public sealed class AdminServiceAccountSettings : IMessage<SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings>, IEquatable<SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings>, IDeepCloneable<SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings>, IBufferMessage, IMessage
Settings for "ADMIN_SERVICE_ACCOUNT" scanner.
Implements
IMessage<SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings>, IEquatable<SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings>, IDeepCloneable<SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings>, IBufferMessage, IMessageNamespace
Google.Cloud.SecurityCenter.Settings.V1Beta1Assembly
Google.Cloud.SecurityCenter.Settings.V1Beta1.dll
Constructors
AdminServiceAccountSettings()
public AdminServiceAccountSettings()
AdminServiceAccountSettings(SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings)
public AdminServiceAccountSettings(SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings other)
Parameter | |
---|---|
Name | Description |
other | SecurityHealthAnalyticsSettings.Types.AdminServiceAccountSettings |
Properties
ApprovedIdentities
public RepeatedField<string> ApprovedIdentities { get; }
User-created service accounts ending in the provided identities are allowed to have Admin, Owner or Editor roles granted to them. Otherwise a finding will be created. A valid identity can be:
- a partilly specified service account that starts with "@", e.g. "@myproject.iam.gserviceaccount.com". This approves all the service accounts suffixed with the specified identity.
- a fully specified service account that does not start with "@", e.g. "myadmin@myproject.iam.gserviceaccount.com". Google-created service accounts are all approved.
Property Value | |
---|---|
Type | Description |
RepeatedField<String> |