pulumi-gcp-kotlin/com.pulumi.gcp.securitycenter.kotlin/OrganizationSccBigQueryExportArgs

OrganizationSccBigQueryExportArgs

data class OrganizationSccBigQueryExportArgs(val bigQueryExportId: Output<String>? = null, val dataset: Output<String>? = null, val description: Output<String>? = null, val filter: Output<String>? = null, val organization: Output<String>? = null) : ConvertibleToJava<OrganizationSccBigQueryExportArgs>

A Cloud Security Command Center (Cloud SCC) Big Query Export Config. It represents exporting Security Command Center data, including assets, findings, and security marks using gcloud scc bqexports

Note: In order to use Cloud SCC resources, your organization must be enrolled in SCC Standard/Premium. Without doing so, you may run into errors during resource creation. To get more information about OrganizationSccBigQueryExport, see:

API documentation
How-to Guides

Official Documentation

Example Usage

Scc Organization Big Query Export Config Basic

resources:
  default:
    type: gcp:bigquery:Dataset
    properties:
      datasetId: ""
      friendlyName: test
      description: This is a test description
      location: US
      defaultTableExpirationMs: 3.6e+06
      defaultPartitionExpirationMs: null
      labels:
        env: default
  customBigQueryExportConfig:
    type: gcp:securitycenter:OrganizationSccBigQueryExport
    name: custom_big_query_export_config
    properties:
      name: my-export
      bigQueryExportId: my-export
      organization: '123456789'
      dataset: ${default.id}
      description: Cloud Security Command Center Findings Big Query Export Config
      filter: state="ACTIVE" AND NOT mute="MUTED"

Import

OrganizationSccBigQueryExport can be imported using any of these accepted formats:

organizations/{{organization}}/bigQueryExports/{{big_query_export_id}}
{{organization}}/{{big_query_export_id}} When using the pulumi import command, OrganizationSccBigQueryExport can be imported using one of the formats above. For example:

$ pulumi import gcp:securitycenter/organizationSccBigQueryExport:OrganizationSccBigQueryExport default organizations/{{organization}}/bigQueryExports/{{big_query_export_id}}

$ pulumi import gcp:securitycenter/organizationSccBigQueryExport:OrganizationSccBigQueryExport default {{organization}}/{{big_query_export_id}}

Constructors

OrganizationSccBigQueryExportArgs

constructor(bigQueryExportId: Output<String>? = null, dataset: Output<String>? = null, description: Output<String>? = null, filter: Output<String>? = null, organization: Output<String>? = null)

Properties

bigQueryExportId

val bigQueryExportId: Output<String>? = null

This must be unique within the organization.

dataset

val dataset: Output<String>? = null

The dataset to write findings' updates to. Its format is "projects/projectId/datasets/bigquery_dataset_id". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).

description

val description: Output<String>? = null

The description of the notification config (max of 1024 characters).

filter

val filter: Output<String>? = null

Expression that defines the filter to apply across create/update events of findings. The expression is a list of zero or more restrictions combined via logical operators AND and OR. Parentheses are supported, and OR has higher precedence than AND. Restrictions have the form and may have a - character in front of them to indicate negation. The fields map to those defined in the corresponding resource. The supported operators are:

organization

val organization: Output<String>? = null

The organization whose Cloud Security Command Center the Big Query Export Config lives in.

Functions

toJava

open override fun toJava(): OrganizationSccBigQueryExportArgs