google-cloud-security_center-v1p1beta1 0.2.2 → 0.3.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 82354b10d9ceeed9f73a4bf473c2865d1647a6c053dadc55da419f8789f514c7
4
- data.tar.gz: 3f604d2fad2b459aa911f67fa26d59d818f283e5f1e9be1a719ea710b3e308b5
3
+ metadata.gz: 56e42a6a956465233ca5f01e3ffe1ce4386a3e8a10c25be36ac828b60a2159ba
4
+ data.tar.gz: 5c1e315a7f8c88ac0d685a18508b26b1a1dfe446eea4223b9a0a2e2fea641d40
5
5
  SHA512:
6
- metadata.gz: 58e1285d1616779dee19984f6374fdd329648ce4df6bde942edd84f4c5cd952f0eeed2425c62a1227daddd26bcf954aa289b2d8cef4b4a9feb648a556d54922a
7
- data.tar.gz: bb5f2948165ac683dcc29ca69f322811a45762055a70c725750a6ad517467e4c657a82f0ac18aad599af71e6c1f328eebfda61b6df426ce5c56023c965a26fd1
6
+ metadata.gz: a8e03bb4eca1859abd0e31b96182f2b164f2fa265c943d84979865cf6a0041dda5aa140894c832a03b7602da2c3e44f9cc863c7d8f0883aae8c133ab76d93b2c
7
+ data.tar.gz: e2f6a1b4bd7258fed62b37d0e117235386facc42a252946dfa111c1a994d9805bd084254f41650a557e49b6ab235956c86b70efbf40ab935314c02ab90bd2e6d
data/README.md CHANGED
@@ -18,6 +18,7 @@ In order to use this library, you first need to go through the following steps:
18
18
 
19
19
  1. [Select or create a Cloud Platform project.](https://console.cloud.google.com/project)
20
20
  1. [Enable billing for your project.](https://cloud.google.com/billing/docs/how-to/modify-project#enable_billing_for_a_project)
21
+ 1. [Enable the API.](https://console.cloud.google.com/apis/library/securitycenter.googleapis.com)
21
22
  1. {file:AUTHENTICATION.md Set up authentication.}
22
23
 
23
24
  ## Quick Start
@@ -33,6 +34,9 @@ response = client.create_source request
33
34
  View the [Client Library Documentation](https://googleapis.dev/ruby/google-cloud-security_center-v1p1beta1/latest)
34
35
  for class and method documentation.
35
36
 
37
+ See also the [Product Documentation](https://cloud.google.com/security-command-center)
38
+ for general usage information.
39
+
36
40
  ## Enabling Logging
37
41
 
38
42
  To enable logging for this library, set the logger for the underlying [gRPC](https://github.com/grpc/grpc/tree/master/src/ruby) library.
@@ -78,7 +78,7 @@ module Google
78
78
  initial_delay: 0.1,
79
79
  max_delay: 60.0,
80
80
  multiplier: 1.3,
81
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
81
+ retry_codes: [4, 14]
82
82
  }
83
83
 
84
84
  default_config.rpcs.get_notification_config.timeout = 60.0
@@ -86,7 +86,7 @@ module Google
86
86
  initial_delay: 0.1,
87
87
  max_delay: 60.0,
88
88
  multiplier: 1.3,
89
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
89
+ retry_codes: [4, 14]
90
90
  }
91
91
 
92
92
  default_config.rpcs.get_organization_settings.timeout = 60.0
@@ -94,7 +94,7 @@ module Google
94
94
  initial_delay: 0.1,
95
95
  max_delay: 60.0,
96
96
  multiplier: 1.3,
97
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
97
+ retry_codes: [4, 14]
98
98
  }
99
99
 
100
100
  default_config.rpcs.get_source.timeout = 60.0
@@ -102,39 +102,39 @@ module Google
102
102
  initial_delay: 0.1,
103
103
  max_delay: 60.0,
104
104
  multiplier: 1.3,
105
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
105
+ retry_codes: [4, 14]
106
106
  }
107
107
 
108
- default_config.rpcs.group_assets.timeout = 60.0
108
+ default_config.rpcs.group_assets.timeout = 480.0
109
109
  default_config.rpcs.group_assets.retry_policy = {
110
110
  initial_delay: 0.1,
111
111
  max_delay: 60.0,
112
112
  multiplier: 1.3,
113
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
113
+ retry_codes: [4, 14]
114
114
  }
115
115
 
116
- default_config.rpcs.group_findings.timeout = 60.0
116
+ default_config.rpcs.group_findings.timeout = 480.0
117
117
  default_config.rpcs.group_findings.retry_policy = {
118
118
  initial_delay: 0.1,
119
119
  max_delay: 60.0,
120
120
  multiplier: 1.3,
121
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
121
+ retry_codes: [4, 14]
122
122
  }
123
123
 
124
- default_config.rpcs.list_assets.timeout = 60.0
124
+ default_config.rpcs.list_assets.timeout = 480.0
125
125
  default_config.rpcs.list_assets.retry_policy = {
126
126
  initial_delay: 0.1,
127
127
  max_delay: 60.0,
128
128
  multiplier: 1.3,
129
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
129
+ retry_codes: [4, 14]
130
130
  }
131
131
 
132
- default_config.rpcs.list_findings.timeout = 60.0
132
+ default_config.rpcs.list_findings.timeout = 480.0
133
133
  default_config.rpcs.list_findings.retry_policy = {
134
134
  initial_delay: 0.1,
135
135
  max_delay: 60.0,
136
136
  multiplier: 1.3,
137
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
137
+ retry_codes: [4, 14]
138
138
  }
139
139
 
140
140
  default_config.rpcs.list_notification_configs.timeout = 60.0
@@ -142,7 +142,7 @@ module Google
142
142
  initial_delay: 0.1,
143
143
  max_delay: 60.0,
144
144
  multiplier: 1.3,
145
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
145
+ retry_codes: [4, 14]
146
146
  }
147
147
 
148
148
  default_config.rpcs.list_sources.timeout = 60.0
@@ -150,7 +150,7 @@ module Google
150
150
  initial_delay: 0.1,
151
151
  max_delay: 60.0,
152
152
  multiplier: 1.3,
153
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
153
+ retry_codes: [4, 14]
154
154
  }
155
155
 
156
156
  default_config.rpcs.run_asset_discovery.timeout = 60.0
@@ -164,7 +164,7 @@ module Google
164
164
  initial_delay: 0.1,
165
165
  max_delay: 60.0,
166
166
  multiplier: 1.3,
167
- retry_codes: ["DEADLINE_EXCEEDED", "UNAVAILABLE"]
167
+ retry_codes: [4, 14]
168
168
  }
169
169
 
