Security Posture API v1 - Package cloud.google.com/go/securityposture/apiv1/securityposturepb (v1.3.1)

Constants

SecurityPosture_ListPostures_FullMethodName, SecurityPosture_ListPostureRevisions_FullMethodName, SecurityPosture_GetPosture_FullMethodName, SecurityPosture_CreatePosture_FullMethodName, SecurityPosture_UpdatePosture_FullMethodName, SecurityPosture_DeletePosture_FullMethodName, SecurityPosture_ExtractPosture_FullMethodName, SecurityPosture_ListPostureDeployments_FullMethodName, SecurityPosture_GetPostureDeployment_FullMethodName, SecurityPosture_CreatePostureDeployment_FullMethodName, SecurityPosture_UpdatePostureDeployment_FullMethodName, SecurityPosture_DeletePostureDeployment_FullMethodName, SecurityPosture_ListPostureTemplates_FullMethodName, SecurityPosture_GetPostureTemplate_FullMethodName

const (
	SecurityPosture_ListPostures_FullMethodName            = "/google.cloud.securityposture.v1.SecurityPosture/ListPostures"
	SecurityPosture_ListPostureRevisions_FullMethodName    = "/google.cloud.securityposture.v1.SecurityPosture/ListPostureRevisions"
	SecurityPosture_GetPosture_FullMethodName              = "/google.cloud.securityposture.v1.SecurityPosture/GetPosture"
	SecurityPosture_CreatePosture_FullMethodName           = "/google.cloud.securityposture.v1.SecurityPosture/CreatePosture"
	SecurityPosture_UpdatePosture_FullMethodName           = "/google.cloud.securityposture.v1.SecurityPosture/UpdatePosture"
	SecurityPosture_DeletePosture_FullMethodName           = "/google.cloud.securityposture.v1.SecurityPosture/DeletePosture"
	SecurityPosture_ExtractPosture_FullMethodName          = "/google.cloud.securityposture.v1.SecurityPosture/ExtractPosture"
	SecurityPosture_ListPostureDeployments_FullMethodName  = "/google.cloud.securityposture.v1.SecurityPosture/ListPostureDeployments"
	SecurityPosture_GetPostureDeployment_FullMethodName    = "/google.cloud.securityposture.v1.SecurityPosture/GetPostureDeployment"
	SecurityPosture_CreatePostureDeployment_FullMethodName = "/google.cloud.securityposture.v1.SecurityPosture/CreatePostureDeployment"
	SecurityPosture_UpdatePostureDeployment_FullMethodName = "/google.cloud.securityposture.v1.SecurityPosture/UpdatePostureDeployment"
	SecurityPosture_DeletePostureDeployment_FullMethodName = "/google.cloud.securityposture.v1.SecurityPosture/DeletePostureDeployment"
	SecurityPosture_ListPostureTemplates_FullMethodName    = "/google.cloud.securityposture.v1.SecurityPosture/ListPostureTemplates"
	SecurityPosture_GetPostureTemplate_FullMethodName      = "/google.cloud.securityposture.v1.SecurityPosture/GetPostureTemplate"
)

Variables

CustomConstraint_MethodType_name, CustomConstraint_MethodType_value

var (
	CustomConstraint_MethodType_name = map[int32]string{
		0: "METHOD_TYPE_UNSPECIFIED",
		1: "CREATE",
		2: "UPDATE",
		3: "DELETE",
	}
	CustomConstraint_MethodType_value = map[string]int32{
		"METHOD_TYPE_UNSPECIFIED": 0,
		"CREATE":                  1,
		"UPDATE":                  2,
		"DELETE":                  3,
	}
)

Enum value maps for CustomConstraint_MethodType.

CustomConstraint_ActionType_name, CustomConstraint_ActionType_value

var (
	CustomConstraint_ActionType_name = map[int32]string{
		0: "ACTION_TYPE_UNSPECIFIED",
		1: "ALLOW",
		2: "DENY",
	}
	CustomConstraint_ActionType_value = map[string]int32{
		"ACTION_TYPE_UNSPECIFIED": 0,
		"ALLOW":                   1,
		"DENY":                    2,
	}
)

Enum value maps for CustomConstraint_ActionType.

Posture_State_name, Posture_State_value

var (
	Posture_State_name = map[int32]string{
		0: "STATE_UNSPECIFIED",
		1: "DEPRECATED",
		2: "DRAFT",
		3: "ACTIVE",
	}
	Posture_State_value = map[string]int32{
		"STATE_UNSPECIFIED": 0,
		"DEPRECATED":        1,
		"DRAFT":             2,
		"ACTIVE":            3,
	}
)

Enum value maps for Posture_State.

PostureDeployment_State_name, PostureDeployment_State_value

var (
	PostureDeployment_State_name = map[int32]string{
		0: "STATE_UNSPECIFIED",
		1: "CREATING",
		2: "DELETING",
		3: "UPDATING",
		4: "ACTIVE",
		5: "CREATE_FAILED",
		6: "UPDATE_FAILED",
		7: "DELETE_FAILED",
	}
	PostureDeployment_State_value = map[string]int32{
		"STATE_UNSPECIFIED": 0,
		"CREATING":          1,
		"DELETING":          2,
		"UPDATING":          3,
		"ACTIVE":            4,
		"CREATE_FAILED":     5,
		"UPDATE_FAILED":     6,
		"DELETE_FAILED":     7,
	}
)

Enum value maps for PostureDeployment_State.

PostureTemplate_State_name, PostureTemplate_State_value

var (
	PostureTemplate_State_name = map[int32]string{
		0: "STATE_UNSPECIFIED",
		1: "ACTIVE",
		2: "DEPRECATED",
	}
	PostureTemplate_State_value = map[string]int32{
		"STATE_UNSPECIFIED": 0,
		"ACTIVE":            1,
		"DEPRECATED":        2,
	}
)

Enum value maps for PostureTemplate_State.

EnablementState_name, EnablementState_value

var (
	EnablementState_name = map[int32]string{
		0: "ENABLEMENT_STATE_UNSPECIFIED",
		1: "ENABLED",
		2: "DISABLED",
	}
	EnablementState_value = map[string]int32{
		"ENABLEMENT_STATE_UNSPECIFIED": 0,
		"ENABLED":                      1,
		"DISABLED":                     2,
	}
)

Enum value maps for EnablementState.

CustomConfig_Severity_name, CustomConfig_Severity_value

var (
	CustomConfig_Severity_name = map[int32]string{
		0: "SEVERITY_UNSPECIFIED",
		1: "CRITICAL",
		2: "HIGH",
		3: "MEDIUM",
		4: "LOW",
	}
	CustomConfig_Severity_value = map[string]int32{
		"SEVERITY_UNSPECIFIED": 0,
		"CRITICAL":             1,
		"HIGH":                 2,
		"MEDIUM":               3,
		"LOW":                  4,
	}
)

Enum value maps for CustomConfig_Severity.

File_google_cloud_securityposture_v1_org_policy_config_proto

var File_google_cloud_securityposture_v1_org_policy_config_proto protoreflect.FileDescriptor

File_google_cloud_securityposture_v1_org_policy_constraints_proto

var File_google_cloud_securityposture_v1_org_policy_constraints_proto protoreflect.FileDescriptor

File_google_cloud_securityposture_v1_securityposture_proto

var File_google_cloud_securityposture_v1_securityposture_proto protoreflect.FileDescriptor

File_google_cloud_securityposture_v1_sha_constraints_proto

var File_google_cloud_securityposture_v1_sha_constraints_proto protoreflect.FileDescriptor

File_google_cloud_securityposture_v1_sha_custom_config_proto

var File_google_cloud_securityposture_v1_sha_custom_config_proto protoreflect.FileDescriptor

SecurityPosture_ServiceDesc

var SecurityPosture_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "google.cloud.securityposture.v1.SecurityPosture",
	HandlerType: (*SecurityPostureServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "ListPostures",
			Handler:    _SecurityPosture_ListPostures_Handler,
		},
		{
			MethodName: "ListPostureRevisions",
			Handler:    _SecurityPosture_ListPostureRevisions_Handler,
		},
		{
			MethodName: "GetPosture",
			Handler:    _SecurityPosture_GetPosture_Handler,
		},
		{
			MethodName: "CreatePosture",
			Handler:    _SecurityPosture_CreatePosture_Handler,
		},
		{
			MethodName: "UpdatePosture",
			Handler:    _SecurityPosture_UpdatePosture_Handler,
		},
		{
			MethodName: "DeletePosture",
			Handler:    _SecurityPosture_DeletePosture_Handler,
		},
		{
			MethodName: "ExtractPosture",
			Handler:    _SecurityPosture_ExtractPosture_Handler,
		},
		{
			MethodName: "ListPostureDeployments",
			Handler:    _SecurityPosture_ListPostureDeployments_Handler,
		},
		{
			MethodName: "GetPostureDeployment",
			Handler:    _SecurityPosture_GetPostureDeployment_Handler,
		},
		{
			MethodName: "CreatePostureDeployment",
			Handler:    _SecurityPosture_CreatePostureDeployment_Handler,
		},
		{
			MethodName: "UpdatePostureDeployment",
			Handler:    _SecurityPosture_UpdatePostureDeployment_Handler,
		},
		{
			MethodName: "DeletePostureDeployment",
			Handler:    _SecurityPosture_DeletePostureDeployment_Handler,
		},
		{
			MethodName: "ListPostureTemplates",
			Handler:    _SecurityPosture_ListPostureTemplates_Handler,
		},
		{
			MethodName: "GetPostureTemplate",
			Handler:    _SecurityPosture_GetPostureTemplate_Handler,
		},
	},
	Streams:  []grpc.StreamDesc{},
	Metadata: "google/cloud/securityposture/v1/securityposture.proto",
}

SecurityPosture_ServiceDesc is the grpc.ServiceDesc for SecurityPosture service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterSecurityPostureServer

func RegisterSecurityPostureServer(s grpc.ServiceRegistrar, srv SecurityPostureServer)

Constraint

type Constraint struct {

	// Types that are valid to be assigned to Implementation:
	//
	//	*Constraint_SecurityHealthAnalyticsModule
	//	*Constraint_SecurityHealthAnalyticsCustomModule
	//	*Constraint_OrgPolicyConstraint
	//	*Constraint_OrgPolicyConstraintCustom
	Implementation isConstraint_Implementation `protobuf_oneof:"implementation"`
	// contains filtered or unexported fields
}

Representation of a Constraint.

func (*Constraint) Descriptor

func (*Constraint) Descriptor() ([]byte, []int)

Deprecated: Use Constraint.ProtoReflect.Descriptor instead.

