUSED", which will be the state_change set for all findings present at
|
800
821
|
# read_time.
|
801
|
-
# @!attribute [rw] having
|
802
|
-
# @return [String]
|
803
|
-
# Filter that specifies what fields to further filter on *after* the query
|
804
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
805
|
-
# are supported and requires compare_duration to be specified.
|
806
822
|
# @!attribute [rw] field_mask
|
807
|
-
# @return [Google::Protobuf::FieldMask]
|
823
|
+
# @return [::Google::Protobuf::FieldMask]
|
808
824
|
# Optional.
|
809
825
|
# A field mask to specify the Finding fields to be listed in the response.
|
810
826
|
# An empty field mask will list all fields.
|
811
827
|
# @!attribute [rw] page_token
|
812
|
-
# @return [String]
|
828
|
+
# @return [::String]
|
813
829
|
# The value returned by the last `ListFindingsResponse`; indicates
|
814
830
|
# that this is a continuation of a prior `ListFindings` call, and
|
815
831
|
# that the system should return the next page of data.
|
816
832
|
# @!attribute [rw] page_size
|
817
|
-
# @return [Integer]
|
833
|
+
# @return [::Integer]
|
818
834
|
# The maximum number of results to return in a single response. Default is
|
819
835
|
# 10, minimum is 1, maximum is 1000.
|
820
836
|
class ListFindingsRequest
|
821
|
-
include Google::Protobuf::MessageExts
|
822
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
837
|
+
include ::Google::Protobuf::MessageExts
|
838
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
823
839
|
end
|
824
840
|
|
825
841
|
# Response message for listing findings.
|
826
842
|
# @!attribute [rw] list_findings_results
|
827
|
-
# @return [Array
|
843
|
+
# @return [::Array<::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult>]
|
828
844
|
# Findings matching the list request.
|
829
845
|
# @!attribute [rw] read_time
|
830
|
-
# @return [Google::Protobuf::Timestamp]
|
846
|
+
# @return [::Google::Protobuf::Timestamp]
|
831
847
|
# Time used for executing the list request.
|
832
848
|
# @!attribute [rw] next_page_token
|
833
|
-
# @return [String]
|
849
|
+
# @return [::String]
|
834
850
|
# Token to retrieve the next page of results, or empty if there are no more
|
835
851
|
# results.
|
836
852
|
# @!attribute [rw] total_size
|
837
|
-
# @return [Integer]
|
853
|
+
# @return [::Integer]
|
838
854
|
# The total number of findings matching the query.
|
839
855
|
class ListFindingsResponse
|
840
|
-
include Google::Protobuf::MessageExts
|
841
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
856
|
+
include ::Google::Protobuf::MessageExts
|
857
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
842
858
|
|
843
859
|
# Result containing the Finding and its StateChange.
|
844
860
|
# @!attribute [rw] finding
|
845
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
861
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
846
862
|
# Finding matching the search request.
|
847
863
|
# @!attribute [rw] state_change
|
848
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::StateChange]
|
864
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::StateChange]
|
849
865
|
# State change of the finding between the points in time.
|
850
866
|
# @!attribute [rw] resource
|
851
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::Resource]
|
867
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::Resource]
