Class: Google::Cloud::SecurityCenterManagement::V1::CustomConfig

Inherits:
Object
  • Object
show all
Extended by:
Protobuf::MessageExts::ClassMethods
Includes:
Protobuf::MessageExts
Defined in:
proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb

Overview

Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.

Defined Under Namespace

Modules: Severity Classes: CustomOutputSpec, ResourceSelector

Instance Attribute Summary collapse

Instance Attribute Details

#custom_output ⇒ ::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec

Returns Optional. Custom output properties.

Returns:



313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
 
# File 'proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb', line 313

class CustomConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # A set of optional name-value pairs that define custom source properties to
  # return with each finding that is generated by the custom module. The custom
  # source properties that are defined here are included in the finding JSON
  # under `sourceProperties`.
  # @!attribute [rw] properties
  #   @return [::Array<::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec::Property>]
  #     Optional. A list of custom output properties to add to the finding.
  class CustomOutputSpec
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # An individual name-value pair that defines a custom source property.
    # @!attribute [rw] name
    #   @return [::String]
    #     Optional. Name of the property for the custom output.
    # @!attribute [rw] value_expression
    #   @return [::Google::Type::Expr]
    #     Optional. The CEL expression for the custom output. A resource property
    #     can be specified to return the value of the property or a text string
    #     enclosed in quotation marks.
    class Property
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end

  # Resource for selecting resource type.
  # @!attribute [rw] resource_types
  #   @return [::Array<::String>]
  #     Optional. The resource types to run the detector on.
  class ResourceSelector
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Defines the valid value options for the severity of a finding.
  module Severity
    # Unspecified severity.
    SEVERITY_UNSPECIFIED = 0

    # Critical severity.
    CRITICAL = 1

    # High severity.
    HIGH = 2

    # Medium severity.
    MEDIUM = 3

    # Low severity.
    LOW = 4
  end
end

#description ⇒ ::String

Returns Optional. Text that describes the vulnerability or misconfiguration that the custom module detects. This explanation is returned with each finding instance to help investigators understand the detected issue. The text must be enclosed in quotation marks.

Returns:

  • (::String) —

    Optional. Text that describes the vulnerability or misconfiguration that the custom module detects. This explanation is returned with each finding instance to help investigators understand the detected issue. The text must be enclosed in quotation marks.



313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
 
# File 'proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb', line 313

class CustomConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # A set of optional name-value pairs that define custom source properties to
  # return with each finding that is generated by the custom module. The custom
  # source properties that are defined here are included in the finding JSON
  # under `sourceProperties`.
  # @!attribute [rw] properties
  #   @return [::Array<::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec::Property>]
  #     Optional. A list of custom output properties to add to the finding.
  class CustomOutputSpec
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # An individual name-value pair that defines a custom source property.
    # @!attribute [rw] name
    #   @return [::String]
    #     Optional. Name of the property for the custom output.
    # @!attribute [rw] value_expression
    #   @return [::Google::Type::Expr]
    #     Optional. The CEL expression for the custom output. A resource property
    #     can be specified to return the value of the property or a text string
    #     enclosed in quotation marks.
    class Property
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end

  # Resource for selecting resource type.
  # @!attribute [rw] resource_types
  #   @return [::Array<::String>]
  #     Optional. The resource types to run the detector on.
  class ResourceSelector
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Defines the valid value options for the severity of a finding.
  module Severity
    # Unspecified severity.
    SEVERITY_UNSPECIFIED = 0

    # Critical severity.
    CRITICAL = 1

    # High severity.
    HIGH = 2

    # Medium severity.
    MEDIUM = 3

    # Low severity.
    LOW = 4
  end
end

#predicate ⇒ ::Google::Type::Expr

Returns Optional. The CEL expression to evaluate to produce findings. When the expression evaluates to true against a resource, a finding is generated.

Returns:

  • (::Google::Type::Expr) —

    Optional. The CEL expression to evaluate to produce findings. When the expression evaluates to true against a resource, a finding is generated.



313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
 
# File 'proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb', line 313

class CustomConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # A set of optional name-value pairs that define custom source properties to
  # return with each finding that is generated by the custom module. The custom
  # source properties that are defined here are included in the finding JSON
  # under `sourceProperties`.
  # @!attribute [rw] properties
  #   @return [::Array<::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec::Property>]
  #     Optional. A list of custom output properties to add to the finding.
  class CustomOutputSpec
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # An individual name-value pair that defines a custom source property.
    # @!attribute [rw] name
    #   @return [::String]
    #     Optional. Name of the property for the custom output.
    # @!attribute [rw] value_expression
    #   @return [::Google::Type::Expr]
    #     Optional. The CEL expression for the custom output. A resource property
    #     can be specified to return the value of the property or a text string
    #     enclosed in quotation marks.
    class Property
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end

  # Resource for selecting resource type.
  # @!attribute [rw] resource_types
  #   @return [::Array<::String>]
  #     Optional. The resource types to run the detector on.
  class ResourceSelector
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Defines the valid value options for the severity of a finding.
  module Severity
    # Unspecified severity.
    SEVERITY_UNSPECIFIED = 0

    # Critical severity.
    CRITICAL = 1

    # High severity.
    HIGH = 2

    # Medium severity.
    MEDIUM = 3

    # Low severity.
    LOW = 4
  end
end

#recommendation ⇒ ::String

Returns Optional. An explanation of the recommended steps that security teams can take to resolve the detected issue. This explanation is returned with each finding generated by this module in the nextSteps property of the finding JSON.

