# Copyright 2015 Google Inc. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. require 'date' require 'google/apis/core/base_service' require 'google/apis/core/json_representation' require 'google/apis/core/hashable' require 'google/apis/errors' module Google module Apis module SecuritycenterV1beta2 # Configuration of a module. class Config include Google::Apis::Core::Hashable # The state of enablement for the module at its level of the resource hierarchy. # Corresponds to the JSON property `moduleEnablementState` # @return [String] attr_accessor :module_enablement_state # The configuration value for the module. The absence of this field implies its # inheritance from the parent. # Corresponds to the JSON property `value` # @return [Hash] attr_accessor :value def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @module_enablement_state = args[:module_enablement_state] if args.key?(:module_enablement_state) @value = args[:value] if args.key?(:value) end end # Resource capturing the settings for the Container Threat Detection service. class ContainerThreatDetectionSettings include Google::Apis::Core::Hashable # The configurations including the state of enablement for the service's # different modules. The absence of a module in the map implies its # configuration is inherited from its parent's. # Corresponds to the JSON property `modules` # @return [Hash] attr_accessor :modules # The resource name of the ContainerThreatDetectionSettings. Formats: * # organizations/`organization`/containerThreatDetectionSettings * folders/` # folder`/containerThreatDetectionSettings * projects/`project`/ # containerThreatDetectionSettings * projects/`project`/locations/`location`/ # clusters/`cluster`/containerThreatDetectionSettings # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # Output only. The service account used by Container Threat Detection for # scanning. Service accounts are scoped at the project level meaning this field # will be empty at any level above a project. # Corresponds to the JSON property `serviceAccount` # @return [String] attr_accessor :service_account # The state of enablement for the service at its level of the resource hierarchy. # A DISABLED state will override all module enablement_states to DISABLED. # Corresponds to the JSON property `serviceEnablementState` # @return [String] attr_accessor :service_enablement_state # Output only. The time the settings were last updated. # Corresponds to the JSON property `updateTime` # @return [String] attr_accessor :update_time def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @modules = args[:modules] if args.key?(:modules) @name = args[:name] if args.key?(:name) @service_account = args[:service_account] if args.key?(:service_account) @service_enablement_state = args[:service_enablement_state] if args.key?(:service_enablement_state) @update_time = args[:update_time] if args.key?(:update_time) end end # Details of a subscription. class Details include Google::Apis::Core::Hashable # The time the subscription has or will end. # Corresponds to the JSON property `endTime` # @return [String] attr_accessor :end_time # The time the subscription has or will start. # Corresponds to the JSON property `startTime` # @return [String] attr_accessor :start_time # The type of subscription # Corresponds to the JSON property `type` # @return [String] attr_accessor :type def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @end_time = args[:end_time] if args.key?(:end_time) @start_time = args[:start_time] if args.key?(:start_time) @type = args[:type] if args.key?(:type) end end # Resource capturing the settings for the Event Threat Detection service. class EventThreatDetectionSettings include Google::Apis::Core::Hashable # The configurations including the state of enablement for the service's # different modules. The absence of a module in the map implies its # configuration is inherited from its parent's. # Corresponds to the JSON property `modules` # @return [Hash] attr_accessor :modules # The resource name of the EventThreatDetectionSettings. Formats: * # organizations/`organization`/eventThreatDetectionSettings * folders/`folder`/ # eventThreatDetectionSettings * projects/`project`/eventThreatDetectionSettings # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The state of enablement for the service at its level of the resource hierarchy. # A DISABLED state will override all module enablement_states to DISABLED. # Corresponds to the JSON property `serviceEnablementState` # @return [String] attr_accessor :service_enablement_state # Output only. The time the settings were last updated. # Corresponds to the JSON property `updateTime` # @return [String] attr_accessor :update_time def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @modules = args[:modules] if args.key?(:modules) @name = args[:name] if args.key?(:name) @service_enablement_state = args[:service_enablement_state] if args.key?(:service_enablement_state) @update_time = args[:update_time] if args.key?