170
170
  default_config.rpcs.update_finding.timeout = 60.0
@@ -175,7 +175,7 @@ module Google
175
175
 
176
176
  default_config.rpcs.update_source.timeout = 60.0
177
177
 
178
- default_config.rpcs.update_security_marks.timeout = 60.0
178
+ default_config.rpcs.update_security_marks.timeout = 480.0
179
179
 
180
180
  default_config
181
181
  end
@@ -841,7 +841,7 @@ module Google
841
841
  # @param options [::Gapic::CallOptions, ::Hash]
842
842
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
843
843
  #
844
- # @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil, having: nil, page_token: nil, page_size: nil)
844
+ # @overload group_assets(parent: nil, filter: nil, group_by: nil, compare_duration: nil, read_time: nil, page_token: nil, page_size: nil)
845
845
  # Pass arguments to `group_assets` via keyword arguments. Note that at
846
846
  # least one keyword argument is required. To specify no parameters, or to keep all
847
847
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -883,15 +883,15 @@ module Google
883
883
  #
884
884
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
885
885
  # Examples:
886
- # "update_time = \"2019-06-10T16:07:18-07:00\""
887
- # "update_time = 1560208038000"
886
+ # `update_time = "2019-06-10T16:07:18-07:00"`
887
+ # `update_time = 1560208038000`
888
888
  #
889
889
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
890
890
  #
891
891
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
892
892
  # Examples:
893
- # "create_time = \"2019-06-10T16:07:18-07:00\""
894
- # "create_time = 1560208038000"
893
+ # `create_time = "2019-06-10T16:07:18-07:00"`
894
+ # `create_time = 1560208038000`
895
895
  #
896
896
  # * iam_policy.policy_blob: `=`, `:`
897
897
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -906,6 +906,12 @@ module Google
906
906
  # * security_center_properties.resource_owners: `=`, `:`
907
907
  #
908
908
  # For example, `resource_properties.size = 100` is a valid filter string.
909
+ #
910
+ # Use a partial match on the empty string to filter based on a property
911
+ # existing: `resource_properties.my_property : ""`
912
+ #
913
+ # Use a negated partial match on the empty string to filter based on a
914
+ # property not existing: `-resource_properties.my_property : ""`
909
915
  # @param group_by [::String]
910
916
  # Required. Expression that defines what assets fields to use for grouping.
911
917
  # The string value should follow SQL syntax: comma separated list of fields.
@@ -958,10 +964,6 @@ module Google
958
964
  # to assets existing at the supplied time and their values are those at that
959
965
  # specific time. Absence of this field will default to the API's version of
960
966
  # NOW.
961
- # @param having [::String]
962
- # Filter that specifies what fields to further filter on *after* the query
963
- # filter has been executed. Currently only `state_change` is supported and
964
- # requires compare_duration to be specified.
965
967
  # @param page_token [::String]
966
968
  # The value returned by the last `GroupAssetsResponse`; indicates
967
969
  # that this is a continuation of a prior `GroupAssets` call, and that the
@@ -1033,7 +1035,7 @@ module Google
1033
1035
  # @param options [::Gapic::CallOptions, ::Hash]
1034
1036
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1035
1037
  #
1036
- # @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil, having: nil, page_token: nil, page_size: nil)
1038
+ # @overload group_findings(parent: nil, filter: nil, group_by: nil, read_time: nil, compare_duration: nil, page_token: nil, page_size: nil)
1037
1039
  # Pass arguments to `group_findings` via keyword arguments. Note that at
1038
1040
  # least one keyword argument is required. To specify no parameters, or to keep all
1039
1041
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1080,13 +1082,19 @@ module Google
1080
1082
  #
1081
1083
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1082
1084
  # Examples:
1083
- # "event_time = \"2019-06-10T16:07:18-07:00\""
1084
- # "event_time = 1560208038000"
1085
+ # `event_time = "2019-06-10T16:07:18-07:00"`
1086
+ # `event_time = 1560208038000`
1085
1087
  #
1086
1088
  # * security_marks.marks: `=`, `:`
1087
1089
  # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
1088
1090
  #
1089
1091
  # For example, `source_properties.size = 100` is a valid filter string.
1092
+ #
1093
+ # Use a partial match on the empty string to filter based on a property
1094
+ # existing: `source_properties.my_property : ""`
1095
+ #
1096
+ # Use a negated partial match on the empty string to filter based on a
1097
+ # property not existing: `-source_properties.my_property : ""`
1090
1098
  # @param group_by [::String]
1091
1099
  # Required. Expression that defines what assets fields to use for grouping
1092
1100
  # (including `state_change`). The string value should follow SQL syntax:
@@ -1121,12 +1129,18 @@ module Google
1121
1129
  #
1122
1130
  # Possible "state_change" values when compare_duration is specified:
1123
1131
  #
1124
- # * "CHANGED": indicates that the finding was present at the start of
1125
- # compare_duration, but changed its state at read_time.
1126
- # * "UNCHANGED": indicates that the finding was present at the start of
1127
- # compare_duration and did not change state at read_time.
1128
- # * "ADDED": indicates that the finding was not present at the start
1129
- # of compare_duration, but was present at read_time.
1132
+ # * "CHANGED": indicates that the finding was present and matched the given
1133
+ # filter at the start of compare_duration, but changed its
1134
+ # state at read_time.
1135
+ # * "UNCHANGED": indicates that the finding was present and matched the given
1136
+ # filter at the start of compare_duration and did not change
1137
+ # state at read_time.
1138
+ # * "ADDED": indicates that the finding did not match the given filter or
1139
+ # was not present at the start of compare_duration, but was
1140
+ # present at read_time.
1141
+ # * "REMOVED": indicates that the finding was present and matched the
1142
+ # filter at the start of compare_duration, but did not match
1143
+ # the filter at read_time.
1130
1144
  #
1131
1145
  # If compare_duration is not specified, then the only possible state_change
1132
1146
  # is "UNUSED", which will be the state_change set for all findings present
@@ -1134,10 +1148,6 @@ module Google
1134
1148
  #
1135
1149
  # If this field is set then `state_change` must be a specified field in
1136
1150
  # `group_by`.
1137
- # @param having [::String]
1138
- # Filter that specifies what fields to further filter on *after* the query
1139
- # filter has been executed. Currently only `finding.state` and `state_change`
1140
- # are supported and requires compare_duration to be specified.
1141
1151
  # @param page_token [::String]
1142
