google-cloud-security_center-v1p1beta1 0.2.0 → 0.3.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/README.md +4 -0
- data/lib/google/cloud/security_center/v1p1beta1/security_center/client.rb +72 -51
- data/lib/google/cloud/security_center/v1p1beta1/security_center/operations.rb +3 -1
- data/lib/google/cloud/security_center/v1p1beta1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb +2 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb +27 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb +0 -4
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_services_pb.rb +3 -4
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/asset.rb +25 -22
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/finding.rb +13 -13
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb +6 -5
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb +4 -1
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb +2 -2
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb +48 -0
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb +3 -3
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb +61 -45
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/source.rb +2 -2
- metadata +7 -6
- data/lib/google/cloud/common_resources_pb.rb +0 -15
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 99f975084a95d1388ef9a6695813361834cfa00ab558af4383658401f52de9c8
|
4
|
+
data.tar.gz: 86305b1c0fa805069d5076aeb3f0b282501a8e07f289ec703feb3ff2b6cde34e
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 8cb8b1b8f0bcb0fd50e6fea50a676c3a2c045854c4659481e6fbc145cf90e1eb96f9a60140364acf1b4912fd15cd84548bb5e55d3f4d64494eafd3a0b6bbc2f1
|
7
|
+
data.tar.gz: 187063b9cc81771df655684c61f747755d7c7cf0b437d7bca5c86037bdc32d271c3e107174fce479769677bcbd7190431b1331666d105652a34a0dec93495b0f
|
data/README.md
CHANGED
@@ -18,6 +18,7 @@ In order to use this library, you first need to go through the following steps:
|
|
18
18
|
|
19
19
|
1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
|
20
20
|
1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
|
21
|
+
1. [Enable the API.](https://console.cloud.google.com/apis/library/securitycenter.googleapis.com)
|
21
22
|
1. {file:AUTHENTICATION.md Set up authentication.}
|
22
23
|
|
23
24
|
## Quick Start
|
@@ -33,6 +34,9 @@ response = client.create_source request
|
|
33
34
|
View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-security_center-v1p1beta1/latest)
|
34
35
|
for class and method documentation.
|
35
36
|
|
37
|
+
See also the [Product Documentation](https://cloud.google.com/security-command-center)
|
38
|
+
for general usage information.
