Method: organizations.locations.cloudControls.create

Creates a custom cloud control in a given parent resource. You can't create built-in cloud controls because those are managed by Google.

HTTP request

POST https://cloudsecuritycompliance.googleapis.com/v1/{parent=organizations/*/locations/*}/cloudControls

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
parent

string

Required. The parent resource name, in the format organizations/{organization}/locations/{location}. The only supported location is global.

Query parameters

Parameters
cloudControlId

string

Required. The identifier for the cloud control, which is the last segment of the cloud control name. The format is ^[a-zA-Z][a-zA-Z0-9-]{0,61}[a-zA-Z0-9]$.

Request body

The request body contains an instance of CloudControl.

Response body

If successful, the response body contains a newly created instance of CloudControl.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the parent resource:

  • cloudsecuritycompliance.cloudControls.create

For more information, see the IAM documentation.