Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	BillingTier_name = map[int32]string{
		0: "BILLING_TIER_UNSPECIFIED",
		1: "STANDARD",
		2: "PREMIUM",
	}
	BillingTier_value = map[string]int32{
		"BILLING_TIER_UNSPECIFIED": 0,
		"STANDARD":                 1,
		"PREMIUM":                  2,
	}
)

Enum value maps for BillingTier.

View Source
var (
	BillingType_name = map[int32]string{
		0: "BILLING_TYPE_UNSPECIFIED",
		1: "SUBSCRIPTION",
		2: "TRIAL_SUBSCRIPTION",
		3: "ALPHA",
	}
	BillingType_value = map[string]int32{
		"BILLING_TYPE_UNSPECIFIED": 0,
		"SUBSCRIPTION":             1,
		"TRIAL_SUBSCRIPTION":       2,
		"ALPHA":                    3,
	}
)

Enum value maps for BillingType.

View Source
var (
	ComponentEnablementState_name = map[int32]string{
		0: "COMPONENT_ENABLEMENT_STATE_UNSPECIFIED",
		1: "DISABLE",
		2: "ENABLE",
		3: "INHERIT",
	}
	ComponentEnablementState_value = map[string]int32{
		"COMPONENT_ENABLEMENT_STATE_UNSPECIFIED": 0,
		"DISABLE":                                1,
		"ENABLE":                                 2,
		"INHERIT":                                3,
	}
)

Enum value maps for ComponentEnablementState.

View Source
var (
	Settings_OnboardingState_name = map[int32]string{
		0: "ONBOARDING_STATE_UNSPECIFIED",
		1: "ENABLED",
		2: "DISABLED",
		3: "BILLING_SELECTED",
		4: "PROVIDERS_SELECTED",
		5: "RESOURCES_SELECTED",
		6: "ORG_SERVICE_ACCOUNT_CREATED",
	}
	Settings_OnboardingState_value = map[string]int32{
		"ONBOARDING_STATE_UNSPECIFIED": 0,
		"ENABLED":                      1,
		"DISABLED":                     2,
		"BILLING_SELECTED":             3,
		"PROVIDERS_SELECTED":           4,
		"RESOURCES_SELECTED":           5,
		"ORG_SERVICE_ACCOUNT_CREATED":  6,
	}
)

Enum value maps for Settings_OnboardingState.

View Source
var File_google_cloud_securitycenter_settings_v1beta1_billing_settings_proto protoreflect.FileDescriptor
View Source
var File_google_cloud_securitycenter_settings_v1beta1_component_settings_proto protoreflect.FileDescriptor
View Source
var File_google_cloud_securitycenter_settings_v1beta1_detector_proto protoreflect.FileDescriptor
View Source
var File_google_cloud_securitycenter_settings_v1beta1_securitycenter_settings_service_proto protoreflect.FileDescriptor
View Source
var File_google_cloud_securitycenter_settings_v1beta1_settings_proto protoreflect.FileDescriptor
View Source
var File_google_cloud_securitycenter_settings_v1beta1_sink_settings_proto protoreflect.FileDescriptor

Functions

func RegisterSecurityCenterSettingsServiceServer

func RegisterSecurityCenterSettingsServiceServer(s *grpc.Server, srv SecurityCenterSettingsServiceServer)

Types

type BatchCalculateEffectiveSettingsRequest

type BatchCalculateEffectiveSettingsRequest struct {

	// Required. The relative resource name of the organization shared by all of the
	// settings being retrieved.
	// Format:
	//  * `organizations/{organization}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The requests specifying the effective settings to retrieve.
	// A maximum of 1000 effective settings can be retrieved in a batch.
	Requests []*CalculateEffectiveSettingsRequest `protobuf:"bytes,2,rep,name=requests,proto3" json:"requests,omitempty"` // contains filtered or unexported fields

}

Request message for BatchGetEffectiveSettings.

func (*BatchCalculateEffectiveSettingsRequest) Descriptor

func (*BatchCalculateEffectiveSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use BatchCalculateEffectiveSettingsRequest.ProtoReflect.Descriptor instead.

func (*BatchCalculateEffectiveSettingsRequest) GetParent

func (*BatchCalculateEffectiveSettingsRequest) GetRequests

func (*BatchCalculateEffectiveSettingsRequest) ProtoMessage

func (*BatchCalculateEffectiveSettingsRequest) ProtoReflect

func (*BatchCalculateEffectiveSettingsRequest) Reset

func (*BatchCalculateEffectiveSettingsRequest) String

type BatchCalculateEffectiveSettingsResponse

type BatchCalculateEffectiveSettingsResponse struct {

	// Settings requested.
	Settings []*Settings `protobuf:"bytes,1,rep,name=settings,proto3" json:"settings,omitempty"` // contains filtered or unexported fields

}

Response message for BatchGetEffectiveSettings.

func (*BatchCalculateEffectiveSettingsResponse) Descriptor

func (*BatchCalculateEffectiveSettingsResponse) Descriptor() ([]byte, []int)

Deprecated: Use BatchCalculateEffectiveSettingsResponse.ProtoReflect.Descriptor instead.

func (*BatchCalculateEffectiveSettingsResponse) GetSettings

func (*BatchCalculateEffectiveSettingsResponse) ProtoMessage

func (*BatchCalculateEffectiveSettingsResponse) ProtoReflect

func (*BatchCalculateEffectiveSettingsResponse) Reset

func (*BatchCalculateEffectiveSettingsResponse) String

type BatchGetSettingsRequest

type BatchGetSettingsRequest struct {

	// Required. The relative resource name of the organization shared by all of the
	// settings being retrieved.
	// Format:
	//  * `organizations/{organization}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The names of the settings to retrieve.
	// A maximum of 1000 settings can be retrieved in a batch.
	// Formats:
	//  * `organizations/{organization}/settings`
	//  * `folders/{folder}/settings`
	//  * `projects/{project}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/settings`
	Names []string `protobuf:"bytes,2,rep,name=names,proto3" json:"names,omitempty"` // contains filtered or unexported fields

}

Request message for BatchGetSettings.

func (*BatchGetSettingsRequest) Descriptor

func (*BatchGetSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use BatchGetSettingsRequest.ProtoReflect.Descriptor instead.

func (*BatchGetSettingsRequest) GetNames

func (x *BatchGetSettingsRequest) GetNames() []string

func (*BatchGetSettingsRequest) GetParent

func (x *BatchGetSettingsRequest) GetParent() string

func (*BatchGetSettingsRequest) ProtoMessage

func (*BatchGetSettingsRequest) ProtoMessage()

func (*BatchGetSettingsRequest) ProtoReflect

func (x *BatchGetSettingsRequest) ProtoReflect() protoreflect.Message

func (*BatchGetSettingsRequest) Reset

func (x *BatchGetSettingsRequest) Reset()

func (*BatchGetSettingsRequest) String

func (x *BatchGetSettingsRequest) String() string

type BatchGetSettingsResponse

type BatchGetSettingsResponse struct {

	// Settings requested.
	Settings []*Settings `protobuf:"bytes,1,rep,name=settings,proto3" json:"settings,omitempty"` // contains filtered or unexported fields

}

Response message for BatchGetSettings.

func (*BatchGetSettingsResponse) Descriptor

func (*BatchGetSettingsResponse) Descriptor() ([]byte, []int)

Deprecated: Use BatchGetSettingsResponse.ProtoReflect.Descriptor instead.

