google-cloud-security_center-v1p1beta1 0.3.4 → 0.4.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/google/cloud/security_center/v1p1beta1/security_center/client.rb +22 -27
- data/lib/google/cloud/security_center/v1p1beta1/version.rb +1 -1
- data/lib/google/cloud/securitycenter/v1p1beta1/finding_pb.rb +9 -0
- data/lib/google/cloud/securitycenter/v1p1beta1/securitycenter_service_services_pb.rb +0 -2
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/finding.rb +26 -3
- data/proto_docs/google/cloud/securitycenter/v1p1beta1/securitycenter_service.rb +23 -28
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f8e05d3520cbd11099a6076db0b2e9f48ddcbb0816fa613934abaa2731d609e2
|
4
|
+
data.tar.gz: 43bac9632f86404ff457486d9c066205f29a3c89705f462d688c9d7b9f7a1d7f
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1d8e84493955572476588368dc7d5713820c2d4cedadf33dddb326ad28fd83a488d41c05c652448c95d91e9671de7fba05d262eb8b0a399846127ab6a7937806
|
7
|
+
data.tar.gz: 05137f80a2fc4a1e0992e30957aac78d01399dcb9fae791d888dce8839957e6e2c89704a677f06482d295f3f60c2b5a7a1e8f56d40f597653965b4d026f08c03
