google-cloud-security_center-v1p1beta1 0.2.1 → 0.3.3

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 2e007c8ad8d05a7368fd346100f013777655acc0b7e0d25af22171451d8aa8cd
4
- data.tar.gz: 6559de23a2f750721d0ab7cdff2e95d987f98c1bc380ff6b298efc6ca6977d09
3
+ metadata.gz: 0f9ca1148af4d8fc9d60b41aab9cfa7218368d6ff8fd7f938a1802bbe95ffc8d
4
+ data.tar.gz: 3e38fb534be715487cecae49a9da43e6093962068460b622b294e1784fd25551
5
5
  SHA512:
6
- metadata.gz: b3ad90dcfe54939b6cefbae8528d036297982d43a5ceb4c04b1bad112a4ecd2a9e98d5ac7363b8f1fbbf14a48d5c61e2d3062e6d38fc67427c475568ecce622e
7
- data.tar.gz: 684c84034f96295de958473662208d1689d4294188b7b6788b1aa0f547d61787e2103c7cab8647cdb6c2f305f0f263d03239d70357176ad07c3f9d43cb4d3e95
6
+ metadata.gz: ff3e185ca9808d0cb08b9a6e4983b4f0087990a1e654f59174517e2a65fcb435fa5333ca7ad75c8a296d9a744c8a22646559dcb46f22352a799c518f9d3fc41a
7
+ data.tar.gz: 27d4f7e28e281ad4fb8dac784f9afaa09653918835f823d3881c7474d4f0adfc4b52f224b76f8631598c7a86f128d78569ba9e7ce9913556265899a113328c26
data/README.md CHANGED
@@ -18,6 +18,7 @@ In order to use this library, you first need to go through the following steps:
18
18
 
19
19
  1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
20
20
  1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
21
+ 1. [Enable the API.](https://console.cloud.google.com/apis/library/securitycenter.googleapis.com)
21
22
  1. {file:AUTHENTICATION.md Set up authentication.}
22
23
 
23
24
  ## Quick Start
@@ -33,6 +34,9 @@ response = client.create_source request
33
34
  View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-security_center-v1p1beta1/latest)
34
35
  for class and method documentation.
35
36
 
37
+ See also the [Product Documentation](https://cloud.google.com/security-command-center)
38
+ for general usage information.
39
+
36
40
  ## Enabling Logging
37
41
 
38
42
  To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
@@ -78,7 +78,7 @@ module Google
78
78
  initial_delay: 0.1,
79
79
  max_delay: 60.0,
80
80
  multiplier: 1.3,
81
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
81
+ retry_codes: [4, 14]
82
82
  }
83
83
 
84
84
  default_config.rpcs.get_notification_config.timeout = 60.0
@@ -86,7 +86,7 @@ module Google
86
86
  initial_delay: 0.1,
87
87
  max_delay: 60.0,
88
88
  multiplier: 1.3,
89
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
89
+ retry_codes: [4, 14]
90
90
  }
91
91
 
92
92
  default_config.rpcs.get_organization_settings.timeout = 60.0
@@ -94,7 +94,7 @@ module Google
94
94
  initial_delay: 0.1,
95
95
  max_delay: 60.0,
96
96
  multiplier: 1.3,
97
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
97
+ retry_codes: [4, 14]
98
98
  }
99
99
 
100
100
  default_config.rpcs.get_source.timeout = 60.0
@@ -102,39 +102,39 @@ module Google
102
102
  initial_delay: 0.1,
103
103
  max_delay: 60.0,
104
104
  multiplier: 1.3,
105
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
105
+ retry_codes: [4, 14]
106
106
  }
107
107
 
108
- default_config.rpcs.group_assets.timeout = 60.0
108
+ default_config.rpcs.group_assets.timeout = 480.0
109
109
  default_config.rpcs.group_assets.retry_policy = {
110
110
  initial_delay: 0.1,
111
111
  max_delay: 60.0,
112
112
  multiplier: 1.3,
113
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
113
+ retry_codes: [4, 14]
114
114
  }
115
115
 
116
- default_config.rpcs.group_findings.timeout = 60.0
116
+ default_config.rpcs.group_findings.timeout = 480.0
117
117
  default_config.rpcs.group_findings.retry_policy = {
118
118
  initial_delay: 0.1,
119
119
  max_delay: 60.0,
120
120
  multiplier: 1.3,
121
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
121
+ retry_codes: [4, 14]
122
122
  }
123
123
 
124
- default_config.rpcs.list_assets.timeout = 60.0
124
+ default_config.rpcs.list_assets.timeout = 480.0
125
125
  default_config.rpcs.list_assets.retry_policy = {
126
126
  initial_delay: 0.1,
127
127
  max_delay: 60.0,
128
128
  multiplier: 1.3,
129
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
129
+ retry_codes: [4, 14]
130
130
  }
131
131
 
132
- default_config.rpcs.list_findings.timeout = 60.0
132
+ default_config.rpcs.list_findings.timeout = 480.0
133
133
  default_config.rpcs.list_findings.retry_policy = {
134
134
  initial_delay: 0.1,
135
135
  max_delay: 60.0,
136
136
  multiplier: 1.3,
137
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
137
+ retry_codes: [4, 14]
138
138
  }
139
139
 
140
140
  default_config.rpcs.list_notification_configs.timeout = 60.0
@@ -142,7 +142,7 @@ module Google
142
142
  initial_delay: 0.1,
143
143
  max_delay: 60.0,
144
144
  multiplier: 1.3,
145
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
145
+ retry_codes: [4, 14]
146
146
  }
147
147
 
148
148
  default_config.rpcs.list_sources.timeout = 60.0
@@ -150,7 +150,7 @@ module Google
150
150
  initial_delay: 0.1,
151
151
  max_delay: 60.0,
152
152
  multiplier: 1.3,
153
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
153
+ retry_codes: [4, 14]
154
154
  }
155
155
 
156
156
  default_config.rpcs.run_asset_discovery.timeout = 60.0
@@ -164,7 +164,7 @@ module Google
164
164
  initial_delay: 0.1,
165
165
  max_delay: 60.0,
166
166
  multiplier: 1.3,
167
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
167
+ retry_codes: [4, 14]
168
168
  }
169
169
 