func (*Constraint) GetImplementation

func (x *Constraint) GetImplementation() isConstraint_Implementation

func (*Constraint) GetOrgPolicyConstraint

func (x *Constraint) GetOrgPolicyConstraint() *OrgPolicyConstraint

func (*Constraint) GetOrgPolicyConstraintCustom

func (x *Constraint) GetOrgPolicyConstraintCustom() *OrgPolicyConstraintCustom

func (*Constraint) GetSecurityHealthAnalyticsCustomModule

func (x *Constraint) GetSecurityHealthAnalyticsCustomModule() *SecurityHealthAnalyticsCustomModule

func (*Constraint) GetSecurityHealthAnalyticsModule

func (x *Constraint) GetSecurityHealthAnalyticsModule() *SecurityHealthAnalyticsModule

func (*Constraint) ProtoMessage

func (*Constraint) ProtoMessage()

func (*Constraint) ProtoReflect

func (x *Constraint) ProtoReflect() protoreflect.Message

func (*Constraint) Reset

func (x *Constraint) Reset()

func (*Constraint) String

func (x *Constraint) String() string

Constraint_OrgPolicyConstraint

type Constraint_OrgPolicyConstraint struct {
	// Optional. Org Policy builtin constraint.
	OrgPolicyConstraint *OrgPolicyConstraint `protobuf:"bytes,5,opt,name=org_policy_constraint,json=orgPolicyConstraint,proto3,oneof"`
}

Constraint_OrgPolicyConstraintCustom

type Constraint_OrgPolicyConstraintCustom struct {
	// Optional. Org Policy custom constraint.
	OrgPolicyConstraintCustom *OrgPolicyConstraintCustom `protobuf:"bytes,6,opt,name=org_policy_constraint_custom,json=orgPolicyConstraintCustom,proto3,oneof"`
}

Constraint_SecurityHealthAnalyticsCustomModule

type Constraint_SecurityHealthAnalyticsCustomModule struct {
	// Optional. SHA custom detector.
	SecurityHealthAnalyticsCustomModule *SecurityHealthAnalyticsCustomModule `protobuf:"bytes,4,opt,name=security_health_analytics_custom_module,json=securityHealthAnalyticsCustomModule,proto3,oneof"`
}

Constraint_SecurityHealthAnalyticsModule

type Constraint_SecurityHealthAnalyticsModule struct {
	// Optional. SHA built-in detector.
	SecurityHealthAnalyticsModule *SecurityHealthAnalyticsModule `protobuf:"bytes,3,opt,name=security_health_analytics_module,json=securityHealthAnalyticsModule,proto3,oneof"`
}

CreatePostureDeploymentRequest

type CreatePostureDeploymentRequest struct {

	// Required. Value for parent.
	// Format: organizations/{org_id}/locations/{location}
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. User provided identifier. It should be unique in scope of an
	// Organization and location.
	PostureDeploymentId string `protobuf:"bytes,2,opt,name=posture_deployment_id,json=postureDeploymentId,proto3" json:"posture_deployment_id,omitempty"`
	// Required. The resource being created.
	PostureDeployment *PostureDeployment `protobuf:"bytes,3,opt,name=posture_deployment,json=postureDeployment,proto3" json:"posture_deployment,omitempty"`
	// contains filtered or unexported fields
}

Message for creating a PostureDeployment.

func (*CreatePostureDeploymentRequest) Descriptor

func (*CreatePostureDeploymentRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreatePostureDeploymentRequest.ProtoReflect.Descriptor instead.

func (*CreatePostureDeploymentRequest) GetParent

func (x *CreatePostureDeploymentRequest) GetParent() string

func (*CreatePostureDeploymentRequest) GetPostureDeployment

func (x *CreatePostureDeploymentRequest) GetPostureDeployment() *PostureDeployment

func (*CreatePostureDeploymentRequest) GetPostureDeploymentId

func (x *CreatePostureDeploymentRequest) GetPostureDeploymentId() string

func (*CreatePostureDeploymentRequest) ProtoMessage

func (*CreatePostureDeploymentRequest) ProtoMessage()

func (*CreatePostureDeploymentRequest) ProtoReflect

func (*CreatePostureDeploymentRequest) Reset

func (x *CreatePostureDeploymentRequest) Reset()

func (*CreatePostureDeploymentRequest) String

CreatePostureRequest

type CreatePostureRequest struct {

	// Required. Value for parent.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. User provided identifier. It should be unique in scope of an
	// Organization and location.
	PostureId string `protobuf:"bytes,2,opt,name=posture_id,json=postureId,proto3" json:"posture_id,omitempty"`
	// Required. The resource being created.
	Posture *Posture `protobuf:"bytes,3,opt,name=posture,proto3" json:"posture,omitempty"`
	// contains filtered or unexported fields
}

Message for creating a Posture.

func (*CreatePostureRequest) Descriptor

func (*CreatePostureRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreatePostureRequest.ProtoReflect.Descriptor instead.

func (*CreatePostureRequest) GetParent

func (x *CreatePostureRequest) GetParent() string

func (*CreatePostureRequest) GetPosture

func (x *CreatePostureRequest) GetPosture() *Posture

func (*CreatePostureRequest) GetPostureId

func (x *CreatePostureRequest) GetPostureId() string

func (*CreatePostureRequest) ProtoMessage

func (*CreatePostureRequest) ProtoMessage()

func (*CreatePostureRequest) ProtoReflect

func (x *CreatePostureRequest) ProtoReflect() protoreflect.Message

func (*CreatePostureRequest) Reset

func (x *CreatePostureRequest) Reset()

func (*CreatePostureRequest) String

func (x *CreatePostureRequest) String() string

CustomConfig

type CustomConfig struct {

	// Required. The CEL expression to evaluate to produce findings. When the
	// expression evaluates to true against a resource, a finding is generated.
	Predicate *expr.Expr `protobuf:"bytes,1,opt,name=predicate,proto3" json:"predicate,omitempty"`
	// Optional. Custom output properties.
	CustomOutput *CustomConfig_CustomOutputSpec `protobuf:"bytes,2,opt,name=custom_output,json=customOutput,proto3" json:"custom_output,omitempty"`
	// Required. The resource types that the custom module operates on. Each
	// custom module can specify up to 5 resource types.
	ResourceSelector *CustomConfig_ResourceSelector `protobuf:"bytes,3,opt,name=resource_selector,json=resourceSelector,proto3" json:"resource_selector,omitempty"`
	// Required. The severity to assign to findings generated by the module.
	Severity CustomConfig_Severity `protobuf:"varint,4,opt,name=severity,proto3,enum=google.cloud.securityposture.v1.CustomConfig_Severity" json:"severity,omitempty"`
	// Optional. Text that describes the vulnerability or misconfiguration that
	// the custom module detects. This explanation is returned with each finding
	// instance to help investigators understand the detected issue. The text must
	// be enclosed in quotation marks.
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// Optional. An explanation of the recommended steps that security teams can
	// take to resolve the detected issue. This explanation is returned with each
	// finding generated by this module in the `nextSteps` property of the finding
	// JSON.
	Recommendation string `protobuf:"bytes,6,opt,name=recommendation,proto3" json:"recommendation,omitempty"`
	// contains filtered or unexported fields
}

Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.

func (*CustomConfig) Descriptor

func (*CustomConfig) Descriptor() ([]byte, []int)

Deprecated: Use CustomConfig.ProtoReflect.Descriptor instead.

func (*CustomConfig) GetCustomOutput

func (x *CustomConfig) GetCustomOutput() *CustomConfig_CustomOutputSpec

func (*CustomConfig) GetDescription

func (x *CustomConfig) GetDescription() string

func (*CustomConfig) GetPredicate

func (x *CustomConfig) GetPredicate() *expr.Expr

func (*CustomConfig) GetRecommendation

func (x *CustomConfig) GetRecommendation() string

func (*CustomConfig) GetResourceSelector

func (x *CustomConfig) GetResourceSelector() *CustomConfig_ResourceSelector

func (*CustomConfig) GetSeverity

func (x *CustomConfig) GetSeverity() CustomConfig_Severity

func (*CustomConfig) ProtoMessage

func (*CustomConfig) ProtoMessage()

func (*CustomConfig) ProtoReflect

func (x *CustomConfig) ProtoReflect() protoreflect.Message

func (*CustomConfig) Reset

func (x *CustomConfig) Reset()

func (*CustomConfig) String

func (x *CustomConfig) String() string

CustomConfig_CustomOutputSpec

type CustomConfig_CustomOutputSpec struct {

	// Optional. A list of custom output properties to add to the finding.
	Properties []*CustomConfig_CustomOutputSpec_Property `protobuf:"bytes,1,rep,name=properties,proto3" json:"properties,omitempty"`
	// contains filtered or unexported fields
}

A set of optional name-value pairs that define custom source properties to return with each finding that is generated by the custom module. The custom source properties that are defined here are included in the finding JSON under sourceProperties.

func (*CustomConfig_CustomOutputSpec) Descriptor

func (*CustomConfig_CustomOutputSpec) Descriptor() ([]byte, []int)

Deprecated: Use CustomConfig_CustomOutputSpec.ProtoReflect.Descriptor instead.

func (*CustomConfig_CustomOutputSpec) GetProperties

func (*CustomConfig_CustomOutputSpec) ProtoMessage

func (*CustomConfig_CustomOutputSpec) ProtoMessage()

func (*CustomConfig_CustomOutputSpec) ProtoReflect

func (*CustomConfig_CustomOutputSpec) Reset

func (x *CustomConfig_CustomOutputSpec) Reset()

func (*CustomConfig_CustomOutputSpec) String

CustomConfig_CustomOutputSpec_Property

type CustomConfig_CustomOutputSpec_Property struct {

	// Required. Name of the property for the custom output.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. The CEL expression for the custom output. A resource property
	// can be specified to return the value of the property or a text string
	// enclosed in quotation marks.
	ValueExpression *expr.Expr `protobuf:"bytes,2,opt,name=value_expression,json=valueExpression,proto3" json:"value_expression,omitempty"`
	// contains filtered or unexported fields
}

An individual name-value pair that defines a custom source property.

func (*CustomConfig_CustomOutputSpec_Property) Descriptor

func (*CustomConfig_CustomOutputSpec_Property) Descriptor() ([]byte, []int)

Deprecated: Use CustomConfig_CustomOutputSpec_Property.ProtoReflect.Descriptor instead.

func (*CustomConfig_CustomOutputSpec_Property) GetName

func (*CustomConfig_CustomOutputSpec_Property) GetValueExpression

func (x *CustomConfig_CustomOutputSpec_Property) GetValueExpression() *expr.Expr

func (*CustomConfig_CustomOutputSpec_Property) ProtoMessage

func (*CustomConfig_CustomOutputSpec_Property) ProtoReflect

func (*CustomConfig_CustomOutputSpec_Property) Reset

func (*CustomConfig_CustomOutputSpec_Property) String

CustomConfig_ResourceSelector

type CustomConfig_ResourceSelector struct {

	// Required. The resource types to run the detector on.
	ResourceTypes []string `protobuf:"bytes,1,rep,name=resource_types,json=resourceTypes,proto3" json:"resource_types,omitempty"`
	// contains filtered or unexported fields
}

Resource for selecting resource type.

func (*CustomConfig_ResourceSelector) Descriptor

func (*CustomConfig_ResourceSelector) Descriptor() ([]byte, []int)

Deprecated: Use CustomConfig_ResourceSelector.ProtoReflect.Descriptor instead.

func (*CustomConfig_ResourceSelector) GetResourceTypes

func (x *CustomConfig_ResourceSelector) GetResourceTypes() []string

func (*CustomConfig_ResourceSelector) ProtoMessage

func (*CustomConfig_ResourceSelector) ProtoMessage()

func (*CustomConfig_ResourceSelector) ProtoReflect

func (*CustomConfig_ResourceSelector) Reset

func (x *CustomConfig_ResourceSelector) Reset()

func (*CustomConfig_ResourceSelector) String

CustomConfig_Severity

type CustomConfig_Severity int32

Defines the valid value options for the severity of a finding.