|
39
|
+
|
36
40
|
## Enabling Logging
|
37
41
|
|
38
42
|
To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
|
@@ -105,7 +105,7 @@ module Google
|
|
105
105
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
106
106
|
}
|
107
107
|
|
108
|
-
default_config.rpcs.group_assets.timeout =
|
108
|
+
default_config.rpcs.group_assets.timeout = 480.0
|
109
109
|
default_config.rpcs.group_assets.retry_policy = {
|
110
110
|
initial_delay: 0.1,
|
111
111
|
max_delay: 60.0,
|
@@ -113,7 +113,7 @@ module Google
|
|
113
113
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
114
114
|
}
|
115
115
|
|
116
|
-
default_config.rpcs.group_findings.timeout =
|
116
|
+
default_config.rpcs.group_findings.timeout = 480.0
|
117
117
|
default_config.rpcs.group_findings.retry_policy = {
|
118
118
|
initial_delay: 0.1,
|
119
119
|
max_delay: 60.0,
|
@@ -121,7 +121,7 @@ module Google
|
|
121
121
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
122
122
|
}
|
123
123
|
|
124
|
-
default_config.rpcs.list_assets.timeout =
|
124
|
+
default_config.rpcs.list_assets.timeout = 480.0
|
125
125
|
default_config.rpcs.list_assets.retry_policy = {
|
126
126
|
initial_delay: 0.1,
|
127
127
|
max_delay: 60.0,
|
@@ -129,7 +129,7 @@ module Google
|
|
129
129
|
retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
|
130
130
|
}
|
131
131
|
|
132
|
-
default_config.rpcs.list_findings.timeout =
|
132
|
+
default_config.rpcs.list_findings.timeout = 480.0
|
133
133
|
default_config.rpcs.list_findings.retry_policy = {
|
134
134
|
initial_delay: 0.1,
|
135
135
|
max_delay: 60.0,
|
@@ -175,7 +175,7 @@ module Google
|
|
175
175
|
|
176
176
|
default_config.rpcs.update_source.timeout = 60.0
|
177
177
|
|
178
|
-
default_config.rpcs.update_security_marks.timeout =
|
178
|
+
default_config.rpcs.update_security_marks.timeout = 480.0
|
179
179
|
|
180
180
|
default_config
|
181
181
|
end
|
@@ -841,7 +841,7 @@ module Google
|
|
841
841
|
# @param options [::Gapic::CallOptions, ::Hash]
|
842
842
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
843
843
|
#
|
844
|
-
# @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil,
|
844
|
+
# @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil, page_token: nil, page_size: nil)
|
845
845
|
# Pass arguments to `group_assets` via keyword arguments. Note that at
|
846
846
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
847
847
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
@@ -883,15 +883,15 @@ module Google
|
|
883
883
|
#
|
884
884
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
885
885
|
# Examples:
|
886
|
-
#
|
887
|
-
#
|
886
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
887
|
+
# `update_time = 1560208038000`
|
888
888
|
#
|
889
889
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
890
890
|
#
|
891
891
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
892
892
|
# Examples:
|
893
|
-
#
|
894
|
-
#
|
893
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
894
|
+
# `create_time = 1560208038000`
|
895
895
|
#
|
896
896
|
# * iam_policy.policy_blob: `=`, `:`
|
897
897
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
@@ -906,6 +906,12 @@ module Google
|
|
906
906
|
# * security_center_properties.resource_owners: `=`, `:`
|
907
907
|
#
|
908
908
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
909
|
+
#
|
910
|
+
# Use a partial match on the empty string to filter based on a property
|
911
|
+
# existing: `resource_properties.my_property : ""`
|
912
|
+
#
|
913
|
+
# Use a negated partial match on the empty string to filter based on a
|
914
|
+
# property not existing: `-resource_properties.my_property : ""`
|
909
915
|
# @param group_by [::String]
|
910
916
|
# Required. Expression that defines what assets fields to use for grouping.
|
911
917
|
# The string value should follow SQL syntax: comma separated list of fields.
|
@@ -958,10 +964,6 @@ module Google
|
|
958
964
|
# to assets existing at the supplied time and their values are those at that
|
959
965
|
# specific time. Absence of this field will default to the API's version of
|
960
966
|
# NOW.
|
961
|
-
# @param having [::String]
|
962
|
-
# Filter that specifies what fields to further filter on *after* the query
|
963
|
-
# filter has been executed. Currently only `state_change` is supported and
|
964
|
-
# requires compare_duration to be specified.
|
965
967
|
# @param page_token [::String]
|
966
968
|
# The value returned by the last `GroupAssetsResponse`; indicates
|
967
969
|
# that this is a continuation of a prior `GroupAssets` call, and that the
|
@@ -1033,7 +1035,7 @@ module Google
|
|
1033
1035
|
# @param options [::Gapic::CallOptions, ::Hash]
|
1034
1036
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
1035
1037
|
#
|
1036
|
-
# @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil,
|
1038
|
+
# @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil, page_token: nil, page_size: nil)
|
1037
1039
|
# Pass arguments to `group_findings` via keyword arguments. Note that at
|
1038
1040
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
1039
1041
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
@@ -1080,13 +1082,19 @@ module Google
|
|
1080
1082
|
#
|
1081
1083
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
1082
1084
|
# Examples:
|
1083
|
-
#
|
1084
|
-
#
|
1085
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
1086
|
+
# `event_time = 1560208038000`
|
1085
1087
|
#
|
1086
1088
|
# * security_marks.marks: `=`, `:`
|
1087
1089
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
1088
1090
|
#
|
1089
1091
|
# For example, `source_properties.size = 100` is a valid filter string.
|
1092
|
+
#
|
1093
|
+
# Use a partial match on the empty string to filter based on a property
|
1094
|
+
# existing: `source_properties.my_property : ""`
|
1095
|
+
#
|
1096
|
+
# Use a negated partial match on the empty string to filter based on a
|
1097
|
+
# property not existing: `-source_properties.my_property : ""`
|
1090
1098
|
# @param group_by [::String]
|
1091
1099
|
# Required. Expression that defines what assets fields to use for grouping
|
1092
1100
|
# (including `state_change`). The string value should follow SQL syntax:
|
@@ -1121,12 +1129,18 @@ module Google
|
|
1121
1129
|
#
|
1122
1130
|
# Possible "state_change" values when compare_duration is specified:
|
1123
1131
|
#
|
1124
|
-
# * "CHANGED": indicates that the finding was present
|
1125
|
-
# compare_duration, but changed its
|
1126
|
-
#
|
1127
|
-
#
|
1128
|
-
#
|
1129
|
-
#
|
1132
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
1133
|
+
# filter at the start of compare_duration, but changed its
|
1134
|
+
# state at read_time.
|
1135
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
1136
|
+
# filter at the start of compare_duration and did not change
|
1137
|
+
# state at read_time.
|
1138
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
1139
|
+
# was not present at the start of compare_duration, but was
|
1140
|
+
# present at read_time.
|
1141
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
1142
|
+
# filter at the start of compare_duration, but did not match
|
1143
|
+
# the filter at read_time.
|
1130
1144
|
#
|
1131
1145
|
# If compare_duration is not specified, then the only possible state_change
|
1132
1146
|
# is "UNUSED", which will be the state_change set for all findings present
|
@@ -1134,10 +1148,6 @@ module Google
|
|
1134
1148
|
#
|
1135
1149
|
# If this field is set then `state_change` must be a specified field in
|
1136
1150
|
# `group_by`.
|
1137
|
-
# @param having [::String]
|
1138
|
-
# Filter that specifies what fields to further filter on *after* the query
|
1139
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