170
170
  default_config.rpcs.update_finding.timeout = 60.0
@@ -175,7 +175,7 @@ module Google
175
175
 
176
176
  default_config.rpcs.update_source.timeout = 60.0
177
177
 
178
- default_config.rpcs.update_security_marks.timeout = 60.0
178
+ default_config.rpcs.update_security_marks.timeout = 480.0
179
179
 
180
180
  default_config
181
181
  end
@@ -841,7 +841,7 @@ module Google
841
841
  # @param options [::Gapic::CallOptions, ::Hash]
842
842
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
843
843
  #
844
- # @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil, having: nil, page_token: nil, page_size: nil)
844
+ # @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil, page_token: nil, page_size: nil)
845
845
  # Pass arguments to `group_assets` via keyword arguments. Note that at
846
846
  # least one keyword argument is required. To specify no parameters, or to keep all
847
847
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -883,15 +883,15 @@ module Google
883
883
  #
884
884
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
885
885
  # Examples:
886
- # "update_time = \"2019-06-10T16:07:18-07:00\""
887
- # "update_time = 1560208038000"
886
+ # `update_time = "2019-06-10T16:07:18-07:00"`
887
+ # `update_time = 1560208038000`
888
888
  #
889
889
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
890
890
  #
891
891
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
892
892
  # Examples:
893
- # "create_time = \"2019-06-10T16:07:18-07:00\""
894
- # "create_time = 1560208038000"
893
+ # `create_time = "2019-06-10T16:07:18-07:00"`
894
+ # `create_time = 1560208038000`
895
895
  #
896
896
  # * iam_policy.policy_blob: `=`, `:`
897
897
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -906,6 +906,12 @@ module Google
906
906
  # * security_center_properties.resource_owners: `=`, `:`
907
907
  #
908
908
  # For example, `resource_properties.size = 100` is a valid filter string.
909
+ #
910
+ # Use a partial match on the empty string to filter based on a property
911
+ # existing: `resource_properties.my_property : ""`
912
+ #
913
+ # Use a negated partial match on the empty string to filter based on a
914
+ # property not existing: `-resource_properties.my_property : ""`
909
915
  # @param group_by [::String]
910
916
  # Required. Expression that defines what assets fields to use for grouping.
911
917
  # The string value should follow SQL syntax: comma separated list of fields.
@@ -958,10 +964,6 @@ module Google
958
964
  # to assets existing at the supplied time and their values are those at that
959
965
  # specific time. Absence of this field will default to the API's version of
960
966
  # NOW.
961
- # @param having [::String]
962
- # Filter that specifies what fields to further filter on *after* the query
963
- # filter has been executed. Currently only `state_change` is supported and
964
- # requires compare_duration to be specified.
965
967
  # @param page_token [::String]
966
968
  # The value returned by the last `GroupAssetsResponse`; indicates
967
969
  # that this is a continuation of a prior `GroupAssets` call, and that the
@@ -1033,7 +1035,7 @@ module Google
1033
1035
  # @param options [::Gapic::CallOptions, ::Hash]
1034
1036
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1035
1037
  #
1036
- # @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil, having: nil, page_token: nil, page_size: nil)
1038
+ # @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil, page_token: nil, page_size: nil)
1037
1039
  # Pass arguments to `group_findings` via keyword arguments. Note that at
1038
1040
  # least one keyword argument is required. To specify no parameters, or to keep all
1039
1041
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1080,13 +1082,19 @@ module Google
1080
1082
  #
1081
1083
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1082
1084
  # Examples:
1083
- # "event_time = \"2019-06-10T16:07:18-07:00\""
1084
- # "event_time = 1560208038000"
1085
+ # `event_time = "2019-06-10T16:07:18-07:00"`
1086
+ # `event_time = 1560208038000`
1085
1087
  #
1086
1088
  # * security_marks.marks: `=`, `:`
1087
1089
  # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
1088
1090
  #
1089
1091
  # For example, `source_properties.size = 100` is a valid filter string.
1092
+ #
1093
+ # Use a partial match on the empty string to filter based on a property
1094
+ # existing: `source_properties.my_property : ""`
1095
+ #
1096
+ # Use a negated partial match on the empty string to filter based on a
1097
+ # property not existing: `-source_properties.my_property : ""`
1090
1098
  # @param group_by [::String]
1091
1099
  # Required. Expression that defines what assets fields to use for grouping
1092
1100
  # (including `state_change`). The string value should follow SQL syntax:
@@ -1121,12 +1129,18 @@ module Google
1121
1129
  #
1122
1130
  # Possible "state_change" values when compare_duration is specified:
1123
1131
  #
1124
- # * "CHANGED": indicates that the finding was present at the start of
1125
- # compare_duration, but changed its state at read_time.
1126
- # * "UNCHANGED": indicates that the finding was present at the start of
1127
- # compare_duration and did not change state at read_time.
1128
- # * "ADDED": indicates that the finding was not present at the start
1129
- # of compare_duration, but was present at read_time.
1132
+ # * "CHANGED": indicates that the finding was present and matched the given
1133
+ # filter at the start of compare_duration, but changed its
1134
+ # state at read_time.
1135
+ # * "UNCHANGED": indicates that the finding was present and matched the given
1136
+ # filter at the start of compare_duration and did not change
1137
+ # state at read_time.
1138
+ # * "ADDED": indicates that the finding did not match the given filter or
1139
+ # was not present at the start of compare_duration, but was
1140
+ # present at read_time.
1141
+ # * "REMOVED": indicates that the finding was present and matched the
1142
+ # filter at the start of compare_duration, but did not match
1143
+ # the filter at read_time.
1130
1144
  #
1131
1145
  # If compare_duration is not specified, then the only possible state_change
1132
1146
  # is "UNUSED", which will be the state_change set for all findings present
@@ -1134,10 +1148,6 @@ module Google
1134
1148
  #
1135
1149
  # If this field is set then `state_change` must be a specified field in
1136
1150
  # `group_by`.
1137
- # @param having [::String]
1138
- # Filter that specifies what fields to further filter on *after* the query
1139
- # filter has been executed. Currently only `finding.state` and `state_change`
1140
- # are supported and requires compare_duration to be specified.
