Class ResourceValueConfig (1.30.0)

Version 1.30.0

• 1.35.1 (latest)
• 1.35.0
• 1.33.1
• 1.32.1
• 1.31.0
• 1.30.1
• 1.29.0
• 1.28.0
• 1.27.0
• 1.26.1
• 1.25.0
• 1.24.1
• 1.23.2
• 1.22.0
• 1.21.0
• 1.20.0
• 1.19.1
• 1.18.2
• 1.17.0
• 1.16.2
• 1.15.0
• 1.14.0
• 1.13.0
• 1.12.0
• 1.11.1
• 1.10.0
• 1.9.0
• 1.8.0
• 1.7.0
• 1.6.0
• 1.5.2
• 1.4.0
• 1.3.1
• 1.2.0
• 1.1.0
• 1.0.0
• 0.7.3
• 0.6.0
• 0.5.0
• 0.4.0
• 0.3.0

ResourceValueConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.

Attributes
Name	Description
name	str Name for the resource value config
resource_value	google.cloud.securitycenter_v2.types.ResourceValue Resource value level this expression represents Only required when there is no SDP mapping in the request
tag_values	MutableSequence[str] Required. Tag values combined with AND to check against. Values in the form "tagValues/123" E.g. [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
resource_type	str Apply resource_value only to resources that match resource_type. resource_type will be checked with "AND" of other resources. E.g. "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
scope	str Project or folder to scope this config to. For example, "project/456" would apply this config only to resources in "project/456" scope will be checked with "AND" of other resources.
resource_labels_selector	MutableMapping[str, str] List of resource labels to search for, evaluated with AND. E.g. "resource_labels_selector": {"key": "value", "env": "prod"} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
description	str Description of the resource value config.
create_time	google.protobuf.timestamp_pb2.Timestamp Output only. Timestamp this resource value config was created.
update_time	google.protobuf.timestamp_pb2.Timestamp Output only. Timestamp this resource value config was last updated.
sensitive_data_protection_mapping	google.cloud.securitycenter_v2.types.ResourceValueConfig.SensitiveDataProtectionMapping A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset".

Classes

ResourceLabelsSelectorEntry

ResourceLabelsSelectorEntry(mapping=None, *, ignore_unknown_fields=False, **kwargs)

The abstract base class for a message.

Parameters
Name	Description
kwargs	dict Keys and values corresponding to the fields of the message.
mapping	Union[dict, .Message] A dictionary or message to be used to determine the values for this message.
ignore_unknown_fields	Optional(bool) If True, do not raise errors for unknown fields. Only applied if mapping is a mapping type or there are keyword parameters.

SensitiveDataProtectionMapping

SensitiveDataProtectionMapping(
    mapping=None, *, ignore_unknown_fields=False, **kwargs
)

Resource value mapping for Sensitive Data Protection findings If any of these mappings have a resource value that is not unspecified, the resource_value field will be ignored when reading this configuration.