google-cloud-security_center-v2 0.2.0 → 0.3.0

data/proto_docs/google/cloud/securitycenter/v2/resource.rb

@@ -32,10 +32,257 @@ module Google
         # @!attribute [rw] type
         #   @return [::String]
         #     The full resource type of the resource.
+        # @!attribute [rw] cloud_provider
+        #   @return [::Google::Cloud::SecurityCenter::V2::CloudProvider]
+        #     Indicates which cloud provider the finding is from.
+        # @!attribute [rw] service
+        #   @return [::String]
+        #     The service or resource provider associated with the resource.
+        # @!attribute [rw] location
+        #   @return [::String]
+        #     The region or location of the service (if applicable).
+        # @!attribute [rw] gcp_metadata
+        #   @return [::Google::Cloud::SecurityCenter::V2::GcpMetadata]
+        #     The GCP metadata associated with the finding.
+        # @!attribute [rw] aws_metadata
+        #   @return [::Google::Cloud::SecurityCenter::V2::AwsMetadata]
+        #     The AWS metadata associated with the finding.
+        # @!attribute [rw] azure_metadata
+        #   @return [::Google::Cloud::SecurityCenter::V2::AzureMetadata]
+        #     The Azure metadata associated with the finding.
+        # @!attribute [rw] resource_path
+        #   @return [::Google::Cloud::SecurityCenter::V2::ResourcePath]
+        #     Provides the path to the resource within the resource hierarchy.
+        # @!attribute [rw] resource_path_string
+        #   @return [::String]
+        #     A string representation of the resource path.
+        #     For Google Cloud, it has the format of
+        #     organizations/\\{organization_id}/folders/\\{folder_id}/folders/\\{folder_id}/projects/\\{project_id}
+        #     where there can be any number of folders.
+        #     For AWS, it has the format of
+        #     org/\\{organization_id}/ou/\\{organizational_unit_id}/ou/\\{organizational_unit_id}/account/\\{account_id}
+        #     where there can be any number of organizational units.
+        #     For Azure, it has the format of
+        #     mg/\\{management_group_id}/mg/\\{management_group_id}/subscription/\\{subscription_id}/rg/\\{resource_group_name}
+        #     where there can be any number of management groups.
         class Resource
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
+
+        # GCP metadata associated with the resource, only applicable if the finding's
+        # cloud provider is Google Cloud Platform.
+        # @!attribute [rw] project
+        #   @return [::String]
+        #     The full resource name of project that the resource belongs to.
+        # @!attribute [rw] project_display_name
+        #   @return [::String]
+        #     The project ID that the resource belongs to.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     The full resource name of resource's parent.
+        # @!attribute [rw] parent_display_name
+        #   @return [::String]
+        #     The human readable name of resource's parent.
+        # @!attribute [r] folders
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::Folder>]
+        #     Output only. Contains a Folder message for each folder in the assets
+        #     ancestry. The first folder is the deepest nested folder, and the last
+        #     folder is the folder directly under the Organization.
+        # @!attribute [rw] organization
+        #   @return [::String]
+        #     The name of the organization that the resource belongs to.
+        class GcpMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # AWS metadata associated with the resource, only applicable if the finding's
+        # cloud provider is Amazon Web Services.
+        # @!attribute [rw] organization
+        #   @return [::Google::Cloud::SecurityCenter::V2::AwsMetadata::AwsOrganization]
+        #     The AWS organization associated with the resource.
+        # @!attribute [rw] organizational_units
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::AwsMetadata::AwsOrganizationalUnit>]
+        #     A list of AWS organizational units associated with the resource, ordered
+        #     from lowest level (closest to the account) to highest level.
+        # @!attribute [rw] account
+        #   @return [::Google::Cloud::SecurityCenter::V2::AwsMetadata::AwsAccount]
+        #     The AWS account associated with the resource.
+        class AwsMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # An organization is a collection of accounts that are centrally managed
+          # together using consolidated billing, organized hierarchically with
+          # organizational units (OUs), and controlled with policies.