1152
  # The value returned by the last `GroupFindingsResponse`; indicates
1143
1153
  # that this is a continuation of a prior `GroupFindings` call, and
@@ -1205,7 +1215,7 @@ module Google
1205
1215
  # @param options [::Gapic::CallOptions, ::Hash]
1206
1216
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1207
1217
  #
1208
- # @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, having: nil, field_mask: nil, page_token: nil, page_size: nil)
1218
+ # @overload list_assets(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
1209
1219
  # Pass arguments to `list_assets` via keyword arguments. Note that at
1210
1220
  # least one keyword argument is required. To specify no parameters, or to keep all
1211
1221
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1247,15 +1257,15 @@ module Google
1247
1257
  #
1248
1258
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1249
1259
  # Examples:
1250
- # "update_time = \"2019-06-10T16:07:18-07:00\""
1251
- # "update_time = 1560208038000"
1260
+ # `update_time = "2019-06-10T16:07:18-07:00"`
1261
+ # `update_time = 1560208038000`
1252
1262
  #
1253
1263
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
1254
1264
  #
1255
1265
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1256
1266
  # Examples:
1257
- # "create_time = \"2019-06-10T16:07:18-07:00\""
1258
- # "create_time = 1560208038000"
1267
+ # `create_time = "2019-06-10T16:07:18-07:00"`
1268
+ # `create_time = 1560208038000`
1259
1269
  #
1260
1270
  # * iam_policy.policy_blob: `=`, `:`
1261
1271
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -1270,6 +1280,12 @@ module Google
1270
1280
  # * security_center_properties.resource_owners: `=`, `:`
1271
1281
  #
1272
1282
  # For example, `resource_properties.size = 100` is a valid filter string.
1283
+ #
1284
+ # Use a partial match on the empty string to filter based on a property
1285
+ # existing: `resource_properties.my_property : ""`
1286
+ #
1287
+ # Use a negated partial match on the empty string to filter based on a
1288
+ # property not existing: `-resource_properties.my_property : ""`
1273
1289
  # @param order_by [::String]
1274
1290
  # Expression that defines what fields and order to use for sorting. The
1275
1291
  # string value should follow SQL syntax: comma separated list of fields. For
@@ -1322,10 +1338,6 @@ module Google
1322
1338
  # If compare_duration is not specified, then the only possible state_change
1323
1339
  # is "UNUSED", which will be the state_change set for all assets present at
1324
1340
  # read_time.
1325
- # @param having [::String]
1326
- # Filter that specifies what fields to further filter on *after* the query
1327
- # filter has been executed. Currently only `state_change` is supported and
1328
- # requires compare_duration to be specified.
1329
1341
  # @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
1330
1342
  # Optional.
1331
1343
  # A field mask to specify the ListAssetsResult fields to be listed in the
@@ -1401,7 +1413,7 @@ module Google
1401
1413
  # @param options [::Gapic::CallOptions, ::Hash]
1402
1414
  # Overrides the default settings for this call, e.g, timeout, retries, etc. Optional.
1403
1415
  #
1404
- # @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, having: nil, field_mask: nil, page_token: nil, page_size: nil)
1416
+ # @overload list_findings(parent: nil, filter: nil, order_by: nil, read_time: nil, compare_duration: nil, field_mask: nil, page_token: nil, page_size: nil)
1405
1417
  # Pass arguments to `list_findings` via keyword arguments. Note that at
1406
1418
  # least one keyword argument is required. To specify no parameters, or to keep all
1407
1419
  # the default parameter values, pass an empty Hash as a request object (see above).
@@ -1448,13 +1460,19 @@ module Google
1448
1460
  #
1449
1461
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
1450
1462
  # Examples:
1451
- # "event_time = \"2019-06-10T16:07:18-07:00\""
1452
- # "event_time = 1560208038000"
1463
+ # `event_time = "2019-06-10T16:07:18-07:00"`
1464
+ # `event_time = 1560208038000`
1453
1465
  #
1454
1466
  # security_marks.marks: `=`, `:`
1455
1467
  # source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
1456
1468
  #
1457
1469
  # For example, `source_properties.size = 100` is a valid filter string.
1470
+ #
1471
+ # Use a partial match on the empty string to filter based on a property
1472
+ # existing: `source_properties.my_property : ""`
1473
+ #
1474
+ # Use a negated partial match on the empty string to filter based on a
1475
+ # property not existing: `-source_properties.my_property : ""`
1458
1476
  # @param order_by [::String]
1459
1477
  # Expression that defines what fields and order to use for sorting. The
1460
1478
  # string value should follow SQL syntax: comma separated list of fields. For
@@ -1494,20 +1512,22 @@ module Google
1494
1512
  #
1495
1513
  # Possible "state_change" values when compare_duration is specified:
1496
1514
  #
1497
- # * "CHANGED": indicates that the finding was present at the start of
1498
- # compare_duration, but changed its state at read_time.
1499
- # * "UNCHANGED": indicates that the finding was present at the start of
1500
- # compare_duration and did not change state at read_time.
1501
- # * "ADDED": indicates that the finding was not present at the start
1502
- # of compare_duration, but was present at read_time.
1515
+ # * "CHANGED": indicates that the finding was present and matched the given
1516
+ # filter at the start of compare_duration, but changed its
1517
+ # state at read_time.
1518
+ # * "UNCHANGED": indicates that the finding was present and matched the given
1519
+ # filter at the start of compare_duration and did not change
1520
+ # state at read_time.
1521
+ # * "ADDED": indicates that the finding did not match the given filter or
1522
+ # was not present at the start of compare_duration, but was
1523
+ # present at read_time.
1524
+ # * "REMOVED": indicates that the finding was present and matched the
1525
+ # filter at the start of compare_duration, but did not match
1526
+ # the filter at read_time.
1503
1527
  #
1504
1528
  # If compare_duration is not specified, then the only possible state_change
1505
1529
  # is "UNUSED", which will be the state_change set for all findings present at
1506
1530
  # read_time.
1507
- # @param having [::String]
1508
- # Filter that specifies what fields to further filter on *after* the query
1509
- # filter has been executed. Currently only `finding.state` and `state_change`
1510
- # are supported and requires compare_duration to be specified.
1511
1531
  # @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
1512
1532
  # Optional.
1513
1533
  # A field mask to specify the Finding fields to be listed in the response.
@@ -2087,7 +2107,8 @@ module Google
2087
2107
  end
2088
2108
 