|
@@ -290,8 +290,8 @@ module Google
|
|
290
290
|
# Required. Resource name of the new source's parent. Its format should be
|
291
291
|
# "organizations/[organization_id]".
|
292
292
|
# @param source [::Google::Cloud::SecurityCenter::V1p1beta1::Source, ::Hash]
|
293
|
-
# Required. The Source being created, only the display_name and description
|
294
|
-
#
|
293
|
+
# Required. The Source being created, only the display_name and description will be
|
294
|
+
# used. All other fields will be ignored.
|
295
295
|
#
|
296
296
|
# @yield [response, operation] Access the result along with the RPC operation
|
297
297
|
# @yieldparam response [::Google::Cloud::SecurityCenter::V1p1beta1::Source]
|
@@ -362,11 +362,9 @@ module Google
|
|
362
362
|
# "organizations/[organization_id]/sources/[source_id]".
|
363
363
|
# @param finding_id [::String]
|
364
364
|
# Required. Unique identifier provided by the client within the parent scope.
|
365
|
-
# It must be alphanumeric and less than or equal to 32 characters and
|
366
|
-
# greater than 0 characters in length.
|
367
365
|
# @param finding [::Google::Cloud::SecurityCenter::V1p1beta1::Finding, ::Hash]
|
368
|
-
# Required. The Finding being created. The name and security_marks will be
|
369
|
-
#
|
366
|
+
# Required. The Finding being created. The name and security_marks will be ignored as
|
367
|
+
# they are both output only fields on this resource.
|
370
368
|
#
|
371
369
|
# @yield [response, operation] Access the result along with the RPC operation
|
372
370
|
# @yieldparam response [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
@@ -432,17 +430,16 @@ module Google
|
|
432
430
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
433
431
|
#
|
434
432
|
# @param parent [::String]
|
435
|
-
# Required. Resource name of the new notification config's parent. Its format
|
436
|
-
#
|
433
|
+
# Required. Resource name of the new notification config's parent. Its format is
|
434
|
+
# "organizations/[organization_id]".
|
437
435
|
# @param config_id [::String]
|
438
436
|
# Required.
|
439
437
|
# Unique identifier provided by the client within the parent scope.
|
440
438
|
# It must be between 1 and 128 characters, and contains alphanumeric
|
441
439
|
# characters, underscores or hyphens only.
|
442
440
|
# @param notification_config [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig, ::Hash]
|
443
|
-
# Required. The notification config being created. The name and the service
|
444
|
-
#
|
445
|
-
# resource.
|
441
|
+
# Required. The notification config being created. The name and the service account
|
442
|
+
# will be ignored as they are both output only fields on this resource.
|
446
443
|
#
|
447
444
|
# @yield [response, operation] Access the result along with the RPC operation
|
448
445
|
# @yieldparam response [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
|
@@ -712,8 +709,8 @@ module Google
|
|
712
709
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
713
710
|
#
|
714
711
|
# @param name [::String]
|
715
|
-
# Required. Name of the organization to get organization settings for. Its
|
716
|
-
#
|
712
|
+
# Required. Name of the organization to get organization settings for. Its format is
|
713
|
+
# "organizations/[organization_id]/organizationSettings".
|
717
714
|
#
|
718
715
|
# @yield [response, operation] Access the result along with the RPC operation
|
719
716
|
# @yieldparam response [::Google::Cloud::SecurityCenter::V1p1beta1::OrganizationSettings]
|
@@ -913,9 +910,9 @@ module Google
|
|
913
910
|
# Use a negated partial match on the empty string to filter based on a
|
914
911
|
# property not existing: `-resource_properties.my_property : ""`
|
915
912
|
# @param group_by [::String]
|
916
|
-
# Required. Expression that defines what assets fields to use for grouping.
|
917
|
-
#
|
918
|
-
#
|
913
|
+
# Required. Expression that defines what assets fields to use for grouping. The string
|
914
|
+
# value should follow SQL syntax: comma separated list of fields. For
|
915
|
+
# example:
|
919
916
|
# "security_center_properties.resource_project,security_center_properties.project".
|
920
917
|
#
|
921
918
|
# The following fields are supported when compare_duration is not set:
|
@@ -1096,9 +1093,9 @@ module Google
|
|
1096
1093
|
# Use a negated partial match on the empty string to filter based on a
|
1097
1094
|
# property not existing: `-source_properties.my_property : ""`
|
1098
1095
|
# @param group_by [::String]
|
1099
|
-
# Required. Expression that defines what assets fields to use for grouping
|
1100
|
-
#
|
1101
|
-
#
|
1096
|
+
# Required. Expression that defines what assets fields to use for grouping (including
|
1097
|
+
# `state_change`). The string value should follow SQL syntax: comma separated
|
1098
|
+
# list of fields. For example: "parent,resource_name".
|
1102
1099
|
#
|
1103
1100
|
# The following fields are supported:
|
1104
1101
|
#
|
@@ -1339,7 +1336,6 @@ module Google
|
|
1339
1336
|
# is "UNUSED", which will be the state_change set for all assets present at
|
1340
1337
|
# read_time.
|
1341
1338
|
# @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
|
1342
|
-
# Optional.
|
1343
1339
|
# A field mask to specify the ListAssetsResult fields to be listed in the
|
1344
1340
|
# response.
|
1345
1341
|
# An empty field mask will list all fields.
|
@@ -1529,7 +1525,6 @@ module Google
|
|
1529
1525
|
# is "UNUSED", which will be the state_change set for all findings present at
|
1530
1526
|
# read_time.
|