CustomConfig_SEVERITY_UNSPECIFIED, CustomConfig_CRITICAL, CustomConfig_HIGH, CustomConfig_MEDIUM, CustomConfig_LOW

const (
	// Unspecified severity.
	CustomConfig_SEVERITY_UNSPECIFIED CustomConfig_Severity = 0
	// Critical severity.
	CustomConfig_CRITICAL CustomConfig_Severity = 1
	// High severity.
	CustomConfig_HIGH CustomConfig_Severity = 2
	// Medium severity.
	CustomConfig_MEDIUM CustomConfig_Severity = 3
	// Low severity.
	CustomConfig_LOW CustomConfig_Severity = 4
)

func (CustomConfig_Severity) Descriptor

func (CustomConfig_Severity) Enum

func (CustomConfig_Severity) EnumDescriptor

func (CustomConfig_Severity) EnumDescriptor() ([]byte, []int)

Deprecated: Use CustomConfig_Severity.Descriptor instead.

func (CustomConfig_Severity) Number

func (CustomConfig_Severity) String

func (x CustomConfig_Severity) String() string

func (CustomConfig_Severity) Type

CustomConstraint

type CustomConstraint struct {

	// Immutable. Name of the constraint. This is unique within the organization.
	// Format of the name should be
	//
	// -
	// `organizations/{organization_id}/customConstraints/{custom_constraint_id}`
	//
	// Example: `organizations/123/customConstraints/custom.createOnlyE2TypeVms`
	//
	// The max length is 70 characters and the minimum length is 1. Note that the
	// prefix `organizations/{organization_id}/customConstraints/` is not counted.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Immutable. The resource instance type on which this policy applies. Format
	// will be of the form : `

A custom constraint defined by customers which can only be applied to the given resource types and organization.

By creating a custom constraint, customers can apply policies of this custom constraint. Creating a custom constraint itself does NOT apply any policy enforcement.

func (*CustomConstraint) Descriptor

func (*CustomConstraint) Descriptor() ([]byte, []int)

Deprecated: Use CustomConstraint.ProtoReflect.Descriptor instead.

func (*CustomConstraint) GetActionType

func (x *CustomConstraint) GetActionType() CustomConstraint_ActionType

func (*CustomConstraint) GetCondition

func (x *CustomConstraint) GetCondition() string

func (*CustomConstraint) GetDescription

func (x *CustomConstraint) GetDescription() string

func (*CustomConstraint) GetDisplayName

func (x *CustomConstraint) GetDisplayName() string

func (*CustomConstraint) GetMethodTypes

func (x *CustomConstraint) GetMethodTypes() []CustomConstraint_MethodType

func (*CustomConstraint) GetName

func (x *CustomConstraint) GetName() string

func (*CustomConstraint) GetResourceTypes

func (x *CustomConstraint) GetResourceTypes() []string

func (*CustomConstraint) GetUpdateTime

func (x *CustomConstraint) GetUpdateTime() *timestamppb.Timestamp

func (*CustomConstraint) ProtoMessage

func (*CustomConstraint) ProtoMessage()

func (*CustomConstraint) ProtoReflect

func (x *CustomConstraint) ProtoReflect() protoreflect.Message

func (*CustomConstraint) Reset

func (x *CustomConstraint) Reset()

func (*CustomConstraint) String

func (x *CustomConstraint) String() string

CustomConstraint_ActionType

type CustomConstraint_ActionType int32

Allow or deny type.

CustomConstraint_ACTION_TYPE_UNSPECIFIED, CustomConstraint_ALLOW, CustomConstraint_DENY

const (
	// Unspecified. Results in an error.
	CustomConstraint_ACTION_TYPE_UNSPECIFIED CustomConstraint_ActionType = 0
	// Allowed action type.
	CustomConstraint_ALLOW CustomConstraint_ActionType = 1
	// Deny action type.
	CustomConstraint_DENY CustomConstraint_ActionType = 2
)

func (CustomConstraint_ActionType) Descriptor

func (CustomConstraint_ActionType) Enum

func (CustomConstraint_ActionType) EnumDescriptor

func (CustomConstraint_ActionType) EnumDescriptor() ([]byte, []int)

Deprecated: Use CustomConstraint_ActionType.Descriptor instead.

func (CustomConstraint_ActionType) Number

func (CustomConstraint_ActionType) String

func (CustomConstraint_ActionType) Type

CustomConstraint_MethodType

type CustomConstraint_MethodType int32

The operation for which this constraint will be applied. To apply this constraint only when creating new VMs, the method_types should be CREATE only. To apply this constraint when creating or deleting VMs, the method_types should be CREATE and DELETE.

UPDATE only custom constraints are not supported. Use CREATE or CREATE, UPDATE.

CustomConstraint_METHOD_TYPE_UNSPECIFIED, CustomConstraint_CREATE, CustomConstraint_UPDATE, CustomConstraint_DELETE

const (
	// Unspecified. Results in an error.
	CustomConstraint_METHOD_TYPE_UNSPECIFIED CustomConstraint_MethodType = 0
	// Constraint applied when creating the resource.
	CustomConstraint_CREATE CustomConstraint_MethodType = 1
	// Constraint applied when updating the resource.
	CustomConstraint_UPDATE CustomConstraint_MethodType = 2
	// Constraint applied when deleting the resource.
	// Not supported yet.
	CustomConstraint_DELETE CustomConstraint_MethodType = 3
)

func (CustomConstraint_MethodType) Descriptor

func (CustomConstraint_MethodType) Enum

func (CustomConstraint_MethodType) EnumDescriptor

func (CustomConstraint_MethodType) EnumDescriptor() ([]byte, []int)

Deprecated: Use CustomConstraint_MethodType.Descriptor instead.

func (CustomConstraint_MethodType) Number

func (CustomConstraint_MethodType) String

func (CustomConstraint_MethodType) Type

DeletePostureDeploymentRequest

type DeletePostureDeploymentRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. Etag value of the PostureDeployment to be deleted.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

Message for deleting a PostureDeployment.

func (*DeletePostureDeploymentRequest) Descriptor

func (*DeletePostureDeploymentRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeletePostureDeploymentRequest.ProtoReflect.Descriptor instead.

func (*DeletePostureDeploymentRequest) GetEtag

func (*DeletePostureDeploymentRequest) GetName

func (*DeletePostureDeploymentRequest) ProtoMessage

func (*DeletePostureDeploymentRequest) ProtoMessage()

func (*DeletePostureDeploymentRequest) ProtoReflect

func (*DeletePostureDeploymentRequest) Reset

func (x *DeletePostureDeploymentRequest) Reset()

func (*DeletePostureDeploymentRequest) String

DeletePostureRequest

type DeletePostureRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. Etag value of the Posture to be deleted.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

Message for deleting a Posture.

func (*DeletePostureRequest) Descriptor

func (*DeletePostureRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeletePostureRequest.ProtoReflect.Descriptor instead.

func (*DeletePostureRequest) GetEtag

func (x *DeletePostureRequest) GetEtag() string

func (*DeletePostureRequest) GetName

func (x *DeletePostureRequest) GetName() string

func (*DeletePostureRequest) ProtoMessage

func (*DeletePostureRequest) ProtoMessage()

func (*DeletePostureRequest) ProtoReflect

func (x *DeletePostureRequest) ProtoReflect() protoreflect.Message

func (*DeletePostureRequest) Reset

func (x *DeletePostureRequest) Reset()

func (*DeletePostureRequest) String

func (x *DeletePostureRequest) String() string

EnablementState

type EnablementState int32

Possible enablement states of a service or module.

EnablementState_ENABLEMENT_STATE_UNSPECIFIED, EnablementState_ENABLED, EnablementState_DISABLED

const (
	// Default value. This value is unused.
	EnablementState_ENABLEMENT_STATE_UNSPECIFIED EnablementState = 0
	// State is enabled.
	EnablementState_ENABLED EnablementState = 1
	// State is disabled.
	EnablementState_DISABLED EnablementState = 2
)

func (EnablementState) Descriptor

func (EnablementState) Enum

func (x EnablementState) Enum() *EnablementState

func (EnablementState) EnumDescriptor

func (EnablementState) EnumDescriptor() ([]byte, []int)

Deprecated: Use EnablementState.Descriptor instead.

func (EnablementState) Number

func (EnablementState) String

func (x EnablementState) String() string

func (EnablementState) Type

ExtractPostureRequest

type ExtractPostureRequest struct {

	// Required. The parent resource name. The format of this value is as follows:
	// `organizations/{organization}/locations/{location}`
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. User provided identifier. It should be unique in scope of an
	// Organization and location.
	PostureId string `protobuf:"bytes,2,opt,name=posture_id,json=postureId,proto3" json:"posture_id,omitempty"`
	// Required. Workload from which the policies are to be extracted, it should
	// belong to the same organization defined in parent. The format of this value
	// varies depending on the scope of the request:
	// - `folder/folderNumber`
	// - `project/projectNumber`
	// - `organization/organizationNumber`
	Workload string `protobuf:"bytes,3,opt,name=workload,proto3" json:"workload,omitempty"`
	// contains filtered or unexported fields
}

Message for extracting existing policies on a workload as a Posture.

func (*ExtractPostureRequest) Descriptor

func (*ExtractPostureRequest) Descriptor() ([]byte, []int)

Deprecated: Use ExtractPostureRequest.ProtoReflect.Descriptor instead.

func (*ExtractPostureRequest) GetParent

func (x *ExtractPostureRequest) GetParent() string

func (*ExtractPostureRequest) GetPostureId

func (x *ExtractPostureRequest) GetPostureId() string

func (*ExtractPostureRequest) GetWorkload

func (x *ExtractPostureRequest) GetWorkload() string

func (*ExtractPostureRequest) ProtoMessage

func (*ExtractPostureRequest) ProtoMessage()

func (*ExtractPostureRequest) ProtoReflect

func (x *ExtractPostureRequest) ProtoReflect() protoreflect.Message

func (*ExtractPostureRequest) Reset

func (x *ExtractPostureRequest) Reset()

func (*ExtractPostureRequest) String

func (x *ExtractPostureRequest) String() string

GetPostureDeploymentRequest

type GetPostureDeploymentRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

Message for getting a PostureDeployment.

func (*GetPostureDeploymentRequest) Descriptor

func (*GetPostureDeploymentRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPostureDeploymentRequest.ProtoReflect.Descriptor instead.

func (*GetPostureDeploymentRequest) GetName

func (x *GetPostureDeploymentRequest) GetName() string

func (*GetPostureDeploymentRequest) ProtoMessage

func (*GetPostureDeploymentRequest) ProtoMessage()

func (*GetPostureDeploymentRequest) ProtoReflect

func (*GetPostureDeploymentRequest) Reset

func (x *GetPostureDeploymentRequest) Reset()

func (*GetPostureDeploymentRequest) String

func (x *GetPostureDeploymentRequest) String() string

GetPostureRequest

type GetPostureRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. Posture revision which needs to be retrieved.
	RevisionId string `protobuf:"bytes,3,opt,name=revision_id,json=revisionId,proto3" json:"revision_id,omitempty"`
	// contains filtered or unexported fields
}