func (*BatchGetSettingsResponse) GetSettings

func (x *BatchGetSettingsResponse) GetSettings() []*Settings

func (*BatchGetSettingsResponse) ProtoMessage

func (*BatchGetSettingsResponse) ProtoMessage()

func (*BatchGetSettingsResponse) ProtoReflect

func (x *BatchGetSettingsResponse) ProtoReflect() protoreflect.Message

func (*BatchGetSettingsResponse) Reset

func (x *BatchGetSettingsResponse) Reset()

func (*BatchGetSettingsResponse) String

func (x *BatchGetSettingsResponse) String() string

type BillingSettings

type BillingSettings struct {

	// Output only. Billing tier selected by customer
	BillingTier BillingTier "" /* 157 byte string literal not displayed */
	// Output only. Type of billing method
	BillingType BillingType "" /* 157 byte string literal not displayed */
	// Output only. The absolute point in time when the subscription became effective.
	// Can be compared to expire_time value to determine full contract duration
	StartTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
	// Output only. The absolute point in time when the subscription expires.
	//
	// If this field is populated and billing_tier is STANDARD, this is
	// indication of a point in the _past_ when a PREMIUM access ended.
	ExpireTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=expire_time,json=expireTime,proto3" json:"expire_time,omitempty"` // contains filtered or unexported fields

}

Billing settings

func (*BillingSettings) Descriptor

func (*BillingSettings) Descriptor() ([]byte, []int)

Deprecated: Use BillingSettings.ProtoReflect.Descriptor instead.

func (*BillingSettings) GetBillingTier

func (x *BillingSettings) GetBillingTier() BillingTier

func (*BillingSettings) GetBillingType

func (x *BillingSettings) GetBillingType() BillingType

func (*BillingSettings) GetExpireTime

func (x *BillingSettings) GetExpireTime() *timestamppb.Timestamp

func (*BillingSettings) GetStartTime

func (x *BillingSettings) GetStartTime() *timestamppb.Timestamp

func (*BillingSettings) ProtoMessage

func (*BillingSettings) ProtoMessage()

func (*BillingSettings) ProtoReflect

func (x *BillingSettings) ProtoReflect() protoreflect.Message

func (*BillingSettings) Reset

func (x *BillingSettings) Reset()

func (*BillingSettings) String

func (x *BillingSettings) String() string

type BillingTier

type BillingTier int32

Billing tier options

const (
	// Default value. This value is unused.
	BillingTier_BILLING_TIER_UNSPECIFIED BillingTier = 0
	// The standard billing tier.
	BillingTier_STANDARD BillingTier = 1
	// The premium billing tier.
	BillingTier_PREMIUM BillingTier = 2
)

func (BillingTier) Descriptor

func (BillingTier) Enum

func (x BillingTier) Enum() *BillingTier

func (BillingTier) EnumDescriptor

func (BillingTier) EnumDescriptor() ([]byte, []int)

Deprecated: Use BillingTier.Descriptor instead.

func (BillingTier) Number

func (x BillingTier) Number() protoreflect.EnumNumber

func (BillingTier) String

func (x BillingTier) String() string

func (BillingTier) Type

type BillingType

type BillingType int32

Billing type

const (
	// Default billing type
	BillingType_BILLING_TYPE_UNSPECIFIED BillingType = 0
	// Subscription for Premium billing tier
	BillingType_SUBSCRIPTION BillingType = 1
	// Trial subscription for Premium billing tier
	BillingType_TRIAL_SUBSCRIPTION BillingType = 2
	// Alpha customer for Premium billing tier
	BillingType_ALPHA BillingType = 3
)

func (BillingType) Descriptor

func (BillingType) Enum

func (x BillingType) Enum() *BillingType

func (BillingType) EnumDescriptor

func (BillingType) EnumDescriptor() ([]byte, []int)

Deprecated: Use BillingType.Descriptor instead.

func (BillingType) Number

func (x BillingType) Number() protoreflect.EnumNumber

func (BillingType) String

func (x BillingType) String() string

func (BillingType) Type

type CalculateEffectiveComponentSettingsRequest

type CalculateEffectiveComponentSettingsRequest struct {

	// Required. The effective component settings to retrieve.
	//
	// Formats:
	//  * `organizations/{organization}/components/{component}/settings`
	//  * `folders/{folder}/components/{component}/settings`
	//  * `projects/{project}/components/{component}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/components/{component}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // contains filtered or unexported fields

}

Request message for CalculateEffectiveComponentSettings.

func (*CalculateEffectiveComponentSettingsRequest) Descriptor

Deprecated: Use CalculateEffectiveComponentSettingsRequest.ProtoReflect.Descriptor instead.

func (*CalculateEffectiveComponentSettingsRequest) GetName

func (*CalculateEffectiveComponentSettingsRequest) ProtoMessage

func (*CalculateEffectiveComponentSettingsRequest) ProtoReflect

func (*CalculateEffectiveComponentSettingsRequest) Reset

func (*CalculateEffectiveComponentSettingsRequest) String

type CalculateEffectiveSettingsRequest

type CalculateEffectiveSettingsRequest struct {

	// Required. The name of the effective settings to retrieve.
	// Formats:
	//  * `organizations/{organization}/effectiveSettings`
	//  * `folders/{folder}/effectiveSettings`
	//  * `projects/{project}/effectiveSettings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/effectiveSettings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/effectiveSettings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/effectiveSettings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // contains filtered or unexported fields

}

Request message for CalculateEffectiveSettings.

func (*CalculateEffectiveSettingsRequest) Descriptor

func (*CalculateEffectiveSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use CalculateEffectiveSettingsRequest.ProtoReflect.Descriptor instead.

func (*CalculateEffectiveSettingsRequest) GetName

func (*CalculateEffectiveSettingsRequest) ProtoMessage

func (*CalculateEffectiveSettingsRequest) ProtoMessage()

func (*CalculateEffectiveSettingsRequest) ProtoReflect

func (*CalculateEffectiveSettingsRequest) Reset

func (*CalculateEffectiveSettingsRequest) String

type ComponentEnablementState

type ComponentEnablementState int32

Valid states for a component

const (
	// No state specified, equivalent of INHERIT
	ComponentEnablementState_COMPONENT_ENABLEMENT_STATE_UNSPECIFIED ComponentEnablementState = 0
	// Disable the component
	ComponentEnablementState_DISABLE ComponentEnablementState = 1
	// Enable the component
	ComponentEnablementState_ENABLE ComponentEnablementState = 2
	// Inherit the state from resources parent folder or organization.
	ComponentEnablementState_INHERIT ComponentEnablementState = 3
)

func (ComponentEnablementState) Descriptor

func (ComponentEnablementState) Enum

func (ComponentEnablementState) EnumDescriptor

func (ComponentEnablementState) EnumDescriptor() ([]byte, []int)

Deprecated: Use ComponentEnablementState.Descriptor instead.