1141
1151
  # @param page_token [::String]
1142
1152
  # The value returned by the last `GroupFindingsResponse`; indicates
1143
1153
  # that this is a continuation of a prior `GroupFindings` call, and
@@ -1205,7 +1215,7 @@ module Google
1205
1215
  # @param options [::Gapic::CallOptions, ::Hash]
1206
1216
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1207
1217
  #
1208
- # @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, having: nil, field_mask: nil, page_token: nil, page_size: nil)
1218
+ # @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
1209
1219
  # Pass arguments to `list_assets` via keyword arguments. Note that at
1210
1220
  # least one keyword argument is required. To specify no parameters, or to keep all
1211
1221
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1247,15 +1257,15 @@ module Google
1247
1257
  #
1248
1258
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1249
1259
  # Examples:
1250
- # "update_time = \"2019-06-10T16:07:18-07:00\""
1251
- # "update_time = 1560208038000"
1260
+ # `update_time = "2019-06-10T16:07:18-07:00"`
1261
+ # `update_time = 1560208038000`
1252
1262
  #
1253
1263
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
1254
1264
  #
1255
1265
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1256
1266
  # Examples:
1257
- # "create_time = \"2019-06-10T16:07:18-07:00\""
1258
- # "create_time = 1560208038000"
1267
+ # `create_time = "2019-06-10T16:07:18-07:00"`
1268
+ # `create_time = 1560208038000`
1259
1269
  #
1260
1270
  # * iam_policy.policy_blob: `=`, `:`
1261
1271
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -1270,6 +1280,12 @@ module Google
1270
1280
  # * security_center_properties.resource_owners: `=`, `:`
1271
1281
  #
1272
1282
  # For example, `resource_properties.size = 100` is a valid filter string.
1283
+ #
1284
+ # Use a partial match on the empty string to filter based on a property
1285
+ # existing: `resource_properties.my_property : ""`
1286
+ #
1287
+ # Use a negated partial match on the empty string to filter based on a
1288
+ # property not existing: `-resource_properties.my_property : ""`
1273
1289
  # @param order_by [::String]
1274
1290
  # Expression that defines what fields and order to use for sorting. The
1275
1291
  # string value should follow SQL syntax: comma separated list of fields. For
@@ -1322,10 +1338,6 @@ module Google
1322
1338
  # If compare_duration is not specified, then the only possible state_change
1323
1339
  # is "UNUSED", which will be the state_change set for all assets present at
1324
1340
  # read_time.
1325
- # @param having [::String]
1326
- # Filter that specifies what fields to further filter on *after* the query
1327
- # filter has been executed. Currently only `state_change` is supported and
1328
- # requires compare_duration to be specified.
1329
1341
  # @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
1330
1342
  # Optional.
1331
1343
  # A field mask to specify the ListAssetsResult fields to be listed in the
@@ -1401,7 +1413,7 @@ module Google
1401
1413
  # @param options [::Gapic::CallOptions, ::Hash]
1402
1414
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1403
1415
  #
1404
- # @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, having: nil, field_mask: nil, page_token: nil, page_size: nil)
1416
+ # @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
1405
1417
  # Pass arguments to `list_findings` via keyword arguments. Note that at
1406
1418
  # least one keyword argument is required. To specify no parameters, or to keep all
1407
1419
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1448,13 +1460,19 @@ module Google
1448
1460
  #
1449
1461
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1450
1462
  # Examples:
1451
- # "event_time = \"2019-06-10T16:07:18-07:00\""
1452
- # "event_time = 1560208038000"
1463
+ # `event_time = "2019-06-10T16:07:18-07:00"`
1464
+ # `event_time = 1560208038000`
1453
1465
  #
1454
1466
  # security_marks.marks: `=`, `:`
1455
1467
  # source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
1456
1468
  #
1457
1469
  # For example, `source_properties.size = 100` is a valid filter string.
1470
+ #
1471
+ # Use a partial match on the empty string to filter based on a property
1472
+ # existing: `source_properties.my_property : ""`
1473
+ #
1474
+ # Use a negated partial match on the empty string to filter based on a
1475
+ # property not existing: `-source_properties.my_property : ""`
1458
1476
  # @param order_by [::String]
1459
1477
  # Expression that defines what fields and order to use for sorting. The
1460
1478
  # string value should follow SQL syntax: comma separated list of fields. For
@@ -1494,20 +1512,22 @@ module Google
1494
1512
  #
1495
1513
  # Possible "state_change" values when compare_duration is specified:
1496
1514
  #
1497
- # * "CHANGED": indicates that the finding was present at the start of
1498
- # compare_duration, but changed its state at read_time.
1499
- # * "UNCHANGED": indicates that the finding was present at the start of
1500
- # compare_duration and did not change state at read_time.
1501
- # * "ADDED": indicates that the finding was not present at the start
1502
- # of compare_duration, but was present at read_time.
1515
+ # * "CHANGED": indicates that the finding was present and matched the given
1516
+ # filter at the start of compare_duration, but changed its
1517
+ # state at read_time.
1518
+ # * "UNCHANGED": indicates that the finding was present and matched the given
1519
+ # filter at the start of compare_duration and did not change
1520
+ # state at read_time.
1521
+ # * "ADDED": indicates that the finding did not match the given filter or
1522
+ # was not present at the start of compare_duration, but was
1523
+ # present at read_time.
1524
+ # * "REMOVED": indicates that the finding was present and matched the
1525
+ # filter at the start of compare_duration, but did not match
1526
+ # the filter at read_time.
1503
1527
  #
1504
1528
  # If compare_duration is not specified, then the only possible state_change
1505
1529
  # is "UNUSED", which will be the state_change set for all findings present at
1506
1530
  # read_time.
1507
- # @param having [::String]
1508
- # Filter that specifies what fields to further filter on *after* the query
1509
- # filter has been executed. Currently only `finding.state` and `state_change`
1510
- # are supported and requires compare_duration to be specified.
1511
1531
  # @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
1512
1532
  # Optional.
1513
1533
  # A field mask to specify the Finding fields to be listed in the response.
@@ -2087,7 +2107,8 @@ module Google
2087
2107
  end
2088
2108
 
