cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/gcp/crm/folders.py

@@ -0,0 +1,98 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPFolderNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef(
+        "name"
+    )  # Use full folder name as ID (e.g., "folders/1414")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    foldername: PropertyRef = PropertyRef("name")
+    displayname: PropertyRef = PropertyRef("displayName")
+    lifecyclestate: PropertyRef = PropertyRef("lifecycleState")
+    parent_org: PropertyRef = PropertyRef(
+        "parent_org"
+    )  # Will be set to org ID if parent is org
+    parent_folder: PropertyRef = PropertyRef(
+        "parent_folder"
+    )  # Will be set to folder ID if parent is folder
+
+
+@dataclass(frozen=True)
+class GCPFolderToOrgParentRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPFolderToOrgParentRel(CartographyRelSchema):
+    """Relationship when folder's parent is an organization"""
+
+    target_node_label: str = "GCPOrganization"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("parent_org")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "PARENT"
+    properties: GCPFolderToOrgParentRelProperties = GCPFolderToOrgParentRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPFolderToFolderParentRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPFolderToFolderParentRel(CartographyRelSchema):
+    """Relationship when folder's parent is another folder"""
+
+    target_node_label: str = "GCPFolder"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("parent_folder")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "PARENT"
+    properties: GCPFolderToFolderParentRelProperties = (
+        GCPFolderToFolderParentRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPFolderToOrganizationRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPFolderToOrganizationRel(CartographyRelSchema):
+    target_node_label: str = "GCPOrganization"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("ORG_RESOURCE_NAME", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPFolderToOrganizationRelProperties = (
+        GCPFolderToOrganizationRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPFolderSchema(CartographyNodeSchema):
+    label: str = "GCPFolder"
+    properties: GCPFolderNodeProperties = GCPFolderNodeProperties()
+    # Organization owns the folder as a resource
+    sub_resource_relationship: GCPFolderToOrganizationRel = GCPFolderToOrganizationRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPFolderToOrgParentRel(),
+            GCPFolderToFolderParentRel(),
+        ]
+    )

cartography/models/gcp/crm/organizations.py

@@ -0,0 +1,21 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+
+@dataclass(frozen=True)
+class GCPOrganizationNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    orgname: PropertyRef = PropertyRef("name")
+    displayname: PropertyRef = PropertyRef("displayName")
+    lifecyclestate: PropertyRef = PropertyRef("lifecycleState")
+
+
+@dataclass(frozen=True)
+class GCPOrganizationSchema(CartographyNodeSchema):
+    label: str = "GCPOrganization"
+    properties: GCPOrganizationNodeProperties = GCPOrganizationNodeProperties()
+    # sub_resource_relationship is None by default - Organizations are top-level resources

cartography/models/gcp/crm/projects.py

@@ -0,0 +1,100 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPProjectNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("projectId")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    projectnumber: PropertyRef = PropertyRef("projectNumber", extra_index=True)
+    displayname: PropertyRef = PropertyRef("name")
+    lifecyclestate: PropertyRef = PropertyRef("lifecycleState")
+    parent_org: PropertyRef = PropertyRef(
+        "parent_org"
+    )  # Will be set to org ID if parent is org
+    parent_folder: PropertyRef = PropertyRef(
+        "parent_folder"
+    )  # Will be set to folder ID if parent is folder
+
+
+@dataclass(frozen=True)
+class GCPProjectToOrgParentRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPProjectToOrgParentRel(CartographyRelSchema):
+    """Relationship when project's parent is an organization"""
+
+    target_node_label: str = "GCPOrganization"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("parent_org")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "PARENT"
+    properties: GCPProjectToOrgParentRelProperties = (
+        GCPProjectToOrgParentRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPProjectToFolderParentRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPProjectToFolderParentRel(CartographyRelSchema):
+    """Relationship when project's parent is a folder"""
+
+    target_node_label: str = "GCPFolder"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("parent_folder")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "PARENT"
+    properties: GCPProjectToFolderParentRelProperties = (
+        GCPProjectToFolderParentRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPProjectToOrganizationRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPProjectToOrganizationRel(CartographyRelSchema):
+    target_node_label: str = "GCPOrganization"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("ORG_RESOURCE_NAME", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPProjectToOrganizationRelProperties = (
+        GCPProjectToOrganizationRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPProjectSchema(CartographyNodeSchema):
+    label: str = "GCPProject"
+    properties: GCPProjectNodeProperties = GCPProjectNodeProperties()
+    # Organization owns the project as a resource
+    sub_resource_relationship: GCPProjectToOrganizationRel = (
+        GCPProjectToOrganizationRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPProjectToOrgParentRel(),
+            GCPProjectToFolderParentRel(),
+        ]
+    )