1140
|
-
# are supported and requires compare_duration to be specified.
|
1141
1151
|
# @param page_token [::String]
|
1142
1152
|
# The value returned by the last `GroupFindingsResponse`; indicates
|
1143
1153
|
# that this is a continuation of a prior `GroupFindings` call, and
|
@@ -1205,7 +1215,7 @@ module Google
|
|
1205
1215
|
# @param options [::Gapic::CallOptions, ::Hash]
|
1206
1216
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
1207
1217
|
#
|
1208
|
-
# @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil,
|
1218
|
+
# @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
|
1209
1219
|
# Pass arguments to `list_assets` via keyword arguments. Note that at
|
1210
1220
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
1211
1221
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
@@ -1247,15 +1257,15 @@ module Google
|
|
1247
1257
|
#
|
1248
1258
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
1249
1259
|
# Examples:
|
1250
|
-
#
|
1251
|
-
#
|
1260
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
1261
|
+
# `update_time = 1560208038000`
|
1252
1262
|
#
|
1253
1263
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
1254
1264
|
#
|
1255
1265
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
1256
1266
|
# Examples:
|
1257
|
-
#
|
1258
|
-
#
|
1267
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
1268
|
+
# `create_time = 1560208038000`
|
1259
1269
|
#
|
1260
1270
|
# * iam_policy.policy_blob: `=`, `:`
|
1261
1271
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
@@ -1270,6 +1280,12 @@ module Google
|
|
1270
1280
|
# * security_center_properties.resource_owners: `=`, `:`
|
1271
1281
|
#
|
1272
1282
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
1283
|
+
#
|
1284
|
+
# Use a partial match on the empty string to filter based on a property
|
1285
|
+
# existing: `resource_properties.my_property : ""`
|
1286
|
+
#
|
1287
|
+
# Use a negated partial match on the empty string to filter based on a
|
1288
|
+
# property not existing: `-resource_properties.my_property : ""`
|
1273
1289
|
# @param order_by [::String]
|
1274
1290
|
# Expression that defines what fields and order to use for sorting. The
|
1275
1291
|
# string value should follow SQL syntax: comma separated list of fields. For
|
@@ -1322,10 +1338,6 @@ module Google
|
|
1322
1338
|
# If compare_duration is not specified, then the only possible state_change
|
1323
1339
|
# is "UNUSED", which will be the state_change set for all assets present at
|
1324
1340
|
# read_time.
|
1325
|
-
# @param having [::String]
|
1326
|
-
# Filter that specifies what fields to further filter on *after* the query
|
1327
|
-
# filter has been executed. Currently only `state_change` is supported and
|
1328
|
-
# requires compare_duration to be specified.
|
1329
1341
|
# @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
|
1330
1342
|
# Optional.
|
1331
1343
|
# A field mask to specify the ListAssetsResult fields to be listed in the
|
@@ -1401,7 +1413,7 @@ module Google
|
|
1401
1413
|
# @param options [::Gapic::CallOptions, ::Hash]
|
1402
1414
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
1403
1415
|
#
|
1404
|
-
# @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil,
|
1416
|
+
# @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
|
1405
1417
|
# Pass arguments to `list_findings` via keyword arguments. Note that at
|
1406
1418
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
1407
1419
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
@@ -1448,13 +1460,19 @@ module Google
|
|
1448
1460
|
#
|
1449
1461
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
1450
1462
|
# Examples:
|
1451
|
-
#
|
1452
|
-
#
|
1463
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
1464
|
+
# `event_time = 1560208038000`
|
1453
1465
|
#
|
1454
1466
|
# security_marks.marks: `=`, `:`
|
1455
1467
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
1456
1468
|
#
|
1457
1469
|
# For example, `source_properties.size = 100` is a valid filter string.
|
1470
|
+
#
|
1471
|
+
# Use a partial match on the empty string to filter based on a property
|
1472
|
+
# existing: `source_properties.my_property : ""`
|
1473
|
+
#
|
1474
|
+
# Use a negated partial match on the empty string to filter based on a
|
1475
|
+
# property not existing: `-source_properties.my_property : ""`
|
1458
1476
|
# @param order_by [::String]
|
1459
1477
|
# Expression that defines what fields and order to use for sorting. The
|
1460
1478
|
# string value should follow SQL syntax: comma separated list of fields. For
|
@@ -1494,20 +1512,22 @@ module Google
|
|
1494
1512
|
#
|
1495
1513
|
# Possible "state_change" values when compare_duration is specified:
|
1496
1514
|
#
|
1497
|
-
# * "CHANGED": indicates that the finding was present
|
1498
|
-
# compare_duration, but changed its
|
1499
|
-
#
|
1500
|
-
#
|
1501
|
-
#
|
1502
|
-
#
|
1515
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
1516
|
+
# filter at the start of compare_duration, but changed its
|
1517
|
+
# state at read_time.
|
1518
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
1519
|
+
# filter at the start of compare_duration and did not change
|
1520
|
+
# state at read_time.
|
1521
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
1522
|
+
# was not present at the start of compare_duration, but was
|
1523
|
+
# present at read_time.
|
1524
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
1525
|
+
# filter at the start of compare_duration, but did not match
|
1526
|
+
# the filter at read_time.
|
1503
1527
|
#
|
1504
1528
|
# If compare_duration is not specified, then the only possible state_change
|
1505
1529
|
# is "UNUSED", which will be the state_change set for all findings present at
|
1506
1530
|
# read_time.
|
1507
|
-
# @param having [::String]
|
1508
|
-
# Filter that specifies what fields to further filter on *after* the query
|
1509
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
1510
|
-
# are supported and requires compare_duration to be specified.
|
1511
1531
|
# @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
|
1512
1532
|
# Optional.
|
1513
1533
|
# A field mask to specify the Finding fields to be listed in the response.
|
@@ -2087,7 +2107,8 @@ module Google
|
|
2087
2107
|
end
|
2088
2108
|
|
2089
2109
|
##
|
2090
|
-
# Updates a notification config.
|
2110
|
+
# Updates a notification config. The following update
|
2111
|
+
# fields are allowed: description, pubsub_topic, streaming_config.filter
|
2091
2112
|
#
|
2092
2113
|
# @overload update_notification_config(request, options = nil)
|
2093
2114
|
# Pass arguments to `update_notification_config` via a request object, either of type
|
@@ -2485,7 +2506,7 @@ module Google
|
|
2485
2506
|
def rpcs
|
2486
2507
|
@rpcs ||= begin
|
2487
2508
|
parent_rpcs = nil
|
2488
|
-
parent_rpcs = @parent_config.rpcs if @parent_config&.respond_to?
|
2509
|
+
parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
|
2489
2510
|
Rpcs.new parent_rpcs
|
2490
2511
|
end
|
2491
2512
|
end
|
@@ -85,6 +85,8 @@ module Google
|
|
85
85
|
if credentials.is_a?(String) || credentials.is_a?(Hash)
|
86
86
|
credentials = Credentials.new credentials, scope: @config.scope
|
87
87
|
end
|
88
|
+
@quota_project_id = @config.quota_project
|
89
|
+
@quota_project_id ||= credentials.quota_project_id if credentials.respond_to? :quota_project_id
|
88
90
|
|
89
91
|
@operations_stub = ::Gapic::ServiceStub.new(
|
90
92
|
::Google::Longrunning::Operations::Stub,
|
@@ -501,7 +503,7 @@ module Google
|
|
501
503
|
def rpcs
|
502
504
|
@rpcs ||= begin
|
503
505
|
parent_rpcs = nil
|
504
|
-
parent_rpcs = @parent_config.rpcs if @parent_config&.respond_to?