(:update_time) end end # Security Command Center finding. A finding is a record of assessment data like # security, risk, health, or privacy, that is ingested into Security Command # Center for presentation, notification, analysis, policy testing, and # enforcement. For example, a cross-site scripting (XSS) vulnerability in an App # Engine application is a finding. class Finding include Google::Apis::Core::Hashable # The additional taxonomy group within findings from a given source. This field # is immutable after creation time. Example: "XSS_FLASH_INJECTION" # Corresponds to the JSON property `category` # @return [String] attr_accessor :category # The time at which the finding was created in Security Command Center. # Corresponds to the JSON property `createTime` # @return [String] attr_accessor :create_time # The time at which the event took place, or when an update to the finding # occurred. For example, if the finding represents an open firewall it would # capture the time the detector believes the firewall became open. The accuracy # is determined by the detector. If the finding were to be resolved afterward, # this time would reflect when the finding was resolved. # Corresponds to the JSON property `eventTime` # @return [String] attr_accessor :event_time # The URI that, if available, points to a web page outside of Security Command # Center where additional information about the finding can be found. This field # is guaranteed to be either empty or a well formed URL. # Corresponds to the JSON property `externalUri` # @return [String] attr_accessor :external_uri # The relative resource name of this finding. See: https://cloud.google.com/apis/ # design/resource_names#relative_resource_name Example: "organizations/` # organization_id`/sources/`source_id`/findings/`finding_id`" # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The relative resource name of the source the finding belongs to. See: https:// # cloud.google.com/apis/design/resource_names#relative_resource_name This field # is immutable after creation time. For example: "organizations/`organization_id` # /sources/`source_id`" # Corresponds to the JSON property `parent` # @return [String] attr_accessor :parent # For findings on Google Cloud resources, the full resource name of the Google # Cloud resource this finding is for. See: https://cloud.google.com/apis/design/ # resource_names#full_resource_name When the finding is for a non-Google Cloud # resource, the resourceName can be a customer or partner defined string. This # field is immutable after creation time. # Corresponds to the JSON property `resourceName` # @return [String] attr_accessor :resource_name # User specified security marks that are attached to the parent Security Command # Center resource. Security marks are scoped within a Security Command Center # organization -- they can be modified and viewed by all users who have proper # permissions on the organization. # Corresponds to the JSON property `securityMarks` # @return [Google::Apis::SecuritycenterV1beta2::SecurityMarks] attr_accessor :security_marks # Source specific properties. These properties are managed by the source that # writes the finding. The key names in the source_properties map must be between # 1 and 255 characters, and must start with a letter and contain alphanumeric # characters or underscores only. # Corresponds to the JSON property `sourceProperties` # @return [Hash] attr_accessor :source_properties # The state of the finding. # Corresponds to the JSON property `state` # @return [String] attr_accessor :state def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @category = args[:category] if args.key?(:category) @create_time = args[:create_time] if args.key?(:create_time) @event_time = args[:event_time] if args.key?(:event_time) @external_uri = args[:external_uri] if args.key?(:external_uri) @name = args[:name] if args.key?(:name) @parent = args[:parent] if args.key?(:parent) @resource_name = args[:resource_name] if args.key?(:resource_name) @security_marks = args[:security_marks] if args.key?(:security_marks) @source_properties = args[:source_properties] if args.key?(:source_properties) @state = args[:state] if args.key?(:state) end end # Cloud SCC's Notification class GoogleCloudSecuritycenterV1NotificationMessage include Google::Apis::Core::Hashable # Security Command Center finding. A finding is a record of assessment data like # security, risk, health, or privacy, that is ingested into Security Command # Center for presentation, notification, analysis, policy testing, and # enforcement. For example, a cross-site scripting (XSS) vulnerability in an App # Engine application is a finding. # Corresponds to the JSON property `finding` # @return [Google::Apis::SecuritycenterV1beta2::Finding] attr_accessor :finding # Name of the notification config that generated current notification. # Corresponds to the JSON property `notificationConfigName` # @return [String] attr_accessor :notification_config_name # Information related to the Google Cloud resource. # Corresponds to the JSON property `resource` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1Resource] attr_accessor :resource def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @finding = args[:finding] if args.key?