Message for getting a Posture.

func (*GetPostureRequest) Descriptor

func (*GetPostureRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPostureRequest.ProtoReflect.Descriptor instead.

func (*GetPostureRequest) GetName

func (x *GetPostureRequest) GetName() string

func (*GetPostureRequest) GetRevisionId

func (x *GetPostureRequest) GetRevisionId() string

func (*GetPostureRequest) ProtoMessage

func (*GetPostureRequest) ProtoMessage()

func (*GetPostureRequest) ProtoReflect

func (x *GetPostureRequest) ProtoReflect() protoreflect.Message

func (*GetPostureRequest) Reset

func (x *GetPostureRequest) Reset()

func (*GetPostureRequest) String

func (x *GetPostureRequest) String() string

GetPostureTemplateRequest

type GetPostureTemplateRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. Specific revision_id of a Posture Template.
	// PostureTemplate revision_id which needs to be retrieved.
	RevisionId string `protobuf:"bytes,2,opt,name=revision_id,json=revisionId,proto3" json:"revision_id,omitempty"`
	// contains filtered or unexported fields
}

Message for getting a Posture Template.

func (*GetPostureTemplateRequest) Descriptor

func (*GetPostureTemplateRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPostureTemplateRequest.ProtoReflect.Descriptor instead.

func (*GetPostureTemplateRequest) GetName

func (x *GetPostureTemplateRequest) GetName() string

func (*GetPostureTemplateRequest) GetRevisionId

func (x *GetPostureTemplateRequest) GetRevisionId() string

func (*GetPostureTemplateRequest) ProtoMessage

func (*GetPostureTemplateRequest) ProtoMessage()

func (*GetPostureTemplateRequest) ProtoReflect

func (*GetPostureTemplateRequest) Reset

func (x *GetPostureTemplateRequest) Reset()

func (*GetPostureTemplateRequest) String

func (x *GetPostureTemplateRequest) String() string

ListPostureDeploymentsRequest

type ListPostureDeploymentsRequest struct {

	// Required. Parent value for ListPostureDeploymentsRequest.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. Requested page size. Server may return fewer items than
	// requested. If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. Filter to be applied on the resource, defined by EBNF grammar
	// https://google.aip.dev/assets/misc/ebnf-filtering.txt.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// contains filtered or unexported fields
}

Message for requesting list of PostureDeployments.

func (*ListPostureDeploymentsRequest) Descriptor

func (*ListPostureDeploymentsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPostureDeploymentsRequest.ProtoReflect.Descriptor instead.

func (*ListPostureDeploymentsRequest) GetFilter

func (x *ListPostureDeploymentsRequest) GetFilter() string

func (*ListPostureDeploymentsRequest) GetPageSize

func (x *ListPostureDeploymentsRequest) GetPageSize() int32

func (*ListPostureDeploymentsRequest) GetPageToken

func (x *ListPostureDeploymentsRequest) GetPageToken() string

func (*ListPostureDeploymentsRequest) GetParent

func (x *ListPostureDeploymentsRequest) GetParent() string

func (*ListPostureDeploymentsRequest) ProtoMessage

func (*ListPostureDeploymentsRequest) ProtoMessage()

func (*ListPostureDeploymentsRequest) ProtoReflect

func (*ListPostureDeploymentsRequest) Reset

func (x *ListPostureDeploymentsRequest) Reset()

func (*ListPostureDeploymentsRequest) String

ListPostureDeploymentsResponse

type ListPostureDeploymentsResponse struct {

	// The list of PostureDeployment.
	PostureDeployments []*PostureDeployment `protobuf:"bytes,1,rep,name=posture_deployments,json=postureDeployments,proto3" json:"posture_deployments,omitempty"`
	// A token identifying a page of results the server should return.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

Message for response to listing PostureDeployments.

func (*ListPostureDeploymentsResponse) Descriptor

func (*ListPostureDeploymentsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPostureDeploymentsResponse.ProtoReflect.Descriptor instead.

func (*ListPostureDeploymentsResponse) GetNextPageToken

func (x *ListPostureDeploymentsResponse) GetNextPageToken() string

func (*ListPostureDeploymentsResponse) GetPostureDeployments

func (x *ListPostureDeploymentsResponse) GetPostureDeployments() []*PostureDeployment

func (*ListPostureDeploymentsResponse) GetUnreachable

func (x *ListPostureDeploymentsResponse) GetUnreachable() []string

func (*ListPostureDeploymentsResponse) ProtoMessage

func (*ListPostureDeploymentsResponse) ProtoMessage()

func (*ListPostureDeploymentsResponse) ProtoReflect

func (*ListPostureDeploymentsResponse) Reset

func (x *ListPostureDeploymentsResponse) Reset()

func (*ListPostureDeploymentsResponse) String

ListPostureRevisionsRequest

type ListPostureRevisionsRequest struct {

	// Required. Name value for ListPostureRevisionsRequest.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. Requested page size. Server may return fewer items than
	// requested. If unspecified, server will pick 100 as default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Message for requesting list of Posture revisions.

func (*ListPostureRevisionsRequest) Descriptor

func (*ListPostureRevisionsRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPostureRevisionsRequest.ProtoReflect.Descriptor instead.

func (*ListPostureRevisionsRequest) GetName

func (x *ListPostureRevisionsRequest) GetName() string

func (*ListPostureRevisionsRequest) GetPageSize

func (x *ListPostureRevisionsRequest) GetPageSize() int32

func (*ListPostureRevisionsRequest) GetPageToken

func (x *ListPostureRevisionsRequest) GetPageToken() string

func (*ListPostureRevisionsRequest) ProtoMessage

func (*ListPostureRevisionsRequest) ProtoMessage()

func (*ListPostureRevisionsRequest) ProtoReflect

func (*ListPostureRevisionsRequest) Reset

func (x *ListPostureRevisionsRequest) Reset()

func (*ListPostureRevisionsRequest) String

func (x *ListPostureRevisionsRequest) String() string

ListPostureRevisionsResponse

type ListPostureRevisionsResponse struct {

	// The list of Posture revisions.
	Revisions []*Posture `protobuf:"bytes,1,rep,name=revisions,proto3" json:"revisions,omitempty"`
	// A token identifying a page of results the server should return.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Message for response to listing PostureRevisions.

func (*ListPostureRevisionsResponse) Descriptor

func (*ListPostureRevisionsResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPostureRevisionsResponse.ProtoReflect.Descriptor instead.

func (*ListPostureRevisionsResponse) GetNextPageToken

func (x *ListPostureRevisionsResponse) GetNextPageToken() string

func (*ListPostureRevisionsResponse) GetRevisions

func (x *ListPostureRevisionsResponse) GetRevisions() []*Posture

func (*ListPostureRevisionsResponse) ProtoMessage

func (*ListPostureRevisionsResponse) ProtoMessage()

func (*ListPostureRevisionsResponse) ProtoReflect

func (*ListPostureRevisionsResponse) Reset

func (x *ListPostureRevisionsResponse) Reset()

func (*ListPostureRevisionsResponse) String

ListPostureTemplatesRequest

type ListPostureTemplatesRequest struct {

	// Required. Parent value for ListPostureTemplatesRequest.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Optional. Requested page size. Server may return fewer items than
	// requested. If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Optional. A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Optional. Filter to be applied on the resource, defined by EBNF grammar
	// https://google.aip.dev/assets/misc/ebnf-filtering.txt.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// contains filtered or unexported fields
}

Message for requesting list of Posture Templates.

func (*ListPostureTemplatesRequest) Descriptor

func (*ListPostureTemplatesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPostureTemplatesRequest.ProtoReflect.Descriptor instead.

func (*ListPostureTemplatesRequest) GetFilter

func (x *ListPostureTemplatesRequest) GetFilter() string

func (*ListPostureTemplatesRequest) GetPageSize

func (x *ListPostureTemplatesRequest) GetPageSize() int32

func (*ListPostureTemplatesRequest) GetPageToken

func (x *ListPostureTemplatesRequest) GetPageToken() string

func (*ListPostureTemplatesRequest) GetParent

func (x *ListPostureTemplatesRequest) GetParent() string

func (*ListPostureTemplatesRequest) ProtoMessage

func (*ListPostureTemplatesRequest) ProtoMessage()

func (*ListPostureTemplatesRequest) ProtoReflect

func (*ListPostureTemplatesRequest) Reset

func (x *ListPostureTemplatesRequest) Reset()

func (*ListPostureTemplatesRequest) String

func (x *ListPostureTemplatesRequest) String() string

ListPostureTemplatesResponse

type ListPostureTemplatesResponse struct {

	// The list of PostureTemplate.
	PostureTemplates []*PostureTemplate `protobuf:"bytes,1,rep,name=posture_templates,json=postureTemplates,proto3" json:"posture_templates,omitempty"`
	// A token identifying a page of results the server should return.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

Message for response to listing PostureTemplates.

func (*ListPostureTemplatesResponse) Descriptor

func (*ListPostureTemplatesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPostureTemplatesResponse.ProtoReflect.Descriptor instead.

func (*ListPostureTemplatesResponse) GetNextPageToken

func (x *ListPostureTemplatesResponse) GetNextPageToken() string

func (*ListPostureTemplatesResponse) GetPostureTemplates

func (x *ListPostureTemplatesResponse) GetPostureTemplates() []*PostureTemplate

func (*ListPostureTemplatesResponse) ProtoMessage

func (*ListPostureTemplatesResponse) ProtoMessage()

func (*ListPostureTemplatesResponse) ProtoReflect

func (*ListPostureTemplatesResponse) Reset

func (x *ListPostureTemplatesResponse) Reset()

func (*ListPostureTemplatesResponse) String

ListPosturesRequest

type ListPosturesRequest struct {

	// Required. Parent value for ListPosturesRequest.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Requested page size. Server may return fewer items than requested.
	// If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

Message for requesting list of Postures.

func (*ListPosturesRequest) Descriptor

func (*ListPosturesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPosturesRequest.ProtoReflect.Descriptor instead.

func (*ListPosturesRequest) GetPageSize

func (x *ListPosturesRequest) GetPageSize() int32

func (*ListPosturesRequest) GetPageToken

func (x *ListPosturesRequest) GetPageToken() string

func (*ListPosturesRequest) GetParent

func (x *ListPosturesRequest) GetParent() string

func (*ListPosturesRequest) ProtoMessage

func (*ListPosturesRequest) ProtoMessage()

func (*ListPosturesRequest) ProtoReflect

func (x *ListPosturesRequest) ProtoReflect() protoreflect.Message

func (*ListPosturesRequest) Reset

func (x *ListPosturesRequest) Reset()

func (*ListPosturesRequest) String

func (x *ListPosturesRequest) String() string

ListPosturesResponse

type ListPosturesResponse struct {

	// The list of Posture.
	Postures []*Posture `protobuf:"bytes,1,rep,name=postures,proto3" json:"postures,omitempty"`
	// A token identifying a page of results the server should return.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Unreachable resources.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