2089
2109
  ##
2090
- # Updates a notification config.
2110
+ # Updates a notification config. The following update
2111
+ # fields are allowed: description, pubsub_topic, streaming_config.filter
2091
2112
  #
2092
2113
  # @overload update_notification_config(request, options = nil)
2093
2114
  # Pass arguments to `update_notification_config` via a request object, either of type
@@ -2485,7 +2506,7 @@ module Google
2485
2506
  def rpcs
2486
2507
  @rpcs ||= begin
2487
2508
  parent_rpcs = nil
2488
- parent_rpcs = @parent_config.rpcs if @parent_config&.respond_to? :rpcs
2509
+ parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
2489
2510
  Rpcs.new parent_rpcs
2490
2511
  end
2491
2512
  end
@@ -503,7 +503,7 @@ module Google
503
503
  def rpcs
504
504
  @rpcs ||= begin
505
505
  parent_rpcs = nil
506
- parent_rpcs = @parent_config.rpcs if @parent_config&.respond_to? :rpcs
506
+ parent_rpcs = @parent_config.rpcs if defined?(@parent_config) && @parent_config&.respond_to?(:rpcs)
507
507
  Rpcs.new parent_rpcs
508
508
  end
509
509
  end
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- VERSION = "0.2.1"
24
+ VERSION = "0.3.3"
25
25
  end
26
26
  end
27
27
  end
@@ -6,10 +6,12 @@ require 'google/protobuf'
6
6
  require 'google/api/annotations_pb'
7
7
  require 'google/cloud/securitycenter/v1p1beta1/asset_pb'
8
8
  require 'google/cloud/securitycenter/v1p1beta1/finding_pb'
9
+ require 'google/cloud/securitycenter/v1p1beta1/resource_pb'
9
10
  Google::Protobuf::DescriptorPool.generated_pool.build do
10
11
  add_file("google/cloud/securitycenter/v1p1beta1/notification_message.proto", :syntax => :proto3) do
11
12
  add_message "google.cloud.securitycenter.v1p1beta1.NotificationMessage" do
12
13
  optional :notification_config_name, :string, 1
14
+ optional :resource, :message, 3, "google.cloud.securitycenter.v1p1beta1.Resource"
13
15
  oneof :event do
14
16
  optional :finding, :message, 2, "google.cloud.securitycenter.v1p1beta1.Finding"
15
17
  end
@@ -0,0 +1,27 @@
1
+ # Generated by the protocol buffer compiler. DO NOT EDIT!
2
+ # source: google/cloud/securitycenter/v1p1beta1/resource.proto
3
+
4
+ require 'google/protobuf'
5
+
6
+ require 'google/api/annotations_pb'
7
+ Google::Protobuf::DescriptorPool.generated_pool.build do
8
+ add_file("google/cloud/securitycenter/v1p1beta1/resource.proto", :syntax => :proto3) do
9
+ add_message "google.cloud.securitycenter.v1p1beta1.Resource" do
10
+ optional :name, :string, 1
11
+ optional :project, :string, 2
12
+ optional :project_display_name, :string, 3
13
+ optional :parent, :string, 4
14
+ optional :parent_display_name, :string, 5
15
+ end
16
+ end
17
+ end
18
+
19
+ module Google
20
+ module Cloud
21
+ module SecurityCenter
22
+ module V1p1beta1
23
+ Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Resource").msgclass
24
+ end
25
+ end
26
+ end
27
+ end
@@ -56,7 +56,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
56
56
  optional :group_by, :string, 3
57
57
  optional :compare_duration, :message, 4, "google.protobuf.Duration"
58
58
  optional :read_time, :message, 5, "google.protobuf.Timestamp"
59
- optional :having, :string, 6
60
59
  optional :page_token, :string, 7
61
60
  optional :page_size, :int32, 8
62
61
  end
@@ -72,7 +71,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
72
71
  optional :group_by, :string, 3
73
72
  optional :read_time, :message, 4, "google.protobuf.Timestamp"
74
73
  optional :compare_duration, :message, 5, "google.protobuf.Duration"
75
- optional :having, :string, 6
76
74
  optional :page_token, :string, 7
77
75
  optional :page_size, :int32, 8
78
76
  end
@@ -110,7 +108,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
110
108
  optional :order_by, :string, 3
111
109
  optional :read_time, :message, 4, "google.protobuf.Timestamp"
112
110
  optional :compare_duration, :message, 5, "google.protobuf.Duration"
113
- optional :having, :string, 6
114
111
  optional :field_mask, :message, 7, "google.protobuf.FieldMask"
115
112
  optional :page_token, :string, 8
116
113
  optional :page_size, :int32, 9
@@ -137,7 +134,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
137
134
  optional :order_by, :string, 3
138
135
  optional :read_time, :message, 4, "google.protobuf.Timestamp"
139
136
  optional :compare_duration, :message, 5, "google.protobuf.Duration"
140
- optional :having, :string, 6
141
137
  optional :field_mask, :message, 7, "google.protobuf.FieldMask"
142
138
  optional :page_token, :string, 8
143
139
  optional :page_size, :int32, 9
@@ -1,7 +1,7 @@
1
1
  # Generated by the protocol buffer compiler. DO NOT EDIT!
2
2
  # Source: google/cloud/securitycenter/v1p1beta1/securitycenter_service.proto for package 'Google.Cloud.SecurityCenter.V1p1beta1'
3
3
  # Original file comments:
4
- # Copyright 2019 Google LLC.
4
+ # Copyright 2020 Google LLC
5
5
  #
6
6
  # Licensed under the Apache License, Version 2.0 (the "License");
7
7
  # you may not use this file except in compliance with the License.
@@ -15,7 +15,6 @@
15
15
  # See the License for the specific language governing permissions and
16
16
  # limitations under the License.
17
17
  #
18
- #
19
18
 