(:finding) @notification_config_name = args[:notification_config_name] if args.key?(:notification_config_name) @resource = args[:resource] if args.key?(:resource) end end # Information related to the Google Cloud resource. class GoogleCloudSecuritycenterV1Resource include Google::Apis::Core::Hashable # The full resource name of the resource. See: https://cloud.google.com/apis/ # design/resource_names#full_resource_name # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The full resource name of resource's parent. # Corresponds to the JSON property `parent` # @return [String] attr_accessor :parent # The human readable name of resource's parent. # Corresponds to the JSON property `parentDisplayName` # @return [String] attr_accessor :parent_display_name # The full resource name of project that the resource belongs to. # Corresponds to the JSON property `project` # @return [String] attr_accessor :project # The human readable name of project that the resource belongs to. # Corresponds to the JSON property `projectDisplayName` # @return [String] attr_accessor :project_display_name def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @name = args[:name] if args.key?(:name) @parent = args[:parent] if args.key?(:parent) @parent_display_name = args[:parent_display_name] if args.key?(:parent_display_name) @project = args[:project] if args.key?(:project) @project_display_name = args[:project_display_name] if args.key?(:project_display_name) end end # Response of asset discovery run class GoogleCloudSecuritycenterV1RunAssetDiscoveryResponse include Google::Apis::Core::Hashable # The duration between asset discovery run start and end # Corresponds to the JSON property `duration` # @return [String] attr_accessor :duration # The state of an asset discovery run. # Corresponds to the JSON property `state` # @return [String] attr_accessor :state def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @duration = args[:duration] if args.key?(:duration) @state = args[:state] if args.key?(:state) end end # Response of asset discovery run class GoogleCloudSecuritycenterV1beta1RunAssetDiscoveryResponse include Google::Apis::Core::Hashable # The duration between asset discovery run start and end # Corresponds to the JSON property `duration` # @return [String] attr_accessor :duration # The state of an asset discovery run. # Corresponds to the JSON property `state` # @return [String] attr_accessor :state def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @duration = args[:duration] if args.key?(:duration) @state = args[:state] if args.key?(:state) end end # Security Command Center representation of a Google Cloud resource. The Asset # is a Security Command Center resource that captures information about a single # Google Cloud resource. All modifications to an Asset are only within the # context of Security Command Center and don't affect the referenced Google # Cloud resource. class GoogleCloudSecuritycenterV1p1beta1Asset include Google::Apis::Core::Hashable # The time at which the asset was created in Security Command Center. # Corresponds to the JSON property `createTime` # @return [String] attr_accessor :create_time # Cloud IAM Policy information associated with the Google Cloud resource # described by the Security Command Center asset. This information is managed # and defined by the Google Cloud resource and cannot be modified by the user. # Corresponds to the JSON property `iamPolicy` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1IamPolicy] attr_accessor :iam_policy # The relative resource name of this asset. See: https://cloud.google.com/apis/ # design/resource_names#relative_resource_name Example: "organizations/` # organization_id`/assets/`asset_id`". # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # Resource managed properties. These properties are managed and defined by the # Google Cloud resource and cannot be modified by the user. # Corresponds to the JSON property `resourceProperties` # @return [Hash] attr_accessor :resource_properties # Security Command Center managed properties. These properties are managed by # Security Command Center and cannot be modified by the user. # Corresponds to the JSON property `securityCenterProperties` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1SecurityCenterProperties] attr_accessor :security_center_properties # User specified security marks that are attached to the parent Security Command # Center resource. Security marks are scoped within a Security Command Center # organization -- they can be modified and viewed by all users who have proper # permissions on the organization. # Corresponds to the JSON property `securityMarks` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1SecurityMarks] attr_accessor :security_marks # The time at which the asset was last updated, added, or deleted in Cloud SCC. # Corresponds to the JSON property `updateTime` # @return [String] attr_accessor :update_time def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @create_time = args[:create_time] if args.key?(:create_time) @iam_policy = args[:iam_policy] if args.key?(:iam_policy) @name = args[:name] if args.key?