Class ResourceValueConfig (1.30.1) 

ResourceValueConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.

Attributes

NameDescription
name str
Name for the resource value config
resource_value google.cloud.securitycenter_v2.types.ResourceValue
Resource value level this expression represents Only required when there is no SDP mapping in the request
tag_values MutableSequence[str]
Required. Tag values combined with AND to check against. Values in the form "tagValues/123" E.g. [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
resource_type str
Apply resource_value only to resources that match resource_type. resource_type will be checked with "AND" of other resources. E.g. "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
scope str
Project or folder to scope this config to. For example, "project/456" would apply this config only to resources in "project/456" scope will be checked with "AND" of other resources.
resource_labels_selector MutableMapping[str, str]
List of resource labels to search for, evaluated with AND. E.g. "resource_labels_selector": {"key": "value", "env": "prod"} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
description str
Description of the resource value config.
create_time google.protobuf.timestamp_pb2.Timestamp
Output only. Timestamp this resource value config was created.
update_time google.protobuf.timestamp_pb2.Timestamp
Output only. Timestamp this resource value config was last updated.
sensitive_data_protection_mapping google.cloud.securitycenter_v2.types.ResourceValueConfig.SensitiveDataProtectionMapping
A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset".

Classes

ResourceLabelsSelectorEntry

ResourceLabelsSelectorEntry(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The abstract base class for a message.

Parameters
NameDescription
kwargs dict

Keys and values corresponding to the fields of the message.

mapping Union[dict, .Message]

A dictionary or message to be used to determine the values for this message.

ignore_unknown_fields Optional(bool)

If True, do not raise errors for unknown fields. Only applied if mapping is a mapping type or there are keyword parameters.

SensitiveDataProtectionMapping

SensitiveDataProtectionMapping(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Resource value mapping for Sensitive Data Protection findings If any of these mappings have a resource value that is not unspecified, the resource_value field will be ignored when reading this configuration.