20
19
  require 'grpc'
21
20
  require 'google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb'
@@ -86,11 +85,11 @@ module Google
86
85
  rpc :SetIamPolicy, Google::Iam::V1::SetIamPolicyRequest, Google::Iam::V1::Policy
87
86
  # Returns the permissions that a caller has on the specified source.
88
87
  rpc :TestIamPermissions, Google::Iam::V1::TestIamPermissionsRequest, Google::Iam::V1::TestIamPermissionsResponse
89
- #
90
88
  # Creates or updates a finding. The corresponding source must exist for a
91
89
  # finding creation to succeed.
92
90
  rpc :UpdateFinding, Google::Cloud::SecurityCenter::V1p1beta1::UpdateFindingRequest, Google::Cloud::SecurityCenter::V1p1beta1::Finding
93
- # Updates a notification config.
91
+ # Updates a notification config. The following update
92
+ # fields are allowed: description, pubsub_topic, streaming_config.filter
94
93
  rpc :UpdateNotificationConfig, Google::Cloud::SecurityCenter::V1p1beta1::UpdateNotificationConfigRequest, Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig
95
94
  # Updates an organization's settings.
96
95
  rpc :UpdateOrganizationSettings, Google::Cloud::SecurityCenter::V1p1beta1::UpdateOrganizationSettingsRequest, Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings
@@ -21,12 +21,13 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center's (Cloud SCC) representation of a Google Cloud
25
- # Platform (GCP) resource.
24
+ # Security Command Center representation of a Google Cloud
25
+ # resource.
26
26
  #
27
- # The Asset is a Cloud SCC resource that captures information about a single
28
- # GCP resource. All modifications to an Asset are only within the context of
29
- # Cloud SCC and don't affect the referenced GCP resource.
27
+ # The Asset is a Security Command Center resource that captures information
28
+ # about a single Google Cloud resource. All modifications to an Asset are only
29
+ # within the context of Security Command Center and don't affect the referenced
30
+ # Google Cloud resource.
30
31
  # @!attribute [rw] name
31
32
  # @return [::String]
32
33
  # The relative resource name of this asset. See:
@@ -35,45 +36,46 @@ module Google
35
36
  # "organizations/\\{organization_id}/assets/\\{asset_id}".
36
37
  # @!attribute [rw] security_center_properties
37
38
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::SecurityCenterProperties]
38
- # Cloud SCC managed properties. These properties are managed by
39
- # Cloud SCC and cannot be modified by the user.
39
+ # Security Command Center managed properties. These properties are managed by
40
+ # Security Command Center and cannot be modified by the user.
40
41
  # @!attribute [rw] resource_properties
41
42
  # @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
42
43
  # Resource managed properties. These properties are managed and defined by
43
- # the GCP resource and cannot be modified by the user.
44
+ # the Google Cloud resource and cannot be modified by the user.
44
45
  # @!attribute [rw] security_marks
45
46
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
46
47
  # User specified security marks. These marks are entirely managed by the user
47
48
  # and come from the SecurityMarks resource that belongs to the asset.
48
49
  # @!attribute [rw] create_time
49
50
  # @return [::Google::Protobuf::Timestamp]
50
- # The time at which the asset was created in Cloud SCC.
51
+ # The time at which the asset was created in Security Command Center.
51
52
  # @!attribute [rw] update_time
52
53
  # @return [::Google::Protobuf::Timestamp]
53
54
  # The time at which the asset was last updated, added, or deleted in Cloud
54
55
  # SCC.
55
56
  # @!attribute [rw] iam_policy
56
57
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::IamPolicy]
57
- # IAM Policy information associated with the GCP resource described by the
58
- # Cloud SCC asset. This information is managed and defined by the GCP
59
- # resource and cannot be modified by the user.
58
+ # Cloud IAM Policy information associated with the Google Cloud resource
59
+ # described by the Security Command Center asset. This information is managed
60
+ # and defined by the Google Cloud resource and cannot be modified by the
61
+ # user.
60
62
  class Asset
61
63
  include ::Google::Protobuf::MessageExts
62
64
  extend ::Google::Protobuf::MessageExts::ClassMethods
63
65
 
64
- # Cloud SCC managed properties. These properties are managed by Cloud SCC and
65
- # cannot be modified by the user.
66
+ # Security Command Center managed properties. These properties are managed by
67
+ # Security Command Center and cannot be modified by the user.
66
68
  # @!attribute [rw] resource_name
67
69
  # @return [::String]
68
- # The full resource name of the GCP resource this asset
70
+ # The full resource name of the Google Cloud resource this asset
69
71
  # represents. This field is immutable after create time. See:
70
72
  # https://cloud.google.com/apis/design/resource_names#full_resource_name
71
73
  # @!attribute [rw] resource_type
72
74
  # @return [::String]
73
- # The type of the GCP resource. Examples include: APPLICATION,
75
+ # The type of the Google Cloud resource. Examples include: APPLICATION,
74
76
  # PROJECT, and ORGANIZATION. This is a case insensitive field defined by
75
- # Cloud SCC and/or the producer of the resource and is immutable
76
- # after create time.
77
+ # Security Command Center and/or the producer of the resource and is
78
+ # immutable after create time.
77
79
  # @!attribute [rw] resource_parent
78
80
  # @return [::String]
79
81
  # The full resource name of the immediate parent of the resource. See:
@@ -99,13 +101,14 @@ module Google
99
101
  extend ::Google::Protobuf::MessageExts::ClassMethods
100
102
  end
101
103
 