|
852
868
|
# Output only. Resource that is associated with this finding.
|
853
869
|
class ListFindingsResult
|
854
|
-
include Google::Protobuf::MessageExts
|
855
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
870
|
+
include ::Google::Protobuf::MessageExts
|
871
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
856
872
|
|
857
|
-
# Information related to the Google Cloud
|
873
|
+
# Information related to the Google Cloud resource that is
|
858
874
|
# associated with this finding.
|
859
875
|
# @!attribute [rw] name
|
860
|
-
# @return [String]
|
876
|
+
# @return [::String]
|
861
877
|
# The full resource name of the resource. See:
|
862
878
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
863
879
|
# @!attribute [rw] project_name
|
864
|
-
# @return [String]
|
880
|
+
# @return [::String]
|
865
881
|
# The full resource name of project that the resource belongs to.
|
866
882
|
# @!attribute [rw] project_display_name
|
867
|
-
# @return [String]
|
883
|
+
# @return [::String]
|
868
884
|
# The human readable name of project that the resource belongs to.
|
869
885
|
# @!attribute [rw] parent_name
|
870
|
-
# @return [String]
|
886
|
+
# @return [::String]
|
871
887
|
# The full resource name of resource's parent.
|
872
888
|
# @!attribute [rw] parent_display_name
|
873
|
-
# @return [String]
|
889
|
+
# @return [::String]
|
874
890
|
# The human readable name of resource's parent.
|
875
891
|
class Resource
|
876
|
-
include Google::Protobuf::MessageExts
|
877
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
892
|
+
include ::Google::Protobuf::MessageExts
|
893
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
878
894
|
end
|
879
895
|
|
880
896
|
# The change in state of the finding.
|
@@ -909,35 +925,35 @@ module Google
|
|
909
925
|
|
910
926
|
# Request message for updating a finding's state.
|
911
927
|
# @!attribute [rw] name
|
912
|
-
# @return [String]
|
928
|
+
# @return [::String]
|
913
929
|
# Required. The relative resource name of the finding. See:
|
914
930
|
# https://cloud.google.com/apis/design/resource_names#relative_resource_name
|
915
931
|
# Example:
|
916
932
|
# "organizations/\\{organization_id}/sources/\\{source_id}/finding/\\{finding_id}".
|
917
933
|
# @!attribute [rw] state
|
918
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
|
934
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
|
919
935
|
# Required. The desired State of the finding.
|
920
936
|
# @!attribute [rw] start_time
|
921
|
-
# @return [Google::Protobuf::Timestamp]
|
937
|
+
# @return [::Google::Protobuf::Timestamp]
|
922
938
|
# Required. The time at which the updated state takes effect.
|
923
939
|
class SetFindingStateRequest
|
924
|
-
include Google::Protobuf::MessageExts
|
925
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
940
|
+
include ::Google::Protobuf::MessageExts
|
941
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
926
942
|
end
|
927
943
|
|
928
944
|
# Request message for running asset discovery for an organization.
|
929
945
|
# @!attribute [rw] parent
|
930
|
-
# @return [String]
|
946
|
+
# @return [::String]
|
931
947
|
# Required. Name of the organization to run asset discovery for. Its format
|
932
948
|
# is "organizations/[organization_id]".
|
933
949
|
class RunAssetDiscoveryRequest
|
934
|
-
include Google::Protobuf::MessageExts
|
935
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
950
|
+
include ::Google::Protobuf::MessageExts
|
951
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
936
952
|
end
|
937
953
|
|
938
954
|
# Request message for updating or creating a finding.
|
939
955
|
# @!attribute [rw] finding
|
940
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
956
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
941
957
|
# Required. The finding resource to update or create if it does not already
|
942
958
|
# exist. parent, security_marks, and update_time will be ignored.
|
943
959
|
#
|
@@ -945,7 +961,7 @@ module Google
|
|
945
961
|
# alphanumeric and less than or equal to 32 characters and greater than 0
|
946
962
|
# characters in length.
|
947
963
|
# @!attribute [rw] update_mask
|
948
|
-
# @return [Google::Protobuf::FieldMask]
|
964
|
+
# @return [::Google::Protobuf::FieldMask]
|
949
965
|
# The FieldMask to use when updating the finding resource. This field should
|
950
966
|
# not be specified when creating a finding.
|
951
967
|
#
|
@@ -954,71 +970,71 @@ module Google
|
|
954
970
|