|
506
|
+
parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
|
505
507
|
Rpcs.new parent_rpcs
|
506
508
|
end
|
507
509
|
end
|
@@ -6,10 +6,12 @@ require 'google/protobuf'
|
|
6
6
|
require 'google/api/annotations_pb'
|
7
7
|
require 'google/cloud/securitycenter/v1p1beta1/asset_pb'
|
8
8
|
require 'google/cloud/securitycenter/v1p1beta1/finding_pb'
|
9
|
+
require 'google/cloud/securitycenter/v1p1beta1/resource_pb'
|
9
10
|
Google::Protobuf::DescriptorPool.generated_pool.build do
|
10
11
|
add_file("google/cloud/securitycenter/v1p1beta1/notification_message.proto", :syntax => :proto3) do
|
11
12
|
add_message "google.cloud.securitycenter.v1p1beta1.NotificationMessage" do
|
12
13
|
optional :notification_config_name, :string, 1
|
14
|
+
optional :resource, :message, 3, "google.cloud.securitycenter.v1p1beta1.Resource"
|
13
15
|
oneof :event do
|
14
16
|
optional :finding, :message, 2, "google.cloud.securitycenter.v1p1beta1.Finding"
|
15
17
|
end
|
@@ -0,0 +1,27 @@
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
+
# source: google/cloud/securitycenter/v1p1beta1/resource.proto
|
3
|
+
|
4
|
+
require 'google/protobuf'
|
5
|
+
|
6
|
+
require 'google/api/annotations_pb'
|
7
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
8
|
+
add_file("google/cloud/securitycenter/v1p1beta1/resource.proto", :syntax => :proto3) do
|
9
|
+
add_message "google.cloud.securitycenter.v1p1beta1.Resource" do
|
10
|
+
optional :name, :string, 1
|
11
|
+
optional :project, :string, 2
|
12
|
+
optional :project_display_name, :string, 3
|
13
|
+
optional :parent, :string, 4
|
14
|
+
optional :parent_display_name, :string, 5
|
15
|
+
end
|
16
|
+
end
|
17
|
+
end
|
18
|
+
|
19
|
+
module Google
|
20
|
+
module Cloud
|
21
|
+
module SecurityCenter
|
22
|
+
module V1p1beta1
|
23
|
+
Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Resource").msgclass
|
24
|
+
end
|
25
|
+
end
|
26
|
+
end
|
27
|
+
end
|
@@ -56,7 +56,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
56
56
|
optional :group_by, :string, 3
|
57
57
|
optional :compare_duration, :message, 4, "google.protobuf.Duration"
|
58
58
|
optional :read_time, :message, 5, "google.protobuf.Timestamp"
|
59
|
-
optional :having, :string, 6
|
60
59
|
optional :page_token, :string, 7
|
61
60
|
optional :page_size, :int32, 8
|
62
61
|
end
|
@@ -72,7 +71,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
72
71
|
optional :group_by, :string, 3
|
73
72
|
optional :read_time, :message, 4, "google.protobuf.Timestamp"
|
74
73
|
optional :compare_duration, :message, 5, "google.protobuf.Duration"
|
75
|
-
optional :having, :string, 6
|
76
74
|
optional :page_token, :string, 7
|
77
75
|
optional :page_size, :int32, 8
|
78
76
|
end
|
@@ -110,7 +108,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
110
108
|
optional :order_by, :string, 3
|
111
109
|
optional :read_time, :message, 4, "google.protobuf.Timestamp"
|
112
110
|
optional :compare_duration, :message, 5, "google.protobuf.Duration"
|
113
|
-
optional :having, :string, 6
|
114
111
|
optional :field_mask, :message, 7, "google.protobuf.FieldMask"
|
115
112
|
optional :page_token, :string, 8
|
116
113
|
optional :page_size, :int32, 9
|
@@ -137,7 +134,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
137
134
|
optional :order_by, :string, 3
|
138
135
|
optional :read_time, :message, 4, "google.protobuf.Timestamp"
|
139
136
|
optional :compare_duration, :message, 5, "google.protobuf.Duration"
|
140
|
-
optional :having, :string, 6
|
141
137
|
optional :field_mask, :message, 7, "google.protobuf.FieldMask"
|
142
138
|
optional :page_token, :string, 8
|
143
139
|
optional :page_size, :int32, 9
|
@@ -1,7 +1,7 @@
|
|
1
1
|
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
2
|
# Source: google/cloud/securitycenter/v1p1beta1/securitycenter_service.proto for package 'Google.Cloud.SecurityCenter.V1p1beta1'
|
3
3
|
# Original file comments:
|
4
|
-
# Copyright
|
4
|
+
# Copyright 2020 Google LLC
|
5
5
|
#
|
6
6
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
7
7
|
# you may not use this file except in compliance with the License.
|
@@ -15,7 +15,6 @@
|
|
15
15
|
# See the License for the specific language governing permissions and
|
16
16
|
# limitations under the License.
|
17
17
|
#
|
18
|
-
#
|
19
18
|
|
20
19
|
require 'grpc'
|
21
20
|
require 'google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb'
|
@@ -86,11 +85,11 @@ module Google
|
|
86
85
|
rpc :SetIamPolicy, Google::Iam::V1::SetIamPolicyRequest, Google::Iam::V1::Policy
|
87
86
|
# Returns the permissions that a caller has on the specified source.
|
88
87
|
rpc :TestIamPermissions, Google::Iam::V1::TestIamPermissionsRequest, Google::Iam::V1::TestIamPermissionsResponse
|
89
|
-
#
|
90
88
|
# Creates or updates a finding. The corresponding source must exist for a
|
91
89
|
# finding creation to succeed.
|
92
90
|
rpc :UpdateFinding, Google::Cloud::SecurityCenter::V1p1beta1::UpdateFindingRequest, Google::Cloud::SecurityCenter::V1p1beta1::Finding
|
93
|
-
# Updates a notification config.
|
91
|
+
# Updates a notification config. The following update
|
92
|
+
# fields are allowed: description, pubsub_topic, streaming_config.filter
|
94
93
|
rpc :UpdateNotificationConfig, Google::Cloud::SecurityCenter::V1p1beta1::UpdateNotificationConfigRequest, Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig
|
95
94
|
# Updates an organization's settings.
|
96
95
|
rpc :UpdateOrganizationSettings, Google::Cloud::SecurityCenter::V1p1beta1::UpdateOrganizationSettingsRequest, Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings
|
@@ -21,12 +21,13 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
25
|
-
#
|
24
|
+
# Security Command Center representation of a Google Cloud
|
25
|
+
# resource.
|
26
26
|
#
|
27
|
-
# The Asset is a
|
28
|
-
#
|
29
|
-
#
|
27
|
+
# The Asset is a Security Command Center resource that captures information
|
28
|
+
# about a single Google Cloud resource. All modifications to an Asset are only
|
29
|
+
# within the context of Security Command Center and don't affect the referenced
|
30
|
+
# Google Cloud resource.
|
30
31
|
# @!attribute [rw] name
|
31
32
|
# @return [::String]
|
32
33
|
# The relative resource name of this asset. See:
|
@@ -35,45 +36,46 @@ module Google
|
|
35
36
|
# "organizations/\\{organization_id}/assets/\\{asset_id}".
|
36
37
|
# @!attribute [rw] security_center_properties
|
37
38
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::SecurityCenterProperties]
|
38
|
-
#
|
39
|
-
#
|
39
|
+
# Security Command Center managed properties. These properties are managed by
|
40
|
+
# Security Command Center and cannot be modified by the user.
|
40
41
|
# @!attribute [rw] resource_properties
|
41
42
|
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
42
43
|
# Resource managed properties. These properties are managed and defined by
|
43
|
-
# the
|
44
|
+
# the Google Cloud resource and cannot be modified by the user.
|
44
45
|
# @!attribute [rw] security_marks
|
45
46
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
|
46
47
|
# User specified security marks. These marks are entirely managed by the user
|
47
48
|
# and come from the SecurityMarks resource that belongs to the asset.
|
48
49
|
# @!attribute [rw] create_time
|
49
50
|
# @return [::Google::Protobuf::Timestamp]
|
50
|
-
# The time at which the asset was created in
|
51
|
+
# The time at which the asset was created in Security Command Center.
|
51
52
|
# @!attribute [rw] update_time
|
52
53
|
# @return [::Google::Protobuf::Timestamp]
|
53
54
|
# The time at which the asset was last updated, added, or deleted in Cloud
|
54
55
|
# SCC.
|
55
56
|
# @!attribute [rw] iam_policy
|
56
57
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::IamPolicy]