2089
2109
  ##
2090
- # Updates a notification config.
2110
+ # Updates a notification config. The following update
2111
+ # fields are allowed: description, pubsub_topic, streaming_config.filter
2091
2112
  #
2092
2113
  # @overload update_notification_config(request, options = nil)
2093
2114
  # Pass arguments to `update_notification_config` via a request object, either of type
@@ -2457,7 +2478,7 @@ module Google
2457
2478
 
2458
2479
  config_attr :endpoint, "securitycenter.googleapis.com", ::String
2459
2480
  config_attr :credentials, nil do |value|
2460
- allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
2481
+ allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
2461
2482
  allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
2462
2483
  allowed.any? { |klass| klass === value }
2463
2484
  end
@@ -475,7 +475,7 @@ module Google
475
475
 
476
476
  config_attr :endpoint, "securitycenter.googleapis.com", ::String
477
477
  config_attr :credentials, nil do |value|
478
- allowed = [::String, ::Hash, ::Proc, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
478
+ allowed = [::String, ::Hash, ::Proc, ::Symbol, ::Google::Auth::Credentials, ::Signet::OAuth2::Client, nil]
479
479
  allowed += [::GRPC::Core::Channel, ::GRPC::Core::ChannelCredentials] if defined? ::GRPC
480
480
  allowed.any? { |klass| klass === value }
481
481
  end
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- VERSION = "0.2.2"
24
+ VERSION = "0.3.4"
25
25
  end
26
26
  end
27
27
  end
@@ -6,10 +6,12 @@ require 'google/protobuf'
6
6
  require 'google/api/annotations_pb'
7
7
  require 'google/cloud/securitycenter/v1p1beta1/asset_pb'
8
8
  require 'google/cloud/securitycenter/v1p1beta1/finding_pb'
9
+ require 'google/cloud/securitycenter/v1p1beta1/resource_pb'
9
10
  Google::Protobuf::DescriptorPool.generated_pool.build do
10
11
  add_file("google/cloud/securitycenter/v1p1beta1/notification_message.proto", :syntax => :proto3) do
11
12
  add_message "google.cloud.securitycenter.v1p1beta1.NotificationMessage" do
12
13
  optional :notification_config_name, :string, 1
14
+ optional :resource, :message, 3, "google.cloud.securitycenter.v1p1beta1.Resource"
13
15
  oneof :event do
14
16
  optional :finding, :message, 2, "google.cloud.securitycenter.v1p1beta1.Finding"
15
17
  end
@@ -0,0 +1,27 @@
1
+ # Generated by the protocol buffer compiler. DO NOT EDIT!
2
+ # source: google/cloud/securitycenter/v1p1beta1/resource.proto
3
+
4
+ require 'google/protobuf'
5
+
6
+ require 'google/api/annotations_pb'
7
+ Google::Protobuf::DescriptorPool.generated_pool.build do
8
+ add_file("google/cloud/securitycenter/v1p1beta1/resource.proto", :syntax => :proto3) do
9
+ add_message "google.cloud.securitycenter.v1p1beta1.Resource" do
10
+ optional :name, :string, 1
11
+ optional :project, :string, 2
12
+ optional :project_display_name, :string, 3
13
+ optional :parent, :string, 4
14
+ optional :parent_display_name, :string, 5
15
+ end
16
+ end
17
+ end
18
+
19
+ module Google
20
+ module Cloud
21
+ module SecurityCenter
22
+ module V1p1beta1
23
+ Resource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Resource").msgclass
24
+ end
25
+ end
26
+ end
27
+ end
@@ -56,7 +56,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
56
56
  optional :group_by, :string, 3
57
57
  optional :compare_duration, :message, 4, "google.protobuf.Duration"
58
58
  optional :read_time, :message, 5, "google.protobuf.Timestamp"
59
- optional :having, :string, 6
60
59
  optional :page_token, :string, 7
61
60
  optional :page_size, :int32, 8
62
61
  end
@@ -72,7 +71,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
72
71
  optional :group_by, :string, 3
73
72
  optional :read_time, :message, 4, "google.protobuf.Timestamp"
74
73
  optional :compare_duration, :message, 5, "google.protobuf.Duration"
75
- optional :having, :string, 6
76
74
  optional :page_token, :string, 7
77
75
  optional :page_size, :int32, 8
78
76
  end
@@ -110,7 +108,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
110
108
  optional :order_by, :string, 3
111
109
  optional :read_time, :message, 4, "google.protobuf.Timestamp"
112
110
  optional :compare_duration, :message, 5, "google.protobuf.Duration"
113
- optional :having, :string, 6
114
111
  optional :field_mask, :message, 7, "google.protobuf.FieldMask"
115
112
  optional :page_token, :string, 8
116
113
  optional :page_size, :int32, 9
@@ -137,7 +134,6 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
137
134
  optional :order_by, :string, 3
138
135
  optional :read_time, :message, 4, "google.protobuf.Timestamp"
139
136
  optional :compare_duration, :message, 5, "google.protobuf.Duration"
140
- optional :having, :string, 6
141
137
  optional :field_mask, :message, 7, "google.protobuf.FieldMask"
142
138
  optional :page_token, :string, 8
143
139
  optional :page_size, :int32, 9
@@ -1,7 +1,7 @@
1
1
  # Generated by the protocol buffer compiler. DO NOT EDIT!
2
2
  # Source: google/cloud/securitycenter/v1p1beta1/securitycenter_service.proto for package 'Google.Cloud.SecurityCenter.V1p1beta1'
3
3
  # Original file comments:
4
- # Copyright 2019 Google LLC.
4
+ # Copyright 2020 Google LLC
5
5
  #
6
6
  # Licensed under the Apache License, Version 2.0 (the "License");
7
7
  # you may not use this file except in compliance with the License.
@@ -15,7 +15,6 @@
15
15
  # See the License for the specific language governing permissions and
16
16
  # limitations under the License.
17
17
  #
18
- #
19
18
 
