google-cloud-security_center-v1p1beta1 0.2.2 → 0.3.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +4 -0
- data/lib/google/cloud/security_center/v1p1beta1/security_center/client.rb +83 -62
- data/lib/google/cloud/security_center/v1p1beta1/security_center/operations.rb +1 -1
- data/lib/google/cloud/security_center/v1p1beta1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb +2 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb +27 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb +0 -4
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_services_pb.rb +3 -4
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/asset.rb +25 -22
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/finding.rb +13 -13
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb +6 -5
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb +4 -1
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb +2 -2
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb +48 -0
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb +3 -3
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb +61 -45
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/source.rb +2 -2
- metadata +6 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 56e42a6a956465233ca5f01e3ffe1ce4386a3e8a10c25be36ac828b60a2159ba
|
|
4
|
+
data.tar.gz: 5c1e315a7f8c88ac0d685a18508b26b1a1dfe446eea4223b9a0a2e2fea641d40
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: a8e03bb4eca1859abd0e31b96182f2b164f2fa265c943d84979865cf6a0041dda5aa140894c832a03b7602da2c3e44f9cc863c7d8f0883aae8c133ab76d93b2c
|
|
7
|
+
data.tar.gz: e2f6a1b4bd7258fed62b37d0e117235386facc42a252946dfa111c1a994d9805bd084254f41650a557e49b6ab235956c86b70efbf40ab935314c02ab90bd2e6d
|
data/README.md
CHANGED
|
@@ -18,6 +18,7 @@ In order to use this library, you first need to go through the following steps:
|
|
|
18
18
|
|
|
19
19
|
1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
|
|
20
20
|
1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
|
|
21
|
+
1. [Enable the API.](https://console.cloud.google.com/apis/library/securitycenter.googleapis.com)
|
|
21
22
|
1. {file:AUTHENTICATION.md Set up authentication.}
|
|
22
23
|
|
|
23
24
|
## Quick Start
|
|
@@ -33,6 +34,9 @@ response = client.create_source request
|
|
|
33
34
|
View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-security_center-v1p1beta1/latest)
|
|
34
35
|
for class and method documentation.
|
|
35
36
|
|
|
37
|
+
See also the [Product Documentation](https://cloud.google.com/security-command-center)
|
|
38
|
+
for general usage information.
|
|
39
|
+
|
|
36
40
|
## Enabling Logging
|
|
37
41
|
|
|
38
42
|
To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
|
|
@@ -78,7 +78,7 @@ module Google
|
|
|
78
78
|
initial_delay: 0.1,
|
|
79
79
|
max_delay: 60.0,
|
|
80
80
|
multiplier: 1.3,
|
|
81
|
-
retry_codes: [
|
|
81
|
+
retry_codes: [4, 14]
|
|
82
82
|
}
|
|
83
83
|
|
|
84
84
|
default_config.rpcs.get_notification_config.timeout = 60.0
|
|
@@ -86,7 +86,7 @@ module Google
|
|
|
86
86
|
initial_delay: 0.1,
|
|
87
87
|
max_delay: 60.0,
|
|
88
88
|
multiplier: 1.3,
|
|
89
|
-
retry_codes: [
|
|
89
|
+
retry_codes: [4, 14]
|
|
90
90
|
}
|
|
91
91
|
|
|
92
92
|
default_config.rpcs.get_organization_settings.timeout = 60.0
|
|
@@ -94,7 +94,7 @@ module Google
|
|
|
94
94
|
initial_delay: 0.1,
|
|
95
95
|
max_delay: 60.0,
|
|
96
96
|
multiplier: 1.3,
|
|
97
|
-
retry_codes: [
|
|
97
|
+
retry_codes: [4, 14]
|
|
98
98
|
}
|
|
99
99
|
|
|
100
100
|
default_config.rpcs.get_source.timeout = 60.0
|
|
@@ -102,39 +102,39 @@ module Google
|
|
|
102
102
|
initial_delay: 0.1,
|
|
103
103
|
max_delay: 60.0,
|
|
104
104
|
multiplier: 1.3,
|
|
105
|
-
retry_codes: [
|
|
105
|
+
retry_codes: [4, 14]
|
|
106
106
|
}
|
|
107
107
|
|
|
108
|
-
default_config.rpcs.group_assets.timeout =
|
|
108
|
+
default_config.rpcs.group_assets.timeout = 480.0
|
|
109
109
|
default_config.rpcs.group_assets.retry_policy = {
|
|
110
110
|
initial_delay: 0.1,
|
|
111
111
|
max_delay: 60.0,
|
|
112
112
|
multiplier: 1.3,
|
|
113
|
-
retry_codes: [
|
|
113
|
+
retry_codes: [4, 14]
|
|
114
114
|
}
|
|
115
115
|
|
|
116
|
-
default_config.rpcs.group_findings.timeout =
|
|
116
|
+
default_config.rpcs.group_findings.timeout = 480.0
|
|
117
117
|
default_config.rpcs.group_findings.retry_policy = {
|
|
118
118
|
initial_delay: 0.1,
|
|
119
119
|
max_delay: 60.0,
|
|
120
120
|
multiplier: 1.3,
|
|
121
|
-
retry_codes: [
|
|
121
|
+
retry_codes: [4, 14]
|
|
122
122
|
}
|
|
123
123
|
|
|
124
|
-
default_config.rpcs.list_assets.timeout =
|
|
124
|
+
default_config.rpcs.list_assets.timeout = 480.0
|
|
125
125
|
default_config.rpcs.list_assets.retry_policy = {
|
|
126
126
|
initial_delay: 0.1,
|
|
127
127
|
max_delay: 60.0,
|
|
128
128
|
multiplier: 1.3,
|
|
129
|
-
retry_codes: [
|
|
129
|
+
retry_codes: [4, 14]
|
|
130
130
|
}
|
|
131
131
|
|
|
132
|
-
default_config.rpcs.list_findings.timeout =
|
|
132
|
+
default_config.rpcs.list_findings.timeout = 480.0
|
|
133
133
|
default_config.rpcs.list_findings.retry_policy = {
|
|
134
134
|
initial_delay: 0.1,
|
|
135
135
|
max_delay: 60.0,
|
|
136
136
|
multiplier: 1.3,
|
|
137
|
-
retry_codes: [
|
|
137
|
+
retry_codes: [4, 14]
|
|
138
138
|
}
|
|
139
139
|
|
|
140
140
|
default_config.rpcs.list_notification_configs.timeout = 60.0
|
|
@@ -142,7 +142,7 @@ module Google
|
|
|
142
142
|
initial_delay: 0.1,
|
|
143
143
|
max_delay: 60.0,
|
|
144
144
|
multiplier: 1.3,
|
|
145
|
-
retry_codes: [
|
|
145
|
+
retry_codes: [4, 14]
|
|
146
146
|
}
|
|
147
147
|
|
|
148
148
|
default_config.rpcs.list_sources.timeout = 60.0
|
|
@@ -150,7 +150,7 @@ module Google
|
|
|
150
150
|
initial_delay: 0.1,
|
|
151
151
|
max_delay: 60.0,
|
|
152
152
|
multiplier: 1.3,
|
|
153
|
-
retry_codes: [
|
|
153
|
+
retry_codes: [4, 14]
|
|
154
154
|
}
|
|
155
155
|
|
|
156
156
|
default_config.rpcs.run_asset_discovery.timeout = 60.0
|
|
@@ -164,7 +164,7 @@ module Google
|
|
|
164
164
|
initial_delay: 0.1,
|
|
165
165
|
max_delay: 60.0,
|
|
166
166
|
multiplier: 1.3,
|
|
167
|
-
retry_codes: [
|
|
167
|
+
retry_codes: [4, 14]
|
|
168
168
|
}
|
|
169
169
|
|
|
170
170
|
default_config.rpcs.update_finding.timeout = 60.0
|
|
@@ -175,7 +175,7 @@ module Google
|
|
|
175
175
|
|
|
176
176
|
default_config.rpcs.update_source.timeout = 60.0
|
|
177
177
|
|
|
178
|
-
default_config.rpcs.update_security_marks.timeout =
|
|
178
|
+
default_config.rpcs.update_security_marks.timeout = 480.0
|
|
179
179
|
|
|
180
180
|
default_config
|
|
181
181
|
end
|
|
@@ -841,7 +841,7 @@ module Google
|
|
|
841
841
|
# @param options [::Gapic::CallOptions, ::Hash]
|
|
842
842
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
|
843
843
|
#
|
|
844
|
-
# @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil,
|
|
844
|
+
# @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil, page_token: nil, page_size: nil)
|
|
845
845
|
# Pass arguments to `group_assets` via keyword arguments. Note that at
|
|
846
846
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
|
847
847
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
|
@@ -883,15 +883,15 @@ module Google
|
|
|
883
883
|
#
|
|
884
884
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
885
885
|
# Examples:
|
|
886
|
-
#
|
|
887
|
-
#
|
|
886
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
887
|
+
# `update_time = 1560208038000`
|
|
888
888
|
#
|
|
889
889
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
890
890
|
#
|
|
891
891
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
892
892
|
# Examples:
|
|
893
|
-
#
|
|
894
|
-
#
|
|
893
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
894
|
+
# `create_time = 1560208038000`
|
|
895
895
|
#
|
|
896
896
|
# * iam_policy.policy_blob: `=`, `:`
|
|
897
897
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -906,6 +906,12 @@ module Google