(:name) @resource_properties = args[:resource_properties] if args.key?(:resource_properties) @security_center_properties = args[:security_center_properties] if args.key?(:security_center_properties) @security_marks = args[:security_marks] if args.key?(:security_marks) @update_time = args[:update_time] if args.key?(:update_time) end end # Security Command Center finding. A finding is a record of assessment data ( # security, risk, health or privacy) ingested into Security Command Center for # presentation, notification, analysis, policy testing, and enforcement. For # example, an XSS vulnerability in an App Engine application is a finding. class GoogleCloudSecuritycenterV1p1beta1Finding include Google::Apis::Core::Hashable # The additional taxonomy group within findings from a given source. This field # is immutable after creation time. Example: "XSS_FLASH_INJECTION" # Corresponds to the JSON property `category` # @return [String] attr_accessor :category # The time at which the finding was created in Security Command Center. # Corresponds to the JSON property `createTime` # @return [String] attr_accessor :create_time # The time at which the event took place, or when an update to the finding # occurred. For example, if the finding represents an open firewall it would # capture the time the detector believes the firewall became open. The accuracy # is determined by the detector. If the finding were to be resolved afterward, # this time would reflect when the finding was resolved. # Corresponds to the JSON property `eventTime` # @return [String] attr_accessor :event_time # The URI that, if available, points to a web page outside of Security Command # Center where additional information about the finding can be found. This field # is guaranteed to be either empty or a well formed URL. # Corresponds to the JSON property `externalUri` # @return [String] attr_accessor :external_uri # The relative resource name of this finding. See: https://cloud.google.com/apis/ # design/resource_names#relative_resource_name Example: "organizations/` # organization_id`/sources/`source_id`/findings/`finding_id`" # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The relative resource name of the source the finding belongs to. See: https:// # cloud.google.com/apis/design/resource_names#relative_resource_name This field # is immutable after creation time. For example: "organizations/`organization_id` # /sources/`source_id`" # Corresponds to the JSON property `parent` # @return [String] attr_accessor :parent # For findings on Google Cloud resources, the full resource name of the Google # Cloud resource this finding is for. See: https://cloud.google.com/apis/design/ # resource_names#full_resource_name When the finding is for a non-Google Cloud # resource, the resourceName can be a customer or partner defined string. This # field is immutable after creation time. # Corresponds to the JSON property `resourceName` # @return [String] attr_accessor :resource_name # User specified security marks that are attached to the parent Security Command # Center resource. Security marks are scoped within a Security Command Center # organization -- they can be modified and viewed by all users who have proper # permissions on the organization. # Corresponds to the JSON property `securityMarks` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1SecurityMarks] attr_accessor :security_marks # The severity of the finding. # Corresponds to the JSON property `severity` # @return [String] attr_accessor :severity # Source specific properties. These properties are managed by the source that # writes the finding. The key names in the source_properties map must be between # 1 and 255 characters, and must start with a letter and contain alphanumeric # characters or underscores only. # Corresponds to the JSON property `sourceProperties` # @return [Hash] attr_accessor :source_properties # The state of the finding. # Corresponds to the JSON property `state` # @return [String] attr_accessor :state def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @category = args[:category] if args.key?(:category) @create_time = args[:create_time] if args.key?(:create_time) @event_time = args[:event_time] if args.key?(:event_time) @external_uri = args[:external_uri] if args.key?(:external_uri) @name = args[:name] if args.key?(:name) @parent = args[:parent] if args.key?(:parent) @resource_name = args[:resource_name] if args.key?(:resource_name) @security_marks = args[:security_marks] if args.key?(:security_marks) @severity = args[:severity] if args.key?(:severity) @source_properties = args[:source_properties] if args.key?(:source_properties) @state = args[:state] if args.key?(:state) end end # Cloud IAM Policy information associated with the Google Cloud resource # described by the Security Command Center asset. This information is managed # and defined by the Google Cloud resource and cannot be modified by the user. class GoogleCloudSecuritycenterV1p1beta1IamPolicy include Google::Apis::Core::Hashable # The JSON representation of the Policy associated with the asset. See https:// # cloud.google.com/iam/docs/reference/rest/v1/Policy for format details. # Corresponds to the JSON property `policyBlob` # @return [String] attr_accessor :policy_blob def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @policy_blob = args[:policy_blob] if args.key?