func (ComponentEnablementState) Number

func (ComponentEnablementState) String

func (x ComponentEnablementState) String() string

func (ComponentEnablementState) Type

type ComponentSettings

type ComponentSettings struct {

	// The relative resource name of the component settings.
	// Formats:
	//  * `organizations/{organization}/components/{component}/settings`
	//  * `folders/{folder}/components/{component}/settings`
	//  * `projects/{project}/components/{component}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/components/{component}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// ENABLE to enable component, DISABLE to disable and INHERIT to inherit
	// setting from ancestors.
	State ComponentEnablementState "" /* 139 byte string literal not displayed */
	// Output only. The service account to be used for security center component.
	// The component must have permission to "act as" the service account.
	ProjectServiceAccount string `protobuf:"bytes,3,opt,name=project_service_account,json=projectServiceAccount,proto3" json:"project_service_account,omitempty"`
	// Settings for detectors.  Not all detectors must have settings present at
	// each and every level in the hierarchy.  If it is not present the setting
	// will be inherited from its ancestors folders, organizations or the
	// defaults.
	DetectorSettings map[string]*ComponentSettings_DetectorSettings "" /* 197 byte string literal not displayed */
	// Output only. An fingerprint used for optimistic concurrency. If none is provided
	// on updates then the existing metadata will be blindly overwritten.
	Etag string `protobuf:"bytes,5,opt,name=etag,proto3" json:"etag,omitempty"`
	// Output only. The time these settings were last updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Component specific settings.  This must match the component value.
	//
	// Types that are assignable to SpecificSettings:
	//	*ComponentSettings_ContainerThreatDetectionSettings
	//	*ComponentSettings_EventThreatDetectionSettings
	//	*ComponentSettings_SecurityHealthAnalyticsSettings
	//	*ComponentSettings_WebSecurityScannerSettings
	SpecificSettings isComponentSettings_SpecificSettings `protobuf_oneof:"specific_settings"` // contains filtered or unexported fields

}

Component Settings for Security Command Center

func (*ComponentSettings) Descriptor

func (*ComponentSettings) Descriptor() ([]byte, []int)

Deprecated: Use ComponentSettings.ProtoReflect.Descriptor instead.

func (*ComponentSettings) GetContainerThreatDetectionSettings

func (x *ComponentSettings) GetContainerThreatDetectionSettings() *ContainerThreatDetectionSettings

func (*ComponentSettings) GetDetectorSettings

func (x *ComponentSettings) GetDetectorSettings() map[string]*ComponentSettings_DetectorSettings

func (*ComponentSettings) GetEtag

func (x *ComponentSettings) GetEtag() string

func (*ComponentSettings) GetEventThreatDetectionSettings

func (x *ComponentSettings) GetEventThreatDetectionSettings() *EventThreatDetectionSettings

func (*ComponentSettings) GetName

func (x *ComponentSettings) GetName() string

func (*ComponentSettings) GetProjectServiceAccount

func (x *ComponentSettings) GetProjectServiceAccount() string

func (*ComponentSettings) GetSecurityHealthAnalyticsSettings

func (x *ComponentSettings) GetSecurityHealthAnalyticsSettings() *SecurityHealthAnalyticsSettings

func (*ComponentSettings) GetSpecificSettings

func (m *ComponentSettings) GetSpecificSettings() isComponentSettings_SpecificSettings

func (*ComponentSettings) GetState

func (*ComponentSettings) GetUpdateTime

func (x *ComponentSettings) GetUpdateTime() *timestamppb.Timestamp

func (*ComponentSettings) GetWebSecurityScannerSettings

func (x *ComponentSettings) GetWebSecurityScannerSettings() *WebSecurityScanner

func (*ComponentSettings) ProtoMessage

func (*ComponentSettings) ProtoMessage()

func (*ComponentSettings) ProtoReflect

func (x *ComponentSettings) ProtoReflect() protoreflect.Message

func (*ComponentSettings) Reset

func (x *ComponentSettings) Reset()

func (*ComponentSettings) String

func (x *ComponentSettings) String() string

type ComponentSettings_ContainerThreatDetectionSettings

type ComponentSettings_ContainerThreatDetectionSettings struct {
	// Container Threate Detection specific settings
	// For component, expect CONTAINER_THREAT_DETECTION
	ContainerThreatDetectionSettings *ContainerThreatDetectionSettings `protobuf:"bytes,41,opt,name=container_threat_detection_settings,json=containerThreatDetectionSettings,proto3,oneof"`
}

type ComponentSettings_DetectorSettings

type ComponentSettings_DetectorSettings struct {

	// ENABLE to enable component, DISABLE to disable and INHERIT to inherit
	// setting from ancestors.
	State ComponentEnablementState "" /* 139 byte string literal not displayed */ // contains filtered or unexported fields

}

Settings for each detector.

func (*ComponentSettings_DetectorSettings) Descriptor

func (*ComponentSettings_DetectorSettings) Descriptor() ([]byte, []int)

Deprecated: Use ComponentSettings_DetectorSettings.ProtoReflect.Descriptor instead.

func (*ComponentSettings_DetectorSettings) GetState

func (*ComponentSettings_DetectorSettings) ProtoMessage

func (*ComponentSettings_DetectorSettings) ProtoMessage()

func (*ComponentSettings_DetectorSettings) ProtoReflect

func (*ComponentSettings_DetectorSettings) Reset

func (*ComponentSettings_DetectorSettings) String

type ComponentSettings_EventThreatDetectionSettings

type ComponentSettings_EventThreatDetectionSettings struct {
	// Event Threat Detection specific settings
	// For component, expect EVENT_THREAT_DETECTION
	EventThreatDetectionSettings *EventThreatDetectionSettings `protobuf:"bytes,42,opt,name=event_threat_detection_settings,json=eventThreatDetectionSettings,proto3,oneof"`
}

type ComponentSettings_SecurityHealthAnalyticsSettings

type ComponentSettings_SecurityHealthAnalyticsSettings struct {
	// Security Health Analytics specific settings
	// For component, expect SECURITY_HEALTH_ANALYTICS
	SecurityHealthAnalyticsSettings *SecurityHealthAnalyticsSettings `protobuf:"bytes,44,opt,name=security_health_analytics_settings,json=securityHealthAnalyticsSettings,proto3,oneof"`
}

type ComponentSettings_WebSecurityScannerSettings

type ComponentSettings_WebSecurityScannerSettings struct {
	// Web Security Scanner specific settings
	// For component, expect WEB_SECURITY_SCANNER
	WebSecurityScannerSettings *WebSecurityScanner `protobuf:"bytes,40,opt,name=web_security_scanner_settings,json=webSecurityScannerSettings,proto3,oneof"`
}

type ContainerThreatDetectionSettings

type ContainerThreatDetectionSettings struct {

	// contains filtered or unexported fields

}

User specified settings for KTD

func (*ContainerThreatDetectionSettings) Descriptor

func (*ContainerThreatDetectionSettings) Descriptor() ([]byte, []int)

Deprecated: Use ContainerThreatDetectionSettings.ProtoReflect.Descriptor instead.

func (*ContainerThreatDetectionSettings) ProtoMessage

func (*ContainerThreatDetectionSettings) ProtoMessage()

func (*ContainerThreatDetectionSettings) ProtoReflect

func (*ContainerThreatDetectionSettings) Reset

func (*ContainerThreatDetectionSettings) String

type Detector

type Detector struct {

	// Output only. Detector Identifier
	Detector string `protobuf:"bytes,1,opt,name=detector,proto3" json:"detector,omitempty"`
	// Output only. Component that supports detector type.  Multiple components may support the
	// same detector.
	Component string `protobuf:"bytes,2,opt,name=component,proto3" json:"component,omitempty"`
	// Output only. The billing tier may be different for a detector of the same name in
	// another component.
	BillingTier BillingTier "" /* 157 byte string literal not displayed */
	// Output only. Google curated detector labels. These are alphanumeric tags that are not
	// necessarily human readable. Labels can be used to group detectors together
	// in the future. An example might be tagging all detectors “PCI” that help
	// with PCI compliance.
	DetectorLabels []string `protobuf:"bytes,4,rep,name=detector_labels,json=detectorLabels,proto3" json:"detector_labels,omitempty"` // contains filtered or unexported fields

}

Detector is a set of detectors or scanners act as individual checks done within a component e.g. bad IP, bad domains, IAM anomaly, cryptomining, open firewall, etc. Detector is independent of Organization, meaning each detector must be defined for a given Security Center component under a specified billing tier. Organizations can configure the list of detectors based on their subscribed billing tier.

