Security Command Center v2 API - Class ResourceValueConfig (1.2.0) 

public sealed class ResourceValueConfig : IMessage<ResourceValueConfig>, IEquatable<ResourceValueConfig>, IDeepCloneable<ResourceValueConfig>, IBufferMessage, IMessage

Reference documentation and code samples for the Security Command Center v2 API class ResourceValueConfig.

A resource value configuration (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.

Inheritance

object > ResourceValueConfig

Namespace

Google.Cloud.SecurityCenter.V2

Assembly

Google.Cloud.SecurityCenter.V2.dll

Constructors

ResourceValueConfig()

public ResourceValueConfig()

ResourceValueConfig(ResourceValueConfig)

public ResourceValueConfig(ResourceValueConfig other)
Parameter
Name Description
other ResourceValueConfig

Properties

CloudProvider

public CloudProvider CloudProvider { get; set; }

Cloud provider this configuration applies to

Property Value
Type Description
CloudProvider

CreateTime

public Timestamp CreateTime { get; set; }

Output only. Timestamp this resource value configuration was created.

Property Value
Type Description
Timestamp

Description

public string Description { get; set; }

Description of the resource value configuration.

Property Value
Type Description
string

Name

public string Name { get; set; }

Identifier. Name for the resource value configuration

Property Value
Type Description
string

ResourceLabelsSelector

public MapField<string, string> ResourceLabelsSelector { get; }

List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels

Property Value
Type Description
MapFieldstringstring

ResourceType

public string ResourceType { get; set; }

Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.

Property Value
Type Description
string

ResourceValue

public ResourceValue ResourceValue { get; set; }

Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request

Property Value
Type Description
ResourceValue

ResourceValueConfigName

public ResourceValueConfigName ResourceValueConfigName { get; set; }

ResourceValueConfigName-typed view over the Name resource name property.

Property Value
Type Description
ResourceValueConfigName

Scope

public string Scope { get; set; }

Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with AND of other resources.

Property Value
Type Description
string

SensitiveDataProtectionMapping

public ResourceValueConfig.Types.SensitiveDataProtectionMapping SensitiveDataProtectionMapping { get; set; }

A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset".

Property Value
Type Description
ResourceValueConfigTypesSensitiveDataProtectionMapping

TagValues

public RepeatedField<string> TagValues { get; }

Tag values combined with AND to check against. For Google Cloud resources, they are tag value IDs in the form of "tagValues/123". Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing

Property Value
Type Description
RepeatedFieldstring

UpdateTime

public Timestamp UpdateTime { get; set; }

Output only. Timestamp this resource value configuration was last updated.

Property Value
Type Description
Timestamp