cartography/models/gcp/dns.py

@@ -0,0 +1,109 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPDNSZoneNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    dns_name: PropertyRef = PropertyRef("dns_name")
+    description: PropertyRef = PropertyRef("description")
+    visibility: PropertyRef = PropertyRef("visibility")
+    kind: PropertyRef = PropertyRef("kind")
+    nameservers: PropertyRef = PropertyRef("nameservers")
+    created_at: PropertyRef = PropertyRef("created_at")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPDNSZoneToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPDNSZone)
+class GCPDNSZoneToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPDNSZoneToProjectRelProperties = GCPDNSZoneToProjectRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPDNSZoneSchema(CartographyNodeSchema):
+    label: str = "GCPDNSZone"
+    properties: GCPDNSZoneNodeProperties = GCPDNSZoneNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSZone"])
+    sub_resource_relationship: GCPDNSZoneToProjectRel = GCPDNSZoneToProjectRel()
+
+
+@dataclass(frozen=True)
+class GCPRecordSetNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    type: PropertyRef = PropertyRef("type")
+    ttl: PropertyRef = PropertyRef("ttl")
+    data: PropertyRef = PropertyRef("data")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPRecordSetToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPRecordSet)
+class GCPRecordSetToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPRecordSetToProjectRelProperties = (
+        GCPRecordSetToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPRecordSetToZoneRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPDNSZone)-[:HAS_RECORD]->(:GCPRecordSet)
+class GCPRecordSetToZoneRel(CartographyRelSchema):
+    target_node_label: str = "GCPDNSZone"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("zone_id")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_RECORD"
+    properties: GCPRecordSetToZoneRelProperties = GCPRecordSetToZoneRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPRecordSetSchema(CartographyNodeSchema):
+    label: str = "GCPRecordSet"
+    properties: GCPRecordSetNodeProperties = GCPRecordSetNodeProperties()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["DNSRecord"])
+    sub_resource_relationship: GCPRecordSetToProjectRel = GCPRecordSetToProjectRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPRecordSetToZoneRel(),
+        ]
+    )

cartography/models/gcp/gke.py

@@ -0,0 +1,69 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name")
+    self_link: PropertyRef = PropertyRef("self_link")
+    description: PropertyRef = PropertyRef("description")
+    logging_service: PropertyRef = PropertyRef("logging_service")
+    monitoring_service: PropertyRef = PropertyRef("monitoring_service")
+    network: PropertyRef = PropertyRef("network")
+    subnetwork: PropertyRef = PropertyRef("subnetwork")
+    cluster_ipv4cidr: PropertyRef = PropertyRef("cluster_ipv4cidr")
+    zone: PropertyRef = PropertyRef("zone")
+    location: PropertyRef = PropertyRef("location")
+    endpoint: PropertyRef = PropertyRef("endpoint")
+    initial_version: PropertyRef = PropertyRef("initial_version")
+    current_master_version: PropertyRef = PropertyRef("current_master_version")
+    status: PropertyRef = PropertyRef("status")
+    services_ipv4cidr: PropertyRef = PropertyRef("services_ipv4cidr")
+    database_encryption: PropertyRef = PropertyRef("database_encryption")
+    network_policy: PropertyRef = PropertyRef("network_policy")
+    master_authorized_networks: PropertyRef = PropertyRef("master_authorized_networks")
+    legacy_abac: PropertyRef = PropertyRef("legacy_abac")
+    shielded_nodes: PropertyRef = PropertyRef("shielded_nodes")
+    private_nodes: PropertyRef = PropertyRef("private_nodes")
+    private_endpoint_enabled: PropertyRef = PropertyRef("private_endpoint_enabled")
+    private_endpoint: PropertyRef = PropertyRef("private_endpoint")
+    public_endpoint: PropertyRef = PropertyRef("public_endpoint")
+    masterauth_username: PropertyRef = PropertyRef("masterauth_username")
+    masterauth_password: PropertyRef = PropertyRef("masterauth_password")
+    created_at: PropertyRef = PropertyRef("created_at")
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GKECluster)
+class GCPGKEClusterToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPGKEClusterToProjectRelProperties = (
+        GCPGKEClusterToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterSchema(CartographyNodeSchema):
+    label: str = "GKECluster"
+    properties: GCPGKEClusterNodeProperties = GCPGKEClusterNodeProperties()
+    sub_resource_relationship: GCPGKEClusterToProjectRel = GCPGKEClusterToProjectRel()