|
|
|
906
906
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
907
907
|
#
|
|
908
908
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
909
|
+
#
|
|
910
|
+
# Use a partial match on the empty string to filter based on a property
|
|
911
|
+
# existing: `resource_properties.my_property : ""`
|
|
912
|
+
#
|
|
913
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
914
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
909
915
|
# @param group_by [::String]
|
|
910
916
|
# Required. Expression that defines what assets fields to use for grouping.
|
|
911
917
|
# The string value should follow SQL syntax: comma separated list of fields.
|
|
@@ -958,10 +964,6 @@ module Google
|
|
|
958
964
|
# to assets existing at the supplied time and their values are those at that
|
|
959
965
|
# specific time. Absence of this field will default to the API's version of
|
|
960
966
|
# NOW.
|
|
961
|
-
# @param having [::String]
|
|
962
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
963
|
-
# filter has been executed. Currently only `state_change` is supported and
|
|
964
|
-
# requires compare_duration to be specified.
|
|
965
967
|
# @param page_token [::String]
|
|
966
968
|
# The value returned by the last `GroupAssetsResponse`; indicates
|
|
967
969
|
# that this is a continuation of a prior `GroupAssets` call, and that the
|
|
@@ -1033,7 +1035,7 @@ module Google
|
|
|
1033
1035
|
# @param options [::Gapic::CallOptions, ::Hash]
|
|
1034
1036
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
|
1035
1037
|
#
|
|
1036
|
-
# @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil,
|
|
1038
|
+
# @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil, page_token: nil, page_size: nil)
|
|
1037
1039
|
# Pass arguments to `group_findings` via keyword arguments. Note that at
|
|
1038
1040
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
|
1039
1041
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
|
@@ -1080,13 +1082,19 @@ module Google
|
|
|
1080
1082
|
#
|
|
1081
1083
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1082
1084
|
# Examples:
|
|
1083
|
-
#
|
|
1084
|
-
#
|
|
1085
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
1086
|
+
# `event_time = 1560208038000`
|
|
1085
1087
|
#
|
|
1086
1088
|
# * security_marks.marks: `=`, `:`
|
|
1087
1089
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
1088
1090
|
#
|
|
1089
1091
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
1092
|
+
#
|
|
1093
|
+
# Use a partial match on the empty string to filter based on a property
|
|
1094
|
+
# existing: `source_properties.my_property : ""`
|
|
1095
|
+
#
|
|
1096
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
1097
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
1090
1098
|
# @param group_by [::String]
|
|
1091
1099
|
# Required. Expression that defines what assets fields to use for grouping
|
|
1092
1100
|
# (including `state_change`). The string value should follow SQL syntax:
|
|
@@ -1121,12 +1129,18 @@ module Google
|
|
|
1121
1129
|
#
|
|
1122
1130
|
# Possible "state_change" values when compare_duration is specified:
|
|
1123
1131
|
#
|
|
1124
|
-
# * "CHANGED": indicates that the finding was present
|
|
1125
|
-
# compare_duration, but changed its
|
|
1126
|
-
#
|
|
1127
|
-
#
|
|
1128
|
-
#
|
|
1129
|
-
#
|
|
1132
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
|
1133
|
+
# filter at the start of compare_duration, but changed its
|
|
1134
|
+
# state at read_time.
|
|
1135
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
|
1136
|
+
# filter at the start of compare_duration and did not change
|
|
1137
|
+
# state at read_time.
|
|
1138
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
|
1139
|
+
# was not present at the start of compare_duration, but was
|
|
1140
|
+
# present at read_time.
|
|
1141
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
|
1142
|
+
# filter at the start of compare_duration, but did not match
|
|
1143
|
+
# the filter at read_time.
|
|
1130
1144
|
#
|
|
1131
1145
|
# If compare_duration is not specified, then the only possible state_change
|
|
1132
1146
|
# is "UNUSED", which will be the state_change set for all findings present
|
|
@@ -1134,10 +1148,6 @@ module Google
|
|
|
1134
1148
|
#
|
|
1135
1149
|
# If this field is set then `state_change` must be a specified field in
|
|
1136
1150
|
# `group_by`.
|
|
1137
|
-
# @param having [::String]
|
|
1138
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
1139
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
|
1140
|
-
# are supported and requires compare_duration to be specified.
|
|
1141
1151
|
# @param page_token [::String]
|
|
1142
1152
|
# The value returned by the last `GroupFindingsResponse`; indicates
|
|
1143
1153
|
# that this is a continuation of a prior `GroupFindings` call, and
|
|
@@ -1205,7 +1215,7 @@ module Google
|
|
|
1205
1215
|
# @param options [::Gapic::CallOptions, ::Hash]
|
|
1206
1216
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
|
1207
1217
|
#
|
|
1208
|
-
# @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil,
|
|
1218
|
+
# @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
|
|
1209
1219
|
# Pass arguments to `list_assets` via keyword arguments. Note that at
|
|
1210
1220
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
|
1211
1221
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
|
@@ -1247,15 +1257,15 @@ module Google
|
|
|
1247
1257
|
#
|
|
1248
1258
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1249
1259
|
# Examples:
|
|
1250
|
-
#
|
|
1251
|
-
#
|
|
1260
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
1261
|
+
# `update_time = 1560208038000`
|
|
1252
1262
|
#
|
|
1253
1263
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
1254
1264
|
#
|
|
1255
1265
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1256
1266
|
# Examples:
|
|
1257
|
-
#
|
|
1258
|
-
#
|
|
1267
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
1268
|
+
# `create_time = 1560208038000`
|
|
1259
1269
|
#
|
|
1260
1270
|
# * iam_policy.policy_blob: `=`, `:`
|
|
1261
1271
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -1270,6 +1280,12 @@ module Google