Returns:

  • (::String) —

    Optional. An explanation of the recommended steps that security teams can take to resolve the detected issue. This explanation is returned with each finding generated by this module in the nextSteps property of the finding JSON.



313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
 
# File 'proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb', line 313

class CustomConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # A set of optional name-value pairs that define custom source properties to
  # return with each finding that is generated by the custom module. The custom
  # source properties that are defined here are included in the finding JSON
  # under `sourceProperties`.
  # @!attribute [rw] properties
  #   @return [::Array<::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec::Property>]
  #     Optional. A list of custom output properties to add to the finding.
  class CustomOutputSpec
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # An individual name-value pair that defines a custom source property.
    # @!attribute [rw] name
    #   @return [::String]
    #     Optional. Name of the property for the custom output.
    # @!attribute [rw] value_expression
    #   @return [::Google::Type::Expr]
    #     Optional. The CEL expression for the custom output. A resource property
    #     can be specified to return the value of the property or a text string
    #     enclosed in quotation marks.
    class Property
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end

  # Resource for selecting resource type.
  # @!attribute [rw] resource_types
  #   @return [::Array<::String>]
  #     Optional. The resource types to run the detector on.
  class ResourceSelector
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Defines the valid value options for the severity of a finding.
  module Severity
    # Unspecified severity.
    SEVERITY_UNSPECIFIED = 0

    # Critical severity.
    CRITICAL = 1

    # High severity.
    HIGH = 2

    # Medium severity.
    MEDIUM = 3

    # Low severity.
    LOW = 4
  end
end

#resource_selector ⇒ ::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::ResourceSelector

Returns Optional. The Cloud Asset Inventory resource types that the custom module operates on. For information about resource types, see Supported asset types. Each custom module can specify up to 5 resource types.

Returns:



313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
 
# File 'proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb', line 313

class CustomConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # A set of optional name-value pairs that define custom source properties to
  # return with each finding that is generated by the custom module. The custom
  # source properties that are defined here are included in the finding JSON
  # under `sourceProperties`.
  # @!attribute [rw] properties
  #   @return [::Array<::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec::Property>]
  #     Optional. A list of custom output properties to add to the finding.
  class CustomOutputSpec
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # An individual name-value pair that defines a custom source property.
    # @!attribute [rw] name
    #   @return [::String]
    #     Optional. Name of the property for the custom output.
    # @!attribute [rw] value_expression
    #   @return [::Google::Type::Expr]
    #     Optional. The CEL expression for the custom output. A resource property
    #     can be specified to return the value of the property or a text string
    #     enclosed in quotation marks.
    class Property
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end

  # Resource for selecting resource type.
  # @!attribute [rw] resource_types
  #   @return [::Array<::String>]
  #     Optional. The resource types to run the detector on.
  class ResourceSelector
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Defines the valid value options for the severity of a finding.
  module Severity
    # Unspecified severity.
    SEVERITY_UNSPECIFIED = 0

    # Critical severity.
    CRITICAL = 1

    # High severity.
    HIGH = 2

    # Medium severity.
    MEDIUM = 3

    # Low severity.
    LOW = 4
  end
end

#severity ⇒ ::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::Severity

Returns Optional. The severity to assign to findings generated by the module.

Returns:



313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
 
# File 'proto_docs/google/cloud/securitycentermanagement/v1/security_center_management.rb', line 313

class CustomConfig
  include ::Google::Protobuf::MessageExts
  extend ::Google::Protobuf::MessageExts::ClassMethods

  # A set of optional name-value pairs that define custom source properties to
  # return with each finding that is generated by the custom module. The custom
  # source properties that are defined here are included in the finding JSON
  # under `sourceProperties`.
  # @!attribute [rw] properties
  #   @return [::Array<::Google::Cloud::SecurityCenterManagement::V1::CustomConfig::CustomOutputSpec::Property>]
  #     Optional. A list of custom output properties to add to the finding.
  class CustomOutputSpec
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods

    # An individual name-value pair that defines a custom source property.
    # @!attribute [rw] name
    #   @return [::String]
    #     Optional. Name of the property for the custom output.
    # @!attribute [rw] value_expression
    #   @return [::Google::Type::Expr]
    #     Optional. The CEL expression for the custom output. A resource property
    #     can be specified to return the value of the property or a text string
    #     enclosed in quotation marks.
    class Property
      include ::Google::Protobuf::MessageExts
      extend ::Google::Protobuf::MessageExts::ClassMethods
    end
  end

  # Resource for selecting resource type.
  # @!attribute [rw] resource_types
  #   @return [::Array<::String>]
  #     Optional. The resource types to run the detector on.
  class ResourceSelector
    include ::Google::Protobuf::MessageExts
    extend ::Google::Protobuf::MessageExts::ClassMethods
  end

  # Defines the valid value options for the severity of a finding.
  module Severity
    # Unspecified severity.
    SEVERITY_UNSPECIFIED = 0

    # Critical severity.
    CRITICAL = 1

    # High severity.
    HIGH = 2

    # Medium severity.
    MEDIUM = 3

    # Low severity.
    LOW = 4
  end
end