|
57
|
-
# IAM Policy information associated with the
|
58
|
-
#
|
59
|
-
# resource and cannot be modified by the
|
58
|
+
# Cloud IAM Policy information associated with the Google Cloud resource
|
59
|
+
# described by the Security Command Center asset. This information is managed
|
60
|
+
# and defined by the Google Cloud resource and cannot be modified by the
|
61
|
+
# user.
|
60
62
|
class Asset
|
61
63
|
include ::Google::Protobuf::MessageExts
|
62
64
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
63
65
|
|
64
|
-
#
|
65
|
-
# cannot be modified by the user.
|
66
|
+
# Security Command Center managed properties. These properties are managed by
|
67
|
+
# Security Command Center and cannot be modified by the user.
|
66
68
|
# @!attribute [rw] resource_name
|
67
69
|
# @return [::String]
|
68
|
-
# The full resource name of the
|
70
|
+
# The full resource name of the Google Cloud resource this asset
|
69
71
|
# represents. This field is immutable after create time. See:
|
70
72
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
71
73
|
# @!attribute [rw] resource_type
|
72
74
|
# @return [::String]
|
73
|
-
# The type of the
|
75
|
+
# The type of the Google Cloud resource. Examples include: APPLICATION,
|
74
76
|
# PROJECT, and ORGANIZATION. This is a case insensitive field defined by
|
75
|
-
#
|
76
|
-
# after create time.
|
77
|
+
# Security Command Center and/or the producer of the resource and is
|
78
|
+
# immutable after create time.
|
77
79
|
# @!attribute [rw] resource_parent
|
78
80
|
# @return [::String]
|
79
81
|
# The full resource name of the immediate parent of the resource. See:
|
@@ -99,13 +101,14 @@ module Google
|
|
99
101
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
100
102
|
end
|
101
103
|
|
102
|
-
# IAM Policy information associated with the
|
103
|
-
#
|
104
|
-
# resource and cannot be modified by the
|
104
|
+
# Cloud IAM Policy information associated with the Google Cloud resource
|
105
|
+
# described by the Security Command Center asset. This information is managed
|
106
|
+
# and defined by the Google Cloud resource and cannot be modified by the
|
107
|
+
# user.
|
105
108
|
# @!attribute [rw] policy_blob
|
106
109
|
# @return [::String]
|
107
110
|
# The JSON representation of the Policy associated with the asset.
|
108
|
-
# See https://cloud.google.com/iam/reference/rest/v1/Policy for
|
111
|
+
# See https://cloud.google.com/iam/docs/reference/rest/v1/Policy for
|
109
112
|
# format details.
|
110
113
|
class IamPolicy
|
111
114
|
include ::Google::Protobuf::MessageExts
|
@@ -21,12 +21,12 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
24
|
+
# Security Command Center finding.
|
25
25
|
#
|
26
26
|
# A finding is a record of assessment data (security, risk, health or privacy)
|
27
|
-
# ingested into
|
28
|
-
# policy testing, and enforcement. For example, an XSS vulnerability
|
29
|
-
# App Engine application is a finding.
|
27
|
+
# ingested into Security Command Center for presentation, notification,
|
28
|
+
# analysis, policy testing, and enforcement. For example, an XSS vulnerability
|
29
|
+
# in an App Engine application is a finding.
|
30
30
|
# @!attribute [rw] name
|
31
31
|
# @return [::String]
|
32
32
|
# The relative resource name of this finding. See:
|
@@ -42,12 +42,12 @@ module Google
|
|
42
42
|
# "organizations/\\{organization_id}/sources/\\{source_id}"
|
43
43
|
# @!attribute [rw] resource_name
|
44
44
|
# @return [::String]
|
45
|
-
# For findings on Google Cloud
|
46
|
-
# name of the
|
45
|
+
# For findings on Google Cloud resources, the full resource
|
46
|
+
# name of the Google Cloud resource this finding is for. See:
|
47
47
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
48
|
-
# When the finding is for a non-
|
49
|
-
# customer or partner defined string.
|
50
|
-
#
|
48
|
+
# When the finding is for a non-Google Cloud resource, the resourceName can
|
49
|
+
# be a customer or partner defined string. This field is immutable after
|
50
|
+
# creation time.
|
51
51
|
# @!attribute [rw] state
|
52
52
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
|
53
53
|
# The state of the finding.
|
@@ -58,9 +58,9 @@ module Google
|
|
58
58
|
# Example: "XSS_FLASH_INJECTION"
|
59
59
|
# @!attribute [rw] external_uri
|
60
60
|
# @return [::String]
|
61
|
-
# The URI that, if available, points to a web page outside of
|
62
|
-
# where additional information about the finding can be found.
|
63
|
-
# guaranteed to be either empty or a well formed URL.
|
61
|
+
# The URI that, if available, points to a web page outside of Security
|
62
|
+
# Command Center where additional information about the finding can be found.
|
63
|
+
# This field is guaranteed to be either empty or a well formed URL.
|
64
64
|
# @!attribute [rw] source_properties
|
65
65
|
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
66
66
|
# Source specific properties. These properties are managed by the source
|
@@ -79,7 +79,7 @@ module Google
|
|
79
79
|
# the firewall became open. The accuracy is determined by the detector.
|
80
80
|
# @!attribute [rw] create_time
|
81
81
|
# @return [::Google::Protobuf::Timestamp]
|
82
|
-
# The time at which the finding was created in
|
82
|
+
# The time at which the finding was created in Security Command Center.
|
83
83
|
class Finding
|
84
84
|
include ::Google::Protobuf::MessageExts
|
85
85
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -21,10 +21,11 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
24
|
+
# Security Command Center notification configs.
|
25
25
|
#
|
26
|
-
# A notification config is a
|
27
|
-
# to send notifications for create/update events of findings,
|
26
|
+
# A notification config is a Security Command Center resource that contains the
|
27
|
+
# configuration to send notifications for create/update events of findings,
|
28
|
+
# assets and etc.
|
28
29
|
# @!attribute [rw] name
|
29
30
|
# @return [::String]
|
30
31
|
# The relative resource name of this notification config. See:
|
@@ -39,12 +40,12 @@ module Google
|
|
39
40
|
# The type of events the config is for, e.g. FINDING.
|
40
41
|
# @!attribute [rw] pubsub_topic
|
41
42
|
# @return [::String]
|
42
|
-
# The
|
43
|
+
# The Pub/Sub topic to send notifications to. Its format is
|
43
44
|
# "projects/[project_id]/topics/[topic]".
|
44
45
|
# @!attribute [r] service_account
|
45
46
|
# @return [::String]
|
46
47
|
# Output only. The service account that needs "pubsub.topics.publish"
|
47
|
-
# permission to publish to the
|
48
|
+
# permission to publish to the Pub/Sub topic.
|
48
49
|
# @!attribute [rw] streaming_config
|
49
50
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
|
50
51
|
# The config for triggering streaming-based notifications.
|
@@ -21,7 +21,7 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
24
|
+
# Security Command Center's Notification
|
25
25
|
# @!attribute [rw] notification_config_name
|
26
26
|
# @return [::String]
|
27
27
|
# Name of the notification config that generated current notification.
|
@@ -29,6 +29,9 @@ module Google
|
|
29
29
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
30
30
|
# If it's a Finding based notification config, this field will be
|
31
31
|
# populated.
|
32
|
+
# @!attribute [rw] resource
|
33
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Resource]
|
34
|
+
# The Cloud resource tied to the notification.
|
32
35
|
class NotificationMessage
|
33
36
|
include ::Google::Protobuf::MessageExts
|
34
37
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -21,8 +21,8 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