cartography/models/gcp/iam.py

@@ -4,6 +4,7 @@ from dataclasses import dataclass
 from cartography.models.core.common import PropertyRef
 from cartography.models.core.nodes import CartographyNodeProperties
 from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
 from cartography.models.core.relationships import CartographyRelProperties
 from cartography.models.core.relationships import CartographyRelSchema
 from cartography.models.core.relationships import LinkDirection
@@ -61,6 +62,8 @@ class GCPServiceAccountSchema(CartographyNodeSchema):
     label: str = "GCPServiceAccount"
     properties: GCPServiceAccountNodeProperties = GCPServiceAccountNodeProperties()
     sub_resource_relationship: GCPPrincipalToProject = GCPPrincipalToProject()
+    # Service accounts are principals; add shared label for cross-module queries
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["GCPPrincipal"])
 
 
 @dataclass(frozen=True)

cartography/models/gcp/permission_relationships.py

@@ -0,0 +1,61 @@
+"""
+GCP permission relationship MatchLink schemas.
+"""
+
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPPermissionRelProperties(CartographyRelProperties):
+    """
+    Properties for GCP permission relationships.
+    """
+
+    # Required fields for MatchLinks
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPermissionMatchLink(CartographyRelSchema):
+    """
+    MatchLink schema for GCP permission relationships.
+    Creates relationships like: (GCPPrincipal)-[:CAN_READ]->(GCPResource)
+
+    This MatchLink handles permission relationships between GCP principals and resources
+    based on IAM policy bindings and permission evaluations.
+
+    GCPPrincipal can be:
+    - GCPUser (from GSuite)
+    - GCPServiceAccount
+    - GCPGroup (from GSuite)
+    """
+
+    source_node_label: str = "GCPPrincipal"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"email": PropertyRef("principal_email")},
+    )
+
+    target_node_label: str = (
+        "GCPResource"  # Will be dynamically set based on target_label
+    )
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("resource_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = (
+        "HAS_PERMISSION"  # Will be dynamically set based on relationship_name
+    )
+    properties: GCPPermissionRelProperties = GCPPermissionRelProperties()

cartography/models/gcp/policy_bindings.py

@@ -0,0 +1,93 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    role: PropertyRef = PropertyRef("role")
+    resource: PropertyRef = PropertyRef("resource")
+    resource_type: PropertyRef = PropertyRef("resource_type")
+    members: PropertyRef = PropertyRef("members")
+    has_condition: PropertyRef = PropertyRef("has_condition")
+    condition_title: PropertyRef = PropertyRef("condition_title")
+    condition_expression: PropertyRef = PropertyRef("condition_expression")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPPolicyBindingToProjectRelProperties = (
+        GCPPolicyBindingToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToPrincipalRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToPrincipalRel(CartographyRelSchema):
+    target_node_label: str = "GCPPrincipal"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"email": PropertyRef("members", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_ALLOW_POLICY"
+    properties: GCPPolicyBindingToPrincipalRelProperties = (
+        GCPPolicyBindingToPrincipalRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToRoleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToRoleRel(CartographyRelSchema):
+    target_node_label: str = "GCPRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("role")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "GRANTS_ROLE"
+    properties: GCPPolicyBindingToRoleRelProperties = (
+        GCPPolicyBindingToRoleRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingSchema(CartographyNodeSchema):
+    label: str = "GCPPolicyBinding"
+    properties: GCPPolicyBindingNodeProperties = GCPPolicyBindingNodeProperties()
+    sub_resource_relationship: GCPPolicyBindingToProjectRel = (
+        GCPPolicyBindingToProjectRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPPolicyBindingToPrincipalRel(),
+            GCPPolicyBindingToRoleRel(),
+        ]
+    )