+          # @!attribute [rw] id
+          #   @return [::String]
+          #     The unique identifier (ID) for the organization. The regex pattern for an
+          #     organization ID string requires "o-" followed by from 10 to 32 lowercase
+          #     letters or digits.
+          class AwsOrganization
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # An Organizational Unit (OU) is a container of AWS accounts within a root of
+          # an organization. Policies that are attached to an OU apply to all accounts
+          # contained in that OU and in any child OUs.
+          # @!attribute [rw] id
+          #   @return [::String]
+          #     The unique identifier (ID) associated with this OU. The regex pattern for
+          #     an organizational unit ID string requires "ou-" followed by from 4 to 32
+          #     lowercase letters or digits (the ID of the root that contains the OU).
+          #     This string is followed by a second "-" dash and from 8 to 32 additional
+          #     lowercase letters or digits. For example, "ou-ab12-cd34ef56".
+          # @!attribute [rw] name
+          #   @return [::String]
+          #     The friendly name of the OU.
+          class AwsOrganizationalUnit
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # An AWS account that is a member of an organization.
+          # @!attribute [rw] id
+          #   @return [::String]
+          #     The unique identifier (ID) of the account, containing exactly 12 digits.
+          # @!attribute [rw] name
+          #   @return [::String]
+          #     The friendly name of this account.
+          class AwsAccount
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+
+        # Azure metadata associated with the resource, only applicable if the finding's
+        # cloud provider is Microsoft Azure.
+        # @!attribute [rw] management_groups
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::AzureMetadata::AzureManagementGroup>]
+        #     A list of Azure management groups associated with the resource, ordered
+        #     from lowest level (closest to the subscription) to highest level.
+        # @!attribute [rw] subscription
+        #   @return [::Google::Cloud::SecurityCenter::V2::AzureMetadata::AzureSubscription]
+        #     The Azure subscription associated with the resource.
+        # @!attribute [rw] resource_group
+        #   @return [::Google::Cloud::SecurityCenter::V2::AzureMetadata::AzureResourceGroup]
+        #     The Azure resource group associated with the resource.
+        class AzureMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # Represents an Azure management group.
+          # @!attribute [rw] id
+          #   @return [::String]
+          #     The UUID of the Azure management group, for example,
+          #     "20000000-0001-0000-0000-000000000000".
+          # @!attribute [rw] display_name
+          #   @return [::String]
+          #     The display name of the Azure management group.
+          class AzureManagementGroup
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Represents an Azure subscription.
+          # @!attribute [rw] id
+          #   @return [::String]
+          #     The UUID of the Azure subscription, for example,
+          #     "291bba3f-e0a5-47bc-a099-3bdcb2a50a05".
+          # @!attribute [rw] display_name
+          #   @return [::String]
+          #     The display name of the Azure subscription.
+          class AzureSubscription
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Represents an Azure resource group.
+          # @!attribute [rw] name
+          #   @return [::String]
+          #     The name of the Azure resource group. This is not a UUID.
+          class AzureResourceGroup
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+
+        # Represents the path of resources leading up to the resource this finding is
+        # about.
+        # @!attribute [rw] nodes
+        #   @return [::Array<::Google::Cloud::SecurityCenter::V2::ResourcePath::ResourcePathNode>]
+        #     The list of nodes that make the up resource path, ordered from lowest
+        #     level to highest level.
+        class ResourcePath
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # A node within the resource path. Each node represents a resource within the
+          # resource hierarchy.
+          # @!attribute [rw] node_type
+          #   @return [::Google::Cloud::SecurityCenter::V2::ResourcePath::ResourcePathNodeType]
+          #     The type of resource this node represents.
+          # @!attribute [rw] id
+          #   @return [::String]
+          #     The ID of the resource this node represents.
+          # @!attribute [rw] display_name
+          #   @return [::String]
+          #     The display name of the resource this node represents.
+          class ResourcePathNode
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # The type of resource the node represents.
+          module ResourcePathNodeType
+            # Node type is unspecified.
+            RESOURCE_PATH_NODE_TYPE_UNSPECIFIED = 0
+
+            # The node represents a Google Cloud organization.
+            GCP_ORGANIZATION = 1
+
+            # The node represents a Google Cloud folder.