102
- # IAM Policy information associated with the GCP resource described by the
103
- # Cloud SCC asset. This information is managed and defined by the GCP
104
- # resource and cannot be modified by the user.
104
+ # Cloud IAM Policy information associated with the Google Cloud resource
105
+ # described by the Security Command Center asset. This information is managed
106
+ # and defined by the Google Cloud resource and cannot be modified by the
107
+ # user.
105
108
  # @!attribute [rw] policy_blob
106
109
  # @return [::String]
107
110
  # The JSON representation of the Policy associated with the asset.
108
- # See https://cloud.google.com/iam/reference/rest/v1/Policy for
111
+ # See https://cloud.google.com/iam/docs/reference/rest/v1/Policy for
109
112
  # format details.
110
113
  class IamPolicy
111
114
  include ::Google::Protobuf::MessageExts
@@ -21,12 +21,12 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center (Cloud SCC) finding.
24
+ # Security Command Center finding.
25
25
  #
26
26
  # A finding is a record of assessment data (security, risk, health or privacy)
27
- # ingested into Cloud SCC for presentation, notification, analysis,
28
- # policy testing, and enforcement. For example, an XSS vulnerability in an
29
- # App Engine application is a finding.
27
+ # ingested into Security Command Center for presentation, notification,
28
+ # analysis, policy testing, and enforcement. For example, an XSS vulnerability
29
+ # in an App Engine application is a finding.
30
30
  # @!attribute [rw] name
31
31
  # @return [::String]
32
32
  # The relative resource name of this finding. See:
@@ -42,12 +42,12 @@ module Google
42
42
  # "organizations/\\{organization_id}/sources/\\{source_id}"
43
43
  # @!attribute [rw] resource_name
44
44
  # @return [::String]
45
- # For findings on Google Cloud Platform (GCP) resources, the full resource
46
- # name of the GCP resource this finding is for. See:
45
+ # For findings on Google Cloud resources, the full resource
46
+ # name of the Google Cloud resource this finding is for. See:
47
47
  # https://cloud.google.com/apis/design/resource_names#full_resource_name
48
- # When the finding is for a non-GCP resource, the resourceName can be a
49
- # customer or partner defined string.
50
- # This field is immutable after creation time.
48
+ # When the finding is for a non-Google Cloud resource, the resourceName can
49
+ # be a customer or partner defined string. This field is immutable after
50
+ # creation time.
51
51
  # @!attribute [rw] state
52
52
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
53
53
  # The state of the finding.
@@ -58,9 +58,9 @@ module Google
58
58
  # Example: "XSS_FLASH_INJECTION"
59
59
  # @!attribute [rw] external_uri
60
60
  # @return [::String]
61
- # The URI that, if available, points to a web page outside of Cloud SCC
62
- # where additional information about the finding can be found. This field is
63
- # guaranteed to be either empty or a well formed URL.
61
+ # The URI that, if available, points to a web page outside of Security
62
+ # Command Center where additional information about the finding can be found.
63
+ # This field is guaranteed to be either empty or a well formed URL.
64
64
  # @!attribute [rw] source_properties
65
65
  # @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
66
66
  # Source specific properties. These properties are managed by the source
@@ -79,7 +79,7 @@ module Google
79
79
  # the firewall became open. The accuracy is determined by the detector.
80
80
  # @!attribute [rw] create_time
81
81
  # @return [::Google::Protobuf::Timestamp]
82
- # The time at which the finding was created in Cloud SCC.
82
+ # The time at which the finding was created in Security Command Center.
83
83
  class Finding
84
84
  include ::Google::Protobuf::MessageExts
85
85
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -21,10 +21,11 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center (Cloud SCC) notification configs.
24
+ # Security Command Center notification configs.
25
25
  #
26
- # A notification config is a Cloud SCC resource that contains the configuration
27
- # to send notifications for create/update events of findings, assets and etc.
26
+ # A notification config is a Security Command Center resource that contains the
27
+ # configuration to send notifications for create/update events of findings,
28
+ # assets and etc.
28
29
  # @!attribute [rw] name
29
30
  # @return [::String]
30
31
  # The relative resource name of this notification config. See:
@@ -39,12 +40,12 @@ module Google
39
40
  # The type of events the config is for, e.g. FINDING.
40
41
  # @!attribute [rw] pubsub_topic
41
42
  # @return [::String]
42
- # The PubSub topic to send notifications to. Its format is
43
+ # The Pub/Sub topic to send notifications to. Its format is
43
44
  # "projects/[project_id]/topics/[topic]".
44
45
  # @!attribute [r] service_account
45
46
  # @return [::String]
46
47
  # Output only. The service account that needs "pubsub.topics.publish"
47
- # permission to publish to the PubSub topic.
48
+ # permission to publish to the Pub/Sub topic.
48
49
  # @!attribute [rw] streaming_config
49
50
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
50
51
  # The config for triggering streaming-based notifications.
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud SCC's Notification
24
+ # Security Command Center's Notification
25
25
  # @!attribute [rw] notification_config_name
26
26
  # @return [::String]
27
27
  # Name of the notification config that generated current notification.
@@ -29,6 +29,9 @@ module Google
29
29
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
30
30
  # If it's a Finding based notification config, this field will be
31
31
  # populated.
32
+ # @!attribute [rw] resource
33
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Resource]
34
+ # The Cloud resource tied to the notification.
32
35
  class NotificationMessage
33
36
  include ::Google::Protobuf::MessageExts
34
37
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -21,8 +21,8 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # User specified settings that are attached to the Cloud Security Command
25
- # Center (Cloud SCC) organization.
24
+ # User specified settings that are attached to the Security Command
25
+ # Center organization.
26
26
  # @!attribute [rw] name
27
27
  # @return [::String]
28
28
  # The relative resource name of the settings. See:
@@ -0,0 +1,48 @@
1
+ # frozen_string_literal: true
2
+
3
+ # Copyright 2020 Google LLC
4
+ #
5
+ # Licensed under the Apache License, Version 2.0 (the "License");
6
+ # you may not use this file except in compliance with the License.
7
+ # You may obtain a copy of the License at
8
+ #
9
+ # https://www.apache.org/licenses/LICENSE-2.0
10
+ #
11
+ # Unless required by applicable law or agreed to in writing, software
12
+ # distributed under the License is distributed on an "AS IS" BASIS,
13
+ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
+ # See the License for the specific language governing permissions and
15
+ # limitations under the License.
16
+
17
+ # Auto-generated by gapic-generator-ruby. DO NOT EDIT!
18
+
19
+
20
+ module Google
21
+ module Cloud
22
+ module SecurityCenter
23
+ module V1p1beta1
24
+ # Information related to the Google Cloud resource.
25
+ # @!attribute [rw] name
26
+ # @return [::String]
27
+ # The full resource name of the resource. See:
28
+ # https://cloud.google.com/apis/design/resource_names#full_resource_name
29
+ # @!attribute [rw] project
30
+ # @return [::String]
31
+ # The full resource name of project that the resource belongs to.
32
+ # @!attribute [rw] project_display_name
33
+ # @return [::String]
34
+ # The human readable name of project that the resource belongs to.
35
+ # @!attribute [rw] parent
36
+ # @return [::String]
37
+ # The full resource name of resource's parent.
38
+ # @!attribute [rw] parent_display_name
39
+ # @return [::String]
40
+ # The human readable name of resource's parent.
41
+ class Resource
42
+ include ::Google::Protobuf::MessageExts
43
+ extend ::Google::Protobuf::MessageExts::ClassMethods
44
+ end
45
+ end
46
+ end
47
+ end
48
+ end
@@ -21,9 +21,9 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # User specified security marks that are attached to the parent Cloud Security
25
- # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
26
- # SCC organization -- they can be modified and viewed by all users who have
24
+ # User specified security marks that are attached to the parent Security
25
+ # Command Center resource. Security marks are scoped within a Security Command
26
+ # Center organization -- they can be modified and viewed by all users who have
27
27
  # proper permissions on the organization.
28
28
  # @!attribute [rw] name
29
29
  # @return [::String]
@@ -155,15 +155,15 @@ module Google
155
155
  #
156
156
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
157
157
  # Examples:
158
- # "update_time = \"2019-06-10T16:07:18-07:00\""
159
- # "update_time = 1560208038000"
158
+ # `update_time = "2019-06-10T16:07:18-07:00"`
159
+ # `update_time = 1560208038000`
160
160
  #
161
161
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
162
162
  #
163
163
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
164
164
  # Examples:
165
- # "create_time = \"2019-06-10T16:07:18-07:00\""
166
- # "create_time = 1560208038000"
165
+ # `create_time = "2019-06-10T16:07:18-07:00"`
166
