pulumi-google-native-kotlin/com.pulumi.googlenative.securitycenter.v1.kotlin.outputs

Package-level declarations

Types

data class AuditConfigResponse(val auditLogConfigs: List<AuditLogConfigResponse>, val service: String)

Specifies the audit configuration for a service. The configuration determines which permission types are logged, and what identities, if any, are exempted from logging. An AuditConfig must have one or more AuditLogConfigs. If there are AuditConfigs for both allServices and a specific service, the union of the two AuditConfigs is used for that service: the log_types specified in each AuditConfig are enabled, and the exempted_members in each AuditLogConfig are exempted. Example Policy with multiple AuditConfigs: { "audit_configs": [ { "service": "allServices", "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" }, { "log_type": "ADMIN_READ" } ] }, { "service": "sampleservice.googleapis.com", "audit_log_configs": [ { "log_type": "DATA_READ" }, { "log_type": "DATA_WRITE", "exempted_members": "user:aliya@example.com" } ] } ] } For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ logging. It also exempts jose@example.com from DATA_READ logging, and aliya@example.com from DATA_WRITE logging.

AuditLogConfigResponse

data class AuditLogConfigResponse(val exemptedMembers: List<String>, val logType: String)

Provides the configuration for logging a type of permissions. Example: { "audit_log_configs": [ { "log_type": "DATA_READ", "exempted_members": "user:jose@example.com" }, { "log_type": "DATA_WRITE" } ] } This enables 'DATA_READ' and 'DATA_WRITE' logging, while exempting jose@example.com from DATA_READ logging.

BindingResponse

data class BindingResponse(val condition: ExprResponse, val members: List<String>, val role: String)

Associates members, or principals, with a role.

ExprResponse

data class ExprResponse(val description: String, val expression: String, val location: String, val title: String)

Represents a textual expression in the Common Expression Language (CEL) syntax. CEL is a C-like expression language. The syntax and semantics of CEL are documented at https://github.com/google/cel-spec. Example (Comparison): title: "Summary size limit" description: "Determines if a summary is less than 100 chars" expression: "document.summary.size() < 100" Example (Equality): title: "Requestor is owner" description: "Determines if requestor is the document owner" expression: "document.owner == request.auth.claims.email" Example (Logic): title: "Public documents" description: "Determine whether the document should be publicly visible" expression: "document.type != 'private' && document.type != 'internal'" Example (Data Manipulation): title: "Notification string" description: "Create a notification string with a timestamp." expression: "'New message received at ' + string(document.create_time)" The exact variables and functions that may be referenced within an expression are determined by the service that evaluates it. See the service documentation for additional information.

GetCustomModuleResult

data class GetCustomModuleResult(val ancestorModule: String, val customConfig: GoogleCloudSecuritycenterV1CustomConfigResponse, val displayName: String, val enablementState: String, val lastEditor: String, val name: String, val updateTime: String)

GetFolderBigQueryExportResult

data class GetFolderBigQueryExportResult(val createTime: String, val dataset: String, val description: String, val filter: String, val mostRecentEditor: String, val name: String, val principal: String, val updateTime: String)

GetFolderCustomModuleResult

data class GetFolderCustomModuleResult(val ancestorModule: String, val customConfig: GoogleCloudSecuritycenterV1CustomConfigResponse, val displayName: String, val enablementState: String, val lastEditor: String, val name: String, val updateTime: String)

GetFolderNotificationConfigResult

data class GetFolderNotificationConfigResult(val description: String, val name: String, val pubsubTopic: String, val serviceAccount: String, val streamingConfig: StreamingConfigResponse)

GetMuteConfigResult

data class GetMuteConfigResult(val createTime: String, val description: String, val displayName: String, val filter: String, val mostRecentEditor: String, val name: String, val updateTime: String)

GetNotificationConfigResult

data class GetNotificationConfigResult(val description: String, val name: String, val pubsubTopic: String, val serviceAccount: String, val streamingConfig: StreamingConfigResponse)

GetOrganizationBigQueryExportResult

data class GetOrganizationBigQueryExportResult(val createTime: String, val dataset: String, val description: String, val filter: String, val mostRecentEditor: String, val name: String, val principal: String, val updateTime: String)

GetOrganizationCustomModuleResult

data class GetOrganizationCustomModuleResult(val ancestorModule: String, val customConfig: GoogleCloudSecuritycenterV1CustomConfigResponse, val displayName: String, val enablementState: String, val lastEditor: String, val name: String, val updateTime: String)

GetOrganizationMuteConfigResult

data class GetOrganizationMuteConfigResult(val createTime: String, val description: String, val displayName: String, val filter: String, val mostRecentEditor: String, val name: String, val updateTime: String)

GetOrganizationNotificationConfigResult

data class GetOrganizationNotificationConfigResult(val description: String, val name: String, val pubsubTopic: String, val serviceAccount: String, val streamingConfig: StreamingConfigResponse)

GetOrganizationSourceIamPolicyResult

data class GetOrganizationSourceIamPolicyResult(val auditConfigs: List<AuditConfigResponse>, val bindings: List<BindingResponse>, val etag: String, val version: Int)

GetProjectBigQueryExportResult

data class GetProjectBigQueryExportResult(val createTime: String, val dataset: String, val description: String, val filter: String, val mostRecentEditor: String, val name: String, val principal: String, val updateTime: String)

GetSourceResult

data class GetSourceResult(val canonicalName: String, val description: String, val displayName: String, val name: String)

GoogleCloudSecuritycenterV1CustomConfigResponse

data class GoogleCloudSecuritycenterV1CustomConfigResponse(val customOutput: GoogleCloudSecuritycenterV1CustomOutputSpecResponse, val description: String, val predicate: ExprResponse, val recommendation: String, val resourceSelector: GoogleCloudSecuritycenterV1ResourceSelectorResponse, val severity: String)

Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.

GoogleCloudSecuritycenterV1CustomOutputSpecResponse

data class GoogleCloudSecuritycenterV1CustomOutputSpecResponse(val properties: List<GoogleCloudSecuritycenterV1PropertyResponse>)

A set of optional name-value pairs that define custom source properties to return with each finding that is generated by the custom module. The custom source properties that are defined here are included in the finding JSON under sourceProperties.

GoogleCloudSecuritycenterV1PropertyResponse

data class GoogleCloudSecuritycenterV1PropertyResponse(val name: String, val valueExpression: ExprResponse)

An individual name-value pair that defines a custom source property.

GoogleCloudSecuritycenterV1ResourceSelectorResponse

data class GoogleCloudSecuritycenterV1ResourceSelectorResponse(val resourceTypes: List<String>)

Resource for selecting resource type.

StreamingConfigResponse

data class StreamingConfigResponse(val filter: String)

The config for streaming-based notifications, which send each event as soon as it is detected.