+            GCP_FOLDER = 2
+
+            # The node represents a Google Cloud project.
+            GCP_PROJECT = 3
+
+            # The node represents an AWS organization.
+            AWS_ORGANIZATION = 4
+
+            # The node represents an AWS organizational unit.
+            AWS_ORGANIZATIONAL_UNIT = 5
+
+            # The node represents an AWS account.
+            AWS_ACCOUNT = 6
+
+            # The node represents an Azure management group.
+            AZURE_MANAGEMENT_GROUP = 7
+
+            # The node represents an Azure subscription.
+            AZURE_SUBSCRIPTION = 8
+
+            # The node represents an Azure resource group.
+            AZURE_RESOURCE_GROUP = 9
+          end
+        end
+
+        # The cloud provider the finding pertains to.
+        module CloudProvider
+          # The cloud provider is unspecified.
+          CLOUD_PROVIDER_UNSPECIFIED = 0
+
+          # The cloud provider is Google Cloud Platform.
+          GOOGLE_CLOUD_PLATFORM = 1
+
+          # The cloud provider is Amazon Web Services.
+          AMAZON_WEB_SERVICES = 2
+
+          # The cloud provider is Microsoft Azure.
+          MICROSOFT_AZURE = 3
+        end
       end
     end
   end

data/proto_docs/google/cloud/securitycenter/v2/resource_value_config.rb

@@ -21,48 +21,52 @@ module Google
   module Cloud
     module SecurityCenter
       module V2
-        # A resource value config (RVC) is a mapping configuration of user's resources
-        # to resource values. Used in Attack path simulations.
+        # A resource value configuration (RVC) is a mapping configuration of user's
+        # resources to resource values. Used in Attack path simulations.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Name for the resource value config
+        #     Name for the resource value configuration
         # @!attribute [rw] resource_value
         #   @return [::Google::Cloud::SecurityCenter::V2::ResourceValue]
         #     Resource value level this expression represents
         #     Only required when there is no SDP mapping in the request
         # @!attribute [rw] tag_values
         #   @return [::Array<::String>]
-        #     Required. Tag values combined with AND to check against.
+        #     Required. Tag values combined with <code>AND</code> to check against.
         #     Values in the form "tagValues/123"
-        #     E.g. [ "tagValues/123", "tagValues/456", "tagValues/789" ]
+        #     Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ]
         #     https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
         # @!attribute [rw] resource_type
         #   @return [::String]
         #     Apply resource_value only to resources that match resource_type.
-        #     resource_type will be checked with "AND" of other resources.
-        #     E.g. "storage.googleapis.com/Bucket" with resource_value "HIGH" will
-        #     apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
+        #     resource_type will be checked with <code>AND</code> of other resources.
+        #     For example, "storage.googleapis.com/Bucket" with resource_value "HIGH"
+        #     will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
         # @!attribute [rw] scope
         #   @return [::String]
-        #     Project or folder to scope this config to.
-        #     For example, "project/456" would apply this config only to resources in
-        #     "project/456"
-        #     scope will be checked with "AND" of other resources.
+        #     Project or folder to scope this configuration to.
+        #     For example, "project/456" would apply this configuration only to resources
+        #     in "project/456" scope will be checked with <code>AND</code> of other
+        #     resources.
         # @!attribute [rw] resource_labels_selector
         #   @return [::Google::Protobuf::Map{::String => ::String}]
-        #     List of resource labels to search for, evaluated with AND.
-        #     E.g. "resource_labels_selector": \\{"key": "value", "env": "prod"}
-        #     will match resources with labels "key": "value" AND "env": "prod"
+        #     List of resource labels to search for, evaluated with <code>AND</code>.
+        #     For example, "resource_labels_selector": \\{"key": "value", "env": "prod"}
+        #     will match resources with labels "key": "value" <code>AND</code> "env":
+        #     "prod"
         #     https://cloud.google.com/resource-manager/docs/creating-managing-labels
         # @!attribute [rw] description
         #   @return [::String]
-        #     Description of the resource value config.
+        #     Description of the resource value configuration.