Message for response to listing Postures.

func (*ListPosturesResponse) Descriptor

func (*ListPosturesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPosturesResponse.ProtoReflect.Descriptor instead.

func (*ListPosturesResponse) GetNextPageToken

func (x *ListPosturesResponse) GetNextPageToken() string

func (*ListPosturesResponse) GetPostures

func (x *ListPosturesResponse) GetPostures() []*Posture

func (*ListPosturesResponse) GetUnreachable

func (x *ListPosturesResponse) GetUnreachable() []string

func (*ListPosturesResponse) ProtoMessage

func (*ListPosturesResponse) ProtoMessage()

func (*ListPosturesResponse) ProtoReflect

func (x *ListPosturesResponse) ProtoReflect() protoreflect.Message

func (*ListPosturesResponse) Reset

func (x *ListPosturesResponse) Reset()

func (*ListPosturesResponse) String

func (x *ListPosturesResponse) String() string

OperationMetadata

type OperationMetadata struct {

	// Output only. The time the operation was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The time the operation finished running.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// Output only. Server-defined resource path for the target of the operation.
	Target string `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	// Output only. Name of the verb executed by the operation.
	Verb string `protobuf:"bytes,4,opt,name=verb,proto3" json:"verb,omitempty"`
	// Output only. Human-readable status of the operation, if any.
	StatusMessage string `protobuf:"bytes,5,opt,name=status_message,json=statusMessage,proto3" json:"status_message,omitempty"`
	// Output only. Identifies whether the user has requested cancellation
	// of the operation. Operations that have been cancelled successfully
	// have [Operation.error][] value with a
	// [google.rpc.Status.code][google.rpc.Status.code] of 1, corresponding to
	// `Code.CANCELLED`.
	RequestedCancellation bool `protobuf:"varint,6,opt,name=requested_cancellation,json=requestedCancellation,proto3" json:"requested_cancellation,omitempty"`
	// Output only. API version used to start the operation.
	ApiVersion string `protobuf:"bytes,7,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// Output only. This is a output only optional field which will be filled only
	// in cases where PostureDeployments enter failure states like UPDATE_FAILED
	// or CREATE_FAILED or DELETE_FAILED.
	ErrorMessage string `protobuf:"bytes,8,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"`
	// contains filtered or unexported fields
}

Represents the metadata of the long-running operation.

func (*OperationMetadata) Descriptor

func (*OperationMetadata) Descriptor() ([]byte, []int)

Deprecated: Use OperationMetadata.ProtoReflect.Descriptor instead.

func (*OperationMetadata) GetApiVersion

func (x *OperationMetadata) GetApiVersion() string

func (*OperationMetadata) GetCreateTime

func (x *OperationMetadata) GetCreateTime() *timestamppb.Timestamp

func (*OperationMetadata) GetEndTime

func (x *OperationMetadata) GetEndTime() *timestamppb.Timestamp

func (*OperationMetadata) GetErrorMessage

func (x *OperationMetadata) GetErrorMessage() string

func (*OperationMetadata) GetRequestedCancellation

func (x *OperationMetadata) GetRequestedCancellation() bool

func (*OperationMetadata) GetStatusMessage

func (x *OperationMetadata) GetStatusMessage() string

func (*OperationMetadata) GetTarget

func (x *OperationMetadata) GetTarget() string

func (*OperationMetadata) GetVerb

func (x *OperationMetadata) GetVerb() string

func (*OperationMetadata) ProtoMessage

func (*OperationMetadata) ProtoMessage()

func (*OperationMetadata) ProtoReflect

func (x *OperationMetadata) ProtoReflect() protoreflect.Message

func (*OperationMetadata) Reset

func (x *OperationMetadata) Reset()

func (*OperationMetadata) String

func (x *OperationMetadata) String() string

OrgPolicyConstraint

type OrgPolicyConstraint struct {

	// Required. Org Policy Canned Constraint id.
	CannedConstraintId string `protobuf:"bytes,1,opt,name=canned_constraint_id,json=cannedConstraintId,proto3" json:"canned_constraint_id,omitempty"`
	// Required. Org PolicySpec rules.
	PolicyRules []*PolicyRule `protobuf:"bytes,2,rep,name=policy_rules,json=policyRules,proto3" json:"policy_rules,omitempty"`
	// contains filtered or unexported fields
}

Message for Org Policy Canned Constraint.

func (*OrgPolicyConstraint) Descriptor

func (*OrgPolicyConstraint) Descriptor() ([]byte, []int)

Deprecated: Use OrgPolicyConstraint.ProtoReflect.Descriptor instead.

func (*OrgPolicyConstraint) GetCannedConstraintId

func (x *OrgPolicyConstraint) GetCannedConstraintId() string

func (*OrgPolicyConstraint) GetPolicyRules

func (x *OrgPolicyConstraint) GetPolicyRules() []*PolicyRule

func (*OrgPolicyConstraint) ProtoMessage

func (*OrgPolicyConstraint) ProtoMessage()

func (*OrgPolicyConstraint) ProtoReflect

func (x *OrgPolicyConstraint) ProtoReflect() protoreflect.Message

func (*OrgPolicyConstraint) Reset

func (x *OrgPolicyConstraint) Reset()

func (*OrgPolicyConstraint) String

func (x *OrgPolicyConstraint) String() string

OrgPolicyConstraintCustom

type OrgPolicyConstraintCustom struct {

	// Required. Org Policy Custom Constraint.
	CustomConstraint *CustomConstraint `protobuf:"bytes,1,opt,name=custom_constraint,json=customConstraint,proto3" json:"custom_constraint,omitempty"`
	// Required. Org Policyspec rules.
	PolicyRules []*PolicyRule `protobuf:"bytes,2,rep,name=policy_rules,json=policyRules,proto3" json:"policy_rules,omitempty"`
	// contains filtered or unexported fields
}

Message for Org Policy Custom Constraint.

func (*OrgPolicyConstraintCustom) Descriptor

func (*OrgPolicyConstraintCustom) Descriptor() ([]byte, []int)

Deprecated: Use OrgPolicyConstraintCustom.ProtoReflect.Descriptor instead.

func (*OrgPolicyConstraintCustom) GetCustomConstraint

func (x *OrgPolicyConstraintCustom) GetCustomConstraint() *CustomConstraint

func (*OrgPolicyConstraintCustom) GetPolicyRules

func (x *OrgPolicyConstraintCustom) GetPolicyRules() []*PolicyRule

func (*OrgPolicyConstraintCustom) ProtoMessage

func (*OrgPolicyConstraintCustom) ProtoMessage()

func (*OrgPolicyConstraintCustom) ProtoReflect

func (*OrgPolicyConstraintCustom) Reset

func (x *OrgPolicyConstraintCustom) Reset()

func (*OrgPolicyConstraintCustom) String

func (x *OrgPolicyConstraintCustom) String() string

Policy

type Policy struct {

	// Required. ID of the Policy that is user generated, immutable and unique
	// within the scope of a policy set.
	PolicyId string `protobuf:"bytes,1,opt,name=policy_id,json=policyId,proto3" json:"policy_id,omitempty"`
	// Optional. Contains list of mapping for a Policy to a standard and control.
	ComplianceStandards []*Policy_ComplianceStandard `protobuf:"bytes,2,rep,name=compliance_standards,json=complianceStandards,proto3" json:"compliance_standards,omitempty"`
	// Required. Constraint details.
	Constraint *Constraint `protobuf:"bytes,3,opt,name=constraint,proto3" json:"constraint,omitempty"`
	// Optional. Description of the Policy.
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// contains filtered or unexported fields
}

Policy representation.

func (*Policy) Descriptor

func (*Policy) Descriptor() ([]byte, []int)

Deprecated: Use Policy.ProtoReflect.Descriptor instead.

func (*Policy) GetComplianceStandards

func (x *Policy) GetComplianceStandards() []*Policy_ComplianceStandard

func (*Policy) GetConstraint

func (x *Policy) GetConstraint() *Constraint

func (*Policy) GetDescription

func (x *Policy) GetDescription() string

func (*Policy) GetPolicyId

func (x *Policy) GetPolicyId() string

func (*Policy) ProtoMessage

func (*Policy) ProtoMessage()

func (*Policy) ProtoReflect

func (x *Policy) ProtoReflect() protoreflect.Message

func (*Policy) Reset

func (x *Policy) Reset()

func (*Policy) String

func (x *Policy) String() string

PolicyRule

type PolicyRule struct {

	// Types that are valid to be assigned to Kind:
	//
	//	*PolicyRule_Values
	//	*PolicyRule_AllowAll
	//	*PolicyRule_DenyAll
	//	*PolicyRule_Enforce
	Kind isPolicyRule_Kind `protobuf_oneof:"kind"`
	// A condition which determines whether this rule is used
	// in the evaluation of the policy. When set, the `expression` field in
	// the `Expr' must include from 1 to 10 subexpressions, joined by the "||"
	// or "&&" operators. Each subexpression must be of the form
	// "resource.matchTag('

A rule used to express this policy.

func (*PolicyRule) Descriptor

func (*PolicyRule) Descriptor() ([]byte, []int)

Deprecated: Use PolicyRule.ProtoReflect.Descriptor instead.

func (*PolicyRule) GetAllowAll

func (x *PolicyRule) GetAllowAll() bool

func (*PolicyRule) GetCondition

func (x *PolicyRule) GetCondition() *expr.Expr

func (*PolicyRule) GetDenyAll

func (x *PolicyRule) GetDenyAll() bool

func (*PolicyRule) GetEnforce

func (x *PolicyRule) GetEnforce() bool

func (*PolicyRule) GetKind

func (x *PolicyRule) GetKind() isPolicyRule_Kind

func (*PolicyRule) GetValues

func (x *PolicyRule) GetValues() *PolicyRule_StringValues

func (*PolicyRule) ProtoMessage

func (*PolicyRule) ProtoMessage()

func (*PolicyRule) ProtoReflect

func (x *PolicyRule) ProtoReflect() protoreflect.Message

func (*PolicyRule) Reset

func (x *PolicyRule) Reset()

func (*PolicyRule) String

func (x *PolicyRule) String() string

PolicyRule_AllowAll

type PolicyRule_AllowAll struct {
	// Setting this to true means that all values are allowed. This field can
	// be set only in policies for list constraints.
	AllowAll bool `protobuf:"varint,2,opt,name=allow_all,json=allowAll,proto3,oneof"`
}

PolicyRule_DenyAll

type PolicyRule_DenyAll struct {
	// Setting this to true means that all values are denied. This field can
	// be set only in policies for list constraints.
	DenyAll bool `protobuf:"varint,3,opt,name=deny_all,json=denyAll,proto3,oneof"`
}

PolicyRule_Enforce

type PolicyRule_Enforce struct {
	// If `true`, then the policy is enforced. If `false`, then any
	// configuration is acceptable.
	// This field can be set only in policies for boolean constraints.
	Enforce bool `protobuf:"varint,4,opt,name=enforce,proto3,oneof"`
}