Defines a detector, its billing tier and any applicable labels.

func (*Detector) Descriptor

func (*Detector) Descriptor() ([]byte, []int)

Deprecated: Use Detector.ProtoReflect.Descriptor instead.

func (*Detector) GetBillingTier

func (x *Detector) GetBillingTier() BillingTier

func (*Detector) GetComponent

func (x *Detector) GetComponent() string

func (*Detector) GetDetector

func (x *Detector) GetDetector() string

func (*Detector) GetDetectorLabels

func (x *Detector) GetDetectorLabels() []string

func (*Detector) ProtoMessage

func (*Detector) ProtoMessage()

func (*Detector) ProtoReflect

func (x *Detector) ProtoReflect() protoreflect.Message

func (*Detector) Reset

func (x *Detector) Reset()

func (*Detector) String

func (x *Detector) String() string

type EventThreatDetectionSettings

type EventThreatDetectionSettings struct {

	// contains filtered or unexported fields

}

User specified settings for ETD

func (*EventThreatDetectionSettings) Descriptor

func (*EventThreatDetectionSettings) Descriptor() ([]byte, []int)

Deprecated: Use EventThreatDetectionSettings.ProtoReflect.Descriptor instead.

func (*EventThreatDetectionSettings) ProtoMessage

func (*EventThreatDetectionSettings) ProtoMessage()

func (*EventThreatDetectionSettings) ProtoReflect

func (*EventThreatDetectionSettings) Reset

func (x *EventThreatDetectionSettings) Reset()

func (*EventThreatDetectionSettings) String

type GetComponentSettingsRequest

type GetComponentSettingsRequest struct {

	// Required. The component settings to retrieve.
	//
	// Formats:
	//  * `organizations/{organization}/components/{component}/settings`
	//  * `folders/{folder}/components/{component}/settings`
	//  * `projects/{project}/components/{component}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/components/{component}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // contains filtered or unexported fields

}

Request message for GetComponentSettings.

func (*GetComponentSettingsRequest) Descriptor

func (*GetComponentSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetComponentSettingsRequest.ProtoReflect.Descriptor instead.

func (*GetComponentSettingsRequest) GetName

func (x *GetComponentSettingsRequest) GetName() string

func (*GetComponentSettingsRequest) ProtoMessage

func (*GetComponentSettingsRequest) ProtoMessage()

func (*GetComponentSettingsRequest) ProtoReflect

func (*GetComponentSettingsRequest) Reset

func (x *GetComponentSettingsRequest) Reset()

func (*GetComponentSettingsRequest) String

func (x *GetComponentSettingsRequest) String() string

type GetServiceAccountRequest

type GetServiceAccountRequest struct {

	// Required. The relative resource name of the service account resource.
	// Format:
	//  * `organizations/{organization}/serviceAccount`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // contains filtered or unexported fields

}

Request message for GetServiceAccount.

func (*GetServiceAccountRequest) Descriptor

func (*GetServiceAccountRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetServiceAccountRequest.ProtoReflect.Descriptor instead.

func (*GetServiceAccountRequest) GetName

func (x *GetServiceAccountRequest) GetName() string

func (*GetServiceAccountRequest) ProtoMessage

func (*GetServiceAccountRequest) ProtoMessage()

func (*GetServiceAccountRequest) ProtoReflect

func (x *GetServiceAccountRequest) ProtoReflect() protoreflect.Message

func (*GetServiceAccountRequest) Reset

func (x *GetServiceAccountRequest) Reset()

func (*GetServiceAccountRequest) String

func (x *GetServiceAccountRequest) String() string

type GetSettingsRequest

type GetSettingsRequest struct {

	// Required. The name of the settings to retrieve.
	// Formats:
	//  * `organizations/{organization}/settings`
	//  * `folders/{folder}/settings`
	//  * `projects/{project}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // contains filtered or unexported fields

}

Request message for GetSettings.

func (*GetSettingsRequest) Descriptor

func (*GetSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetSettingsRequest.ProtoReflect.Descriptor instead.

func (*GetSettingsRequest) GetName

func (x *GetSettingsRequest) GetName() string

func (*GetSettingsRequest) ProtoMessage

func (*GetSettingsRequest) ProtoMessage()

func (*GetSettingsRequest) ProtoReflect

func (x *GetSettingsRequest) ProtoReflect() protoreflect.Message

func (*GetSettingsRequest) Reset

func (x *GetSettingsRequest) Reset()

func (*GetSettingsRequest) String

func (x *GetSettingsRequest) String() string

type ListComponentsRequest

type ListComponentsRequest struct {

	// Required. The parent, which owns this collection of components.
	// Format:
	//  * `organizations/{organization}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The maximum number of components to return. The service may return fewer
	// than this value. If unspecified, at most 100 components will be returned.
	// The maximum value is 1000; values above 1000 will be coerced to 1000.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A page token, received from a previous `ListComponents` call.
	// Provide this to retrieve the subsequent page.
	//
	// When paginating, all other parameters provided to `ListComponents` must
	// match the call that provided the page token.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"` // contains filtered or unexported fields

}

Request message for ListComponents.

func (*ListComponentsRequest) Descriptor

func (*ListComponentsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListComponentsRequest.ProtoReflect.Descriptor instead.

func (*ListComponentsRequest) GetPageSize

func (x *ListComponentsRequest) GetPageSize() int32

func (*ListComponentsRequest) GetPageToken

func (x *ListComponentsRequest) GetPageToken() string

func (*ListComponentsRequest) GetParent

func (x *ListComponentsRequest) GetParent() string

func (*ListComponentsRequest) ProtoMessage

func (*ListComponentsRequest) ProtoMessage()

func (*ListComponentsRequest) ProtoReflect

func (x *ListComponentsRequest) ProtoReflect() protoreflect.Message

func (*ListComponentsRequest) Reset

func (x *ListComponentsRequest) Reset()

func (*ListComponentsRequest) String

func (x *ListComponentsRequest) String() string

type ListComponentsResponse

type ListComponentsResponse struct {

	// The components from the specified organization.
	Components []string `protobuf:"bytes,1,rep,name=components,proto3" json:"components,omitempty"`
	// A token that can be sent as `page_token` to retrieve the next page.
	// If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"` // contains filtered or unexported fields

}

Response message for ListComponents.

func (*ListComponentsResponse) Descriptor

func (*ListComponentsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListComponentsResponse.ProtoReflect.Descriptor instead.