# User specified settings that are attached to the
|
25
|
-
# Center
|
24
|
+
# User specified settings that are attached to the Security Command
|
25
|
+
# Center organization.
|
26
26
|
# @!attribute [rw] name
|
27
27
|
# @return [::String]
|
28
28
|
# The relative resource name of the settings. See:
|
@@ -0,0 +1,48 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
# Copyright 2020 Google LLC
|
4
|
+
#
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
6
|
+
# you may not use this file except in compliance with the License.
|
7
|
+
# You may obtain a copy of the License at
|
8
|
+
#
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
10
|
+
#
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
14
|
+
# See the License for the specific language governing permissions and
|
15
|
+
# limitations under the License.
|
16
|
+
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
18
|
+
|
19
|
+
|
20
|
+
module Google
|
21
|
+
module Cloud
|
22
|
+
module SecurityCenter
|
23
|
+
module V1p1beta1
|
24
|
+
# Information related to the Google Cloud resource.
|
25
|
+
# @!attribute [rw] name
|
26
|
+
# @return [::String]
|
27
|
+
# The full resource name of the resource. See:
|
28
|
+
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
29
|
+
# @!attribute [rw] project
|
30
|
+
# @return [::String]
|
31
|
+
# The full resource name of project that the resource belongs to.
|
32
|
+
# @!attribute [rw] project_display_name
|
33
|
+
# @return [::String]
|
34
|
+
# The human readable name of project that the resource belongs to.
|
35
|
+
# @!attribute [rw] parent
|
36
|
+
# @return [::String]
|
37
|
+
# The full resource name of resource's parent.
|
38
|
+
# @!attribute [rw] parent_display_name
|
39
|
+
# @return [::String]
|
40
|
+
# The human readable name of resource's parent.
|
41
|
+
class Resource
|
42
|
+
include ::Google::Protobuf::MessageExts
|
43
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
44
|
+
end
|
45
|
+
end
|
46
|
+
end
|
47
|
+
end
|
48
|
+
end
|
@@ -21,9 +21,9 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
# User specified security marks that are attached to the parent
|
25
|
-
# Command Center
|
26
|
-
#
|
24
|
+
# User specified security marks that are attached to the parent Security
|
25
|
+
# Command Center resource. Security marks are scoped within a Security Command
|
26
|
+
# Center organization -- they can be modified and viewed by all users who have
|
27
27
|
# proper permissions on the organization.
|
28
28
|
# @!attribute [rw] name
|
29
29
|
# @return [::String]
|
@@ -155,15 +155,15 @@ module Google
|
|
155
155
|
#
|
156
156
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
157
157
|
# Examples:
|
158
|
-
#
|
159
|
-
#
|
158
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
159
|
+
# `update_time = 1560208038000`
|
160
160
|
#
|
161
161
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
162
162
|
#
|
163
163
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
164
164
|
# Examples:
|
165
|
-
#
|
166
|
-
#
|
165
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
166
|
+
# `create_time = 1560208038000`
|
167
167
|
#
|
168
168
|
# * iam_policy.policy_blob: `=`, `:`
|
169
169
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
@@ -178,6 +178,12 @@ module Google
|
|
178
178
|
# * security_center_properties.resource_owners: `=`, `:`
|
179
179
|
#
|
180
180
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
181
|
+
#
|
182
|
+
# Use a partial match on the empty string to filter based on a property
|
183
|
+
# existing: `resource_properties.my_property : ""`
|
184
|
+
#
|
185
|
+
# Use a negated partial match on the empty string to filter based on a
|
186
|
+
# property not existing: `-resource_properties.my_property : ""`
|
181
187
|
# @!attribute [rw] group_by
|
182
188
|
# @return [::String]
|
183
189
|
# Required. Expression that defines what assets fields to use for grouping.
|
@@ -233,11 +239,6 @@ module Google
|
|
233
239
|
# to assets existing at the supplied time and their values are those at that
|
234
240
|
# specific time. Absence of this field will default to the API's version of
|
235
241
|
# NOW.
|
236
|
-
# @!attribute [rw] having
|
237
|
-
# @return [::String]
|
238
|
-
# Filter that specifies what fields to further filter on *after* the query
|
239
|
-
# filter has been executed. Currently only `state_change` is supported and
|
240
|
-
# requires compare_duration to be specified.
|
241
242
|
# @!attribute [rw] page_token
|
242
243
|
# @return [::String]
|
243
244
|
# The value returned by the last `GroupAssetsResponse`; indicates
|
@@ -318,13 +319,19 @@ module Google
|
|
318
319
|
#
|
319
320
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
320
321
|
# Examples:
|
321
|
-
#
|
322
|
-
#
|
322
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
323
|
+
# `event_time = 1560208038000`
|
323
324
|
#
|
324
325
|
# * security_marks.marks: `=`, `:`
|
325
326
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
326
327
|
#
|
327
328
|
# For example, `source_properties.size = 100` is a valid filter string.
|
329
|
+
#
|
330
|
+
# Use a partial match on the empty string to filter based on a property
|
331
|
+
# existing: `source_properties.my_property : ""`
|
332
|
+
#
|
333
|
+
# Use a negated partial match on the empty string to filter based on a
|
334
|
+
# property not existing: `-source_properties.my_property : ""`
|
328
335
|
# @!attribute [rw] group_by
|
329
336
|
# @return [::String]
|
330
337
|
# Required. Expression that defines what assets fields to use for grouping
|
@@ -362,12 +369,18 @@ module Google
|
|
362
369
|
#
|
363
370
|
# Possible "state_change" values when compare_duration is specified:
|
364
371
|
#
|
365
|
-
# * "CHANGED": indicates that the finding was present
|
366
|
-
# compare_duration, but changed its
|
367
|
-
#
|
368
|
-
#
|
369
|
-
#
|
370
|
-
#
|
372
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
373
|
+
# filter at the start of compare_duration, but changed its
|
374
|
+
# state at read_time.
|
375
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
376
|
+
# filter at the start of compare_duration and did not change
|
377
|
+
# state at read_time.
|
378
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
379
|
+
# was not present at the start of compare_duration, but was
|
380
|
+
# present at read_time.
|
381
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
382
|
+
# filter at the start of compare_duration, but did not match
|
383
|
+
# the filter at read_time.
|
371
384
|
#
|
372
385
|
# If compare_duration is not specified, then the only possible state_change
|
373
386
|
# is "UNUSED", which will be the state_change set for all findings present
|
@@ -375,11 +388,6 @@ module Google
|
|
375
388
|
#
|
376
389
|
# If this field is set then `state_change` must be a specified field in
|
377
390
|
# `group_by`.
|
378
|
-
# @!attribute [rw] having
|
379
|
-
# @return [::String]
|
380
|
-
# Filter that specifies what fields to further filter on *after* the query
|
381
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
382
|
-
# are supported and requires compare_duration to be specified.
|
383
391
|
# @!attribute [rw] page_token
|
384
392
|
# @return [::String]
|
385
393
|
# The value returned by the last `GroupFindingsResponse`; indicates
|
@@ -540,15 +548,15 @@ module Google
|
|
540
548
|
#
|
541
549
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
542
550
|
# Examples:
|
543
|
-
#
|
544
|
-
#
|
551
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
552
|
+
# `update_time = 1560208038000`
|
545
553
|
#
|
546
554
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
547
555
|
#
|
548
556
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
549
557
|
# Examples:
|
550
|
-
#
|
551
|
-
#
|
558
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
559
|
+
# `create_time = 1560208038000`
|
552
560
|
#
|
553
561
|
# * iam_policy.policy_blob: `=`, `:`
|
554
562
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
@@ -563,6 +571,12 @@ module Google
|
|
563
571
|
# * security_center_properties.resource_owners: `=`, `:`
|
