Resource: FindingSummary
The details for a finding.
| JSON representation |
|---|
{ "findingCategory": string, "findingClass": enum ( |
| Fields | |
|---|---|
findingCategory |
The category of the finding. |
findingClass |
The class of the finding. |
severity |
The severity of the finding. |
findingCount |
The count of the finding. |
updateTime |
Output only. The last updated time of the finding. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
relatedFrameworks[] |
Optional. The list of compliance frameworks that the finding belongs to. |
name |
Identifier. The name of the finding summary. |
FindingClass
A finding is a record of assessment data like security, risk, health, or privacy.
| Enums | |
|---|---|
FINDING_CLASS_UNSPECIFIED |
Default value. This value is unused. |
THREAT |
The activity is unwanted or malicious. |
VULNERABILITY |
A potential weakness in software that increases risk to confidentiality, integrity, and availability. |
MISCONFIGURATION |
A potential weakness in a cloud resource or asset configuration that increases risk. |
OBSERVATION |
A security observation that is for informational purposes. |
SCC_ERROR |
An error that prevents Security Command Center from functioning properly. |
POSTURE_VIOLATION |
A potential security risk that's due to a change in the security posture. |
TOXIC_COMBINATION |
A combination of security issues that represent a more severe security problem when taken together. |
SENSITIVE_DATA_RISK |
A potential security risk to data assets that contain sensitive data. |
CHOKEPOINT |
A resource or resource group where high risk attack paths converge, based on attack path simulations (APS). |
Methods |
|
|---|---|
|
Lists the finding summary by category for a given scope. |