+ # `create_time = 1560208038000`
167
167
  #
168
168
  # * iam_policy.policy_blob: `=`, `:`
169
169
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -178,6 +178,12 @@ module Google
178
178
  # * security_center_properties.resource_owners: `=`, `:`
179
179
  #
180
180
  # For example, `resource_properties.size = 100` is a valid filter string.
181
+ #
182
+ # Use a partial match on the empty string to filter based on a property
183
+ # existing: `resource_properties.my_property : ""`
184
+ #
185
+ # Use a negated partial match on the empty string to filter based on a
186
+ # property not existing: `-resource_properties.my_property : ""`
181
187
  # @!attribute [rw] group_by
182
188
  # @return [::String]
183
189
  # Required. Expression that defines what assets fields to use for grouping.
@@ -233,11 +239,6 @@ module Google
233
239
  # to assets existing at the supplied time and their values are those at that
234
240
  # specific time. Absence of this field will default to the API's version of
235
241
  # NOW.
236
- # @!attribute [rw] having
237
- # @return [::String]
238
- # Filter that specifies what fields to further filter on *after* the query
239
- # filter has been executed. Currently only `state_change` is supported and
240
- # requires compare_duration to be specified.
241
242
  # @!attribute [rw] page_token
242
243
  # @return [::String]
243
244
  # The value returned by the last `GroupAssetsResponse`; indicates
@@ -318,13 +319,19 @@ module Google
318
319
  #
319
320
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
320
321
  # Examples:
321
- # "event_time = \"2019-06-10T16:07:18-07:00\""
322
- # "event_time = 1560208038000"
322
+ # `event_time = "2019-06-10T16:07:18-07:00"`
323
+ # `event_time = 1560208038000`
323
324
  #
324
325
  # * security_marks.marks: `=`, `:`
325
326
  # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
326
327
  #
327
328
  # For example, `source_properties.size = 100` is a valid filter string.
329
+ #
330
+ # Use a partial match on the empty string to filter based on a property
331
+ # existing: `source_properties.my_property : ""`
332
+ #
333
+ # Use a negated partial match on the empty string to filter based on a
334
+ # property not existing: `-source_properties.my_property : ""`
328
335
  # @!attribute [rw] group_by
329
336
  # @return [::String]
330
337
  # Required. Expression that defines what assets fields to use for grouping
@@ -362,12 +369,18 @@ module Google
362
369
  #
363
370
  # Possible "state_change" values when compare_duration is specified:
364
371
  #
365
- # * "CHANGED": indicates that the finding was present at the start of
366
- # compare_duration, but changed its state at read_time.
367
- # * "UNCHANGED": indicates that the finding was present at the start of
368
- # compare_duration and did not change state at read_time.
369
- # * "ADDED": indicates that the finding was not present at the start
370
- # of compare_duration, but was present at read_time.
372
+ # * "CHANGED": indicates that the finding was present and matched the given
373
+ # filter at the start of compare_duration, but changed its
374
+ # state at read_time.
375
+ # * "UNCHANGED": indicates that the finding was present and matched the given
376
+ # filter at the start of compare_duration and did not change
377
+ # state at read_time.
378
+ # * "ADDED": indicates that the finding did not match the given filter or
379
+ # was not present at the start of compare_duration, but was
380
+ # present at read_time.
381
+ # * "REMOVED": indicates that the finding was present and matched the
382
+ # filter at the start of compare_duration, but did not match
383
+ # the filter at read_time.
371
384
  #
372
385
  # If compare_duration is not specified, then the only possible state_change
373
386
  # is "UNUSED", which will be the state_change set for all findings present
@@ -375,11 +388,6 @@ module Google
375
388
  #
376
389
  # If this field is set then `state_change` must be a specified field in
377
390
  # `group_by`.
378
- # @!attribute [rw] having
379
- # @return [::String]
380
- # Filter that specifies what fields to further filter on *after* the query
381
- # filter has been executed. Currently only `finding.state` and `state_change`
382
- # are supported and requires compare_duration to be specified.
383
391
  # @!attribute [rw] page_token
384
392
  # @return [::String]
385
393
  # The value returned by the last `GroupFindingsResponse`; indicates
@@ -540,15 +548,15 @@ module Google
540
548
  #
541
549
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
542
550
  # Examples:
543
- # "update_time = \"2019-06-10T16:07:18-07:00\""
544
- # "update_time = 1560208038000"
551
+ # `update_time = "2019-06-10T16:07:18-07:00"`
552
+ # `update_time = 1560208038000`
545
553
  #
546
554
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
547
555
  #
548
556
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
549
557
  # Examples:
550
- # "create_time = \"2019-06-10T16:07:18-07:00\""
551
- # "create_time = 1560208038000"
558
+ # `create_time = "2019-06-10T16:07:18-07:00"`
559
+ # `create_time = 1560208038000`
552
560
  #
553
561
  # * iam_policy.policy_blob: `=`, `:`
554
562
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -563,6 +571,12 @@ module Google
563
571
  # * security_center_properties.resource_owners: `=`, `:`
564
572
  #
565
573
  # For example, `resource_properties.size = 100` is a valid filter string.
574
+ #
575
+ # Use a partial match on the empty string to filter based on a property
576
+ # existing: `resource_properties.my_property : ""`
577
+ #
578
+ # Use a negated partial match on the empty string to filter based on a
579
+ # property not existing: `-resource_properties.my_property : ""`
566
580
  # @!attribute [rw] order_by
567
581
  # @return [::String]
568
582
  # Expression that defines what fields and order to use for sorting. The
@@ -618,11 +632,6 @@ module Google
618
632
  # If compare_duration is not specified, then the only possible state_change
619
633
  # is "UNUSED", which will be the state_change set for all assets present at
620
634
  # read_time.
621
- # @!attribute [rw] having
622
- # @return [::String]
623
- # Filter that specifies what fields to further filter on *after* the query
624
- # filter has been executed. Currently only `state_change` is supported and
625
- # requires compare_duration to be specified.
626
635
  # @!attribute [rw] field_mask
627
636
  # @return [::Google::Protobuf::FieldMask]
628
637
  # Optional.
@@ -739,13 +748,19 @@ module Google
739
748
  #
740
749
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
741
750
  # Examples:
742
- # "event_time = \"2019-06-10T16:07:18-07:00\""
743
- # "event_time = 1560208038000"
751
+ # `event_time = "2019-06-10T16:07:18-07:00"`
752
+ # `event_time = 1560208038000`
744
753
  #
745
754
  # security_marks.marks: `=`, `:`
746
755
  # source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
747
756
  #
748
757
  # For example, `source_properties.size = 100` is a valid filter string.
758
+ #
759
+ # Use a partial match on the empty string to filter based on a property
760
+ # existing: `source_properties.my_property : ""`
761
+ #
762
+ # Use a negated partial match on the empty string to filter based on a
763
+ # property not existing: `-source_properties.my_property : ""`
749
764
  # @!attribute [rw] order_by
750
765
  # @return [::String]
751
766
  # Expression that defines what fields and order to use for sorting. The
@@ -788,21 +803,22 @@ module Google
788
803
  #
789
804
  # Possible "state_change" values when compare_duration is specified:
790
805
  #
791
- # * "CHANGED": indicates that the finding was present at the start of
792
- # compare_duration, but changed its state at read_time.
793
- # * "UNCHANGED": indicates that the finding was present at the start of
794
- # compare_duration and did not change state at read_time.
795
- # * "ADDED": indicates that the finding was not present at the start
796
- # of compare_duration, but was present at read_time.
806
+ # * "CHANGED": indicates that the finding was present and matched the given
807
+ # filter at the start of compare_duration, but changed its
808
+ # state at read_time.
809
+ # * "UNCHANGED": indicates that the finding was present and matched the given
810
+ # filter at the start of compare_duration and did not change
811
+ # state at read_time.
812
+ # * "ADDED": indicates that the finding did not match the given filter or
813
+ # was not present at the start of compare_duration, but was
814
+ # present at read_time.
815
+ # * "REMOVED": indicates that the finding was present and matched the
816
+ # filter at the start of compare_duration, but did not match
817
+ # the filter at read_time.
797
818
  #
798
819
  # If compare_duration is not specified, then the only possible state_change
799
820
  # is "UNUSED", which will be the state_change set for all findings present at
800
821
  # read_time.
801
- # @!attribute [rw] having
802
- # @return [::String]
803
- # Filter that specifies what fields to further filter on *after* the query
804
- # filter has been executed. Currently only `finding.state` and `state_change`
805
- # are supported and requires compare_duration to be specified.
806
822
  # @!attribute [rw] field_mask
807
823
  # @return [::Google::Protobuf::FieldMask]
808
824
  # Optional.
@@ -854,7 +870,7 @@ module Google
854
870
  include ::Google::Protobuf::MessageExts
855
871
  extend ::Google::Protobuf::MessageExts::ClassMethods
856
872
 