|
|
|
1270
1280
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
1271
1281
|
#
|
|
1272
1282
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
1283
|
+
#
|
|
1284
|
+
# Use a partial match on the empty string to filter based on a property
|
|
1285
|
+
# existing: `resource_properties.my_property : ""`
|
|
1286
|
+
#
|
|
1287
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
1288
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
1273
1289
|
# @param order_by [::String]
|
|
1274
1290
|
# Expression that defines what fields and order to use for sorting. The
|
|
1275
1291
|
# string value should follow SQL syntax: comma separated list of fields. For
|
|
@@ -1322,10 +1338,6 @@ module Google
|
|
|
1322
1338
|
# If compare_duration is not specified, then the only possible state_change
|
|
1323
1339
|
# is "UNUSED", which will be the state_change set for all assets present at
|
|
1324
1340
|
# read_time.
|
|
1325
|
-
# @param having [::String]
|
|
1326
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
1327
|
-
# filter has been executed. Currently only `state_change` is supported and
|
|
1328
|
-
# requires compare_duration to be specified.
|
|
1329
1341
|
# @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
|
|
1330
1342
|
# Optional.
|
|
1331
1343
|
# A field mask to specify the ListAssetsResult fields to be listed in the
|
|
@@ -1401,7 +1413,7 @@ module Google
|
|
|
1401
1413
|
# @param options [::Gapic::CallOptions, ::Hash]
|
|
1402
1414
|
# Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
|
|
1403
1415
|
#
|
|
1404
|
-
# @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil,
|
|
1416
|
+
# @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
|
|
1405
1417
|
# Pass arguments to `list_findings` via keyword arguments. Note that at
|
|
1406
1418
|
# least one keyword argument is required. To specify no parameters, or to keep all
|
|
1407
1419
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
|
@@ -1448,13 +1460,19 @@ module Google
|
|
|
1448
1460
|
#
|
|
1449
1461
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
1450
1462
|
# Examples:
|
|
1451
|
-
#
|
|
1452
|
-
#
|
|
1463
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
1464
|
+
# `event_time = 1560208038000`
|
|
1453
1465
|
#
|
|
1454
1466
|
# security_marks.marks: `=`, `:`
|
|
1455
1467
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
1456
1468
|
#
|
|
1457
1469
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
1470
|
+
#
|
|
1471
|
+
# Use a partial match on the empty string to filter based on a property
|
|
1472
|
+
# existing: `source_properties.my_property : ""`
|
|
1473
|
+
#
|
|
1474
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
1475
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
1458
1476
|
# @param order_by [::String]
|
|
1459
1477
|
# Expression that defines what fields and order to use for sorting. The
|
|
1460
1478
|
# string value should follow SQL syntax: comma separated list of fields. For
|
|
@@ -1494,20 +1512,22 @@ module Google
|
|
|
1494
1512
|
#
|
|
1495
1513
|
# Possible "state_change" values when compare_duration is specified:
|
|
1496
1514
|
#
|
|
1497
|
-
# * "CHANGED": indicates that the finding was present
|
|
1498
|
-
# compare_duration, but changed its
|
|
1499
|
-
#
|
|
1500
|
-
#
|
|
1501
|
-
#
|
|
1502
|
-
#
|
|
1515
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
|
1516
|
+
# filter at the start of compare_duration, but changed its
|
|
1517
|
+
# state at read_time.
|
|
1518
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
|
1519
|
+
# filter at the start of compare_duration and did not change
|
|
1520
|
+
# state at read_time.
|
|
1521
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
|
1522
|
+
# was not present at the start of compare_duration, but was
|
|
1523
|
+
# present at read_time.
|
|
1524
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
|
1525
|
+
# filter at the start of compare_duration, but did not match
|
|
1526
|
+
# the filter at read_time.
|
|
1503
1527
|
#
|
|
1504
1528
|
# If compare_duration is not specified, then the only possible state_change
|
|
1505
1529
|
# is "UNUSED", which will be the state_change set for all findings present at
|
|
1506
1530
|
# read_time.
|
|
1507
|
-
# @param having [::String]
|
|
1508
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
1509
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
|
1510
|
-
# are supported and requires compare_duration to be specified.
|
|
1511
1531
|
# @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
|
|
1512
1532
|
# Optional.
|
|
1513
1533
|
# A field mask to specify the Finding fields to be listed in the response.
|
|
@@ -2087,7 +2107,8 @@ module Google
|
|
|
2087
2107
|
end
|
|
2088
2108
|
|
|
2089
2109
|
##
|
|
2090
|
-
# Updates a notification config.
|
|
2110
|
+
# Updates a notification config. The following update
|
|
2111
|
+
# fields are allowed: description, pubsub_topic, streaming_config.filter
|
|
2091
2112
|
#
|
|
2092
2113
|
# @overload update_notification_config(request, options = nil)
|
|
2093
2114
|
# Pass arguments to `update_notification_config` via a request object, either of type
|
|
@@ -2457,7 +2478,7 @@ module Google
|
|
|
2457
2478
|
|
|
2458
2479
|
config_attr :endpoint, "securitycenter.googleapis.com", ::String
|
|
2459
2480
|
config_attr :credentials, nil do |value|
|
|
2460
|
-
allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
2481
|
+
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
2461
2482
|
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
|
|
2462
2483
|
allowed.any? { |klass| klass === value }
|
|
2463
2484
|
end
|
|
@@ -475,7 +475,7 @@ module Google
|
|
|
475
475
|
|
|
476
476
|
config_attr :endpoint, "securitycenter.googleapis.com", ::String
|
|
477
477
|
config_attr :credentials, nil do |value|
|
|
478
|
-
allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
478
|
+
allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
|
|
479
479
|
allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
|
|
480
480
|
allowed.any? { |klass| klass === value }
|
|
481
481
|
end
|
|
@@ -6,10 +6,12 @@ require 'google/protobuf'
|
|
|
6
6
|
require 'google/api/annotations_pb'
|
|
7
7
|
require 'google/cloud/securitycenter/v1p1beta1/asset_pb'
|
|
8
8
|
require 'google/cloud/securitycenter/v1p1beta1/finding_pb'
|
|
9
|
+
require 'google/cloud/securitycenter/v1p1beta1/resource_pb'
|
|
9
10
|
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
10
11
|
add_file("google/cloud/securitycenter/v1p1beta1/notification_message.proto", :syntax => :proto3) do
|
|
11
12
|
add_message "google.cloud.securitycenter.v1p1beta1.NotificationMessage" do
|
|
12
13
|
optional :notification_config_name, :string, 1
|
|
14
|
+
optional :resource, :message, 3, "google.cloud.securitycenter.v1p1beta1.Resource"
|
|
13
15
|
oneof :event do
|
|
14
16
|
optional :finding, :message, 2, "google.cloud.securitycenter.v1p1beta1.Finding"
|
|
15
17
|
end
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
|
+
# source: google/cloud/securitycenter/v1p1beta1/resource.proto
|
|
3
|
+
|
|
4
|
+
require 'google/protobuf'
|
|
5
|
+
|
|
6
|
+
require 'google/api/annotations_pb'
|
|
7
|
+
Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
8
|
+
add_file("google/cloud/securitycenter/v1p1beta1/resource.proto", :syntax => :proto3) do
|
|
9
|
+
add_message "google.cloud.securitycenter.v1p1beta1.Resource" do
|
|
10
|
+
optional :name, :string, 1
|
|
11
|
+
optional :project, :string, 2
|
|
12
|
+
optional :project_display_name, :string, 3
|
|
13
|
+
optional :parent, :string, 4
|
|
14
|
+
optional :parent_display_name, :string, 5
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
|
|
19
|
+
module Google
|
|
20
|
+
module Cloud
|
|
21
|
+
module SecurityCenter
|
|
22
|
+
module V1p1beta1
|
|
23
|
+
Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Resource").msgclass
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
@@ -56,7 +56,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
56
56
|
optional :group_by, :string, 3
|
|
57
57
|
optional :compare_duration, :message, 4, "google.protobuf.Duration"
|
|
58
58
|
optional :read_time, :message, 5, "google.protobuf.Timestamp"
|
|
59
|
-
optional :having, :string, 6
|
|
60
59
|
optional :page_token, :string, 7
|
|
61
60
|
optional :page_size, :int32, 8
|
|
62
61
|
end
|
|
@@ -72,7 +71,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
72
71
|
optional :group_by, :string, 3
|
|
73
72
|
optional :read_time, :message, 4, "google.protobuf.Timestamp"
|
|
74
73
|
optional :compare_duration, :message, 5, "google.protobuf.Duration"
|
|
75
|
-
optional :having, :string, 6
|
|
76
74
|
optional :page_token, :string, 7
|
|
77
75
|
optional :page_size, :int32, 8
|
|
78
76
|
end
|
|
@@ -110,7 +108,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
110
108
|
optional :order_by, :string, 3
|
|
111
109
|
optional :read_time, :message, 4, "google.protobuf.Timestamp"
|
|
112
110
|
optional :compare_duration, :message, 5, "google.protobuf.Duration"
|
|
113
|
-
optional :having, :string, 6
|
|
114
111
|
optional :field_mask, :message, 7, "google.protobuf.FieldMask"
|
|
115
112
|
optional :page_token, :string, 8
|
|
116
113
|
optional :page_size, :int32, 9
|
|
@@ -137,7 +134,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
|
137
134
|
optional :order_by, :string, 3
|
|
138
135
|
optional :read_time, :message, 4, "google.protobuf.Timestamp"
|
|
139
136
|
optional :compare_duration, :message, 5, "google.protobuf.Duration"
|
|
140
|
-
optional :having, :string, 6
|
|
141
137
|
optional :field_mask, :message, 7, "google.protobuf.FieldMask"
|
|
142
138
|
optional :page_token, :string, 8
|
|
143
139
|
optional :page_size, :int32, 9
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
# Generated by the protocol buffer compiler. DO NOT EDIT!
|
|
2
2
|
# Source: google/cloud/securitycenter/v1p1beta1/securitycenter_service.proto for package 'Google.Cloud.SecurityCenter.V1p1beta1'
|
|
3
3
|
# Original file comments:
|
|
4
|
-
# Copyright
|
|
4
|
+
# Copyright 2020 Google LLC
|
|
5
5
|
#
|
|
6
6
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
7
7
|
# you may not use this file except in compliance with the License.
|
|
@@ -15,7 +15,6 @@
|
|
|
15
15
|
# See the License for the specific language governing permissions and
|
|
16
16
|
# limitations under the License.
|
|
17
17
|
#
|
|
18
|
-
#
|
|
19
18
|
|
|
20
19
|
require 'grpc'
|
|
21
20
|
require 'google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb'
|
|
@@ -86,11 +85,11 @@ module Google
|
|
|
86
85
|
rpc :SetIamPolicy, Google::Iam::V1::SetIamPolicyRequest, Google::Iam::V1::Policy
|
|
87
86
|
# Returns the permissions that a caller has on the specified source.
|
|
88
87
|
rpc :TestIamPermissions, Google::Iam::V1::TestIamPermissionsRequest, Google::Iam::V1::TestIamPermissionsResponse
|
|
89
|
-
#
|
|
90
88
|
# Creates or updates a finding. The corresponding source must exist for a
|
|
91
89
|
# finding creation to succeed.
|
|
92
90
|
rpc :UpdateFinding, Google::Cloud::SecurityCenter::V1p1beta1::UpdateFindingRequest, Google::Cloud::SecurityCenter::V1p1beta1::Finding