(:policy_blob) end end # Security Command Center's Notification class GoogleCloudSecuritycenterV1p1beta1NotificationMessage include Google::Apis::Core::Hashable # Security Command Center finding. A finding is a record of assessment data ( # security, risk, health or privacy) ingested into Security Command Center for # presentation, notification, analysis, policy testing, and enforcement. For # example, an XSS vulnerability in an App Engine application is a finding. # Corresponds to the JSON property `finding` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1Finding] attr_accessor :finding # Name of the notification config that generated current notification. # Corresponds to the JSON property `notificationConfigName` # @return [String] attr_accessor :notification_config_name # Information related to the Google Cloud resource. # Corresponds to the JSON property `resource` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1Resource] attr_accessor :resource # Wrapper over asset object that also captures the state change for the asset e. # g. if it was a newly created asset vs updated or deleted asset. # Corresponds to the JSON property `temporalAsset` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1TemporalAsset] attr_accessor :temporal_asset def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @finding = args[:finding] if args.key?(:finding) @notification_config_name = args[:notification_config_name] if args.key?(:notification_config_name) @resource = args[:resource] if args.key?(:resource) @temporal_asset = args[:temporal_asset] if args.key?(:temporal_asset) end end # Information related to the Google Cloud resource. class GoogleCloudSecuritycenterV1p1beta1Resource include Google::Apis::Core::Hashable # The full resource name of the resource. See: https://cloud.google.com/apis/ # design/resource_names#full_resource_name # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The full resource name of resource's parent. # Corresponds to the JSON property `parent` # @return [String] attr_accessor :parent # The human readable name of resource's parent. # Corresponds to the JSON property `parentDisplayName` # @return [String] attr_accessor :parent_display_name # The full resource name of project that the resource belongs to. # Corresponds to the JSON property `project` # @return [String] attr_accessor :project # The human readable name of project that the resource belongs to. # Corresponds to the JSON property `projectDisplayName` # @return [String] attr_accessor :project_display_name def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @name = args[:name] if args.key?(:name) @parent = args[:parent] if args.key?(:parent) @parent_display_name = args[:parent_display_name] if args.key?(:parent_display_name) @project = args[:project] if args.key?(:project) @project_display_name = args[:project_display_name] if args.key?(:project_display_name) end end # Response of asset discovery run class GoogleCloudSecuritycenterV1p1beta1RunAssetDiscoveryResponse include Google::Apis::Core::Hashable # The duration between asset discovery run start and end # Corresponds to the JSON property `duration` # @return [String] attr_accessor :duration # The state of an asset discovery run. # Corresponds to the JSON property `state` # @return [String] attr_accessor :state def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @duration = args[:duration] if args.key?(:duration) @state = args[:state] if args.key?(:state) end end # Security Command Center managed properties. These properties are managed by # Security Command Center and cannot be modified by the user. class GoogleCloudSecuritycenterV1p1beta1SecurityCenterProperties include Google::Apis::Core::Hashable # The user defined display name for this resource. # Corresponds to the JSON property `resourceDisplayName` # @return [String] attr_accessor :resource_display_name # The full resource name of the Google Cloud resource this asset represents. # This field is immutable after create time. See: https://cloud.google.com/apis/ # design/resource_names#full_resource_name # Corresponds to the JSON property `resourceName` # @return [String] attr_accessor :resource_name # Owners of the Google Cloud resource. # Corresponds to the JSON property `resourceOwners` # @return [Array] attr_accessor :resource_owners # The full resource name of the immediate parent of the resource. See: https:// # cloud.google.com/apis/design/resource_names#full_resource_name # Corresponds to the JSON property `resourceParent` # @return [String] attr_accessor :resource_parent # The user defined display name for the parent of this resource. # Corresponds to the JSON property `resourceParentDisplayName` # @return [String] attr_accessor :resource_parent_display_name # The full resource name of the project the resource belongs to. See: https:// # cloud.google.com/apis/design/resource_names#full_resource_name # Corresponds to the JSON property `resourceProject` # @return [String] attr_accessor :resource_project # The user defined display name for the project of this resource. # Corresponds to the JSON property `resourceProjectDisplayName` # @return [String] attr_accessor :resource_project_display_name # The type of the Google Cloud resource. Examples include: APPLICATION, PROJECT, # and ORGANIZATION. This is a case insensitive field defined by Security Command # Center and/or the producer of the resource and is immutable after create time. # Corresponds to the JSON property `resourceType` # @return [String] attr_accessor :resource_type def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @resource_display_name = args[:resource_display_name] if args.key?