         # @!attribute [r] create_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Output only. Timestamp this resource value config was created.
+        #     Output only. Timestamp this resource value configuration was created.
         # @!attribute [r] update_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Output only. Timestamp this resource value config was last updated.
+        #     Output only. Timestamp this resource value configuration was last updated.
+        # @!attribute [rw] cloud_provider
+        #   @return [::Google::Cloud::SecurityCenter::V2::CloudProvider]
+        #     Cloud provider this configuration applies to
         # @!attribute [rw] sensitive_data_protection_mapping
         #   @return [::Google::Cloud::SecurityCenter::V2::ResourceValueConfig::SensitiveDataProtectionMapping]
         #     A mapping of the sensitivity on Sensitive Data Protection finding to

data/proto_docs/google/cloud/securitycenter/v2/securitycenter_service.rb

@@ -418,14 +418,6 @@ module Google
         #     Required. Expression that defines what assets fields to use for grouping.
         #     The string value should follow SQL syntax: comma separated list of fields.
         #     For example: "parent,resource_name".
-        #
-        #     The following fields are supported:
-        #
-        #     * resource_name
-        #     * category
-        #     * state
-        #     * parent
-        #     * severity
         # @!attribute [rw] page_token
         #   @return [::String]
         #     The value returned by the last `GroupFindingsResponse`; indicates
@@ -738,6 +730,39 @@ module Google
             # @!attribute [rw] type
             #   @return [::String]
             #     The full resource type of the resource.
+            # @!attribute [rw] cloud_provider
+            #   @return [::Google::Cloud::SecurityCenter::V2::CloudProvider]
+            #     Indicates which cloud provider the finding is from.
+            # @!attribute [rw] service
+            #   @return [::String]
+            #     The service or resource provider associated with the resource.
+            # @!attribute [rw] location
+            #   @return [::String]
+            #     The region or location of the service (if applicable).
+            # @!attribute [rw] gcp_metadata
+            #   @return [::Google::Cloud::SecurityCenter::V2::GcpMetadata]
+            #     The GCP metadata associated with the finding.
+            # @!attribute [rw] aws_metadata
+            #   @return [::Google::Cloud::SecurityCenter::V2::AwsMetadata]
+            #     The AWS metadata associated with the finding.
+            # @!attribute [rw] azure_metadata
+            #   @return [::Google::Cloud::SecurityCenter::V2::AzureMetadata]
+            #     The Azure metadata associated with the finding.
+            # @!attribute [rw] resource_path
+            #   @return [::Google::Cloud::SecurityCenter::V2::ResourcePath]
+            #     Provides the path to the resource within the resource hierarchy.
+            # @!attribute [rw] resource_path_string
+            #   @return [::String]
+            #     A string representation of the resource path.
+            #     For Google Cloud, it has the format of
+            #     organizations/\\{organization_id}/folders/\\{folder_id}/folders/\\{folder_id}/projects/\\{project_id}
+            #     where there can be any number of folders.
+            #     For AWS, it has the format of
+            #     org/\\{organization_id}/ou/\\{organizational_unit_id}/ou/\\{organizational_unit_id}/account/\\{account_id}
+            #     where there can be any number of organizational units.
+            #     For Azure, it has the format of
+            #     mg/\\{management_group_id}/mg/\\{management_group_id}/subscription/\\{subscription_id}/rg/\\{resource_group_name}
+            #     where there can be any number of management groups.
             class Resource
               include ::Google::Protobuf::MessageExts
               extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -1096,6 +1121,10 @@ module Google
         #   @return [::Google::Protobuf::FieldMask]
         #     The list of fields to be updated.
         #     If empty all mutable fields will be updated.
+        #
+        #     To update nested fields, include the top level field in the mask
+        #     For example, to update gcp_metadata.resource_type, include the
+        #     "gcp_metadata" field mask
         class UpdateResourceValueConfigRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods

data/proto_docs/google/cloud/securitycenter/v2/simulation.rb

@@ -33,6 +33,9 @@ module Google
         #   @return [::Array<::Google::Cloud::SecurityCenter::V2::ResourceValueConfigMetadata>]
         #     Resource value configurations' metadata used in this simulation. Maximum of
         #     100.
+        # @!attribute [rw] cloud_provider
+        #   @return [::Google::Cloud::SecurityCenter::V2::CloudProvider]
+        #     Indicates which cloud provider was used in this simulation.