|
|
93
|
-
# Updates a notification config.
|
|
91
|
+
# Updates a notification config. The following update
|
|
92
|
+
# fields are allowed: description, pubsub_topic, streaming_config.filter
|
|
94
93
|
rpc :UpdateNotificationConfig, Google::Cloud::SecurityCenter::V1p1beta1::UpdateNotificationConfigRequest, Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig
|
|
95
94
|
# Updates an organization's settings.
|
|
96
95
|
rpc :UpdateOrganizationSettings, Google::Cloud::SecurityCenter::V1p1beta1::UpdateOrganizationSettingsRequest, Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings
|
|
@@ -21,12 +21,13 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
#
|
|
25
|
-
#
|
|
24
|
+
# Security Command Center representation of a Google Cloud
|
|
25
|
+
# resource.
|
|
26
26
|
#
|
|
27
|
-
# The Asset is a
|
|
28
|
-
#
|
|
29
|
-
#
|
|
27
|
+
# The Asset is a Security Command Center resource that captures information
|
|
28
|
+
# about a single Google Cloud resource. All modifications to an Asset are only
|
|
29
|
+
# within the context of Security Command Center and don't affect the referenced
|
|
30
|
+
# Google Cloud resource.
|
|
30
31
|
# @!attribute [rw] name
|
|
31
32
|
# @return [::String]
|
|
32
33
|
# The relative resource name of this asset. See:
|
|
@@ -35,45 +36,46 @@ module Google
|
|
|
35
36
|
# "organizations/\\{organization_id}/assets/\\{asset_id}".
|
|
36
37
|
# @!attribute [rw] security_center_properties
|
|
37
38
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::SecurityCenterProperties]
|
|
38
|
-
#
|
|
39
|
-
#
|
|
39
|
+
# Security Command Center managed properties. These properties are managed by
|
|
40
|
+
# Security Command Center and cannot be modified by the user.
|
|
40
41
|
# @!attribute [rw] resource_properties
|
|
41
42
|
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
|
42
43
|
# Resource managed properties. These properties are managed and defined by
|
|
43
|
-
# the
|
|
44
|
+
# the Google Cloud resource and cannot be modified by the user.
|
|
44
45
|
# @!attribute [rw] security_marks
|
|
45
46
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
|
|
46
47
|
# User specified security marks. These marks are entirely managed by the user
|
|
47
48
|
# and come from the SecurityMarks resource that belongs to the asset.
|
|
48
49
|
# @!attribute [rw] create_time
|
|
49
50
|
# @return [::Google::Protobuf::Timestamp]
|
|
50
|
-
# The time at which the asset was created in
|
|
51
|
+
# The time at which the asset was created in Security Command Center.
|
|
51
52
|
# @!attribute [rw] update_time
|
|
52
53
|
# @return [::Google::Protobuf::Timestamp]
|
|
53
54
|
# The time at which the asset was last updated, added, or deleted in Cloud
|
|
54
55
|
# SCC.
|
|
55
56
|
# @!attribute [rw] iam_policy
|
|
56
57
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::IamPolicy]