func (*ListComponentsResponse) GetComponents

func (x *ListComponentsResponse) GetComponents() []string

func (*ListComponentsResponse) GetNextPageToken

func (x *ListComponentsResponse) GetNextPageToken() string

func (*ListComponentsResponse) ProtoMessage

func (*ListComponentsResponse) ProtoMessage()

func (*ListComponentsResponse) ProtoReflect

func (x *ListComponentsResponse) ProtoReflect() protoreflect.Message

func (*ListComponentsResponse) Reset

func (x *ListComponentsResponse) Reset()

func (*ListComponentsResponse) String

func (x *ListComponentsResponse) String() string

type ListDetectorsRequest

type ListDetectorsRequest struct {

	// Required. The parent, which owns this collection of detectors.
	// Format:
	//  * `organizations/{organization}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Filters to apply on the response. Filters can be applied on:
	//  * components
	//  * labels
	//  * billing tiers
	//
	// Component filters will retrieve only detectors for the components
	// specified. Label filters will retrieve only detectors that match one of the
	// labels specified. Billing tier filters will retrieve only detectors for
	// that billing tier.
	//
	// The filters
	Filter string `protobuf:"bytes,2,opt,name=filter,proto3" json:"filter,omitempty"`
	// The maximum number of detectors to return. The service may return fewer
	// than this value. If unspecified, at most 100 detectors will be returned.
	// The maximum value is 1000; values above 1000 will be coerced to 1000.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A page token, received from a previous `ListDetectors` call.
	// Provide this to retrieve the subsequent page.
	//
	// When paginating, all other parameters provided to `ListDetectors` must
	// match the call that provided the page token.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"` // contains filtered or unexported fields

}

Request message for ListDetectors.

func (*ListDetectorsRequest) Descriptor

func (*ListDetectorsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListDetectorsRequest.ProtoReflect.Descriptor instead.

func (*ListDetectorsRequest) GetFilter

func (x *ListDetectorsRequest) GetFilter() string

func (*ListDetectorsRequest) GetPageSize

func (x *ListDetectorsRequest) GetPageSize() int32

func (*ListDetectorsRequest) GetPageToken

func (x *ListDetectorsRequest) GetPageToken() string

func (*ListDetectorsRequest) GetParent

func (x *ListDetectorsRequest) GetParent() string

func (*ListDetectorsRequest) ProtoMessage

func (*ListDetectorsRequest) ProtoMessage()

func (*ListDetectorsRequest) ProtoReflect

func (x *ListDetectorsRequest) ProtoReflect() protoreflect.Message

func (*ListDetectorsRequest) Reset

func (x *ListDetectorsRequest) Reset()

func (*ListDetectorsRequest) String

func (x *ListDetectorsRequest) String() string

type ListDetectorsResponse

type ListDetectorsResponse struct {

	// The detectors from the specified organization.
	Detectors []*Detector `protobuf:"bytes,1,rep,name=detectors,proto3" json:"detectors,omitempty"`
	// A token that can be sent as `page_token` to retrieve the next page.
	// If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"` // contains filtered or unexported fields

}

Response message for ListDetectors.

func (*ListDetectorsResponse) Descriptor

func (*ListDetectorsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListDetectorsResponse.ProtoReflect.Descriptor instead.

func (*ListDetectorsResponse) GetDetectors

func (x *ListDetectorsResponse) GetDetectors() []*Detector

func (*ListDetectorsResponse) GetNextPageToken

func (x *ListDetectorsResponse) GetNextPageToken() string

func (*ListDetectorsResponse) ProtoMessage

func (*ListDetectorsResponse) ProtoMessage()

func (*ListDetectorsResponse) ProtoReflect

func (x *ListDetectorsResponse) ProtoReflect() protoreflect.Message

func (*ListDetectorsResponse) Reset

func (x *ListDetectorsResponse) Reset()

func (*ListDetectorsResponse) String

func (x *ListDetectorsResponse) String() string

type ResetComponentSettingsRequest

type ResetComponentSettingsRequest struct {

	// Required. The component settings to reset.
	//
	// Formats:
	//  * `organizations/{organization}/components/{component}/settings`
	//  * `folders/{folder}/components/{component}/settings`
	//  * `projects/{project}/components/{component}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/components/{component}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// An fingerprint used for optimistic concurrency. If none is provided,
	// then the existing settings will be blindly overwritten.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"` // contains filtered or unexported fields

}

Request message for ResetComponentSettings.

func (*ResetComponentSettingsRequest) Descriptor

func (*ResetComponentSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ResetComponentSettingsRequest.ProtoReflect.Descriptor instead.

func (*ResetComponentSettingsRequest) GetEtag

func (*ResetComponentSettingsRequest) GetName

func (*ResetComponentSettingsRequest) ProtoMessage

func (*ResetComponentSettingsRequest) ProtoMessage()

func (*ResetComponentSettingsRequest) ProtoReflect

func (*ResetComponentSettingsRequest) Reset

func (x *ResetComponentSettingsRequest) Reset()

func (*ResetComponentSettingsRequest) String

type ResetSettingsRequest

type ResetSettingsRequest struct {

	// Required. The name of the settings to reset.
	// Formats:
	//  * `organizations/{organization}/settings`
	//  * `folders/{folder}/settings`
	//  * `projects/{project}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// A fingerprint used for optimistic concurrency. If none is provided,
	// then the existing settings will be blindly overwritten.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"` // contains filtered or unexported fields

}

Request message for ResetSettings.

func (*ResetSettingsRequest) Descriptor

func (*ResetSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ResetSettingsRequest.ProtoReflect.Descriptor instead.

func (*ResetSettingsRequest) GetEtag

func (x *ResetSettingsRequest) GetEtag() string

func (*ResetSettingsRequest) GetName

func (x *ResetSettingsRequest) GetName() string

func (*ResetSettingsRequest) ProtoMessage

func (*ResetSettingsRequest) ProtoMessage()

func (*ResetSettingsRequest) ProtoReflect

func (x *ResetSettingsRequest) ProtoReflect() protoreflect.Message

func (*ResetSettingsRequest) Reset

func (x *ResetSettingsRequest) Reset()

func (*ResetSettingsRequest) String

func (x *ResetSettingsRequest) String() string

type SecurityCenterSettingsServiceClient

type SecurityCenterSettingsServiceClient interface {
	// Retrieves the organizations service account, if it exists, otherwise it
	// creates the organization service account. This API is idempotent and
	// will only create a service account once. On subsequent calls it will
	// return the previously created service account.  SHA, SCC and CTD Infra
	// Automation will use this SA.  This SA will not have any permissions when
	// created.  The UI will provision this via IAM or the user will using
	// their own internal process. This API only creates SAs on the organization.
	// Folders are not supported and projects will use per-project SAs associated
	// with APIs enabled on a project. This API will be called by the UX
	// onboarding workflow.
	GetServiceAccount(ctx context.Context, in *GetServiceAccountRequest, opts ...grpc.CallOption) (*ServiceAccount, error)
	// Gets the Settings.
	GetSettings(ctx context.Context, in *GetSettingsRequest, opts ...grpc.CallOption) (*Settings, error)
	// Updates the Settings.
	UpdateSettings(ctx context.Context, in *UpdateSettingsRequest, opts ...grpc.CallOption) (*Settings, error)
	// Reset the organization, folder or project's settings and return
	// the settings of just that resource to the default.
	//
	// Settings are present at the organization, folder, project, and cluster
	// levels. Using Reset on a sub-organization level will remove that resource's
	// override and result in the parent's settings being used (eg: if Reset on a
	// cluster, project settings will be used).
	//
	// Using Reset on organization will remove the override that was set and
	// result in default settings being used.
	ResetSettings(ctx context.Context, in *ResetSettingsRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Gets a list of settings.
	BatchGetSettings(ctx context.Context, in *BatchGetSettingsRequest, opts ...grpc.CallOption) (*BatchGetSettingsResponse, error)
	// CalculateEffectiveSettings looks up all of the Security Center
	// Settings resources in the GCP resource hierarchy, and calculates the
	// effective settings on that resource by applying the following rules:
	//  * Settings provided closer to the target resource take precedence over
	//    those further away (e.g. folder will override organization level
	//    settings).
	//  * Product defaults can be overridden at org, folder, project, and cluster
	//  levels.
	//  * Detectors will be filtered out if they belong to a billing tier the
	//  customer
	//    has not configured.
	CalculateEffectiveSettings(ctx context.Context, in *CalculateEffectiveSettingsRequest, opts ...grpc.CallOption) (*Settings, error)
	// Gets a list of effective settings.
	BatchCalculateEffectiveSettings(ctx context.Context, in *BatchCalculateEffectiveSettingsRequest, opts ...grpc.CallOption) (*BatchCalculateEffectiveSettingsResponse, error)
	// Gets the Component Settings.
	GetComponentSettings(ctx context.Context, in *GetComponentSettingsRequest, opts ...grpc.CallOption) (*ComponentSettings, error)
	// Updates the Component Settings.
	UpdateComponentSettings(ctx context.Context, in *UpdateComponentSettingsRequest, opts ...grpc.CallOption) (*ComponentSettings, error)
	// Reset the organization, folder or project's component settings and return
	// the settings to the default. Settings are present at the
	// organization, folder and project levels. Using Reset for a folder or
	// project will remove the override that was set and result in the
	// organization-level settings being used.
	ResetComponentSettings(ctx context.Context, in *ResetComponentSettingsRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// Gets the Effective Component Settings.
	CalculateEffectiveComponentSettings(ctx context.Context, in *CalculateEffectiveComponentSettingsRequest, opts ...grpc.CallOption) (*ComponentSettings, error)
	// Retrieves an unordered list of available detectors.
	ListDetectors(ctx context.Context, in *ListDetectorsRequest, opts ...grpc.CallOption) (*ListDetectorsResponse, error)
	// Retrieves an unordered list of available SCC components.
	ListComponents(ctx context.Context, in *ListComponentsRequest, opts ...grpc.CallOption) (*ListComponentsResponse, error)
}