PolicyRule_StringValues

type PolicyRule_StringValues struct {

	// List of values allowed at this resource.
	AllowedValues []string `protobuf:"bytes,1,rep,name=allowed_values,json=allowedValues,proto3" json:"allowed_values,omitempty"`
	// List of values denied at this resource.
	DeniedValues []string `protobuf:"bytes,2,rep,name=denied_values,json=deniedValues,proto3" json:"denied_values,omitempty"`
	// contains filtered or unexported fields
}

A message that holds specific allowed and denied values. This message can define specific values and subtrees of the Resource Manager resource hierarchy (Organizations, Folders, Projects) that are allowed or denied. This is achieved by using the under: and optional is: prefixes. The under: prefix is used to denote resource subtree values. The is: prefix is used to denote specific values, and is required only if the value contains a ":". Values prefixed with "is:" are treated the same as values with no prefix. Ancestry subtrees must be in one of the following formats:

  • projects/<project-id> (for example, projects/tokyo-rain-123)
  • folders/<folder-id> (for example, folders/1234)
  • organizations/<organization-id> (for example, organizations/1234)

The supports_under field of the associated Constraint defines whether ancestry prefixes can be used.

func (*PolicyRule_StringValues) Descriptor

func (*PolicyRule_StringValues) Descriptor() ([]byte, []int)

Deprecated: Use PolicyRule_StringValues.ProtoReflect.Descriptor instead.

func (*PolicyRule_StringValues) GetAllowedValues

func (x *PolicyRule_StringValues) GetAllowedValues() []string

func (*PolicyRule_StringValues) GetDeniedValues

func (x *PolicyRule_StringValues) GetDeniedValues() []string

func (*PolicyRule_StringValues) ProtoMessage

func (*PolicyRule_StringValues) ProtoMessage()

func (*PolicyRule_StringValues) ProtoReflect

func (x *PolicyRule_StringValues) ProtoReflect() protoreflect.Message

func (*PolicyRule_StringValues) Reset

func (x *PolicyRule_StringValues) Reset()

func (*PolicyRule_StringValues) String

func (x *PolicyRule_StringValues) String() string

PolicyRule_Values

type PolicyRule_Values struct {
	// List of values to be used for this policy rule. This field can be set
	// only in policies for list constraints.
	Values *PolicyRule_StringValues `protobuf:"bytes,1,opt,name=values,proto3,oneof"`
}

PolicySet

type PolicySet struct {

	// Required. ID of the Policy set.
	PolicySetId string `protobuf:"bytes,1,opt,name=policy_set_id,json=policySetId,proto3" json:"policy_set_id,omitempty"`
	// Optional. Description of the Policy set.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// Required. List of policies.
	Policies []*Policy `protobuf:"bytes,3,rep,name=policies,proto3" json:"policies,omitempty"`
	// contains filtered or unexported fields
}

PolicySet representation.

func (*PolicySet) Descriptor

func (*PolicySet) Descriptor() ([]byte, []int)

Deprecated: Use PolicySet.ProtoReflect.Descriptor instead.

func (*PolicySet) GetDescription

func (x *PolicySet) GetDescription() string

func (*PolicySet) GetPolicies

func (x *PolicySet) GetPolicies() []*Policy

func (*PolicySet) GetPolicySetId

func (x *PolicySet) GetPolicySetId() string

func (*PolicySet) ProtoMessage

func (*PolicySet) ProtoMessage()

func (*PolicySet) ProtoReflect

func (x *PolicySet) ProtoReflect() protoreflect.Message

func (*PolicySet) Reset

func (x *PolicySet) Reset()

func (*PolicySet) String

func (x *PolicySet) String() string

Policy_ComplianceStandard

type Policy_ComplianceStandard struct {

	// Optional. The compliance standard that the Policy maps to, e.g.: CIS-2.0.
	Standard string `protobuf:"bytes,1,opt,name=standard,proto3" json:"standard,omitempty"`
	// Optional. Control mapping provided by user for this Policy. e.g.: 1.5.
	Control string `protobuf:"bytes,2,opt,name=control,proto3" json:"control,omitempty"`
	// contains filtered or unexported fields
}

Mapping for a Policy to standard and control.

func (*Policy_ComplianceStandard) Descriptor

func (*Policy_ComplianceStandard) Descriptor() ([]byte, []int)

Deprecated: Use Policy_ComplianceStandard.ProtoReflect.Descriptor instead.

func (*Policy_ComplianceStandard) GetControl

func (x *Policy_ComplianceStandard) GetControl() string

func (*Policy_ComplianceStandard) GetStandard

func (x *Policy_ComplianceStandard) GetStandard() string

func (*Policy_ComplianceStandard) ProtoMessage

func (*Policy_ComplianceStandard) ProtoMessage()

func (*Policy_ComplianceStandard) ProtoReflect

func (*Policy_ComplianceStandard) Reset

func (x *Policy_ComplianceStandard) Reset()

func (*Policy_ComplianceStandard) String

func (x *Policy_ComplianceStandard) String() string

Posture

type Posture struct {

	// Required. Identifier. The name of this Posture resource, in the format of
	// organizations/{org_id}/locations/{location_id}/postures/{posture}.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. State of Posture resource.
	State Posture_State `protobuf:"varint,2,opt,name=state,proto3,enum=google.cloud.securityposture.v1.Posture_State" json:"state,omitempty"`
	// Output only. Immutable. The revision ID of the posture.
	// The format is an 8-character hexadecimal string.
	// https://google.aip.dev/162
	RevisionId string `protobuf:"bytes,3,opt,name=revision_id,json=revisionId,proto3" json:"revision_id,omitempty"`
	// Output only. The timestamp that the posture was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The timestamp that the posture was updated.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Optional. User provided description of the posture.
	Description string `protobuf:"bytes,6,opt,name=description,proto3" json:"description,omitempty"`
	// Required. List of Policy sets.
	PolicySets []*PolicySet `protobuf:"bytes,7,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	// Optional. An opaque tag indicating the current version of the Posture, used
	// for concurrency control. When the `Posture` is returned from either a
	// `GetPosture` or a `ListPostures` request, this `etag` indicates the version
	// of the current `Posture` to use when executing a read-modify-write loop.
	//
	// When the `Posture` is used in a `UpdatePosture` method, use the `etag`
	// value that was returned from a `GetPosture` request as part of a
	// read-modify-write loop for concurrency control. Not setting the `etag` in a
	// `UpdatePosture` request will result in an unconditional write of the
	// `Posture`.
	Etag string `protobuf:"bytes,8,opt,name=etag,proto3" json:"etag,omitempty"`
	// Optional. User annotations. These attributes can only be set and used by
	// the user, and not by Google Security Postures.
	// .
	Annotations map[string]string `protobuf:"bytes,9,rep,name=annotations,proto3" json:"annotations,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
	// Output only. Whether or not this Posture is in the process of being
	// updated.
	Reconciling bool `protobuf:"varint,10,opt,name=reconciling,proto3" json:"reconciling,omitempty"`
	// contains filtered or unexported fields
}

Postures Definition of a Posture.

func (*Posture) Descriptor

func (*Posture) Descriptor() ([]byte, []int)

Deprecated: Use Posture.ProtoReflect.Descriptor instead.

func (*Posture) GetAnnotations

func (x *Posture) GetAnnotations() map[string]string

func (*Posture) GetCreateTime

func (x *Posture) GetCreateTime() *timestamppb.Timestamp

func (*Posture) GetDescription

func (x *Posture) GetDescription() string

func (*Posture) GetEtag

func (x *Posture) GetEtag() string

func (*Posture) GetName

func (x *Posture) GetName() string

func (*Posture) GetPolicySets

func (x *Posture) GetPolicySets() []*PolicySet

func (*Posture) GetReconciling

func (x *Posture) GetReconciling() bool

func (*Posture) GetRevisionId

func (x *Posture) GetRevisionId() string

func (*Posture) GetState

func (x *Posture) GetState() Posture_State

func (*Posture) GetUpdateTime

func (x *Posture) GetUpdateTime() *timestamppb.Timestamp

func (*Posture) ProtoMessage

func (*Posture) ProtoMessage()

func (*Posture) ProtoReflect

func (x *Posture) ProtoReflect() protoreflect.Message

func (*Posture) Reset

func (x *Posture) Reset()

func (*Posture) String

func (x *Posture) String() string

PostureDeployment

type PostureDeployment struct {

	// Required. The name of this PostureDeployment resource, in the format of
	// organizations/{organization}/locations/{location_id}/postureDeployments/{postureDeployment}.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. Target resource where the Posture will be deployed. Currently
	// supported resources are of types: projects/projectNumber,
	// folders/folderNumber, organizations/organizationNumber.
	TargetResource string `protobuf:"bytes,13,opt,name=target_resource,json=targetResource,proto3" json:"target_resource,omitempty"`
	// Output only. State of PostureDeployment resource.
	State PostureDeployment_State `protobuf:"varint,2,opt,name=state,proto3,enum=google.cloud.securityposture.v1.PostureDeployment_State" json:"state,omitempty"`
	// Required. Posture that needs to be deployed.
	// Format:
	// organizations/{org_id}/locations/{location_id}/postures/

========================== PostureDeployments ========================== Message describing PostureDeployment resource.

func (*PostureDeployment) Descriptor

func (*PostureDeployment) Descriptor() ([]byte, []int)

Deprecated: Use PostureDeployment.ProtoReflect.Descriptor instead.

func (*PostureDeployment) GetAnnotations

func (x *PostureDeployment) GetAnnotations() map[string]string

func (*PostureDeployment) GetCreateTime

func (x *PostureDeployment) GetCreateTime() *timestamppb.Timestamp

func (*PostureDeployment) GetDescription

func (x *PostureDeployment) GetDescription() string

func (*PostureDeployment) GetDesiredPostureId

func (x *PostureDeployment) GetDesiredPostureId() string

func (*PostureDeployment) GetDesiredPostureRevisionId

func (x *PostureDeployment) GetDesiredPostureRevisionId() string

func (*PostureDeployment) GetEtag

func (x *PostureDeployment) GetEtag() string

func (*PostureDeployment) GetFailureMessage

func (x *PostureDeployment) GetFailureMessage() string

func (*PostureDeployment) GetName

func (x *PostureDeployment) GetName() string

func (*PostureDeployment) GetPostureId

func (x *PostureDeployment) GetPostureId() string

func (*PostureDeployment) GetPostureRevisionId

func (x *PostureDeployment) GetPostureRevisionId() string

func (*PostureDeployment) GetReconciling

func (x *PostureDeployment) GetReconciling() bool

func (*PostureDeployment) GetState

func (*PostureDeployment) GetTargetResource

func (x *PostureDeployment) GetTargetResource() string

func (*PostureDeployment) GetUpdateTime

func (x *PostureDeployment) GetUpdateTime() *timestamppb.Timestamp

func (*PostureDeployment) ProtoMessage

func (*PostureDeployment) ProtoMessage()

func (*PostureDeployment) ProtoReflect

func (x *PostureDeployment) ProtoReflect() protoreflect.Message

func (*PostureDeployment) Reset

func (x *PostureDeployment) Reset()

func (*PostureDeployment) String

func (x *PostureDeployment) String() string

PostureDeployment_State

type PostureDeployment_State int32

State of a PostureDeployment.