|
|
57
|
-
# IAM Policy information associated with the
|
|
58
|
-
#
|
|
59
|
-
# resource and cannot be modified by the
|
|
58
|
+
# Cloud IAM Policy information associated with the Google Cloud resource
|
|
59
|
+
# described by the Security Command Center asset. This information is managed
|
|
60
|
+
# and defined by the Google Cloud resource and cannot be modified by the
|
|
61
|
+
# user.
|
|
60
62
|
class Asset
|
|
61
63
|
include ::Google::Protobuf::MessageExts
|
|
62
64
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
63
65
|
|
|
64
|
-
#
|
|
65
|
-
# cannot be modified by the user.
|
|
66
|
+
# Security Command Center managed properties. These properties are managed by
|
|
67
|
+
# Security Command Center and cannot be modified by the user.
|
|
66
68
|
# @!attribute [rw] resource_name
|
|
67
69
|
# @return [::String]
|
|
68
|
-
# The full resource name of the
|
|
70
|
+
# The full resource name of the Google Cloud resource this asset
|
|
69
71
|
# represents. This field is immutable after create time. See:
|
|
70
72
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
|
71
73
|
# @!attribute [rw] resource_type
|
|
72
74
|
# @return [::String]
|
|
73
|
-
# The type of the
|
|
75
|
+
# The type of the Google Cloud resource. Examples include: APPLICATION,
|
|
74
76
|
# PROJECT, and ORGANIZATION. This is a case insensitive field defined by
|
|
75
|
-
#
|
|
76
|
-
# after create time.
|
|
77
|
+
# Security Command Center and/or the producer of the resource and is
|
|
78
|
+
# immutable after create time.
|
|
77
79
|
# @!attribute [rw] resource_parent
|
|
78
80
|
# @return [::String]
|
|
79
81
|
# The full resource name of the immediate parent of the resource. See:
|
|
@@ -99,13 +101,14 @@ module Google
|
|
|
99
101
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
100
102
|
end
|
|
101
103
|
|
|
102
|
-
# IAM Policy information associated with the
|
|
103
|
-
#
|
|
104
|
-
# resource and cannot be modified by the
|
|
104
|
+
# Cloud IAM Policy information associated with the Google Cloud resource
|
|
105
|
+
# described by the Security Command Center asset. This information is managed
|
|
106
|
+
# and defined by the Google Cloud resource and cannot be modified by the
|
|
107
|
+
# user.
|
|
105
108
|
# @!attribute [rw] policy_blob
|
|
106
109
|
# @return [::String]
|
|
107
110
|
# The JSON representation of the Policy associated with the asset.
|
|
108
|
-
# See https://cloud.google.com/iam/reference/rest/v1/Policy for
|
|
111
|
+
# See https://cloud.google.com/iam/docs/reference/rest/v1/Policy for
|
|
109
112
|
# format details.
|
|
110
113
|
class IamPolicy
|
|
111
114
|
include ::Google::Protobuf::MessageExts
|
|
@@ -21,12 +21,12 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
#
|
|
24
|
+
# Security Command Center finding.
|
|
25
25
|
#
|
|
26
26
|
# A finding is a record of assessment data (security, risk, health or privacy)
|
|
27
|
-
# ingested into
|
|
28
|
-
# policy testing, and enforcement. For example, an XSS vulnerability
|
|
29
|
-
# App Engine application is a finding.
|
|
27
|
+
# ingested into Security Command Center for presentation, notification,
|
|
28
|
+
# analysis, policy testing, and enforcement. For example, an XSS vulnerability
|
|
29
|
+
# in an App Engine application is a finding.
|
|
30
30
|
# @!attribute [rw] name
|
|
31
31
|
# @return [::String]
|
|
32
32
|
# The relative resource name of this finding. See:
|
|
@@ -42,12 +42,12 @@ module Google
|
|
|
42
42
|
# "organizations/\\{organization_id}/sources/\\{source_id}"
|
|
43
43
|
# @!attribute [rw] resource_name
|
|
44
44
|
# @return [::String]
|
|
45
|
-
# For findings on Google Cloud
|
|
46
|
-
# name of the
|
|
45
|
+
# For findings on Google Cloud resources, the full resource
|
|
46
|
+
# name of the Google Cloud resource this finding is for. See:
|
|
47
47
|
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
|
48
|
-
# When the finding is for a non-
|
|
49
|
-
# customer or partner defined string.
|
|
50
|
-
#
|
|
48
|
+
# When the finding is for a non-Google Cloud resource, the resourceName can
|
|
49
|
+
# be a customer or partner defined string. This field is immutable after
|
|
50
|
+
# creation time.
|
|
51
51
|
# @!attribute [rw] state
|
|
52
52
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
|
|
53
53
|
# The state of the finding.
|
|
@@ -58,9 +58,9 @@ module Google
|
|
|
58
58
|
# Example: "XSS_FLASH_INJECTION"
|
|
59
59
|
# @!attribute [rw] external_uri
|
|
60
60
|
# @return [::String]
|
|
61
|
-
# The URI that, if available, points to a web page outside of
|
|
62
|
-
# where additional information about the finding can be found.
|
|
63
|
-
# guaranteed to be either empty or a well formed URL.
|
|
61
|
+
# The URI that, if available, points to a web page outside of Security
|
|
62
|
+
# Command Center where additional information about the finding can be found.
|
|
63
|
+
# This field is guaranteed to be either empty or a well formed URL.
|
|
64
64
|
# @!attribute [rw] source_properties
|
|
65
65
|
# @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
|
|
66
66
|
# Source specific properties. These properties are managed by the source
|
|
@@ -79,7 +79,7 @@ module Google
|
|
|
79
79
|
# the firewall became open. The accuracy is determined by the detector.
|
|
80
80
|
# @!attribute [rw] create_time
|
|
81
81
|
# @return [::Google::Protobuf::Timestamp]
|
|
82
|
-
# The time at which the finding was created in
|
|
82
|
+
# The time at which the finding was created in Security Command Center.
|
|
83
83
|
class Finding
|
|
84
84
|
include ::Google::Protobuf::MessageExts
|
|
85
85
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -21,10 +21,11 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
#
|
|
24
|
+
# Security Command Center notification configs.
|
|
25
25
|
#
|
|
26
|
-
# A notification config is a
|
|
27
|
-
# to send notifications for create/update events of findings,
|
|
26
|
+
# A notification config is a Security Command Center resource that contains the
|
|
27
|
+
# configuration to send notifications for create/update events of findings,
|
|
28
|
+
# assets and etc.
|
|
28
29
|
# @!attribute [rw] name
|
|
29
30
|
# @return [::String]
|
|
30
31
|
# The relative resource name of this notification config. See:
|
|
@@ -39,12 +40,12 @@ module Google
|
|
|
39
40
|
# The type of events the config is for, e.g. FINDING.
|
|
40
41
|
# @!attribute [rw] pubsub_topic
|
|
41
42
|
# @return [::String]
|
|
42
|
-
# The
|
|
43
|
+
# The Pub/Sub topic to send notifications to. Its format is
|
|
43
44
|
# "projects/[project_id]/topics/[topic]".
|
|
44
45
|
# @!attribute [r] service_account
|
|
45
46
|
# @return [::String]
|
|
46
47
|
# Output only. The service account that needs "pubsub.topics.publish"
|
|
47
|
-
# permission to publish to the
|
|
48
|
+
# permission to publish to the Pub/Sub topic.
|
|
48
49
|
# @!attribute [rw] streaming_config
|
|
49
50
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
|
|
50
51
|
# The config for triggering streaming-based notifications.
|
|
@@ -21,7 +21,7 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
#
|
|
24
|
+
# Security Command Center's Notification
|
|
25
25
|
# @!attribute [rw] notification_config_name
|
|
26
26
|
# @return [::String]
|
|
27
27
|
# Name of the notification config that generated current notification.
|
|
@@ -29,6 +29,9 @@ module Google
|
|
|
29
29
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
|
30
30
|
# If it's a Finding based notification config, this field will be
|
|
31
31
|
# populated.
|
|
32
|
+
# @!attribute [rw] resource
|
|
33
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Resource]
