pulumi-gcp-kotlin/com.pulumi.gcp.compute.kotlin/SecurityScanConfigArgs

SecurityScanConfigArgs

data class SecurityScanConfigArgs(val authentication: Output<SecurityScanConfigAuthenticationArgs>? = null, val blacklistPatterns: Output<List<String>>? = null, val displayName: Output<String>? = null, val exportToSecurityCommandCenter: Output<String>? = null, val maxQps: Output<Int>? = null, val project: Output<String>? = null, val schedule: Output<SecurityScanConfigScheduleArgs>? = null, val startingUrls: Output<List<String>>? = null, val targetPlatforms: Output<List<String>>? = null, val userAgent: Output<String>? = null) : ConvertibleToJava<SecurityScanConfigArgs>

A ScanConfig resource contains the configurations to launch a scan. To get more information about ScanConfig, see:

API documentation
How-to Guides

Using Cloud Security Scanner

Warning: All arguments including authentication.google_account.password and authentication.custom_account.password will be stored in the raw state as plain-text.

Example Usage

Scan Config Basic

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.Address;
import com.pulumi.gcp.compute.AddressArgs;
import com.pulumi.gcp.compute.SecurityScanConfig;
import com.pulumi.gcp.compute.SecurityScanConfigArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var scannerStaticIp = new Address("scannerStaticIp", AddressArgs.Empty, CustomResourceOptions.builder()
            .provider(google_beta)
            .build());
        var scan_config = new SecurityScanConfig("scan-config", SecurityScanConfigArgs.builder()
            .displayName("scan-config")
            .startingUrls(scannerStaticIp.address().applyValue(address -> String.format("http://%s", address)))
            .targetPlatforms("COMPUTE")
            .build(), CustomResourceOptions.builder()
                .provider(google_beta)
                .build());
    }
}

Import

ScanConfig can be imported using any of these accepted formats

$ pulumi import gcp:compute/securityScanConfig:SecurityScanConfig default projects/{{project}}/scanConfigs/{{name}}

$ pulumi import gcp:compute/securityScanConfig:SecurityScanConfig default {{project}}/{{name}}

$ pulumi import gcp:compute/securityScanConfig:SecurityScanConfig default {{name}}

Constructors

SecurityScanConfigArgs

constructor(authentication: Output<SecurityScanConfigAuthenticationArgs>? = null, blacklistPatterns: Output<List<String>>? = null, displayName: Output<String>? = null, exportToSecurityCommandCenter: Output<String>? = null, maxQps: Output<Int>? = null, project: Output<String>? = null, schedule: Output<SecurityScanConfigScheduleArgs>? = null, startingUrls: Output<List<String>>? = null, targetPlatforms: Output<List<String>>? = null, userAgent: Output<String>? = null)

Properties

authentication

val authentication: Output<SecurityScanConfigAuthenticationArgs>? = null

The authentication configuration. If specified, service will use the authentication configuration during scanning. Structure is documented below.

blacklistPatterns

val blacklistPatterns: Output<List<String>>? = null

The blacklist URL patterns as described in https://cloud.google.com/security-scanner/docs/excluded-urls

displayName

val displayName: Output<String>? = null

The user provider display name of the ScanConfig.

exportToSecurityCommandCenter

val exportToSecurityCommandCenter: Output<String>? = null

Controls export of scan configurations and results to Cloud Security Command Center. Default value is ENABLED. Possible values are: ENABLED, DISABLED.

maxQps

val maxQps: Output<Int>? = null

The maximum QPS during scanning. A valid value ranges from 5 to 20 inclusively. Defaults to 15.

project

val project: Output<String>? = null

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

schedule

val schedule: Output<SecurityScanConfigScheduleArgs>? = null

The schedule of the ScanConfig Structure is documented below.

startingUrls

val startingUrls: Output<List<String>>? = null

The starting URLs from which the scanner finds site pages.

targetPlatforms

val targetPlatforms: Output<List<String>>? = null

Set of Cloud Platforms targeted by the scan. If empty, APP_ENGINE will be used as a default. Each value may be one of: APP_ENGINE, COMPUTE.

userAgent

val userAgent: Output<String>? = null

Type of the user agents used for scanning Default value is CHROME_LINUX. Possible values are: USER_AGENT_UNSPECIFIED, CHROME_LINUX, CHROME_ANDROID, SAFARI_IPHONE.

Functions

toJava

open override fun toJava(): SecurityScanConfigArgs