PostureDeployment_STATE_UNSPECIFIED, PostureDeployment_CREATING, PostureDeployment_DELETING, PostureDeployment_UPDATING, PostureDeployment_ACTIVE, PostureDeployment_CREATE_FAILED, PostureDeployment_UPDATE_FAILED, PostureDeployment_DELETE_FAILED

const (
	// Unspecified operation state.
	PostureDeployment_STATE_UNSPECIFIED PostureDeployment_State = 0
	// The PostureDeployment is being created.
	PostureDeployment_CREATING PostureDeployment_State = 1
	// The PostureDeployment is being deleted.
	PostureDeployment_DELETING PostureDeployment_State = 2
	// The PostureDeployment state is being updated.
	PostureDeployment_UPDATING PostureDeployment_State = 3
	// The PostureDeployment state is active and in use.
	PostureDeployment_ACTIVE PostureDeployment_State = 4
	// The PostureDeployment creation failed.
	PostureDeployment_CREATE_FAILED PostureDeployment_State = 5
	// The PostureDeployment update failed.
	PostureDeployment_UPDATE_FAILED PostureDeployment_State = 6
	// The PostureDeployment deletion failed.
	PostureDeployment_DELETE_FAILED PostureDeployment_State = 7
)

func (PostureDeployment_State) Descriptor

func (PostureDeployment_State) Enum

func (PostureDeployment_State) EnumDescriptor

func (PostureDeployment_State) EnumDescriptor() ([]byte, []int)

Deprecated: Use PostureDeployment_State.Descriptor instead.

func (PostureDeployment_State) Number

func (PostureDeployment_State) String

func (x PostureDeployment_State) String() string

func (PostureDeployment_State) Type

PostureTemplate

type PostureTemplate struct {

	// Output only. Identifier. The name of the Posture template will be of the
	// format
	// organizations/{organization}/locations/{location}/postureTemplates/{postureTemplate}
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The revision_id of a PostureTemplate.
	RevisionId string `protobuf:"bytes,2,opt,name=revision_id,json=revisionId,proto3" json:"revision_id,omitempty"`
	// Output only. Description of the Posture template.
	Description string `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	// Output only. State of PostureTemplate resource.
	State PostureTemplate_State `protobuf:"varint,4,opt,name=state,proto3,enum=google.cloud.securityposture.v1.PostureTemplate_State" json:"state,omitempty"`
	// Output only. Policy_sets to be used by the user.
	PolicySets []*PolicySet `protobuf:"bytes,5,rep,name=policy_sets,json=policySets,proto3" json:"policy_sets,omitempty"`
	// contains filtered or unexported fields
}

PostureTemplates Message describing PostureTemplate object.

func (*PostureTemplate) Descriptor

func (*PostureTemplate) Descriptor() ([]byte, []int)

Deprecated: Use PostureTemplate.ProtoReflect.Descriptor instead.

func (*PostureTemplate) GetDescription

func (x *PostureTemplate) GetDescription() string

func (*PostureTemplate) GetName

func (x *PostureTemplate) GetName() string

func (*PostureTemplate) GetPolicySets

func (x *PostureTemplate) GetPolicySets() []*PolicySet

func (*PostureTemplate) GetRevisionId

func (x *PostureTemplate) GetRevisionId() string

func (*PostureTemplate) GetState

func (x *PostureTemplate) GetState() PostureTemplate_State

func (*PostureTemplate) ProtoMessage

func (*PostureTemplate) ProtoMessage()

func (*PostureTemplate) ProtoReflect

func (x *PostureTemplate) ProtoReflect() protoreflect.Message

func (*PostureTemplate) Reset

func (x *PostureTemplate) Reset()

func (*PostureTemplate) String

func (x *PostureTemplate) String() string

PostureTemplate_State

type PostureTemplate_State int32

State of a PostureTemplate

PostureTemplate_STATE_UNSPECIFIED, PostureTemplate_ACTIVE, PostureTemplate_DEPRECATED

const (
	// Unspecified state
	PostureTemplate_STATE_UNSPECIFIED PostureTemplate_State = 0
	// If the Posture template is adhering to the latest controls and standards.
	PostureTemplate_ACTIVE PostureTemplate_State = 1
	// If the Posture template controls and standards are outdated and not
	// recommended for use.
	PostureTemplate_DEPRECATED PostureTemplate_State = 2
)

func (PostureTemplate_State) Descriptor

func (PostureTemplate_State) Enum

func (PostureTemplate_State) EnumDescriptor

func (PostureTemplate_State) EnumDescriptor() ([]byte, []int)

Deprecated: Use PostureTemplate_State.Descriptor instead.

func (PostureTemplate_State) Number

func (PostureTemplate_State) String

func (x PostureTemplate_State) String() string

func (PostureTemplate_State) Type

Posture_State

type Posture_State int32

State of a Posture.

Posture_STATE_UNSPECIFIED, Posture_DEPRECATED, Posture_DRAFT, Posture_ACTIVE

const (
	// Unspecified operation state.
	Posture_STATE_UNSPECIFIED Posture_State = 0
	// The Posture is marked deprecated when it is not in use by the user.
	Posture_DEPRECATED Posture_State = 1
	// The Posture is created successfully but is not yet ready for usage.
	Posture_DRAFT Posture_State = 2
	// The Posture state is active. Ready for use/deployments.
	Posture_ACTIVE Posture_State = 3
)

func (Posture_State) Descriptor

func (Posture_State) Enum

func (x Posture_State) Enum() *Posture_State

func (Posture_State) EnumDescriptor

func (Posture_State) EnumDescriptor() ([]byte, []int)

Deprecated: Use Posture_State.Descriptor instead.

func (Posture_State) Number

func (Posture_State) String

func (x Posture_State) String() string

func (Posture_State) Type

SecurityHealthAnalyticsCustomModule

type SecurityHealthAnalyticsCustomModule struct {

	// Output only. Immutable. The id of the custom module.
	// The id is server-generated and is not user settable.
	// It will be a numeric id containing 1-20 digits.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Optional. The display name of the Security Health Analytics custom module.
	// This display name becomes the finding category for all findings that are
	// returned by this custom module. The display name must be between 1 and
	// 128 characters, start with a lowercase letter, and contain alphanumeric
	// characters or underscores only.
	DisplayName string `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Required. custom module details
	Config *CustomConfig `protobuf:"bytes,3,opt,name=config,proto3" json:"config,omitempty"`
	// The state of enablement for the module at its level of the resource
	// hierarchy.
	ModuleEnablementState EnablementState `protobuf:"varint,4,opt,name=module_enablement_state,json=moduleEnablementState,proto3,enum=google.cloud.securityposture.v1.EnablementState" json:"module_enablement_state,omitempty"`
	// contains filtered or unexported fields
}

Message for SHA Custom Module

func (*SecurityHealthAnalyticsCustomModule) Descriptor

func (*SecurityHealthAnalyticsCustomModule) Descriptor() ([]byte, []int)

Deprecated: Use SecurityHealthAnalyticsCustomModule.ProtoReflect.Descriptor instead.

func (*SecurityHealthAnalyticsCustomModule) GetConfig

func (*SecurityHealthAnalyticsCustomModule) GetDisplayName

func (x *SecurityHealthAnalyticsCustomModule) GetDisplayName() string

func (*SecurityHealthAnalyticsCustomModule) GetId

func (*SecurityHealthAnalyticsCustomModule) GetModuleEnablementState

func (x *SecurityHealthAnalyticsCustomModule) GetModuleEnablementState() EnablementState

func (*SecurityHealthAnalyticsCustomModule) ProtoMessage

func (*SecurityHealthAnalyticsCustomModule) ProtoMessage()

func (*SecurityHealthAnalyticsCustomModule) ProtoReflect

func (*SecurityHealthAnalyticsCustomModule) Reset

func (*SecurityHealthAnalyticsCustomModule) String

SecurityHealthAnalyticsModule

type SecurityHealthAnalyticsModule struct {

	// Required. The name of the module eg: BIGQUERY_TABLE_CMEK_DISABLED.
	ModuleName string `protobuf:"bytes,1,opt,name=module_name,json=moduleName,proto3" json:"module_name,omitempty"`
	// The state of enablement for the module at its level of the resource
	// hierarchy.
	ModuleEnablementState EnablementState `protobuf:"varint,2,opt,name=module_enablement_state,json=moduleEnablementState,proto3,enum=google.cloud.securityposture.v1.EnablementState" json:"module_enablement_state,omitempty"`
	// contains filtered or unexported fields
}

Message for Security Health Analytics built-in detector.

func (*SecurityHealthAnalyticsModule) Descriptor

func (*SecurityHealthAnalyticsModule) Descriptor() ([]byte, []int)

Deprecated: Use SecurityHealthAnalyticsModule.ProtoReflect.Descriptor instead.

func (*SecurityHealthAnalyticsModule) GetModuleEnablementState

func (x *SecurityHealthAnalyticsModule) GetModuleEnablementState() EnablementState

func (*SecurityHealthAnalyticsModule) GetModuleName

func (x *SecurityHealthAnalyticsModule) GetModuleName() string

func (*SecurityHealthAnalyticsModule) ProtoMessage

func (*SecurityHealthAnalyticsModule) ProtoMessage()

func (*SecurityHealthAnalyticsModule) ProtoReflect

func (*SecurityHealthAnalyticsModule) Reset

func (x *SecurityHealthAnalyticsModule) Reset()