|
|
34
|
+
# The Cloud resource tied to the notification.
|
|
32
35
|
class NotificationMessage
|
|
33
36
|
include ::Google::Protobuf::MessageExts
|
|
34
37
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
@@ -21,8 +21,8 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
# User specified settings that are attached to the
|
|
25
|
-
# Center
|
|
24
|
+
# User specified settings that are attached to the Security Command
|
|
25
|
+
# Center organization.
|
|
26
26
|
# @!attribute [rw] name
|
|
27
27
|
# @return [::String]
|
|
28
28
|
# The relative resource name of the settings. See:
|
|
@@ -0,0 +1,48 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
# Copyright 2020 Google LLC
|
|
4
|
+
#
|
|
5
|
+
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
6
|
+
# you may not use this file except in compliance with the License.
|
|
7
|
+
# You may obtain a copy of the License at
|
|
8
|
+
#
|
|
9
|
+
# https://www.apache.org/licenses/LICENSE-2.0
|
|
10
|
+
#
|
|
11
|
+
# Unless required by applicable law or agreed to in writing, software
|
|
12
|
+
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
13
|
+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
14
|
+
# See the License for the specific language governing permissions and
|
|
15
|
+
# limitations under the License.
|
|
16
|
+
|
|
17
|
+
# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
module Google
|
|
21
|
+
module Cloud
|
|
22
|
+
module SecurityCenter
|
|
23
|
+
module V1p1beta1
|
|
24
|
+
# Information related to the Google Cloud resource.
|
|
25
|
+
# @!attribute [rw] name
|
|
26
|
+
# @return [::String]
|
|
27
|
+
# The full resource name of the resource. See:
|
|
28
|
+
# https://cloud.google.com/apis/design/resource_names#full_resource_name
|
|
29
|
+
# @!attribute [rw] project
|
|
30
|
+
# @return [::String]
|
|
31
|
+
# The full resource name of project that the resource belongs to.
|
|
32
|
+
# @!attribute [rw] project_display_name
|
|
33
|
+
# @return [::String]
|
|
34
|
+
# The human readable name of project that the resource belongs to.
|
|
35
|
+
# @!attribute [rw] parent
|
|
36
|
+
# @return [::String]
|
|
37
|
+
# The full resource name of resource's parent.
|
|
38
|
+
# @!attribute [rw] parent_display_name
|
|
39
|
+
# @return [::String]
|
|
40
|
+
# The human readable name of resource's parent.
|
|
41
|
+
class Resource
|
|
42
|
+
include ::Google::Protobuf::MessageExts
|
|
43
|
+
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
44
|
+
end
|
|
45
|
+
end
|
|
46
|
+
end
|
|
47
|
+
end
|
|
48
|
+
end
|
|
@@ -21,9 +21,9 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
# User specified security marks that are attached to the parent
|
|
25
|
-
# Command Center
|
|
26
|
-
#
|
|
24
|
+
# User specified security marks that are attached to the parent Security
|
|
25
|
+
# Command Center resource. Security marks are scoped within a Security Command
|
|
26
|
+
# Center organization -- they can be modified and viewed by all users who have
|
|
27
27
|
# proper permissions on the organization.
|
|
28
28
|
# @!attribute [rw] name
|
|
29
29
|
# @return [::String]
|
|
@@ -155,15 +155,15 @@ module Google
|
|
|
155
155
|
#
|
|
156
156
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
157
157
|
# Examples:
|
|
158
|
-
#
|
|
159
|
-
#
|
|
158
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
159
|
+
# `update_time = 1560208038000`
|
|
160
160
|
#
|
|
161
161
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
162
162
|
#
|
|
163
163
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
164
164
|
# Examples:
|
|
165
|
-
#
|
|
166
|
-
#
|
|
165
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
166
|
+
# `create_time = 1560208038000`
|
|
167
167
|
#
|
|
168
168
|
# * iam_policy.policy_blob: `=`, `:`
|
|
169
169
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -178,6 +178,12 @@ module Google
