Classes
AllowedValues
Allowed set of values for the parameter.
AttributeSubstitutionRule
Attribute at the given path is substituted entirely.
CELExpression
CloudControl
A CloudControl is the fundamental unit encapsulating the rules to meet a specific security or compliance intent. It can contain various rule types (like Organization Policies, CEL expressions, etc.) enabling different enforcement modes (Preventive, Detective, Audit). CloudControls are often parameterized for reusability and can be either BUILT_IN (provided by Google) or CUSTOM (defined by the user).
CloudControlDeployment
CloudControlDeployment represents deployment of a CloudControl on a target resource. Supported target resources are organizations/{organization}, folders/{folder}, and projects/{project}.
CloudControlDeploymentName
Resource name for the CloudControlDeployment resource.
CloudControlDeploymentReference
The reference to a CloudControlDeployment.
CloudControlDetails
CloudControlDetails contains the details of a CloudControl.
CloudControlMetadata
CloudControlMetadata contains the enforcement mode and parameters of a Cloud Control Deployment.
CloudControlName
Resource name for the CloudControl resource.
Config
Config Service manages compliance frameworks, cloud controls, and their configurations.
Config.ConfigBase
Base class for server-side implementations of Config
Config.ConfigClient
Client for Config
ConfigClient
Config client wrapper, for convenient use.
ConfigClientBuilder
Builder class for ConfigClient to provide simple configuration of credentials, endpoint etc.
ConfigClientImpl
Config client wrapper implementation, for convenient use.
ConfigSettings
Settings for ConfigClient instances.
CreateCloudControlRequest
Request message for creating a CloudControl
CreateFrameworkDeploymentRequest
Request message for CreateFrameworkDeployment API.
CreateFrameworkRequest
Request message for creating a Framework
DeleteCloudControlRequest
Request message for deleting a CloudControl.
DeleteFrameworkDeploymentRequest
Request message for DeleteFrameworkDeployment.
DeleteFrameworkRequest
Request message for deleting a Framework.
Deployment
Deployment service allows users to manage deployments of Frameworks and Cloud Controls on a target resource.
Deployment.DeploymentBase
Base class for server-side implementations of Deployment
Deployment.DeploymentClient
Client for Deployment
DeploymentClient
Deployment client wrapper, for convenient use.
DeploymentClientBuilder
Builder class for DeploymentClient to provide simple configuration of credentials, endpoint etc.
DeploymentClientImpl
Deployment client wrapper implementation, for convenient use.
DeploymentSettings
Settings for DeploymentClient instances.
FolderCreationConfig
FolderCreationConfig contains the config to create a new folder to be used as the target_resource of a deployment.
Framework
A Framework is a collection of CloudControls to address security and compliance requirements. Frameworks can be used for prevention, detection, and auditing. They can be either built-in, industry-standard frameworks provided by GCP/AZURE/AWS (e.g., NIST, FedRAMP) or custom frameworks created by users.
Framework.Types
Container for nested types declared in the Framework message type.
FrameworkDeployment
FrameworkDeployment represents deployment of a Framework on a target resource. Supported target resources are organizations/{organization}, folders/{folder}, and projects/{project}.
FrameworkDeploymentName
Resource name for the FrameworkDeployment resource.
FrameworkDeploymentReference
The reference to a FrameworkDeployment.
FrameworkName
Resource name for the Framework resource.
FrameworkReference
FrameworkReference contains the reference of a framework.
GetCloudControlDeploymentRequest
Request message for GetCloudControlDeployment.
GetCloudControlRequest
Request message for getting a CloudControl.
GetFrameworkDeploymentRequest
Request message for GetFrameworkDeployment.
GetFrameworkRequest
Request message for getting a Framework.
IntRange
Number range for number parameters.
ListCloudControlDeploymentsRequest
Request message for ListCloudControlDeployments.
ListCloudControlDeploymentsResponse
Response message for ListCloudControlDeployments.
ListCloudControlsRequest
Request message for listing CloudControls.
ListCloudControlsResponse
Response message for ListCloudControls.
ListFrameworkDeploymentsRequest
Request message for ListFrameworkDeployments.
ListFrameworkDeploymentsResponse
Response message for ListFrameworkDeployments.
ListFrameworksRequest
Request message for listing Frameworks.
ListFrameworksResponse
Response message for listing Frameworks. Contains a paginated list of Framework resources.
OperationMetadata
Represents the metadata of the long-running operation.
OrganizationLocationName
Resource name for the OrganizationLocation resource.
ParamValue
Possible parameter value types.
Parameter
Parameters is a key-value pair.
ParameterSpec
A parameter spec of the cloud control.
ParameterSpec.Types
Container for nested types declared in the ParameterSpec message type.
ParameterSubstitutionRule
Parameter substitution rules.
PlaceholderSubstitutionRule
Placeholder is substituted in the rendered string.
ProjectCreationConfig
ProjectCreationConfig contains the config to create a new project to be used as the target_resource of a deployment.
RegexpPattern
Regular Expression Validator for parameter values.
Rule
A rule of the cloud control.
StringList
A list of strings.
TargetResourceConfig
TargetResourceConfig contains either the name of the target_resource or contains the config to create a new target_resource.
TargetResourceCreationConfig
TargetResourceCreationConfig contains the config to create a new resource to be used as the target_resource of a deployment.
UpdateCloudControlRequest
Request message for UpdateCloudControl.
UpdateFrameworkRequest
Request message for updating a Framework.
Validation
Validation of the parameter.
Enums
CELExpression.CriteriaOneofCase
Enum of possible cases for the "criteria" oneof.
CloudControlCategory
The category of the cloud control.
CloudControlDeploymentName.ResourceNameType
The possible contents of CloudControlDeploymentName.
CloudControlName.ResourceNameType
The possible contents of CloudControlName.
CloudProvider
The cloud platform.
DeploymentState
DeploymentState represents the state of the Deployment resource.
EnforcementMode
The enforcement mode of the cloud control.
Framework.Types.FrameworkType
The type of the framework.
FrameworkCategory
The category of the framework.
FrameworkDeploymentName.ResourceNameType
The possible contents of FrameworkDeploymentName.
FrameworkName.ResourceNameType
The possible contents of FrameworkName.
OrganizationLocationName.ResourceNameType
The possible contents of OrganizationLocationName.
ParamValue.KindOneofCase
Enum of possible cases for the "kind" oneof.
ParameterSpec.Types.ValueType
The type of the parameter value.
ParameterSubstitutionRule.SubstitutionTypeOneofCase
Enum of possible cases for the "substitution_type" oneof.
Rule.ImplementationOneofCase
Enum of possible cases for the "implementation" oneof.
RuleActionType
The action type of the rule.
Severity
The severity of the finding.
TargetResourceConfig.ResourceConfigOneofCase
Enum of possible cases for the "resource_config" oneof.
TargetResourceCreationConfig.ResourceCreationConfigOneofCase
Enum of possible cases for the "resource_creation_config" oneof.
TargetResourceType
TargetResourceType represents the type of resource that a control or framework can be applied to.
Validation.ConstraintOneofCase
Enum of possible cases for the "constraint" oneof.