SecurityCenterSettingsServiceClient is the client API for SecurityCenterSettingsService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

type SecurityCenterSettingsServiceServer

type SecurityCenterSettingsServiceServer interface {
	// Retrieves the organizations service account, if it exists, otherwise it
	// creates the organization service account. This API is idempotent and
	// will only create a service account once. On subsequent calls it will
	// return the previously created service account.  SHA, SCC and CTD Infra
	// Automation will use this SA.  This SA will not have any permissions when
	// created.  The UI will provision this via IAM or the user will using
	// their own internal process. This API only creates SAs on the organization.
	// Folders are not supported and projects will use per-project SAs associated
	// with APIs enabled on a project. This API will be called by the UX
	// onboarding workflow.
	GetServiceAccount(context.Context, *GetServiceAccountRequest) (*ServiceAccount, error)
	// Gets the Settings.
	GetSettings(context.Context, *GetSettingsRequest) (*Settings, error)
	// Updates the Settings.
	UpdateSettings(context.Context, *UpdateSettingsRequest) (*Settings, error)
	// Reset the organization, folder or project's settings and return
	// the settings of just that resource to the default.
	//
	// Settings are present at the organization, folder, project, and cluster
	// levels. Using Reset on a sub-organization level will remove that resource's
	// override and result in the parent's settings being used (eg: if Reset on a
	// cluster, project settings will be used).
	//
	// Using Reset on organization will remove the override that was set and
	// result in default settings being used.
	ResetSettings(context.Context, *ResetSettingsRequest) (*emptypb.Empty, error)
	// Gets a list of settings.
	BatchGetSettings(context.Context, *BatchGetSettingsRequest) (*BatchGetSettingsResponse, error)
	// CalculateEffectiveSettings looks up all of the Security Center
	// Settings resources in the GCP resource hierarchy, and calculates the
	// effective settings on that resource by applying the following rules:
	//  * Settings provided closer to the target resource take precedence over
	//    those further away (e.g. folder will override organization level
	//    settings).
	//  * Product defaults can be overridden at org, folder, project, and cluster
	//  levels.
	//  * Detectors will be filtered out if they belong to a billing tier the
	//  customer
	//    has not configured.
	CalculateEffectiveSettings(context.Context, *CalculateEffectiveSettingsRequest) (*Settings, error)
	// Gets a list of effective settings.
	BatchCalculateEffectiveSettings(context.Context, *BatchCalculateEffectiveSettingsRequest) (*BatchCalculateEffectiveSettingsResponse, error)
	// Gets the Component Settings.
	GetComponentSettings(context.Context, *GetComponentSettingsRequest) (*ComponentSettings, error)
	// Updates the Component Settings.
	UpdateComponentSettings(context.Context, *UpdateComponentSettingsRequest) (*ComponentSettings, error)
	// Reset the organization, folder or project's component settings and return
	// the settings to the default. Settings are present at the
	// organization, folder and project levels. Using Reset for a folder or
	// project will remove the override that was set and result in the
	// organization-level settings being used.
	ResetComponentSettings(context.Context, *ResetComponentSettingsRequest) (*emptypb.Empty, error)
	// Gets the Effective Component Settings.
	CalculateEffectiveComponentSettings(context.Context, *CalculateEffectiveComponentSettingsRequest) (*ComponentSettings, error)
	// Retrieves an unordered list of available detectors.
	ListDetectors(context.Context, *ListDetectorsRequest) (*ListDetectorsResponse, error)
	// Retrieves an unordered list of available SCC components.
	ListComponents(context.Context, *ListComponentsRequest) (*ListComponentsResponse, error)
}

SecurityCenterSettingsServiceServer is the server API for SecurityCenterSettingsService service.

type SecurityHealthAnalyticsSettings

type SecurityHealthAnalyticsSettings struct {

	// Settings for "NON_ORG_IAM_MEMBER" scanner.
	NonOrgIamMemberSettings *SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings "" /* 136 byte string literal not displayed */
	// Settings for "ADMIN_SERVICE_ACCOUNT" scanner.
	AdminServiceAccountSettings *SecurityHealthAnalyticsSettings_AdminServiceAccountSettings "" /* 146 byte string literal not displayed */ // contains filtered or unexported fields

}

User specified settings for Security Health Analytics

func (*SecurityHealthAnalyticsSettings) Descriptor

func (*SecurityHealthAnalyticsSettings) Descriptor() ([]byte, []int)

Deprecated: Use SecurityHealthAnalyticsSettings.ProtoReflect.Descriptor instead.

func (*SecurityHealthAnalyticsSettings) GetAdminServiceAccountSettings

func (*SecurityHealthAnalyticsSettings) GetNonOrgIamMemberSettings

func (*SecurityHealthAnalyticsSettings) ProtoMessage

func (*SecurityHealthAnalyticsSettings) ProtoMessage()

func (*SecurityHealthAnalyticsSettings) ProtoReflect

func (*SecurityHealthAnalyticsSettings) Reset

func (*SecurityHealthAnalyticsSettings) String

type SecurityHealthAnalyticsSettings_AdminServiceAccountSettings

type SecurityHealthAnalyticsSettings_AdminServiceAccountSettings struct {

	// User-created service accounts ending in the provided identities are
	// allowed to have Admin, Owner or Editor roles granted to them. Otherwise
	// a finding will be created.
	// A valid identity can be:
	//   *  a partilly specified service account that starts with "@", e.g.
	//   "@myproject.iam.gserviceaccount.com". This approves all the service
	//   accounts suffixed with the specified identity.
	//   *  a fully specified service account that does not start with "@", e.g.
	//   "myadmin@myproject.iam.gserviceaccount.com".
	// Google-created service accounts are all approved.
	ApprovedIdentities []string `protobuf:"bytes,1,rep,name=approved_identities,json=approvedIdentities,proto3" json:"approved_identities,omitempty"` // contains filtered or unexported fields