1531
1527
|
# @param field_mask [::Google::Protobuf::FieldMask, ::Hash]
|
1532
|
-
# Optional.
|
1533
1528
|
# A field mask to specify the Finding fields to be listed in the response.
|
1534
1529
|
# An empty field mask will list all fields.
|
1535
1530
|
# @param page_token [::String]
|
@@ -1680,8 +1675,8 @@ module Google
|
|
1680
1675
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
1681
1676
|
#
|
1682
1677
|
# @param parent [::String]
|
1683
|
-
# Required. Resource name of the parent of sources to list. Its format should
|
1684
|
-
#
|
1678
|
+
# Required. Resource name of the parent of sources to list. Its format should be
|
1679
|
+
# "organizations/[organization_id]".
|
1685
1680
|
# @param page_token [::String]
|
1686
1681
|
# The value returned by the last `ListSourcesResponse`; indicates
|
1687
1682
|
# that this is a continuation of a prior `ListSources` call, and
|
@@ -1760,8 +1755,8 @@ module Google
|
|
1760
1755
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
1761
1756
|
#
|
1762
1757
|
# @param parent [::String]
|
1763
|
-
# Required. Name of the organization to run asset discovery for. Its format
|
1764
|
-
#
|
1758
|
+
# Required. Name of the organization to run asset discovery for. Its format is
|
1759
|
+
# "organizations/[organization_id]".
|
1765
1760
|
#
|
1766
1761
|
# @yield [response, operation] Access the result along with the RPC operation
|
1767
1762
|
# @yieldparam response [::Gapic::Operation]
|
@@ -2046,8 +2041,8 @@ module Google
|
|
2046
2041
|
# the default parameter values, pass an empty Hash as a request object (see above).
|
2047
2042
|
#
|
2048
2043
|
# @param finding [::Google::Cloud::SecurityCenter::V1p1beta1::Finding, ::Hash]
|
2049
|
-
# Required. The finding resource to update or create if it does not already
|
2050
|
-
#
|
2044
|
+
# Required. The finding resource to update or create if it does not already exist.
|
2045
|
+
# parent, security_marks, and update_time will be ignored.
|
2051
2046
|
#
|
2052
2047
|
# In the case of creation, the finding id portion of the name must be
|
2053
2048
|
# alphanumeric and less than or equal to 32 characters and greater than 0
|
@@ -22,12 +22,20 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
|
|
22
22
|
optional :security_marks, :message, 8, "google.cloud.securitycenter.v1p1beta1.SecurityMarks"
|
23
23
|
optional :event_time, :message, 9, "google.protobuf.Timestamp"
|
24
24
|
optional :create_time, :message, 10, "google.protobuf.Timestamp"
|
25
|
+
optional :severity, :enum, 13, "google.cloud.securitycenter.v1p1beta1.Finding.Severity"
|
25
26
|
end
|
26
27
|
add_enum "google.cloud.securitycenter.v1p1beta1.Finding.State" do
|
27
28
|
value :STATE_UNSPECIFIED, 0
|
28
29
|
value :ACTIVE, 1
|
29
30
|
value :INACTIVE, 2
|
30
31
|
end
|
32
|
+
add_enum "google.cloud.securitycenter.v1p1beta1.Finding.Severity" do
|
33
|
+
value :SEVERITY_UNSPECIFIED, 0
|
34
|
+
value :CRITICAL, 1
|
35
|
+
value :HIGH, 2
|
36
|
+
value :MEDIUM, 3
|
37
|
+
value :LOW, 4
|
38
|
+
end
|
31
39
|
end
|
32
40
|
end
|
33
41
|
|
@@ -37,6 +45,7 @@ module Google
|
|
37
45
|
module V1p1beta1
|
38
46
|
Finding = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Finding").msgclass
|
39
47
|
Finding::State = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Finding.State").enummodule
|
48
|
+
Finding::Severity = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.securitycenter.v1p1beta1.Finding.Severity").enummodule
|
40
49
|
end
|
41
50
|
end
|
42
51
|
end
|
@@ -35,7 +35,6 @@ module Google
|
|
35
35
|
|
36
36
|
# Creates a source.
|
37
37
|
rpc :CreateSource, Google::Cloud::SecurityCenter::V1p1beta1::CreateSourceRequest, Google::Cloud::SecurityCenter::V1p1beta1::Source
|
38
|
-
#
|
39
38
|
# Creates a finding. The corresponding source must exist for finding
|
40
39
|
# creation to succeed.
|
41
40
|
rpc :CreateFinding, Google::Cloud::SecurityCenter::V1p1beta1::CreateFindingRequest, Google::Cloud::SecurityCenter::V1p1beta1::Finding
|
@@ -78,7 +77,6 @@ module Google
|
|
78
77
|
# it is called too frequently the caller will receive a TOO_MANY_REQUESTS
|
79
78
|
# error.
|
80
79
|
rpc :RunAssetDiscovery, Google::Cloud::SecurityCenter::V1p1beta1::RunAssetDiscoveryRequest, Google::Longrunning::Operation
|
81
|
-
#
|
82
80
|
# Updates the state of a finding.
|
83
81
|
rpc :SetFindingState, Google::Cloud::SecurityCenter::V1p1beta1::SetFindingStateRequest, Google::Cloud::SecurityCenter::V1p1beta1::Finding
|
84
82
|
# Sets the access control policy on the specified Source.
|
@@ -74,12 +74,17 @@ module Google
|
|
74
74
|
# to the finding.
|
75
75
|
# @!attribute [rw] event_time
|
76
76
|
# @return [::Google::Protobuf::Timestamp]
|
77
|
-
# The time at which the event took place
|
78
|
-
# represents an open firewall it would
|
79
|
-
# the firewall became open. The
|
77
|
+
# The time at which the event took place, or when an update to the finding
|
78
|
+
# occurred. For example, if the finding represents an open firewall it would
|
79
|
+
# capture the time the detector believes the firewall became open. The
|
80
|
+
# accuracy is determined by the detector. If the finding were to be resolved
|
81
|
+
# afterward, this time would reflect when the finding was resolved.
|
80
82
|
# @!attribute [rw] create_time
|
81
83
|
# @return [::Google::Protobuf::Timestamp]
|
82
84
|
# The time at which the finding was created in Security Command Center.
|
85
|
+
# @!attribute [rw] severity
|
86
|
+
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding::Severity]