(:resource_display_name) @resource_name = args[:resource_name] if args.key?(:resource_name) @resource_owners = args[:resource_owners] if args.key?(:resource_owners) @resource_parent = args[:resource_parent] if args.key?(:resource_parent) @resource_parent_display_name = args[:resource_parent_display_name] if args.key?(:resource_parent_display_name) @resource_project = args[:resource_project] if args.key?(:resource_project) @resource_project_display_name = args[:resource_project_display_name] if args.key?(:resource_project_display_name) @resource_type = args[:resource_type] if args.key?(:resource_type) end end # User specified security marks that are attached to the parent Security Command # Center resource. Security marks are scoped within a Security Command Center # organization -- they can be modified and viewed by all users who have proper # permissions on the organization. class GoogleCloudSecuritycenterV1p1beta1SecurityMarks include Google::Apis::Core::Hashable # Mutable user specified security marks belonging to the parent resource. # Constraints are as follows: * Keys and values are treated as case insensitive * # Keys must be between 1 - 256 characters (inclusive) * Keys must be letters, # numbers, underscores, or dashes * Values have leading and trailing whitespace # trimmed, remaining characters must be between 1 - 4096 characters (inclusive) # Corresponds to the JSON property `marks` # @return [Hash] attr_accessor :marks # The relative resource name of the SecurityMarks. See: https://cloud.google.com/ # apis/design/resource_names#relative_resource_name Examples: "organizations/` # organization_id`/assets/`asset_id`/securityMarks" "organizations/` # organization_id`/sources/`source_id`/findings/`finding_id`/securityMarks". # Corresponds to the JSON property `name` # @return [String] attr_accessor :name def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @marks = args[:marks] if args.key?(:marks) @name = args[:name] if args.key?(:name) end end # Wrapper over asset object that also captures the state change for the asset e. # g. if it was a newly created asset vs updated or deleted asset. class GoogleCloudSecuritycenterV1p1beta1TemporalAsset include Google::Apis::Core::Hashable # Security Command Center representation of a Google Cloud resource. The Asset # is a Security Command Center resource that captures information about a single # Google Cloud resource. All modifications to an Asset are only within the # context of Security Command Center and don't affect the referenced Google # Cloud resource. # Corresponds to the JSON property `asset` # @return [Google::Apis::SecuritycenterV1beta2::GoogleCloudSecuritycenterV1p1beta1Asset] attr_accessor :asset # Represents if the asset was created/updated/deleted. # Corresponds to the JSON property `changeType` # @return [String] attr_accessor :change_type def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @asset = args[:asset] if args.key?(:asset) @change_type = args[:change_type] if args.key?(:change_type) end end # Resource capturing the settings for Security Center. class SecurityCenterSettings include Google::Apis::Core::Hashable # The resource name of the project to send logs to. This project must be part of # the organization this resource resides in. The format is `projects/`project_id` # `. An empty value disables logging. This value is only referenced by services # that support log sink. Please refer to the documentation for an updated list # of compatible services. # Corresponds to the JSON property `logSinkProject` # @return [String] attr_accessor :log_sink_project # The resource name of the SecurityCenterSettings. Format: organizations/` # organization`/securityCenterSettings # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The organization level service account to be used for security center # components. # Corresponds to the JSON property `orgServiceAccount` # @return [String] attr_accessor :org_service_account def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @log_sink_project = args[:log_sink_project] if args.key?(:log_sink_project) @name = args[:name] if args.key?(:name) @org_service_account = args[:org_service_account] if args.key?