}

Settings for "ADMIN_SERVICE_ACCOUNT" scanner.

func (*SecurityHealthAnalyticsSettings_AdminServiceAccountSettings) Descriptor

Deprecated: Use SecurityHealthAnalyticsSettings_AdminServiceAccountSettings.ProtoReflect.Descriptor instead.

func (*SecurityHealthAnalyticsSettings_AdminServiceAccountSettings) GetApprovedIdentities

func (*SecurityHealthAnalyticsSettings_AdminServiceAccountSettings) ProtoMessage

func (*SecurityHealthAnalyticsSettings_AdminServiceAccountSettings) ProtoReflect

func (*SecurityHealthAnalyticsSettings_AdminServiceAccountSettings) Reset

func (*SecurityHealthAnalyticsSettings_AdminServiceAccountSettings) String

type SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings

type SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings struct {

	// User emails ending in the provided identities are allowed to have IAM
	// permissions on a project or the organization. Otherwise a finding will
	// be created.
	// A valid identity can be:
	//   *  a domain that starts with "@", e.g. "@yourdomain.com".
	//   *  a fully specified email address that does not start with "@", e.g.
	//   "abc@gmail.com"
	// Regular expressions are not supported.
	// Service accounts are not examined by the scanner and will be omitted if
	// added to the list.
	// If not specified, only Gmail accounts will be considered as non-approved.
	ApprovedIdentities []string `protobuf:"bytes,1,rep,name=approved_identities,json=approvedIdentities,proto3" json:"approved_identities,omitempty"` // contains filtered or unexported fields

}

Settings for "NON_ORG_IAM_MEMBER" scanner.

func (*SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings) Descriptor

Deprecated: Use SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings.ProtoReflect.Descriptor instead.

func (*SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings) GetApprovedIdentities

func (*SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings) ProtoMessage

func (*SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings) ProtoReflect

func (*SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings) Reset

func (*SecurityHealthAnalyticsSettings_NonOrgIamMemberSettings) String

type ServiceAccount

type ServiceAccount struct {

	// The relative resource name of the service account resource.
	// Format:
	//  * `organizations/{organization}/serviceAccount`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Security Center managed service account for the organization
	// example service-org-1234@scc.iam.gserviceaccount.com
	// This service_account will be stored in the ComponentSettings field for the
	// SCC, SHA, and Infra Automation components.
	ServiceAccount string `protobuf:"bytes,2,opt,name=service_account,json=serviceAccount,proto3" json:"service_account,omitempty"` // contains filtered or unexported fields

}

An organization-level service account to be used by threat detection components.

func (*ServiceAccount) Descriptor

func (*ServiceAccount) Descriptor() ([]byte, []int)

Deprecated: Use ServiceAccount.ProtoReflect.Descriptor instead.

func (*ServiceAccount) GetName

func (x *ServiceAccount) GetName() string

func (*ServiceAccount) GetServiceAccount

func (x *ServiceAccount) GetServiceAccount() string

func (*ServiceAccount) ProtoMessage

func (*ServiceAccount) ProtoMessage()

func (*ServiceAccount) ProtoReflect

func (x *ServiceAccount) ProtoReflect() protoreflect.Message

func (*ServiceAccount) Reset

func (x *ServiceAccount) Reset()

func (*ServiceAccount) String

func (x *ServiceAccount) String() string

type Settings

type Settings struct {

	// The relative resource name of the settings resource.
	// Formats:
	//  * `organizations/{organization}/settings`
	//  * `folders/{folder}/settings`
	//  * `projects/{project}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/settings`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Billing settings
	BillingSettings *BillingSettings `protobuf:"bytes,2,opt,name=billing_settings,json=billingSettings,proto3" json:"billing_settings,omitempty"`
	// An enum representing the current on boarding state of SCC.
	State Settings_OnboardingState "" /* 139 byte string literal not displayed */
	// Output only. The organization-level service account to be used for security center
	// components. The component must have permission to "act as" the service
	// account.
	OrgServiceAccount string `protobuf:"bytes,5,opt,name=org_service_account,json=orgServiceAccount,proto3" json:"org_service_account,omitempty"`
	// Sink settings.
	SinkSettings *SinkSettings `protobuf:"bytes,6,opt,name=sink_settings,json=sinkSettings,proto3" json:"sink_settings,omitempty"`
	// The settings for detectors and/or scanners.
	ComponentSettings map[string]*ComponentSettings "" /* 200 byte string literal not displayed */
	// Detector group settings for all Security Center components.
	// The key is the name of the detector group and the value is the settings for
	// that group.
	DetectorGroupSettings map[string]*Settings_DetectorGroupSettings "" /* 214 byte string literal not displayed */
	// A fingerprint used for optimistic concurrency. If none is provided
	// on updates then the existing metadata will be blindly overwritten.
	Etag string `protobuf:"bytes,9,opt,name=etag,proto3" json:"etag,omitempty"`
	// Output only. The time these settings were last updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,10,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"` // contains filtered or unexported fields

}

Common configuration settings for all of Security Center.

func (*Settings) Descriptor

func (*Settings) Descriptor() ([]byte, []int)

Deprecated: Use Settings.ProtoReflect.Descriptor instead.

func (*Settings) GetBillingSettings

func (x *Settings) GetBillingSettings() *BillingSettings

func (*Settings) GetComponentSettings

func (x *Settings) GetComponentSettings() map[string]*ComponentSettings

func (*Settings) GetDetectorGroupSettings

func (x *Settings) GetDetectorGroupSettings() map[string]*Settings_DetectorGroupSettings

func (*Settings) GetEtag

func (x *Settings) GetEtag() string

func (*Settings) GetName

func (x *Settings) GetName() string

func (*Settings) GetOrgServiceAccount

func (x *Settings) GetOrgServiceAccount() string

func (*Settings) GetSinkSettings

func (x *Settings) GetSinkSettings() *SinkSettings

func (*Settings) GetState

func (x *Settings) GetState() Settings_OnboardingState

func (*Settings) GetUpdateTime

func (x *Settings) GetUpdateTime() *timestamppb.Timestamp

func (*Settings) ProtoMessage

func (*Settings) ProtoMessage()

func (*Settings) ProtoReflect

func (x *Settings) ProtoReflect() protoreflect.Message

func (*Settings) Reset

func (x *Settings) Reset()

func (*Settings) String

func (x *Settings) String() string

type Settings_DetectorGroupSettings

type Settings_DetectorGroupSettings struct {

	// The state determines if the group is enabled or not.
	State ComponentEnablementState "" /* 139 byte string literal not displayed */ // contains filtered or unexported fields

}

The DetectorGroupSettings define the configuration for a detector group.

func (*Settings_DetectorGroupSettings) Descriptor

func (*Settings_DetectorGroupSettings) Descriptor() ([]byte, []int)

Deprecated: Use Settings_DetectorGroupSettings.ProtoReflect.Descriptor instead.

func (*Settings_DetectorGroupSettings) GetState

func (*Settings_DetectorGroupSettings) ProtoMessage

func (*Settings_DetectorGroupSettings) ProtoMessage()

func (*Settings_DetectorGroupSettings) ProtoReflect

func (*Settings_DetectorGroupSettings) Reset

func (x *Settings_DetectorGroupSettings) Reset()

func (*Settings_DetectorGroupSettings) String

type Settings_OnboardingState

type Settings_OnboardingState int32

Defines the onboarding states for SCC

Potentially is just an indicator that a user has reviewed some subset of our configuration surface, even if it's still currently set to its API-default state.