|
87
|
+
# The severity of the finding.
|
83
88
|
class Finding
|
84
89
|
include ::Google::Protobuf::MessageExts
|
85
90
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -105,6 +110,24 @@ module Google
|
|
105
110
|
# and is no longer active.
|
106
111
|
INACTIVE = 2
|
107
112
|
end
|
113
|
+
|
114
|
+
# The severity of the finding.
|
115
|
+
module Severity
|
116
|
+
# No severity specified. The default value.
|
117
|
+
SEVERITY_UNSPECIFIED = 0
|
118
|
+
|
119
|
+
# Critical severity.
|
120
|
+
CRITICAL = 1
|
121
|
+
|
122
|
+
# High severity.
|
123
|
+
HIGH = 2
|
124
|
+
|
125
|
+
# Medium severity.
|
126
|
+
MEDIUM = 3
|
127
|
+
|
128
|
+
# Low severity.
|
129
|
+
LOW = 4
|
130
|
+
end
|
108
131
|
end
|
109
132
|
end
|
110
133
|
end
|
@@ -29,12 +29,10 @@ module Google
|
|
29
29
|
# @!attribute [rw] finding_id
|
30
30
|
# @return [::String]
|
31
31
|
# Required. Unique identifier provided by the client within the parent scope.
|
32
|
-
# It must be alphanumeric and less than or equal to 32 characters and
|
33
|
-
# greater than 0 characters in length.
|
34
32
|
# @!attribute [rw] finding
|
35
33
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
36
|
-
# Required. The Finding being created. The name and security_marks will be
|
37
|
-
#
|
34
|
+
# Required. The Finding being created. The name and security_marks will be ignored as
|
35
|
+
# they are both output only fields on this resource.
|
38
36
|
class CreateFindingRequest
|
39
37
|
include ::Google::Protobuf::MessageExts
|
40
38
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -43,8 +41,8 @@ module Google
|
|
43
41
|
# Request message for creating a notification config.
|
44
42
|
# @!attribute [rw] parent
|
45
43
|
# @return [::String]
|
46
|
-
# Required. Resource name of the new notification config's parent. Its format
|
47
|
-
#
|
44
|
+
# Required. Resource name of the new notification config's parent. Its format is
|
45
|
+
# "organizations/[organization_id]".
|
48
46
|
# @!attribute [rw] config_id
|
49
47
|
# @return [::String]
|
50
48
|
# Required.
|
@@ -53,9 +51,8 @@ module Google
|
|
53
51
|
# characters, underscores or hyphens only.
|
54
52
|
# @!attribute [rw] notification_config
|
55
53
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::NotificationConfig]
|
56
|
-
# Required. The notification config being created. The name and the service
|
57
|
-
#
|
58
|
-
# resource.
|
54
|
+
# Required. The notification config being created. The name and the service account
|
55
|
+
# will be ignored as they are both output only fields on this resource.
|
59
56
|
class CreateNotificationConfigRequest
|
60
57
|
include ::Google::Protobuf::MessageExts
|
61
58
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -68,8 +65,8 @@ module Google
|
|
68
65
|
# "organizations/[organization_id]".
|
69
66
|
# @!attribute [rw] source
|
70
67
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Source]
|
71
|
-
# Required. The Source being created, only the display_name and description
|
72
|
-
#
|
68
|
+
# Required. The Source being created, only the display_name and description will be
|
69
|
+
# used. All other fields will be ignored.
|
73
70
|
class CreateSourceRequest
|
74
71
|
include ::Google::Protobuf::MessageExts
|
75
72
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -98,8 +95,8 @@ module Google
|
|
98
95
|
# Request message for getting organization settings.
|
99
96
|
# @!attribute [rw] name
|
100
97
|
# @return [::String]
|
101
|
-
# Required. Name of the organization to get organization settings for. Its
|
102
|
-
#
|
98
|
+
# Required. Name of the organization to get organization settings for. Its format is
|
99
|
+
# "organizations/[organization_id]/organizationSettings".
|
103
100
|
class GetOrganizationSettingsRequest
|
104
101
|
include ::Google::Protobuf::MessageExts
|
105
102
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -186,9 +183,9 @@ module Google