# be added/updated by using "source_properties.<property key>" in the field
|
955
971
|
# mask.
|
956
972
|
class UpdateFindingRequest
|
957
|
-
include Google::Protobuf::MessageExts
|
958
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
973
|
+
include ::Google::Protobuf::MessageExts
|
974
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
959
975
|
end
|
960
976
|
|
961
977
|
# Request message for updating a notification config.
|
962
978
|
# @!attribute [rw] notification_config
|
963
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
|
979
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
|
964
980
|
# Required. The notification config to update.
|
965
981
|
# @!attribute [rw] update_mask
|
966
|
-
# @return [Google::Protobuf::FieldMask]
|
982
|
+
# @return [::Google::Protobuf::FieldMask]
|
967
983
|
# The FieldMask to use when updating the notification config.
|
968
984
|
#
|
969
985
|
# If empty all mutable fields will be updated.
|
970
986
|
class UpdateNotificationConfigRequest
|
971
|
-
include Google::Protobuf::MessageExts
|
972
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
987
|
+
include ::Google::Protobuf::MessageExts
|
988
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
973
989
|
end
|
974
990
|
|
975
991
|
# Request message for updating an organization's settings.
|
976
992
|
# @!attribute [rw] organization_settings
|
977
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings]
|
993
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings]
|
978
994
|
# Required. The organization settings resource to update.
|
979
995
|
# @!attribute [rw] update_mask
|
980
|
-
# @return [Google::Protobuf::FieldMask]
|
996
|
+
# @return [::Google::Protobuf::FieldMask]
|
981
997
|
# The FieldMask to use when updating the settings resource.
|
982
998
|
#
|
983
999
|
# If empty all mutable fields will be updated.
|
984
1000
|
class UpdateOrganizationSettingsRequest
|
985
|
-
include Google::Protobuf::MessageExts
|
986
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
1001
|
+
include ::Google::Protobuf::MessageExts
|
1002
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
987
1003
|
end
|
988
1004
|
|
989
1005
|
# Request message for updating a source.
|
990
1006
|
# @!attribute [rw] source
|
991
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::Source]
|
1007
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Source]
|
992
1008
|
# Required. The source resource to update.
|
993
1009
|
# @!attribute [rw] update_mask
|
994
|
-
# @return [Google::Protobuf::FieldMask]
|
1010
|
+
# @return [::Google::Protobuf::FieldMask]
|
995
1011
|
# The FieldMask to use when updating the source resource.
|
996
1012
|
#
|
997
1013
|
# If empty all mutable fields will be updated.
|
998
1014
|
class UpdateSourceRequest
|
999
|
-
include Google::Protobuf::MessageExts
|
1000
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
1015
|
+
include ::Google::Protobuf::MessageExts
|
1016
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
1001
1017
|
end
|
1002
1018
|
|
1003
1019
|
# Request message for updating a SecurityMarks resource.
|
1004
1020
|
# @!attribute [rw] security_marks
|
1005
|
-
# @return [Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
|
1021
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
|
1006
1022
|
# Required. The security marks resource to update.
|
1007
1023
|
# @!attribute [rw] update_mask
|
1008
|
-
# @return [Google::Protobuf::FieldMask]
|
1024
|
+
# @return [::Google::Protobuf::FieldMask]
|
1009
1025
|
# The FieldMask to use when updating the security marks resource.
|
1010
1026
|
#
|
1011
1027
|
# The field mask must not contain duplicate fields.
|
1012
1028
|
# If empty or set to "marks", all marks will be replaced. Individual
|
1013
1029
|
# marks can be updated using "marks.<mark_key>".
|
1014
1030
|
# @!attribute [rw] start_time
|
1015
|
-
# @return [Google::Protobuf::Timestamp]
|
1031
|
+
# @return [::Google::Protobuf::Timestamp]
|
1016
1032
|
# The time at which the updated SecurityMarks take effect.
|
1017
1033
|
# If not set uses current server time. Updates will be applied to the
|
1018
1034
|
# SecurityMarks that are active immediately preceding this time.
|
1019
1035
|
class UpdateSecurityMarksRequest
|
1020
|
-
include Google::Protobuf::MessageExts
|
1021
|
-
extend Google::Protobuf::MessageExts::ClassMethods
|
1036
|
+
include ::Google::Protobuf::MessageExts
|
1037
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
1022
1038
|
end
|
1023
1039
|
end
|
1024
1040
|
end
|