(:org_service_account) end end # Resource capturing the settings for the Security Health Analytics service. class SecurityHealthAnalyticsSettings include Google::Apis::Core::Hashable # The configurations including the state of enablement for the service's # different modules. The absence of a module in the map implies its # configuration is inherited from its parent's. # Corresponds to the JSON property `modules` # @return [Hash] attr_accessor :modules # The resource name of the SecurityHealthAnalyticsSettings. Formats: * # organizations/`organization`/securityHealthAnalyticsSettings * folders/`folder` # /securityHealthAnalyticsSettings * projects/`project`/ # securityHealthAnalyticsSettings # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # Output only. The service account used by Security Health Analytics detectors. # Corresponds to the JSON property `serviceAccount` # @return [String] attr_accessor :service_account # The state of enablement for the service at its level of the resource hierarchy. # A DISABLED state will override all module enablement_states to DISABLED. # Corresponds to the JSON property `serviceEnablementState` # @return [String] attr_accessor :service_enablement_state # Output only. The time the settings were last updated. # Corresponds to the JSON property `updateTime` # @return [String] attr_accessor :update_time def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @modules = args[:modules] if args.key?(:modules) @name = args[:name] if args.key?(:name) @service_account = args[:service_account] if args.key?(:service_account) @service_enablement_state = args[:service_enablement_state] if args.key?(:service_enablement_state) @update_time = args[:update_time] if args.key?(:update_time) end end # User specified security marks that are attached to the parent Security Command # Center resource. Security marks are scoped within a Security Command Center # organization -- they can be modified and viewed by all users who have proper # permissions on the organization. class SecurityMarks include Google::Apis::Core::Hashable # Mutable user specified security marks belonging to the parent resource. # Constraints are as follows: * Keys and values are treated as case insensitive * # Keys must be between 1 - 256 characters (inclusive) * Keys must be letters, # numbers, underscores, or dashes * Values have leading and trailing whitespace # trimmed, remaining characters must be between 1 - 4096 characters (inclusive) # Corresponds to the JSON property `marks` # @return [Hash] attr_accessor :marks # The relative resource name of the SecurityMarks. See: https://cloud.google.com/ # apis/design/resource_names#relative_resource_name Examples: "organizations/` # organization_id`/assets/`asset_id`/securityMarks" "organizations/` # organization_id`/sources/`source_id`/findings/`finding_id`/securityMarks". # Corresponds to the JSON property `name` # @return [String] attr_accessor :name def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @marks = args[:marks] if args.key?(:marks) @name = args[:name] if args.key?(:name) end end # Resource capturing the state of an organization's subscription. class Subscription include Google::Apis::Core::Hashable # Details of a subscription. # Corresponds to the JSON property `details` # @return [Google::Apis::SecuritycenterV1beta2::Details] attr_accessor :details # The resource name of the subscription. Format: organizations/`organization`/ # subscription # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The tier of SCC features this organization currently has access to. # Corresponds to the JSON property `tier` # @return [String] attr_accessor :tier def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @details = args[:details] if args.key?(:details) @name = args[:name] if args.key?(:name) @tier = args[:tier] if args.key?(:tier) end end # Resource capturing the settings for the Web Security Scanner service. class WebSecurityScannerSettings include Google::Apis::Core::Hashable # The configurations including the state of enablement for the service's # different modules. The absence of a module in the map implies its # configuration is inherited from its parent's. # Corresponds to the JSON property `modules` # @return [Hash] attr_accessor :modules # The resource name of the WebSecurityScannerSettings. Formats: * organizations/` # organization`/webSecurityScannerSettings * folders/`folder`/ # webSecurityScannerSettings * projects/`project`/webSecurityScannerSettings # Corresponds to the JSON property `name` # @return [String] attr_accessor :name # The state of enablement for the service at its level of the resource hierarchy. # A DISABLED state will override all module enablement_states to DISABLED. # Corresponds to the JSON property `serviceEnablementState` # @return [String] attr_accessor :service_enablement_state # Output only. The time the settings were last updated. # Corresponds to the JSON property `updateTime` # @return [String] attr_accessor :update_time def initialize(**args) update!(**args) end # Update properties of this object def update!(**args) @modules = args[:modules] if args.key?(:modules) @name = args[:name] if args.key?(:name) @service_enablement_state = args[:service_enablement_state] if args.key?(:service_enablement_state) @update_time = args[:update_time] if args.key?(:update_time) end end end end end