|
|
186
183
|
# property not existing: `-resource_properties.my_property : ""`
|
187
184
|
# @!attribute [rw] group_by
|
188
185
|
# @return [::String]
|
189
|
-
# Required. Expression that defines what assets fields to use for grouping.
|
190
|
-
#
|
191
|
-
#
|
186
|
+
# Required. Expression that defines what assets fields to use for grouping. The string
|
187
|
+
# value should follow SQL syntax: comma separated list of fields. For
|
188
|
+
# example:
|
192
189
|
# "security_center_properties.resource_project,security_center_properties.project".
|
193
190
|
#
|
194
191
|
# The following fields are supported when compare_duration is not set:
|
@@ -334,9 +331,9 @@ module Google
|
|
334
331
|
# property not existing: `-source_properties.my_property : ""`
|
335
332
|
# @!attribute [rw] group_by
|
336
333
|
# @return [::String]
|
337
|
-
# Required. Expression that defines what assets fields to use for grouping
|
338
|
-
#
|
339
|
-
#
|
334
|
+
# Required. Expression that defines what assets fields to use for grouping (including
|
335
|
+
# `state_change`). The string value should follow SQL syntax: comma separated
|
336
|
+
# list of fields. For example: "parent,resource_name".
|
340
337
|
#
|
341
338
|
# The following fields are supported:
|
342
339
|
#
|
@@ -479,8 +476,8 @@ module Google
|
|
479
476
|
# Request message for listing sources.
|
480
477
|
# @!attribute [rw] parent
|
481
478
|
# @return [::String]
|
482
|
-
# Required. Resource name of the parent of sources to list. Its format should
|
483
|
-
#
|
479
|
+
# Required. Resource name of the parent of sources to list. Its format should be
|
480
|
+
# "organizations/[organization_id]".
|
484
481
|
# @!attribute [rw] page_token
|
485
482
|
# @return [::String]
|
486
483
|
# The value returned by the last `ListSourcesResponse`; indicates
|
@@ -634,7 +631,6 @@ module Google
|
|
634
631
|
# read_time.
|
635
632
|
# @!attribute [rw] field_mask
|
636
633
|
# @return [::Google::Protobuf::FieldMask]
|
637
|
-
# Optional.
|
638
634
|
# A field mask to specify the ListAssetsResult fields to be listed in the
|
639
635
|
# response.
|
640
636
|
# An empty field mask will list all fields.
|
@@ -821,7 +817,6 @@ module Google
|
|
821
817
|
# read_time.
|
822
818
|
# @!attribute [rw] field_mask
|
823
819
|
# @return [::Google::Protobuf::FieldMask]
|
824
|
-
# Optional.
|
825
820
|
# A field mask to specify the Finding fields to be listed in the response.
|
826
821
|
# An empty field mask will list all fields.
|
827
822
|
# @!attribute [rw] page_token
|
@@ -863,7 +858,7 @@ module Google
|
|
863
858
|
# @!attribute [rw] state_change
|
864
859
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::StateChange]
|
865
860
|
# State change of the finding between the points in time.
|
866
|
-
# @!attribute [
|
861
|
+
# @!attribute [r] resource
|
867
862
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::ListFindingsResponse::ListFindingsResult::Resource]
|
868
863
|
# Output only. Resource that is associated with this finding.
|
869
864
|
class ListFindingsResult
|
@@ -944,8 +939,8 @@ module Google
|
|
944
939
|
# Request message for running asset discovery for an organization.
|
945
940
|
# @!attribute [rw] parent
|
946
941
|
# @return [::String]
|
947
|
-
# Required. Name of the organization to run asset discovery for. Its format
|
948
|
-
#
|
942
|
+
# Required. Name of the organization to run asset discovery for. Its format is
|
943
|
+
# "organizations/[organization_id]".
|
949
944
|
class RunAssetDiscoveryRequest
|
950
945
|
include ::Google::Protobuf::MessageExts
|
951
946
|
extend ::Google::Protobuf::MessageExts::ClassMethods
|
@@ -954,8 +949,8 @@ module Google
|
|
954
949
|
# Request message for updating or creating a finding.
|
955
950
|
# @!attribute [rw] finding
|
956
951
|
# @return [::Google::Cloud::SecurityCenter::V1p1beta1::Finding]
|
957
|
-
# Required. The finding resource to update or create if it does not already
|
958
|
-
#
|
952
|
+
# Required. The finding resource to update or create if it does not already exist.
|
953
|
+
# parent, security_marks, and update_time will be ignored.
|
959
954
|
#
|
960
955
|
# In the case of creation, the finding id portion of the name must be
|
961
956
|
# alphanumeric and less than or equal to 32 characters and greater than 0
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: google-cloud-security_center-v1p1beta1
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.4.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Google LLC
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-
|
11
|
+
date: 2020-09-03 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: gapic-common
|