20
19
  require 'grpc'
21
20
  require 'google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb'
@@ -86,11 +85,11 @@ module Google
86
85
  rpc :SetIamPolicy, Google::Iam::V1::SetIamPolicyRequest, Google::Iam::V1::Policy
87
86
  # Returns the permissions that a caller has on the specified source.
88
87
  rpc :TestIamPermissions, Google::Iam::V1::TestIamPermissionsRequest, Google::Iam::V1::TestIamPermissionsResponse
89
- #
90
88
  # Creates or updates a finding. The corresponding source must exist for a
91
89
  # finding creation to succeed.
92
90
  rpc :UpdateFinding, Google::Cloud::SecurityCenter::V1p1beta1::UpdateFindingRequest, Google::Cloud::SecurityCenter::V1p1beta1::Finding
93
- # Updates a notification config.
91
+ # Updates a notification config. The following update
92
+ # fields are allowed: description, pubsub_topic, streaming_config.filter
94
93
  rpc :UpdateNotificationConfig, Google::Cloud::SecurityCenter::V1p1beta1::UpdateNotificationConfigRequest, Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig
95
94
  # Updates an organization's settings.
96
95
  rpc :UpdateOrganizationSettings, Google::Cloud::SecurityCenter::V1p1beta1::UpdateOrganizationSettingsRequest, Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings
@@ -21,12 +21,13 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center's (Cloud SCC) representation of a Google Cloud
25
- # Platform (GCP) resource.
24
+ # Security Command Center representation of a Google Cloud
25
+ # resource.
26
26
  #
27
- # The Asset is a Cloud SCC resource that captures information about a single
28
- # GCP resource. All modifications to an Asset are only within the context of
29
- # Cloud SCC and don't affect the referenced GCP resource.
27
+ # The Asset is a Security Command Center resource that captures information
28
+ # about a single Google Cloud resource. All modifications to an Asset are only
29
+ # within the context of Security Command Center and don't affect the referenced
30
+ # Google Cloud resource.
30
31
  # @!attribute [rw] name
31
32
  # @return [::String]
32
33
  # The relative resource name of this asset. See:
@@ -35,45 +36,46 @@ module Google
35
36
  # "organizations/\\{organization_id}/assets/\\{asset_id}".
36
37
  # @!attribute [rw] security_center_properties
37
38
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::SecurityCenterProperties]
38
- # Cloud SCC managed properties. These properties are managed by
39
- # Cloud SCC and cannot be modified by the user.
39
+ # Security Command Center managed properties. These properties are managed by
40
+ # Security Command Center and cannot be modified by the user.
40
41
  # @!attribute [rw] resource_properties
41
42
  # @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
42
43
  # Resource managed properties. These properties are managed and defined by
43
- # the GCP resource and cannot be modified by the user.
44
+ # the Google Cloud resource and cannot be modified by the user.
44
45
  # @!attribute [rw] security_marks
45
46
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::SecurityMarks]
46
47
  # User specified security marks. These marks are entirely managed by the user
47
48
  # and come from the SecurityMarks resource that belongs to the asset.
48
49
  # @!attribute [rw] create_time
49
50
  # @return [::Google::Protobuf::Timestamp]
50
- # The time at which the asset was created in Cloud SCC.
51
+ # The time at which the asset was created in Security Command Center.
51
52
  # @!attribute [rw] update_time
52
53
  # @return [::Google::Protobuf::Timestamp]
53
54
  # The time at which the asset was last updated, added, or deleted in Cloud
54
55
  # SCC.
55
56
  # @!attribute [rw] iam_policy
56
57
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Asset::IamPolicy]
57
- # IAM Policy information associated with the GCP resource described by the
58
- # Cloud SCC asset. This information is managed and defined by the GCP
59
- # resource and cannot be modified by the user.
58
+ # Cloud IAM Policy information associated with the Google Cloud resource
59
+ # described by the Security Command Center asset. This information is managed
60
+ # and defined by the Google Cloud resource and cannot be modified by the
61
+ # user.
60
62
  class Asset
61
63
  include ::Google::Protobuf::MessageExts
62
64
  extend ::Google::Protobuf::MessageExts::ClassMethods
63
65
 
64
- # Cloud SCC managed properties. These properties are managed by Cloud SCC and
65
- # cannot be modified by the user.
66
+ # Security Command Center managed properties. These properties are managed by
67
+ # Security Command Center and cannot be modified by the user.
66
68
  # @!attribute [rw] resource_name
67
69
  # @return [::String]
68
- # The full resource name of the GCP resource this asset
70
+ # The full resource name of the Google Cloud resource this asset
69
71
  # represents. This field is immutable after create time. See:
70
72
  # https://cloud.google.com/apis/design/resource_names#full_resource_name
71
73
  # @!attribute [rw] resource_type
72
74
  # @return [::String]
73
- # The type of the GCP resource. Examples include: APPLICATION,
75
+ # The type of the Google Cloud resource. Examples include: APPLICATION,
74
76
  # PROJECT, and ORGANIZATION. This is a case insensitive field defined by
75
- # Cloud SCC and/or the producer of the resource and is immutable
76
- # after create time.
77
+ # Security Command Center and/or the producer of the resource and is
78
+ # immutable after create time.
77
79
  # @!attribute [rw] resource_parent
78
80
  # @return [::String]
79
81
  # The full resource name of the immediate parent of the resource. See:
@@ -99,13 +101,14 @@ module Google
99
101
  extend ::Google::Protobuf::MessageExts::ClassMethods
100
102
  end
101
103
 