857
- # Information related to the Google Cloud Platform (GCP) resource that is
873
+ # Information related to the Google Cloud resource that is
858
874
  # associated with this finding.
859
875
  # @!attribute [rw] name
860
876
  # @return [::String]
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center's (Cloud SCC) finding source. A finding source
24
+ # Security Command Center finding source. A finding source
25
25
  # is an entity or a mechanism that can produce a finding. A source is like a
26
26
  # container of findings that come from the same scanner, logger, monitor, etc.
27
27
  # @!attribute [rw] name
@@ -41,7 +41,7 @@ module Google
41
41
  # @return [::String]
42
42
  # The description of the source (max of 1024 characters).
43
43
  # Example:
44
- # "Cloud Security Scanner is a web security scanner for common
44
+ # "Web Security Scanner is a web security scanner for common
45
45
  # vulnerabilities in App Engine applications. It can automatically
46
46
  # scan and detect four common vulnerabilities, including cross-site-scripting
47
47
  # (XSS), Flash injection, mixed content (HTTP in HTTPS), and
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-security_center-v1p1beta1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.1
4
+ version: 0.3.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-05-26 00:00:00.000000000 Z
11
+ date: 2020-08-07 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: gapic-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - "~>"
18
18
  - !ruby/object:Gem::Version
19
- version: '0.2'
19
+ version: '0.3'
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - "~>"
25
25
  - !ruby/object:Gem::Version
26
- version: '0.2'
26
+ version: '0.3'
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: google-cloud-errors
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -194,6 +194,7 @@ files:
194
194
  - lib/google/cloud/securitycenter/v1p1beta1/notification_config_pb.rb
195
195
  - lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb
196
196
  - lib/google/cloud/securitycenter/v1p1beta1/organization_settings_pb.rb
197
+ - lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb
197
198
  - lib/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response_pb.rb
198
199
  - lib/google/cloud/securitycenter/v1p1beta1/security_marks_pb.rb
199
200
  - lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb
@@ -207,6 +208,7 @@ files:
207
208
  - proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb
208
209
  - proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb
209
210
  - proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb
211
+ - proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb
210
212
  - proto_docs/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response.rb
211
213
  - proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb
212
214
  - proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb
@@ -242,7 +244,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
242
244
  - !ruby/object:Gem::Version
243
245
  version: '0'
244
246
  requirements: []
245
- rubygems_version: 3.0.6
247
+ rubygems_version: 3.1.3
246
248
  signing_key:
247
249
  specification_version: 4
248
250
  summary: API Client library for the Cloud Security Command Center V1p1beta1 API