Project Notification Config Args
A Cloud Security Command Center (Cloud SCC) notification configs. A notification config is a Cloud SCC resource that contains the configuration to send notifications for create/update events of findings, assets and etc.
Note: In order to use Cloud SCC resources, your organization must be enrolled in SCC Standard/Premium. Without doing so, you may run into errors during resource creation. To get more information about ProjectNotificationConfig, see:
How-to Guides
Example Usage
Scc Project Notification Config Basic
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const sccProjectNotification = new gcp.pubsub.Topic("scc_project_notification", {name: "my-topic"});
const customNotificationConfig = new gcp.securitycenter.ProjectNotificationConfig("custom_notification_config", {
configId: "my-config",
project: "my-project-name",
description: "My custom Cloud Security Command Center Finding Notification Configuration",
pubsubTopic: sccProjectNotification.id,
streamingConfig: {
filter: "category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\"",
},
});
import pulumi
import pulumi_gcp as gcp
scc_project_notification = gcp.pubsub.Topic("scc_project_notification", name="my-topic")
custom_notification_config = gcp.securitycenter.ProjectNotificationConfig("custom_notification_config",
config_id="my-config",
project="my-project-name",
description="My custom Cloud Security Command Center Finding Notification Configuration",
pubsub_topic=scc_project_notification.id,
streaming_config={
"filter": "category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\"",
})
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var sccProjectNotification = new Gcp.PubSub.Topic("scc_project_notification", new()
{
Name = "my-topic",
});
var customNotificationConfig = new Gcp.SecurityCenter.ProjectNotificationConfig("custom_notification_config", new()
{
ConfigId = "my-config",
Project = "my-project-name",
Description = "My custom Cloud Security Command Center Finding Notification Configuration",
PubsubTopic = sccProjectNotification.Id,
StreamingConfig = new Gcp.SecurityCenter.Inputs.ProjectNotificationConfigStreamingConfigArgs
{
Filter = "category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\"",
},
});
});
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/pubsub"
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/securitycenter"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
sccProjectNotification, err := pubsub.NewTopic(ctx, "scc_project_notification", &pubsub.TopicArgs{
Name: pulumi.String("my-topic"),
})
if err != nil {
return err
}
_, err = securitycenter.NewProjectNotificationConfig(ctx, "custom_notification_config", &securitycenter.ProjectNotificationConfigArgs{
ConfigId: pulumi.String("my-config"),
Project: pulumi.String("my-project-name"),
Description: pulumi.String("My custom Cloud Security Command Center Finding Notification Configuration"),
PubsubTopic: sccProjectNotification.ID(),
StreamingConfig: &securitycenter.ProjectNotificationConfigStreamingConfigArgs{
Filter: pulumi.String("category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\""),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.pubsub.Topic;
import com.pulumi.gcp.pubsub.TopicArgs;
import com.pulumi.gcp.securitycenter.ProjectNotificationConfig;
import com.pulumi.gcp.securitycenter.ProjectNotificationConfigArgs;
import com.pulumi.gcp.securitycenter.inputs.ProjectNotificationConfigStreamingConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var sccProjectNotification = new Topic("sccProjectNotification", TopicArgs.builder()
.name("my-topic")
.build());
var customNotificationConfig = new ProjectNotificationConfig("customNotificationConfig", ProjectNotificationConfigArgs.builder()
.configId("my-config")
.project("my-project-name")
.description("My custom Cloud Security Command Center Finding Notification Configuration")
.pubsubTopic(sccProjectNotification.id())
.streamingConfig(ProjectNotificationConfigStreamingConfigArgs.builder()
.filter("category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\"")
.build())
.build());
}
}
resources:
sccProjectNotification:
type: gcp:pubsub:Topic
name: scc_project_notification
properties:
name: my-topic
customNotificationConfig:
type: gcp:securitycenter:ProjectNotificationConfig
name: custom_notification_config
properties:
configId: my-config
project: my-project-name
description: My custom Cloud Security Command Center Finding Notification Configuration
pubsubTopic: ${sccProjectNotification.id}
streamingConfig:
filter: category = "OPEN_FIREWALL" AND state = "ACTIVE"
Import
ProjectNotificationConfig can be imported using any of these accepted formats:
{{name}}
When using thepulumi import
command, ProjectNotificationConfig can be imported using one of the formats above. For example:
$ pulumi import gcp:securitycenter/projectNotificationConfig:ProjectNotificationConfig default {{name}}
Constructors
Properties
The description of the notification config (max of 1024 characters).
The Pub/Sub topic to send notifications to. Its format is "projects/project_id/topics/topic".
The config for triggering streaming-based notifications. Structure is documented below.