102
- # IAM Policy information associated with the GCP resource described by the
103
- # Cloud SCC asset. This information is managed and defined by the GCP
104
- # resource and cannot be modified by the user.
104
+ # Cloud IAM Policy information associated with the Google Cloud resource
105
+ # described by the Security Command Center asset. This information is managed
106
+ # and defined by the Google Cloud resource and cannot be modified by the
107
+ # user.
105
108
  # @!attribute [rw] policy_blob
106
109
  # @return [::String]
107
110
  # The JSON representation of the Policy associated with the asset.
108
- # See https://cloud.google.com/iam/reference/rest/v1/Policy for
111
+ # See https://cloud.google.com/iam/docs/reference/rest/v1/Policy for
109
112
  # format details.
110
113
  class IamPolicy
111
114
  include ::Google::Protobuf::MessageExts
@@ -21,12 +21,12 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center (Cloud SCC) finding.
24
+ # Security Command Center finding.
25
25
  #
26
26
  # A finding is a record of assessment data (security, risk, health or privacy)
27
- # ingested into Cloud SCC for presentation, notification, analysis,
28
- # policy testing, and enforcement. For example, an XSS vulnerability in an
29
- # App Engine application is a finding.
27
+ # ingested into Security Command Center for presentation, notification,
28
+ # analysis, policy testing, and enforcement. For example, an XSS vulnerability
29
+ # in an App Engine application is a finding.
30
30
  # @!attribute [rw] name
31
31
  # @return [::String]
32
32
  # The relative resource name of this finding. See:
@@ -42,12 +42,12 @@ module Google
42
42
  # "organizations/\\{organization_id}/sources/\\{source_id}"
43
43
  # @!attribute [rw] resource_name
44
44
  # @return [::String]
45
- # For findings on Google Cloud Platform (GCP) resources, the full resource
46
- # name of the GCP resource this finding is for. See:
45
+ # For findings on Google Cloud resources, the full resource
46
+ # name of the Google Cloud resource this finding is for. See:
47
47
  # https://cloud.google.com/apis/design/resource_names#full_resource_name
48
- # When the finding is for a non-GCP resource, the resourceName can be a
49
- # customer or partner defined string.
50
- # This field is immutable after creation time.
48
+ # When the finding is for a non-Google Cloud resource, the resourceName can
49
+ # be a customer or partner defined string. This field is immutable after
50
+ # creation time.
51
51
  # @!attribute [rw] state
52
52
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::State]
53
53
  # The state of the finding.
@@ -58,9 +58,9 @@ module Google
58
58
  # Example: "XSS_FLASH_INJECTION"
59
59
  # @!attribute [rw] external_uri
60
60
  # @return [::String]
61
- # The URI that, if available, points to a web page outside of Cloud SCC
62
- # where additional information about the finding can be found. This field is
63
- # guaranteed to be either empty or a well formed URL.
61
+ # The URI that, if available, points to a web page outside of Security
62
+ # Command Center where additional information about the finding can be found.
63
+ # This field is guaranteed to be either empty or a well formed URL.
64
64
  # @!attribute [rw] source_properties
65
65
  # @return [::Google::Protobuf::Map{::String => ::Google::Protobuf::Value}]
66
66
  # Source specific properties. These properties are managed by the source
@@ -79,7 +79,7 @@ module Google
79
79
  # the firewall became open. The accuracy is determined by the detector.
80
80
  # @!attribute [rw] create_time
81
81
  # @return [::Google::Protobuf::Timestamp]
82
- # The time at which the finding was created in Cloud SCC.
82
+ # The time at which the finding was created in Security Command Center.
83
83
  class Finding
84
84
  include ::Google::Protobuf::MessageExts
85
85
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -21,10 +21,11 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center (Cloud SCC) notification configs.
24
+ # Security Command Center notification configs.
25
25
  #
26
- # A notification config is a Cloud SCC resource that contains the configuration
27
- # to send notifications for create/update events of findings, assets and etc.
26
+ # A notification config is a Security Command Center resource that contains the
27
+ # configuration to send notifications for create/update events of findings,
28
+ # assets and etc.
28
29
  # @!attribute [rw] name
29
30
  # @return [::String]
30
31
  # The relative resource name of this notification config. See:
@@ -39,12 +40,12 @@ module Google
39
40
  # The type of events the config is for, e.g. FINDING.
40
41
  # @!attribute [rw] pubsub_topic
41
42
  # @return [::String]
42
- # The PubSub topic to send notifications to. Its format is
43
+ # The Pub/Sub topic to send notifications to. Its format is
43
44
  # "projects/[project_id]/topics/[topic]".
44
45
  # @!attribute [r] service_account
45
46
  # @return [::String]
46
47
  # Output only. The service account that needs "pubsub.topics.publish"
47
- # permission to publish to the PubSub topic.
48
+ # permission to publish to the Pub/Sub topic.
48
49
  # @!attribute [rw] streaming_config
49
50
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig::StreamingConfig]
50
51
  # The config for triggering streaming-based notifications.
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud SCC's Notification
24
+ # Security Command Center's Notification
25
25
  # @!attribute [rw] notification_config_name
26
26
  # @return [::String]
27
27
  # Name of the notification config that generated current notification.
@@ -29,6 +29,9 @@ module Google
29
29
  # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
30
30
  # If it's a Finding based notification config, this field will be
31
31
  # populated.
32
+ # @!attribute [rw] resource
33
+ # @return [::Google::Cloud::SecurityCenter::V1p1beta1::Resource]
34
+ # The Cloud resource tied to the notification.
32
35
  class NotificationMessage
33
36
  include ::Google::Protobuf::MessageExts
34
37
  extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -21,8 +21,8 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # User specified settings that are attached to the Cloud Security Command
25
- # Center (Cloud SCC) organization.
24
+ # User specified settings that are attached to the Security Command
25
+ # Center organization.
26
26
  # @!attribute [rw] name
27
27
  # @return [::String]
28
28
  # The relative resource name of the settings. See:
@@ -0,0 +1,48 @@
1
+ # frozen_string_literal: true
2
+
3
+ # Copyright 2020 Google LLC
4
+ #
5
+ # Licensed under the Apache License, Version 2.0 (the "License");
6
+ # you may not use this file except in compliance with the License.
7
+ # You may obtain a copy of the License at
8
+ #
9
+ # https://www.apache.org/licenses/LICENSE-2.0
10
+ #
11
+ # Unless required by applicable law or agreed to in writing, software
12
+ # distributed under the License is distributed on an "AS IS" BASIS,
13
+ # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
+ # See the License for the specific language governing permissions and
15
+ # limitations under the License.
16
+
17
+ # Auto-generated by gapic-generator-ruby. DO NOT EDIT!
18
+
19
+
20
+ module Google
21
+ module Cloud
22
+ module SecurityCenter
23
+ module V1p1beta1
24
+ # Information related to the Google Cloud resource.
25
+ # @!attribute [rw] name
26
+ # @return [::String]
27
+ # The full resource name of the resource. See:
28
+ # https://cloud.google.com/apis/design/resource_names#full_resource_name
29
+ # @!attribute [rw] project
30
+ # @return [::String]
31
+ # The full resource name of project that the resource belongs to.
32
+ # @!attribute [rw] project_display_name
33
+ # @return [::String]
34
+ # The human readable name of project that the resource belongs to.
35
+ # @!attribute [rw] parent
36
+ # @return [::String]
37
+ # The full resource name of resource's parent.
38
+ # @!attribute [rw] parent_display_name
39
+ # @return [::String]
40
+ # The human readable name of resource's parent.
41
+ class Resource
42
+ include ::Google::Protobuf::MessageExts
43
+ extend ::Google::Protobuf::MessageExts::ClassMethods
44
+ end
45
+ end
46
+ end
47
+ end
48
+ end
@@ -21,9 +21,9 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # User specified security marks that are attached to the parent Cloud Security
25
- # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
26
- # SCC organization -- they can be modified and viewed by all users who have
24
+ # User specified security marks that are attached to the parent Security
25
+ # Command Center resource. Security marks are scoped within a Security Command
26
+ # Center organization -- they can be modified and viewed by all users who have
27
27
  # proper permissions on the organization.
28
28
  # @!attribute [rw] name
29
29
  # @return [::String]
@@ -155,15 +155,15 @@ module Google
155
155
  #
156
156
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
157
157
  # Examples:
158
- # "update_time = \"2019-06-10T16:07:18-07:00\""
159
- # "update_time = 1560208038000"
158
+ # `update_time = "2019-06-10T16:07:18-07:00"`
159
+ # `update_time = 1560208038000`
160
160
  #
161
161
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
162
162
  #
163
163
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
164
164
  # Examples:
165
- # "create_time = \"2019-06-10T16:07:18-07:00\""
166
- # "create_time = 1560208038000"
165
+ # `create_time = "2019-06-10T16:07:18-07:00"`
166