const (
	// No onboarding state has been set. Should not be seen in practice, but
	// should be functionally equivalent to DISABLED.
	Settings_ONBOARDING_STATE_UNSPECIFIED Settings_OnboardingState = 0
	// SCC is fully on boarded
	Settings_ENABLED Settings_OnboardingState = 1
	// SCC has been disabled after being on boarded
	Settings_DISABLED Settings_OnboardingState = 2
	// SCC's onboarding tier has been explicitly set
	Settings_BILLING_SELECTED Settings_OnboardingState = 3
	// SCC's CTD FindingsProviders have been chosen
	Settings_PROVIDERS_SELECTED Settings_OnboardingState = 4
	// SCC's Service-Resource mappings have been set
	Settings_RESOURCES_SELECTED Settings_OnboardingState = 5
	// SCC's core Service Account was created
	Settings_ORG_SERVICE_ACCOUNT_CREATED Settings_OnboardingState = 6
)

func (Settings_OnboardingState) Descriptor

func (Settings_OnboardingState) Enum

func (Settings_OnboardingState) EnumDescriptor

func (Settings_OnboardingState) EnumDescriptor() ([]byte, []int)

Deprecated: Use Settings_OnboardingState.Descriptor instead.

func (Settings_OnboardingState) Number

func (Settings_OnboardingState) String

func (x Settings_OnboardingState) String() string

func (Settings_OnboardingState) Type

type SinkSettings

type SinkSettings struct {

	// The resource name of the project to send logs to. This project must be
	// part of the same organization where the Security Center API is
	// enabled. The format is `projects/{project}`. If it is empty, we do
	// not output logs. If a project ID is provided it will be normalized to a
	// project number.
	LoggingSinkProject string `protobuf:"bytes,1,opt,name=logging_sink_project,json=loggingSinkProject,proto3" json:"logging_sink_project,omitempty"` // contains filtered or unexported fields

}

Sink Settings for Security Command Center

func (*SinkSettings) Descriptor

func (*SinkSettings) Descriptor() ([]byte, []int)

Deprecated: Use SinkSettings.ProtoReflect.Descriptor instead.

func (*SinkSettings) GetLoggingSinkProject

func (x *SinkSettings) GetLoggingSinkProject() string

func (*SinkSettings) ProtoMessage

func (*SinkSettings) ProtoMessage()

func (*SinkSettings) ProtoReflect

func (x *SinkSettings) ProtoReflect() protoreflect.Message

func (*SinkSettings) Reset

func (x *SinkSettings) Reset()

func (*SinkSettings) String

func (x *SinkSettings) String() string

type UnimplementedSecurityCenterSettingsServiceServer

type UnimplementedSecurityCenterSettingsServiceServer struct {
}

UnimplementedSecurityCenterSettingsServiceServer can be embedded to have forward compatible implementations.

func (*UnimplementedSecurityCenterSettingsServiceServer) BatchGetSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) CalculateEffectiveComponentSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) CalculateEffectiveSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) GetComponentSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) GetServiceAccount

func (*UnimplementedSecurityCenterSettingsServiceServer) GetSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) ListComponents

func (*UnimplementedSecurityCenterSettingsServiceServer) ListDetectors

func (*UnimplementedSecurityCenterSettingsServiceServer) ResetComponentSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) ResetSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) UpdateComponentSettings

func (*UnimplementedSecurityCenterSettingsServiceServer) UpdateSettings

type UpdateComponentSettingsRequest

type UpdateComponentSettingsRequest struct {

	// Required. The component settings to update.
	//
	// The component settings' `name` field is used to identify the component
	// settings to be updated. Formats:
	//  * `organizations/{organization}/components/{component}/settings`
	//  * `folders/{folder}/components/{component}/settings`
	//  * `projects/{project}/components/{component}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/components/{component}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/components/{component}/settings`
	ComponentSettings *ComponentSettings `protobuf:"bytes,1,opt,name=component_settings,json=componentSettings,proto3" json:"component_settings,omitempty"`
	// The list of fields to be updated on the component settings resource.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"` // contains filtered or unexported fields

}

Request message for UpdateComponentSettings.

func (*UpdateComponentSettingsRequest) Descriptor

func (*UpdateComponentSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateComponentSettingsRequest.ProtoReflect.Descriptor instead.

func (*UpdateComponentSettingsRequest) GetComponentSettings

func (x *UpdateComponentSettingsRequest) GetComponentSettings() *ComponentSettings

func (*UpdateComponentSettingsRequest) GetUpdateMask

func (*UpdateComponentSettingsRequest) ProtoMessage

func (*UpdateComponentSettingsRequest) ProtoMessage()

func (*UpdateComponentSettingsRequest) ProtoReflect

func (*UpdateComponentSettingsRequest) Reset

func (x *UpdateComponentSettingsRequest) Reset()

func (*UpdateComponentSettingsRequest) String

type UpdateSettingsRequest

type UpdateSettingsRequest struct {

	// Required. The settings to update.
	//
	// The settings' `name` field is used to identify the settings to be updated.
	// Formats:
	//  * `organizations/{organization}/settings`
	//  * `folders/{folder}/settings`
	//  * `projects/{project}/settings`
	//  * `projects/{project}/locations/{location}/clusters/{cluster}/settings`
	//  * `projects/{project}/regions/{region}/clusters/{cluster}/settings`
	//  * `projects/{project}/zones/{zone}/clusters/{cluster}/settings`
	Settings *Settings `protobuf:"bytes,1,opt,name=settings,proto3" json:"settings,omitempty"`
	// The list of fields to be updated on the settings.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"` // contains filtered or unexported fields

}

Request message for UpdateSettings.

func (*UpdateSettingsRequest) Descriptor

func (*UpdateSettingsRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdateSettingsRequest.ProtoReflect.Descriptor instead.

func (*UpdateSettingsRequest) GetSettings

func (x *UpdateSettingsRequest) GetSettings() *Settings

func (*UpdateSettingsRequest) GetUpdateMask

func (x *UpdateSettingsRequest) GetUpdateMask() *fieldmaskpb.FieldMask

func (*UpdateSettingsRequest) ProtoMessage

func (*UpdateSettingsRequest) ProtoMessage()

func (*UpdateSettingsRequest) ProtoReflect

func (x *UpdateSettingsRequest) ProtoReflect() protoreflect.Message

func (*UpdateSettingsRequest) Reset

func (x *UpdateSettingsRequest) Reset()

func (*UpdateSettingsRequest) String

func (x *UpdateSettingsRequest) String() string

type WebSecurityScanner

type WebSecurityScanner struct {

	// contains filtered or unexported fields

}

User specified settings for Web Security Scanner

func (*WebSecurityScanner) Descriptor

func (*WebSecurityScanner) Descriptor() ([]byte, []int)

Deprecated: Use WebSecurityScanner.ProtoReflect.Descriptor instead.

func (*WebSecurityScanner) ProtoMessage

func (*WebSecurityScanner) ProtoMessage()

func (*WebSecurityScanner) ProtoReflect

func (x *WebSecurityScanner) ProtoReflect() protoreflect.Message

func (*WebSecurityScanner) Reset

func (x *WebSecurityScanner) Reset()

func (*WebSecurityScanner) String

func (x *WebSecurityScanner) String() string