func (*SecurityHealthAnalyticsModule) String

SecurityPostureClient

type SecurityPostureClient interface {
	// (-- This option restricts the visibility of the API to only projects that
	// will
	// (-- be labeled as `PREVIEW` or `GOOGLE_INTERNAL` by the service.
	// (-- option (google.api.api_visibility).restriction =
	// "PREVIEW,GOOGLE_INTERNAL"; Postures Lists Postures in a given organization
	// and location. In case a posture has multiple revisions, the latest revision
	// as per UpdateTime will be returned.
	ListPostures(ctx context.Context, in *ListPosturesRequest, opts ...grpc.CallOption) (*ListPosturesResponse, error)
	// Lists revisions of a Posture in a given organization and location.
	ListPostureRevisions(ctx context.Context, in *ListPostureRevisionsRequest, opts ...grpc.CallOption) (*ListPostureRevisionsResponse, error)
	// Gets a posture in a given organization and location.
	// User must provide revision_id to retrieve a specific revision of the
	// resource.
	// NOT_FOUND error is returned if the revision_id or the Posture name does not
	// exist. In case revision_id is not provided then the latest Posture revision
	// by UpdateTime is returned.
	GetPosture(ctx context.Context, in *GetPostureRequest, opts ...grpc.CallOption) (*Posture, error)
	// Creates a new Posture resource.
	// If a Posture with the specified name already exists in the specified
	// organization and location, the long running operation returns a
	// [ALREADY_EXISTS][google.rpc.Code.ALREADY_EXISTS] error.
	CreatePosture(ctx context.Context, in *CreatePostureRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates an existing Posture.
	// A new revision of the posture will be created if the revision to be
	// updated is currently deployed on a workload.
	// Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the
	// Posture does not exist.
	// Returns a `google.rpc.Status` with `google.rpc.Code.ABORTED` if the etag
	// supplied in the request does not match the persisted etag of the Posture.
	// Updatable fields are state, description and policy_sets.
	// State update operation cannot be clubbed with update of description and
	// policy_sets.
	// An ACTIVE posture can be updated to both DRAFT or DEPRECATED states.
	// Postures in DRAFT or DEPRECATED states can only be updated to ACTIVE state.
	UpdatePosture(ctx context.Context, in *UpdatePostureRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes all the revisions of a resource.
	// A posture can only be deleted when none of the revisions are deployed to
	// any workload.
	DeletePosture(ctx context.Context, in *DeletePostureRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Extracts existing policies on a workload as a posture.
	// If a Posture on the given workload already exists, the long running
	// operation returns a [ALREADY_EXISTS][google.rpc.Code.ALREADY_EXISTS] error.
	ExtractPosture(ctx context.Context, in *ExtractPostureRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// PostureDeployments
	// Lists PostureDeployments in a given project and location.
	ListPostureDeployments(ctx context.Context, in *ListPostureDeploymentsRequest, opts ...grpc.CallOption) (*ListPostureDeploymentsResponse, error)
	// Gets details of a single PostureDeployment.
	GetPostureDeployment(ctx context.Context, in *GetPostureDeploymentRequest, opts ...grpc.CallOption) (*PostureDeployment, error)
	// Creates a new PostureDeployment in a given project and location.
	CreatePostureDeployment(ctx context.Context, in *CreatePostureDeploymentRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates the parameters of a single PostureDeployment.
	UpdatePostureDeployment(ctx context.Context, in *UpdatePostureDeploymentRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single PostureDeployment.
	DeletePostureDeployment(ctx context.Context, in *DeletePostureDeploymentRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// PostureTemplates
	// Lists all the PostureTemplates available to the user.
	ListPostureTemplates(ctx context.Context, in *ListPostureTemplatesRequest, opts ...grpc.CallOption) (*ListPostureTemplatesResponse, error)
	// Gets a PostureTemplate.
	// User must provide revision_id to retrieve a specific revision of the
	// resource.
	// NOT_FOUND error is returned if the revision_id or the PostureTemplate name
	// does not exist. In case revision_id is not provided then the
	// PostureTemplate with latest revision_id is returned.
	GetPostureTemplate(ctx context.Context, in *GetPostureTemplateRequest, opts ...grpc.CallOption) (*PostureTemplate, error)
}

SecurityPostureClient is the client API for SecurityPosture service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

func NewSecurityPostureClient

func NewSecurityPostureClient(cc grpc.ClientConnInterface) SecurityPostureClient

SecurityPostureServer

type SecurityPostureServer interface {
	// (-- This option restricts the visibility of the API to only projects that
	// will
	// (-- be labeled as `PREVIEW` or `GOOGLE_INTERNAL` by the service.
	// (-- option (google.api.api_visibility).restriction =
	// "PREVIEW,GOOGLE_INTERNAL"; Postures Lists Postures in a given organization
	// and location. In case a posture has multiple revisions, the latest revision
	// as per UpdateTime will be returned.
	ListPostures(context.Context, *ListPosturesRequest) (*ListPosturesResponse, error)
	// Lists revisions of a Posture in a given organization and location.
	ListPostureRevisions(context.Context, *ListPostureRevisionsRequest) (*ListPostureRevisionsResponse, error)
	// Gets a posture in a given organization and location.
	// User must provide revision_id to retrieve a specific revision of the
	// resource.
	// NOT_FOUND error is returned if the revision_id or the Posture name does not
	// exist. In case revision_id is not provided then the latest Posture revision
	// by UpdateTime is returned.
	GetPosture(context.Context, *GetPostureRequest) (*Posture, error)
	// Creates a new Posture resource.
	// If a Posture with the specified name already exists in the specified
	// organization and location, the long running operation returns a
	// [ALREADY_EXISTS][google.rpc.Code.ALREADY_EXISTS] error.
	CreatePosture(context.Context, *CreatePostureRequest) (*longrunningpb.Operation, error)
	// Updates an existing Posture.
	// A new revision of the posture will be created if the revision to be
	// updated is currently deployed on a workload.
	// Returns a `google.rpc.Status` with `google.rpc.Code.NOT_FOUND` if the
	// Posture does not exist.
	// Returns a `google.rpc.Status` with `google.rpc.Code.ABORTED` if the etag
	// supplied in the request does not match the persisted etag of the Posture.
	// Updatable fields are state, description and policy_sets.
	// State update operation cannot be clubbed with update of description and
	// policy_sets.
	// An ACTIVE posture can be updated to both DRAFT or DEPRECATED states.
	// Postures in DRAFT or DEPRECATED states can only be updated to ACTIVE state.
	UpdatePosture(context.Context, *UpdatePostureRequest) (*longrunningpb.Operation, error)
	// Deletes all the revisions of a resource.
	// A posture can only be deleted when none of the revisions are deployed to
	// any workload.
	DeletePosture(context.Context, *DeletePostureRequest) (*longrunningpb.Operation, error)
	// Extracts existing policies on a workload as a posture.
	// If a Posture on the given workload already exists, the long running
	// operation returns a [ALREADY_EXISTS][google.rpc.Code.ALREADY_EXISTS] error.
	ExtractPosture(context.Context, *ExtractPostureRequest) (*longrunningpb.Operation, error)
	// PostureDeployments
	// Lists PostureDeployments in a given project and location.
	ListPostureDeployments(context.Context, *ListPostureDeploymentsRequest) (*ListPostureDeploymentsResponse, error)
	// Gets details of a single PostureDeployment.
	GetPostureDeployment(context.Context, *GetPostureDeploymentRequest) (*PostureDeployment, error)
	// Creates a new PostureDeployment in a given project and location.
	CreatePostureDeployment(context.Context, *CreatePostureDeploymentRequest) (*longrunningpb.Operation, error)
	// Updates the parameters of a single PostureDeployment.
	UpdatePostureDeployment(context.Context, *UpdatePostureDeploymentRequest) (*longrunningpb.Operation, error)
	// Deletes a single PostureDeployment.
	DeletePostureDeployment(context.Context, *DeletePostureDeploymentRequest) (*longrunningpb.Operation, error)
	// PostureTemplates
	// Lists all the PostureTemplates available to the user.
	ListPostureTemplates(context.Context, *ListPostureTemplatesRequest) (*ListPostureTemplatesResponse, error)
	// Gets a PostureTemplate.
	// User must provide revision_id to retrieve a specific revision of the
	// resource.
	// NOT_FOUND error is returned if the revision_id or the PostureTemplate name
	// does not exist. In case revision_id is not provided then the
	// PostureTemplate with latest revision_id is returned.
	GetPostureTemplate(context.Context, *GetPostureTemplateRequest) (*PostureTemplate, error)
}

SecurityPostureServer is the server API for SecurityPosture service. All implementations should embed UnimplementedSecurityPostureServer for forward compatibility

UnimplementedSecurityPostureServer

type UnimplementedSecurityPostureServer struct {
}

UnimplementedSecurityPostureServer should be embedded to have forward compatible implementations.

func (UnimplementedSecurityPostureServer) CreatePosture

func (UnimplementedSecurityPostureServer) CreatePostureDeployment

func (UnimplementedSecurityPostureServer) DeletePosture

func (UnimplementedSecurityPostureServer) DeletePostureDeployment

func (UnimplementedSecurityPostureServer) ExtractPosture

func (UnimplementedSecurityPostureServer) GetPosture

func (UnimplementedSecurityPostureServer) GetPostureDeployment

func (UnimplementedSecurityPostureServer) GetPostureTemplate

func (UnimplementedSecurityPostureServer) ListPostureDeployments

func (UnimplementedSecurityPostureServer) ListPostureRevisions

func (UnimplementedSecurityPostureServer) ListPostureTemplates

func (UnimplementedSecurityPostureServer) ListPostures

func (UnimplementedSecurityPostureServer) UpdatePosture

func (UnimplementedSecurityPostureServer) UpdatePostureDeployment

UnsafeSecurityPostureServer

type UnsafeSecurityPostureServer interface {
	// contains filtered or unexported methods
}

UnsafeSecurityPostureServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to SecurityPostureServer will result in compilation errors.

UpdatePostureDeploymentRequest

type UpdatePostureDeploymentRequest struct {

	// Required. Field mask is used to specify the fields to be overwritten in the
	// PostureDeployment resource by the update.
	// The fields specified in the update_mask are relative to the resource, not
	// the full request. A field will be overwritten if it is in the mask. If the
	// user does not provide a mask then all fields will be overwritten.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,1,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// Required. The resource being updated.
	PostureDeployment *PostureDeployment `protobuf:"bytes,2,opt,name=posture_deployment,json=postureDeployment,proto3" json:"posture_deployment,omitempty"`
	// contains filtered or unexported fields
}

Message for updating a PostureDeployment.

func (*UpdatePostureDeploymentRequest) Descriptor

func (*UpdatePostureDeploymentRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePostureDeploymentRequest.ProtoReflect.Descriptor instead.

func (*UpdatePostureDeploymentRequest) GetPostureDeployment

func (x *UpdatePostureDeploymentRequest) GetPostureDeployment() *PostureDeployment

func (*UpdatePostureDeploymentRequest) GetUpdateMask

func (*UpdatePostureDeploymentRequest) ProtoMessage

func (*UpdatePostureDeploymentRequest) ProtoMessage()

func (*UpdatePostureDeploymentRequest) ProtoReflect

func (*UpdatePostureDeploymentRequest) Reset

func (x *UpdatePostureDeploymentRequest) Reset()

func (*UpdatePostureDeploymentRequest) String

UpdatePostureRequest

type UpdatePostureRequest struct {

	// Required. Field mask is used to specify the fields to be overwritten in the
	// Posture resource by the update.
	// The fields specified in the update_mask are relative to the resource, not
	// the full request. A field will be overwritten if it is in the mask. If the
	// user does not provide a mask then all fields will be overwritten.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,1,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// Required. The resource being updated.
	Posture *Posture `protobuf:"bytes,2,opt,name=posture,proto3" json:"posture,omitempty"`
	// Required. Posture revision which needs to be updated.
	RevisionId string `protobuf:"bytes,3,opt,name=revision_id,json=revisionId,proto3" json:"revision_id,omitempty"`
	// contains filtered or unexported fields
}

Message for updating a Posture.

func (*UpdatePostureRequest) Descriptor

func (*UpdatePostureRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePostureRequest.ProtoReflect.Descriptor instead.

func (*UpdatePostureRequest) GetPosture

func (x *UpdatePostureRequest) GetPosture() *Posture

func (*UpdatePostureRequest) GetRevisionId

func (x *UpdatePostureRequest) GetRevisionId() string

func (*UpdatePostureRequest) GetUpdateMask

func (x *UpdatePostureRequest) GetUpdateMask() *fieldmaskpb.FieldMask

func (*UpdatePostureRequest) ProtoMessage

func (*UpdatePostureRequest) ProtoMessage()

func (*UpdatePostureRequest) ProtoReflect

func (x *UpdatePostureRequest) ProtoReflect() protoreflect.Message

func (*UpdatePostureRequest) Reset

func (x *UpdatePostureRequest) Reset()

func (*UpdatePostureRequest) String

func (x *UpdatePostureRequest) String() string