Namespace Google.Apis.SecurityPosture.v1.Data

Classes

AssetDetails

Details of a Cloud Asset Inventory asset that caused a violation.

CancelOperationRequest

The request message for Operations.CancelOperation.

ComplianceStandard

Information about a compliance standard that the policy helps enforce.

CreateIaCValidationReportRequest

Request message for CreateIaCValidationReport.

CustomConfig

A custom module configuration for Security Health Analytics. Use CustomConfig to create custom detectors that generate custom findings for resources that you specify.

CustomOutputSpec

Definitions of custom source properties that can appear in findings.

A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); }

Expr

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

ExtractPostureRequest

Request message for ExtractPosture.

GoogleCloudSecuritypostureV1CustomConstraint

A custom, user-defined constraint. You can apply the constraint only to the resource types specified in the constraint, and only within the organization where the constraint is defined. When you create a custom constraint, it is not enforced automatically. You must use an organization policy to enforce the constraint.

GoogleCloudSecuritypostureV1PolicyRule

A rule that defines the allowed and denied values for an organization policy constraint.

GoogleCloudSecuritypostureV1PolicyRuleStringValues

The allowed and denied values for a list constraint. For all constraints, these fields can contain literal values. Optionally, you can add the is: prefix to these values. If the value contains a colon (:), then the is: prefix is required. Some constraints allow you to specify a portion of the resource hierarchy, known as a hierarchy subtree, that the constraint applies to. To specify a hierarchy subtree, use the under: prefix, followed by a value with one of these formats: - projects/{project_id} (for example, projects/tokyo-rain-123) - folders/{folder_id} (for example, folders/1234567890123) - organizations/{organization_id} (for example, organizations/123456789012) A constraint's supports_under field indicates whether you can specify a hierarchy subtree. To learn which predefined constraints let you specify a hierarchy subtree, see the constraints reference.

IaC

Details of an infrastructure-as-code (IaC) configuration.

IaCValidationReport

Details of an infrastructure-as-code (IaC) validation report.

ListLocationsResponse

The response message for Locations.ListLocations.

ListOperationsResponse

The response message for Operations.ListOperations.

ListPostureDeploymentsResponse

Response message for ListPostureDeployments.

ListPostureRevisionsResponse

Response message for ListPostureRevisions.

ListPostureTemplatesResponse

Response message for ListPostureTemplates.

ListPosturesResponse

Response message for ListPostures.

ListReportsResponse

Response message for ListReports.

Location

A resource that represents a Google Cloud location.

Operation

This resource represents a long-running operation that is the result of a network API call.

OperationMetadata

Metadata for an Operation.

OrgPolicyConstraint

A predefined organization policy constraint.

OrgPolicyConstraintCustom

A custom organization policy constraint.

Policy

The details of a policy, including the constraints that it includes.

PolicyDetails

Details of a policy that was violated.

PolicySet

A group of one or more Policy resources.

Posture

The details of a posture.

PostureDeployment

Details for a Posture deployment on an organization, folder, or project. You can deploy at most one posture to each organization, folder, or project. The parent resource for a posture deployment is always the organization, even if the deployment applies to a folder or project.

PostureDetails

Details of a posture deployment.

PostureTemplate

The details of a posture template.

Property

A name-value pair used as a custom source property.

Report

Details of a report.

ResourceSelector

A selector for the resource types to run the detector on.

ResourceTypes

Set multiple resource types for one policy, for example: resourceTypes: included: - compute.googleapis.com/Instance - compute.googleapis.com/Disk Constraint definition contains an empty resource type in order to support multiple resource types in the policy. Only supports managed constraints. Method type is GOVERN_TAGS. Refer go/multi-resource-support-force-tags-gmc to get more details.

SecurityHealthAnalyticsCustomModule

A custom module for Security Health Analytics.

SecurityHealthAnalyticsModule

A built-in detector for Security Health Analytics.

Status

The Status type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by gRPC. Each Status message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the API Design Guide.

Violation

Details of a violation.