564
572
|
#
|
565
573
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
574
|
+
#
|
575
|
+
# Use a partial match on the empty string to filter based on a property
|
576
|
+
# existing: `resource_properties.my_property : ""`
|
577
|
+
#
|
578
|
+
# Use a negated partial match on the empty string to filter based on a
|
579
|
+
# property not existing: `-resource_properties.my_property : ""`
|
566
580
|
# @!attribute [rw] order_by
|
567
581
|
# @return [::String]
|
568
582
|
# Expression that defines what fields and order to use for sorting. The
|
@@ -618,11 +632,6 @@ module Google
|
|
618
632
|
# If compare_duration is not specified, then the only possible state_change
|
619
633
|
# is "UNUSED", which will be the state_change set for all assets present at
|
620
634
|
# read_time.
|
621
|
-
# @!attribute [rw] having
|
622
|
-
# @return [::String]
|
623
|
-
# Filter that specifies what fields to further filter on *after* the query
|
624
|
-
# filter has been executed. Currently only `state_change` is supported and
|
625
|
-
# requires compare_duration to be specified.
|
626
635
|
# @!attribute [rw] field_mask
|
627
636
|
# @return [::Google::Protobuf::FieldMask]
|
628
637
|
# Optional.
|
@@ -739,13 +748,19 @@ module Google
|
|
739
748
|
#
|
740
749
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
741
750
|
# Examples:
|
742
|
-
#
|
743
|
-
#
|
751
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
752
|
+
# `event_time = 1560208038000`
|
744
753
|
#
|
745
754
|
# security_marks.marks: `=`, `:`
|
746
755
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
747
756
|
#
|
748
757
|
# For example, `source_properties.size = 100` is a valid filter string.
|
758
|
+
#
|
759
|
+
# Use a partial match on the empty string to filter based on a property
|
760
|
+
# existing: `source_properties.my_property : ""`
|
761
|
+
#
|
762
|
+
# Use a negated partial match on the empty string to filter based on a
|
763
|
+
# property not existing: `-source_properties.my_property : ""`
|
749
764
|
# @!attribute [rw] order_by
|
750
765
|
# @return [::String]
|
751
766
|
# Expression that defines what fields and order to use for sorting. The
|
@@ -788,21 +803,22 @@ module Google
|
|
788
803
|
#
|
789
804
|
# Possible "state_change" values when compare_duration is specified:
|
790
805
|
#
|
791
|
-
# * "CHANGED": indicates that the finding was present
|
792
|
-
# compare_duration, but changed its
|
793
|
-
#
|
794
|
-
#
|
795
|
-
#
|
796
|
-
#
|
806
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
807
|
+
# filter at the start of compare_duration, but changed its
|
808
|
+
# state at read_time.
|
809
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
810
|
+
# filter at the start of compare_duration and did not change
|
811
|
+
# state at read_time.
|
812
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
813
|
+
# was not present at the start of compare_duration, but was
|
814
|
+
# present at read_time.
|
815
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
816
|
+
# filter at the start of compare_duration, but did not match
|
817
|
+
# the filter at read_time.
|
797
818
|
#
|
798
819
|
# If compare_duration is not specified, then the only possible state_change
|
799
820
|
# is "UNUSED", which will be the state_change set for all findings present at
|
800
821
|
# read_time.
|
801
|
-
# @!attribute [rw] having
|
802
|
-
# @return [::String]
|
803
|
-
# Filter that specifies what fields to further filter on *after* the query
|
804
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
805
|
-
# are supported and requires compare_duration to be specified.
|
806
822
|
# @!attribute [rw] field_mask
|
807
823
|
# @return [::Google::Protobuf::FieldMask]
|
808
824
|
# Optional.
|
@@ -854,7 +870,7 @@ module Google
|
|
854
870
|
include ::Google::Protobuf::MessageExts
|
855
871
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
856
872
|
|
857
|
-
# Information related to the Google Cloud
|
873
|
+
# Information related to the Google Cloud resource that is
|
858
874
|
# associated with this finding.
|
859
875
|
# @!attribute [rw] name
|
860
876
|
# @return [::String]
|
@@ -21,7 +21,7 @@ module Google
|
|
21
21
|
module Cloud
|
22
22
|
module SecurityCenter
|
23
23
|
module V1p1beta1
|
24
|
-
#
|
24
|
+
# Security Command Center finding source. A finding source
|
25
25
|
# is an entity or a mechanism that can produce a finding. A source is like a
|
26
26
|
# container of findings that come from the same scanner, logger, monitor, etc.
|
27
27
|
# @!attribute [rw] name
|
@@ -41,7 +41,7 @@ module Google
|
|
41
41
|
# @return [::String]
|
42
42
|
# The description of the source (max of 1024 characters).
|
43
43
|
# Example:
|
44
|
-
# "
|
44
|
+
# "Web Security Scanner is a web security scanner for common
|
45
45
|
# vulnerabilities in App Engine applications. It can automatically
|
46
46
|
# scan and detect four common vulnerabilities, including cross-site-scripting
|
47
47
|
# (XSS), Flash injection, mixed content (HTTP in HTTPS), and
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-cloud-security_center-v1p1beta1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.2
|
4
|
+
version: 0.3.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-
|
11
|
+
date: 2020-07-16 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: gapic-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - "~>"
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: '0.
|
19
|
+
version: '0.3'
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - "~>"
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: '0.
|
26
|
+
version: '0.3'
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: google-cloud-errors
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -182,7 +182,6 @@ files:
|
|
182
182
|
- LICENSE.md
|
183
183
|
- README.md
|
184
184
|
- lib/google-cloud-security_center-v1p1beta1.rb
|
185
|
-
- lib/google/cloud/common_resources_pb.rb
|
186
185
|
- lib/google/cloud/security_center/v1p1beta1.rb
|
187
186
|
- lib/google/cloud/security_center/v1p1beta1/security_center.rb
|
188
187
|
- lib/google/cloud/security_center/v1p1beta1/security_center/client.rb
|
@@ -195,6 +194,7 @@ files:
|
|
195
194
|
- lib/google/cloud/securitycenter/v1p1beta1/notification_config_pb.rb
|
196
195
|
- lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb
|
197
196
|
- lib/google/cloud/securitycenter/v1p1beta1/organization_settings_pb.rb
|
197
|
+
- lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb
|
198
198
|
- lib/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response_pb.rb
|
199
199
|
- lib/google/cloud/securitycenter/v1p1beta1/security_marks_pb.rb
|
200
200
|
- lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb
|
@@ -208,6 +208,7 @@ files:
|
|
208
208
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb
|
209
209
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb
|
210
210
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb
|
211
|
+
- proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb
|
211
212
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response.rb
|
212
213
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb
|
213
214
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb
|
@@ -243,7 +244,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
243
244
|
- !ruby/object:Gem::Version
|
244
245
|
version: '0'
|
245
246
|
requirements: []
|
246
|
-
rubygems_version: 3.
|
247
|
+
rubygems_version: 3.1.3
|
247
248
|
signing_key:
|
248
249
|
specification_version: 4
|
249
250
|
summary: API Client library for the Cloud Security Command Center V1p1beta1 API
|
@@ -1,15 +0,0 @@
|
|
1
|
-
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
2
|
-
# source: google/cloud/common_resources.proto
|
3
|
-
|
4
|
-
require 'google/protobuf'
|
5
|
-
|
6
|
-
require 'google/api/resource_pb'
|
7
|
-
Google::Protobuf::DescriptorPool.generated_pool.build do
|
8
|
-
add_file("google/cloud/common_resources.proto", :syntax => :proto3) do
|
9
|
-
end
|
10
|
-
end
|
11
|
-
|
12
|
-
module Google
|
13
|
-
module Cloud
|
14
|
-
end
|
15
|
-
end
|