+ # `create_time = 1560208038000`
167
167
  #
168
168
  # * iam_policy.policy_blob: `=`, `:`
169
169
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -178,6 +178,12 @@ module Google
178
178
  # * security_center_properties.resource_owners: `=`, `:`
179
179
  #
180
180
  # For example, `resource_properties.size = 100` is a valid filter string.
181
+ #
182
+ # Use a partial match on the empty string to filter based on a property
183
+ # existing: `resource_properties.my_property : ""`
184
+ #
185
+ # Use a negated partial match on the empty string to filter based on a
186
+ # property not existing: `-resource_properties.my_property : ""`
181
187
  # @!attribute [rw] group_by
182
188
  # @return [::String]
183
189
  # Required. Expression that defines what assets fields to use for grouping.
@@ -233,11 +239,6 @@ module Google
233
239
  # to assets existing at the supplied time and their values are those at that
234
240
  # specific time. Absence of this field will default to the API's version of
235
241
  # NOW.
236
- # @!attribute [rw] having
237
- # @return [::String]
238
- # Filter that specifies what fields to further filter on *after* the query
239
- # filter has been executed. Currently only `state_change` is supported and
240
- # requires compare_duration to be specified.
241
242
  # @!attribute [rw] page_token
242
243
  # @return [::String]
243
244
  # The value returned by the last `GroupAssetsResponse`; indicates
@@ -318,13 +319,19 @@ module Google
318
319
  #
319
320
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
320
321
  # Examples:
321
- # "event_time = \"2019-06-10T16:07:18-07:00\""
322
- # "event_time = 1560208038000"
322
+ # `event_time = "2019-06-10T16:07:18-07:00"`
323
+ # `event_time = 1560208038000`
323
324
  #
324
325
  # * security_marks.marks: `=`, `:`
325
326
  # * source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
326
327
  #
327
328
  # For example, `source_properties.size = 100` is a valid filter string.
329
+ #
330
+ # Use a partial match on the empty string to filter based on a property
331
+ # existing: `source_properties.my_property : ""`
332
+ #
333
+ # Use a negated partial match on the empty string to filter based on a
334
+ # property not existing: `-source_properties.my_property : ""`
328
335
  # @!attribute [rw] group_by
329
336
  # @return [::String]
330
337
  # Required. Expression that defines what assets fields to use for grouping
@@ -362,12 +369,18 @@ module Google
362
369
  #
363
370
  # Possible "state_change" values when compare_duration is specified:
364
371
  #
365
- # * "CHANGED": indicates that the finding was present at the start of
366
- # compare_duration, but changed its state at read_time.
367
- # * "UNCHANGED": indicates that the finding was present at the start of
368
- # compare_duration and did not change state at read_time.
369
- # * "ADDED": indicates that the finding was not present at the start
370
- # of compare_duration, but was present at read_time.
372
+ # * "CHANGED": indicates that the finding was present and matched the given
373
+ # filter at the start of compare_duration, but changed its
374
+ # state at read_time.
375
+ # * "UNCHANGED": indicates that the finding was present and matched the given
376
+ # filter at the start of compare_duration and did not change
377
+ # state at read_time.
378
+ # * "ADDED": indicates that the finding did not match the given filter or
379
+ # was not present at the start of compare_duration, but was
380
+ # present at read_time.
381
+ # * "REMOVED": indicates that the finding was present and matched the
382
+ # filter at the start of compare_duration, but did not match
383
+ # the filter at read_time.
371
384
  #
372
385
  # If compare_duration is not specified, then the only possible state_change
373
386
  # is "UNUSED", which will be the state_change set for all findings present
@@ -375,11 +388,6 @@ module Google
375
388
  #
376
389
  # If this field is set then `state_change` must be a specified field in
377
390
  # `group_by`.
378
- # @!attribute [rw] having
379
- # @return [::String]
380
- # Filter that specifies what fields to further filter on *after* the query
381
- # filter has been executed. Currently only `finding.state` and `state_change`
382
- # are supported and requires compare_duration to be specified.
383
391
  # @!attribute [rw] page_token
384
392
  # @return [::String]
385
393
  # The value returned by the last `GroupFindingsResponse`; indicates
@@ -540,15 +548,15 @@ module Google
540
548
  #
541
549
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
542
550
  # Examples:
543
- # "update_time = \"2019-06-10T16:07:18-07:00\""
544
- # "update_time = 1560208038000"
551
+ # `update_time = "2019-06-10T16:07:18-07:00"`
552
+ # `update_time = 1560208038000`
545
553
  #
546
554
  # * create_time: `=`, `>`, `<`, `>=`, `<=`
547
555
  #
548
556
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
549
557
  # Examples:
550
- # "create_time = \"2019-06-10T16:07:18-07:00\""
551
- # "create_time = 1560208038000"
558
+ # `create_time = "2019-06-10T16:07:18-07:00"`
559
+ # `create_time = 1560208038000`
552
560
  #
553
561
  # * iam_policy.policy_blob: `=`, `:`
554
562
  # * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
@@ -563,6 +571,12 @@ module Google
563
571
  # * security_center_properties.resource_owners: `=`, `:`
564
572
  #
565
573
  # For example, `resource_properties.size = 100` is a valid filter string.
574
+ #
575
+ # Use a partial match on the empty string to filter based on a property
576
+ # existing: `resource_properties.my_property : ""`
577
+ #
578
+ # Use a negated partial match on the empty string to filter based on a
579
+ # property not existing: `-resource_properties.my_property : ""`
566
580
  # @!attribute [rw] order_by
567
581
  # @return [::String]
568
582
  # Expression that defines what fields and order to use for sorting. The
@@ -618,11 +632,6 @@ module Google
618
632
  # If compare_duration is not specified, then the only possible state_change
619
633
  # is "UNUSED", which will be the state_change set for all assets present at
620
634
  # read_time.
621
- # @!attribute [rw] having
622
- # @return [::String]
623
- # Filter that specifies what fields to further filter on *after* the query
624
- # filter has been executed. Currently only `state_change` is supported and
625
- # requires compare_duration to be specified.
626
635
  # @!attribute [rw] field_mask
627
636
  # @return [::Google::Protobuf::FieldMask]
628
637
  # Optional.
@@ -739,13 +748,19 @@ module Google
739
748
  #
740
749
  # Usage: This should be milliseconds since epoch or an RFC3339 string.
741
750
  # Examples:
742
- # "event_time = \"2019-06-10T16:07:18-07:00\""
743
- # "event_time = 1560208038000"
751
+ # `event_time = "2019-06-10T16:07:18-07:00"`
752
+ # `event_time = 1560208038000`
744
753
  #
745
754
  # security_marks.marks: `=`, `:`
746
755
  # source_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
747
756
  #
748
757
  # For example, `source_properties.size = 100` is a valid filter string.
758
+ #
759
+ # Use a partial match on the empty string to filter based on a property
760
+ # existing: `source_properties.my_property : ""`
761
+ #
762
+ # Use a negated partial match on the empty string to filter based on a
763
+ # property not existing: `-source_properties.my_property : ""`
749
764
  # @!attribute [rw] order_by
750
765
  # @return [::String]
751
766
  # Expression that defines what fields and order to use for sorting. The
@@ -788,21 +803,22 @@ module Google
788
803
  #
789
804
  # Possible "state_change" values when compare_duration is specified:
790
805
  #
791
- # * "CHANGED": indicates that the finding was present at the start of
792
- # compare_duration, but changed its state at read_time.
793
- # * "UNCHANGED": indicates that the finding was present at the start of
794
- # compare_duration and did not change state at read_time.
795
- # * "ADDED": indicates that the finding was not present at the start
796
- # of compare_duration, but was present at read_time.
806
+ # * "CHANGED": indicates that the finding was present and matched the given
807
+ # filter at the start of compare_duration, but changed its
808
+ # state at read_time.
809
+ # * "UNCHANGED": indicates that the finding was present and matched the given
810
+ # filter at the start of compare_duration and did not change
811
+ # state at read_time.
812
+ # * "ADDED": indicates that the finding did not match the given filter or
813
+ # was not present at the start of compare_duration, but was
814
+ # present at read_time.
815
+ # * "REMOVED": indicates that the finding was present and matched the
816
+ # filter at the start of compare_duration, but did not match
817
+ # the filter at read_time.
797
818
  #
798
819
  # If compare_duration is not specified, then the only possible state_change
799
820
  # is "UNUSED", which will be the state_change set for all findings present at
800
821
  # read_time.
801
- # @!attribute [rw] having
802
- # @return [::String]
803
- # Filter that specifies what fields to further filter on *after* the query
804
- # filter has been executed. Currently only `finding.state` and `state_change`
805
- # are supported and requires compare_duration to be specified.
806
822
  # @!attribute [rw] field_mask
807
823
  # @return [::Google::Protobuf::FieldMask]
808
824
  # Optional.
@@ -854,7 +870,7 @@ module Google
854
870
  include ::Google::Protobuf::MessageExts
855
871
  extend ::Google::Protobuf::MessageExts::ClassMethods
856
872
 