|
|
|
178
178
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
179
179
|
#
|
|
180
180
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
181
|
+
#
|
|
182
|
+
# Use a partial match on the empty string to filter based on a property
|
|
183
|
+
# existing: `resource_properties.my_property : ""`
|
|
184
|
+
#
|
|
185
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
186
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
181
187
|
# @!attribute [rw] group_by
|
|
182
188
|
# @return [::String]
|
|
183
189
|
# Required. Expression that defines what assets fields to use for grouping.
|
|
@@ -233,11 +239,6 @@ module Google
|
|
|
233
239
|
# to assets existing at the supplied time and their values are those at that
|
|
234
240
|
# specific time. Absence of this field will default to the API's version of
|
|
235
241
|
# NOW.
|
|
236
|
-
# @!attribute [rw] having
|
|
237
|
-
# @return [::String]
|
|
238
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
239
|
-
# filter has been executed. Currently only `state_change` is supported and
|
|
240
|
-
# requires compare_duration to be specified.
|
|
241
242
|
# @!attribute [rw] page_token
|
|
242
243
|
# @return [::String]
|
|
243
244
|
# The value returned by the last `GroupAssetsResponse`; indicates
|
|
@@ -318,13 +319,19 @@ module Google
|
|
|
318
319
|
#
|
|
319
320
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
320
321
|
# Examples:
|
|
321
|
-
#
|
|
322
|
-
#
|
|
322
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
323
|
+
# `event_time = 1560208038000`
|
|
323
324
|
#
|
|
324
325
|
# * security_marks.marks: `=`, `:`
|
|
325
326
|
# * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
326
327
|
#
|
|
327
328
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
329
|
+
#
|
|
330
|
+
# Use a partial match on the empty string to filter based on a property
|
|
331
|
+
# existing: `source_properties.my_property : ""`
|
|
332
|
+
#
|
|
333
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
334
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
328
335
|
# @!attribute [rw] group_by
|
|
329
336
|
# @return [::String]
|
|
330
337
|
# Required. Expression that defines what assets fields to use for grouping
|
|
@@ -362,12 +369,18 @@ module Google
|
|
|
362
369
|
#
|
|
363
370
|
# Possible "state_change" values when compare_duration is specified:
|
|
364
371
|
#
|
|
365
|
-
# * "CHANGED": indicates that the finding was present
|
|
366
|
-
# compare_duration, but changed its
|
|
367
|
-
#
|
|
368
|
-
#
|
|
369
|
-
#
|
|
370
|
-
#
|
|
372
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
|
373
|
+
# filter at the start of compare_duration, but changed its
|
|
374
|
+
# state at read_time.
|
|
375
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
|
376
|
+
# filter at the start of compare_duration and did not change
|
|
377
|
+
# state at read_time.
|
|
378
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
|
379
|
+
# was not present at the start of compare_duration, but was
|
|
380
|
+
# present at read_time.
|
|
381
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
|
382
|
+
# filter at the start of compare_duration, but did not match
|
|
383
|
+
# the filter at read_time.
|
|
371
384
|
#
|
|
372
385
|
# If compare_duration is not specified, then the only possible state_change
|
|
373
386
|
# is "UNUSED", which will be the state_change set for all findings present
|
|
@@ -375,11 +388,6 @@ module Google
|
|
|
375
388
|
#
|
|
376
389
|
# If this field is set then `state_change` must be a specified field in
|
|
377
390
|
# `group_by`.
|
|
378
|
-
# @!attribute [rw] having
|
|
379
|
-
# @return [::String]
|
|
380
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
381
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
|
382
|
-
# are supported and requires compare_duration to be specified.
|
|
383
391
|
# @!attribute [rw] page_token
|
|
384
392
|
# @return [::String]
|
|
385
393
|
# The value returned by the last `GroupFindingsResponse`; indicates
|
|
@@ -540,15 +548,15 @@ module Google
|
|
|
540
548
|
#
|
|
541
549
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
542
550
|
# Examples:
|
|
543
|
-
#
|
|
544
|
-
#
|
|
551
|
+
# `update_time = "2019-06-10T16:07:18-07:00"`
|
|
552
|
+
# `update_time = 1560208038000`
|
|
545
553
|
#
|
|
546
554
|
# * create_time: `=`, `>`, `<`, `>=`, `<=`
|
|
547
555
|
#
|
|
548
556
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
549
557
|
# Examples:
|
|
550
|
-
#
|
|
551
|
-
#
|
|
558
|
+
# `create_time = "2019-06-10T16:07:18-07:00"`
|
|
559
|
+
# `create_time = 1560208038000`
|
|
552
560
|
#
|
|
553
561
|
# * iam_policy.policy_blob: `=`, `:`
|
|
554
562
|
# * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
@@ -563,6 +571,12 @@ module Google
|
|
|
563
571
|
# * security_center_properties.resource_owners: `=`, `:`
|
|
564
572
|
#
|
|
565
573
|
# For example, `resource_properties.size = 100` is a valid filter string.
|
|
574
|
+
#
|
|
575
|
+
# Use a partial match on the empty string to filter based on a property
|
|
576
|
+
# existing: `resource_properties.my_property : ""`
|
|
577
|
+
#
|
|
578
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
579
|
+
# property not existing: `-resource_properties.my_property : ""`
|
|
566
580
|
# @!attribute [rw] order_by
|
|
567
581
|
# @return [::String]
|
|
568
582
|
# Expression that defines what fields and order to use for sorting. The
|
|
@@ -618,11 +632,6 @@ module Google
|
|
|
618
632
|
# If compare_duration is not specified, then the only possible state_change
|
|
619
633
|
# is "UNUSED", which will be the state_change set for all assets present at
|
|
620
634
|
# read_time.
|
|
621
|
-
# @!attribute [rw] having
|
|
622
|
-
# @return [::String]
|
|
623
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
624
|
-
# filter has been executed. Currently only `state_change` is supported and
|
|
625
|
-
# requires compare_duration to be specified.
|
|
626
635
|
# @!attribute [rw] field_mask
|
|
627
636
|
# @return [::Google::Protobuf::FieldMask]
|
|
628
637
