Class: Google::Apis::SecuritycenterV1beta1::GoogleCloudSecuritycenterV2ResourceValueConfig

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/securitycenter_v1beta1/classes.rb,
lib/google/apis/securitycenter_v1beta1/representations.rb,
lib/google/apis/securitycenter_v1beta1/representations.rb

Overview

A resource value configuration (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ GoogleCloudSecuritycenterV2ResourceValueConfig

Returns a new instance of GoogleCloudSecuritycenterV2ResourceValueConfig.



7906
7907
7908
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7906

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#cloud_provider ⇒ String

Cloud provider this configuration applies to Corresponds to the JSON property cloudProvider

Returns:

  • (String) 


7840
7841
7842
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7840

def cloud_provider
  @cloud_provider
end

#create_time ⇒ String

Output only. Timestamp this resource value configuration was created. Corresponds to the JSON property createTime

Returns:

  • (String) 


7845
7846
7847
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7845

def create_time
  @create_time
end

#description ⇒ String

Description of the resource value configuration. Corresponds to the JSON property description

Returns:

  • (String) 


7850
7851
7852
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7850

def description
  @description
end

#name ⇒ String

Identifier. Name for the resource value configuration Corresponds to the JSON property name

Returns:

  • (String) 


7855
7856
7857
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7855

def name
  @name
end

#resource_labels_selector ⇒ Hash<String,String>

List of resource labels to search for, evaluated with AND. For example, " resource_labels_selector": "key": "value", "env": "prod" will match resources with labels "key": "value" AND "env": "prod" https://cloud.google. com/resource-manager/docs/creating-managing-labels Corresponds to the JSON property resourceLabelsSelector

Returns:

  • (Hash<String,String>) 


7863
7864
7865
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7863

def resource_labels_selector
  @resource_labels_selector
end

#resource_type ⇒ String

Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage. googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources. Corresponds to the JSON property resourceType

Returns:

  • (String) 


7871
7872
7873
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7871

def resource_type
  @resource_type
end

#resource_value ⇒ String

Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request Corresponds to the JSON property resourceValue

Returns:

  • (String) 


7877
7878
7879
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7877

def resource_value
  @resource_value
end

#scope ⇒ String

Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with AND of other resources. Corresponds to the JSON property scope

Returns:

  • (String) 


7884
7885
7886
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7884

def scope
  @scope
end

#sensitive_data_protection_mapping ⇒ Google::Apis::SecuritycenterV1beta1::GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping

Resource value mapping for Sensitive Data Protection findings If any of these mappings have a resource value that is not unspecified, the resource_value field will be ignored when reading this configuration. Corresponds to the JSON property sensitiveDataProtectionMapping

Returns:



7891
7892
7893
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7891

def sensitive_data_protection_mapping
  @sensitive_data_protection_mapping
end

#tag_values ⇒ Array<String>

Tag values combined with AND to check against. For Google Cloud resources, they are tag value IDs in the form of "tagValues/123". Example: [ "tagValues/ 123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource- manager/docs/tags/tags-creating-and-managing Corresponds to the JSON property tagValues

Returns:

  • (Array<String>) 


7899
7900
7901
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7899

def tag_values
  @tag_values
end

#update_time ⇒ String

Output only. Timestamp this resource value configuration was last updated. Corresponds to the JSON property updateTime

Returns:

  • (String) 


7904
7905
7906
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7904

def update_time
  @update_time
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



7911
7912
7913
7914
7915
7916
7917
7918
7919
7920
7921
7922
7923
 
# File 'lib/google/apis/securitycenter_v1beta1/classes.rb', line 7911

def update!(**args)
  @cloud_provider = args[:cloud_provider] if args.key?(:cloud_provider)
  @create_time = args[:create_time] if args.key?(:create_time)
  @description = args[:description] if args.key?(:description)
  @name = args[:name] if args.key?(:name)
  @resource_labels_selector = args[:resource_labels_selector] if args.key?(:resource_labels_selector)
  @resource_type = args[:resource_type] if args.key?(:resource_type)
  @resource_value = args[:resource_value] if args.key?(:resource_value)
  @scope = args[:scope] if args.key?(:scope)
  @sensitive_data_protection_mapping = args[:sensitive_data_protection_mapping] if args.key?(:sensitive_data_protection_mapping)
  @tag_values = args[:tag_values] if args.key?(:tag_values)
  @update_time = args[:update_time] if args.key?(:update_time)
end