         class Simulation
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-security_center-v2
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Google LLC
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-26 00:00:00.000000000 Z
+date: 2024-06-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: gapic-common
@@ -90,6 +90,7 @@ files:
 - lib/google/cloud/securitycenter/v2/attack_path_pb.rb
 - lib/google/cloud/securitycenter/v2/backup_disaster_recovery_pb.rb
 - lib/google/cloud/securitycenter/v2/bigquery_export_pb.rb
+- lib/google/cloud/securitycenter/v2/cloud_armor_pb.rb
 - lib/google/cloud/securitycenter/v2/cloud_dlp_data_profile_pb.rb
 - lib/google/cloud/securitycenter/v2/cloud_dlp_inspection_pb.rb
 - lib/google/cloud/securitycenter/v2/compliance_pb.rb
@@ -101,6 +102,7 @@ files:
 - lib/google/cloud/securitycenter/v2/external_system_pb.rb
 - lib/google/cloud/securitycenter/v2/file_pb.rb
 - lib/google/cloud/securitycenter/v2/finding_pb.rb
+- lib/google/cloud/securitycenter/v2/folder_pb.rb
 - lib/google/cloud/securitycenter/v2/group_membership_pb.rb
 - lib/google/cloud/securitycenter/v2/iam_binding_pb.rb
 - lib/google/cloud/securitycenter/v2/indicator_pb.rb
@@ -111,6 +113,7 @@ files:
 - lib/google/cloud/securitycenter/v2/log_entry_pb.rb
 - lib/google/cloud/securitycenter/v2/mitre_attack_pb.rb
 - lib/google/cloud/securitycenter/v2/mute_config_pb.rb
+- lib/google/cloud/securitycenter/v2/notebook_pb.rb
 - lib/google/cloud/securitycenter/v2/notification_config_pb.rb
 - lib/google/cloud/securitycenter/v2/notification_message_pb.rb
 - lib/google/cloud/securitycenter/v2/org_policy_pb.rb
@@ -138,6 +141,7 @@ files:
 - proto_docs/google/cloud/securitycenter/v2/attack_path.rb
 - proto_docs/google/cloud/securitycenter/v2/backup_disaster_recovery.rb
 - proto_docs/google/cloud/securitycenter/v2/bigquery_export.rb
+- proto_docs/google/cloud/securitycenter/v2/cloud_armor.rb
 - proto_docs/google/cloud/securitycenter/v2/cloud_dlp_data_profile.rb
 - proto_docs/google/cloud/securitycenter/v2/cloud_dlp_inspection.rb
 - proto_docs/google/cloud/securitycenter/v2/compliance.rb
@@ -149,6 +153,7 @@ files:
 - proto_docs/google/cloud/securitycenter/v2/external_system.rb
 - proto_docs/google/cloud/securitycenter/v2/file.rb
 - proto_docs/google/cloud/securitycenter/v2/finding.rb
+- proto_docs/google/cloud/securitycenter/v2/folder.rb
 - proto_docs/google/cloud/securitycenter/v2/group_membership.rb
 - proto_docs/google/cloud/securitycenter/v2/iam_binding.rb
 - proto_docs/google/cloud/securitycenter/v2/indicator.rb
@@ -159,6 +164,7 @@ files:
 - proto_docs/google/cloud/securitycenter/v2/log_entry.rb
 - proto_docs/google/cloud/securitycenter/v2/mitre_attack.rb
 - proto_docs/google/cloud/securitycenter/v2/mute_config.rb
+- proto_docs/google/cloud/securitycenter/v2/notebook.rb
 - proto_docs/google/cloud/securitycenter/v2/notification_config.rb
 - proto_docs/google/cloud/securitycenter/v2/notification_message.rb
 - proto_docs/google/cloud/securitycenter/v2/org_policy.rb