|
# Optional.
|
|
@@ -739,13 +748,19 @@ module Google
|
|
|
739
748
|
#
|
|
740
749
|
# Usage: This should be milliseconds since epoch or an RFC3339 string.
|
|
741
750
|
# Examples:
|
|
742
|
-
#
|
|
743
|
-
#
|
|
751
|
+
# `event_time = "2019-06-10T16:07:18-07:00"`
|
|
752
|
+
# `event_time = 1560208038000`
|
|
744
753
|
#
|
|
745
754
|
# security_marks.marks: `=`, `:`
|
|
746
755
|
# source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
|
|
747
756
|
#
|
|
748
757
|
# For example, `source_properties.size = 100` is a valid filter string.
|
|
758
|
+
#
|
|
759
|
+
# Use a partial match on the empty string to filter based on a property
|
|
760
|
+
# existing: `source_properties.my_property : ""`
|
|
761
|
+
#
|
|
762
|
+
# Use a negated partial match on the empty string to filter based on a
|
|
763
|
+
# property not existing: `-source_properties.my_property : ""`
|
|
749
764
|
# @!attribute [rw] order_by
|
|
750
765
|
# @return [::String]
|
|
751
766
|
# Expression that defines what fields and order to use for sorting. The
|
|
@@ -788,21 +803,22 @@ module Google
|
|
|
788
803
|
#
|
|
789
804
|
# Possible "state_change" values when compare_duration is specified:
|
|
790
805
|
#
|
|
791
|
-
# * "CHANGED": indicates that the finding was present
|
|
792
|
-
# compare_duration, but changed its
|
|
793
|
-
#
|
|
794
|
-
#
|
|
795
|
-
#
|
|
796
|
-
#
|
|
806
|
+
# * "CHANGED": indicates that the finding was present and matched the given
|
|
807
|
+
# filter at the start of compare_duration, but changed its
|
|
808
|
+
# state at read_time.
|
|
809
|
+
# * "UNCHANGED": indicates that the finding was present and matched the given
|
|
810
|
+
# filter at the start of compare_duration and did not change
|
|
811
|
+
# state at read_time.
|
|
812
|
+
# * "ADDED": indicates that the finding did not match the given filter or
|
|
813
|
+
# was not present at the start of compare_duration, but was
|
|
814
|
+
# present at read_time.
|
|
815
|
+
# * "REMOVED": indicates that the finding was present and matched the
|
|
816
|
+
# filter at the start of compare_duration, but did not match
|
|
817
|
+
# the filter at read_time.
|
|
797
818
|
#
|
|
798
819
|
# If compare_duration is not specified, then the only possible state_change
|
|
799
820
|
# is "UNUSED", which will be the state_change set for all findings present at
|
|
800
821
|
# read_time.
|
|
801
|
-
# @!attribute [rw] having
|
|
802
|
-
# @return [::String]
|
|
803
|
-
# Filter that specifies what fields to further filter on *after* the query
|
|
804
|
-
# filter has been executed. Currently only `finding.state` and `state_change`
|
|
805
|
-
# are supported and requires compare_duration to be specified.
|
|
806
822
|
# @!attribute [rw] field_mask
|
|
807
823
|
# @return [::Google::Protobuf::FieldMask]
|
|
808
824
|
# Optional.
|
|
@@ -854,7 +870,7 @@ module Google
|
|
|
854
870
|
include ::Google::Protobuf::MessageExts
|
|
855
871
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
|
856
872
|
|
|
857
|
-
# Information related to the Google Cloud
|
|
873
|
+
# Information related to the Google Cloud resource that is
|
|
858
874
|
# associated with this finding.
|
|
859
875
|
# @!attribute [rw] name
|
|
860
876
|
# @return [::String]
|
|
@@ -21,7 +21,7 @@ module Google
|
|
|
21
21
|
module Cloud
|
|
22
22
|
module SecurityCenter
|
|
23
23
|
module V1p1beta1
|
|
24
|
-
#
|
|
24
|
+
# Security Command Center finding source. A finding source
|
|
25
25
|
# is an entity or a mechanism that can produce a finding. A source is like a
|
|
26
26
|
# container of findings that come from the same scanner, logger, monitor, etc.
|
|
27
27
|
# @!attribute [rw] name
|
|
@@ -41,7 +41,7 @@ module Google
|
|
|
41
41
|
# @return [::String]
|
|
42
42
|
# The description of the source (max of 1024 characters).
|
|
43
43
|
# Example:
|
|
44
|
-
# "
|
|
44
|
+
# "Web Security Scanner is a web security scanner for common
|
|
45
45
|
# vulnerabilities in App Engine applications. It can automatically
|
|
46
46
|
# scan and detect four common vulnerabilities, including cross-site-scripting
|
|
47
47
|
# (XSS), Flash injection, mixed content (HTTP in HTTPS), and
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: google-cloud-security_center-v1p1beta1
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.3.4
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Google LLC
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2020-
|
|
11
|
+
date: 2020-08-10 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: gapic-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - "~>"
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: '0.
|
|
19
|
+
version: '0.3'
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - "~>"
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: '0.
|
|
26
|
+
version: '0.3'
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: google-cloud-errors
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -194,6 +194,7 @@ files:
|
|
|
194
194
|
- lib/google/cloud/securitycenter/v1p1beta1/notification_config_pb.rb
|
|
195
195
|
- lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb
|
|
196
196
|
- lib/google/cloud/securitycenter/v1p1beta1/organization_settings_pb.rb
|
|
197
|
+
- lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb
|
|
197
198
|
- lib/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response_pb.rb
|
|
198
199
|
- lib/google/cloud/securitycenter/v1p1beta1/security_marks_pb.rb
|
|
199
200
|
- lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb
|
|
@@ -207,6 +208,7 @@ files:
|
|
|
207
208
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb
|
|
208
209
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb
|
|
209
210
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb
|
|
211
|
+
- proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb
|
|
210
212
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response.rb
|
|
211
213
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb
|
|
212
214
|
- proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb
|