857
- # Information related to the Google Cloud Platform (GCP) resource that is
873
+ # Information related to the Google Cloud resource that is
858
874
  # associated with this finding.
859
875
  # @!attribute [rw] name
860
876
  # @return [::String]
@@ -21,7 +21,7 @@ module Google
21
21
  module Cloud
22
22
  module SecurityCenter
23
23
  module V1p1beta1
24
- # Cloud Security Command Center's (Cloud SCC) finding source. A finding source
24
+ # Security Command Center finding source. A finding source
25
25
  # is an entity or a mechanism that can produce a finding. A source is like a
26
26
  # container of findings that come from the same scanner, logger, monitor, etc.
27
27
  # @!attribute [rw] name
@@ -41,7 +41,7 @@ module Google
41
41
  # @return [::String]
42
42
  # The description of the source (max of 1024 characters).
43
43
  # Example:
44
- # "Cloud Security Scanner is a web security scanner for common
44
+ # "Web Security Scanner is a web security scanner for common
45
45
  # vulnerabilities in App Engine applications. It can automatically
46
46
  # scan and detect four common vulnerabilities, including cross-site-scripting
47
47
  # (XSS), Flash injection, mixed content (HTTP in HTTPS), and
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: google-cloud-security_center-v1p1beta1
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.2
4
+ version: 0.3.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Google LLC
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-06-05 00:00:00.000000000 Z
11
+ date: 2020-08-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: gapic-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - "~>"
18
18
  - !ruby/object:Gem::Version
19
- version: '0.2'
19
+ version: '0.3'
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - "~>"
25
25
  - !ruby/object:Gem::Version
26
- version: '0.2'
26
+ version: '0.3'
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: google-cloud-errors
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -194,6 +194,7 @@ files:
194
194
  - lib/google/cloud/securitycenter/v1p1beta1/notification_config_pb.rb
195
195
  - lib/google/cloud/securitycenter/v1p1beta1/notification_message_pb.rb
196
196
  - lib/google/cloud/securitycenter/v1p1beta1/organization_settings_pb.rb
197
+ - lib/google/cloud/securitycenter/v1p1beta1/resource_pb.rb
197
198
  - lib/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response_pb.rb
198
199
  - lib/google/cloud/securitycenter/v1p1beta1/security_marks_pb.rb
199
200
  - lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_pb.rb
@@ -207,6 +208,7 @@ files:
207
208
  - proto_docs/google/cloud/securitycenter/v1p1beta1/notification_config.rb
208
209
  - proto_docs/google/cloud/securitycenter/v1p1beta1/notification_message.rb
209
210
  - proto_docs/google/cloud/securitycenter/v1p1beta1/organization_settings.rb
211
+ - proto_docs/google/cloud/securitycenter/v1p1beta1/resource.rb
210
212
  - proto_docs/google/cloud/securitycenter/v1p1beta1/run_asset_discovery_response.rb
211
213
  - proto_docs/google/cloud/securitycenter/v1p1beta1/security_marks.rb
212
214
  - proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb