Reference documentation and code samples for the Cloud Security Command Center V1 API class Google::Cloud::SecurityCenter::V1::Access.
Represents an access event.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#caller_ip
def caller_ip() -> ::String
- (::String) — Caller's IP address, such as "1.1.1.1".
#caller_ip=
def caller_ip=(value) -> ::String
- value (::String) — Caller's IP address, such as "1.1.1.1".
- (::String) — Caller's IP address, such as "1.1.1.1".
#caller_ip_geo
def caller_ip_geo() -> ::Google::Cloud::SecurityCenter::V1::Geolocation
- (::Google::Cloud::SecurityCenter::V1::Geolocation) — The caller IP's geolocation, which identifies where the call came from.
#caller_ip_geo=
def caller_ip_geo=(value) -> ::Google::Cloud::SecurityCenter::V1::Geolocation
- value (::Google::Cloud::SecurityCenter::V1::Geolocation) — The caller IP's geolocation, which identifies where the call came from.
- (::Google::Cloud::SecurityCenter::V1::Geolocation) — The caller IP's geolocation, which identifies where the call came from.
#method_name
def method_name() -> ::String
- (::String) — The method that the service account called, e.g. "SetIamPolicy".
#method_name=
def method_name=(value) -> ::String
- value (::String) — The method that the service account called, e.g. "SetIamPolicy".
- (::String) — The method that the service account called, e.g. "SetIamPolicy".
#principal_email
def principal_email() -> ::String
-
(::String) — Associated email, such as "foo@google.com".
The email address of the authenticated user (or service account on behalf of third party principal) making the request. For third party identity callers, the
principal_subject
field is populated instead of this field. For privacy reasons, the principal email address is sometimes redacted. For more information, see Caller identities in audit logs.
#principal_email=
def principal_email=(value) -> ::String
-
value (::String) — Associated email, such as "foo@google.com".
The email address of the authenticated user (or service account on behalf of third party principal) making the request. For third party identity callers, the
principal_subject
field is populated instead of this field. For privacy reasons, the principal email address is sometimes redacted. For more information, see Caller identities in audit logs.
-
(::String) — Associated email, such as "foo@google.com".
The email address of the authenticated user (or service account on behalf of third party principal) making the request. For third party identity callers, the
principal_subject
field is populated instead of this field. For privacy reasons, the principal email address is sometimes redacted. For more information, see Caller identities in audit logs.
#principal_subject
def principal_subject() -> ::String
-
(::String) — A string representing the principal_subject associated with the identity.
As compared to
principal_email
, supports principals that aren't associated with email addresses, such as third party principals. For most identities, the format will beprincipal://iam.googleapis.com/{identity pool name}/subjects/\\{subject}
except for some GKE identities (GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy formatserviceAccount:{identity pool name}[{subject}]
#principal_subject=
def principal_subject=(value) -> ::String
-
value (::String) — A string representing the principal_subject associated with the identity.
As compared to
principal_email
, supports principals that aren't associated with email addresses, such as third party principals. For most identities, the format will beprincipal://iam.googleapis.com/{identity pool name}/subjects/\\{subject}
except for some GKE identities (GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy formatserviceAccount:{identity pool name}[{subject}]
-
(::String) — A string representing the principal_subject associated with the identity.
As compared to
principal_email
, supports principals that aren't associated with email addresses, such as third party principals. For most identities, the format will beprincipal://iam.googleapis.com/{identity pool name}/subjects/\\{subject}
except for some GKE identities (GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy formatserviceAccount:{identity pool name}[{subject}]
#service_account_delegation_info
def service_account_delegation_info() -> ::Array<::Google::Cloud::SecurityCenter::V1::ServiceAccountDelegationInfo>
- (::Array<::Google::Cloud::SecurityCenter::V1::ServiceAccountDelegationInfo>) — Identity delegation history of an authenticated service account that makes the request. It contains information on the real authorities that try to access GCP resources by delegating on a service account. When multiple authorities are present, they are guaranteed to be sorted based on the original ordering of the identity delegation events.
#service_account_delegation_info=
def service_account_delegation_info=(value) -> ::Array<::Google::Cloud::SecurityCenter::V1::ServiceAccountDelegationInfo>
- value (::Array<::Google::Cloud::SecurityCenter::V1::ServiceAccountDelegationInfo>) — Identity delegation history of an authenticated service account that makes the request. It contains information on the real authorities that try to access GCP resources by delegating on a service account. When multiple authorities are present, they are guaranteed to be sorted based on the original ordering of the identity delegation events.
- (::Array<::Google::Cloud::SecurityCenter::V1::ServiceAccountDelegationInfo>) — Identity delegation history of an authenticated service account that makes the request. It contains information on the real authorities that try to access GCP resources by delegating on a service account. When multiple authorities are present, they are guaranteed to be sorted based on the original ordering of the identity delegation events.
#service_account_key_name
def service_account_key_name() -> ::String
-
(::String) — The name of the service account key used to create or exchange
credentials for authenticating the service account making the request.
This is a scheme-less URI full resource name. For example:
"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}"
#service_account_key_name=
def service_account_key_name=(value) -> ::String
-
value (::String) — The name of the service account key used to create or exchange
credentials for authenticating the service account making the request.
This is a scheme-less URI full resource name. For example:
"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}"
-
(::String) — The name of the service account key used to create or exchange
credentials for authenticating the service account making the request.
This is a scheme-less URI full resource name. For example:
"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}"
#service_name
def service_name() -> ::String
- (::String) — This is the API service that the service account made a call to, e.g. "iam.googleapis.com"
#service_name=
def service_name=(value) -> ::String
- value (::String) — This is the API service that the service account made a call to, e.g. "iam.googleapis.com"
- (::String) — This is the API service that the service account made a call to, e.g. "iam.googleapis.com"
#user_agent_family
def user_agent_family() -> ::String
- (::String) — What kind of user agent is associated, e.g. operating system shells, embedded or stand-alone applications, etc.
#user_agent_family=
def user_agent_family=(value) -> ::String
- value (::String) — What kind of user agent is associated, e.g. operating system shells, embedded or stand-alone applications, etc.
- (::String) — What kind of user agent is associated, e.g. operating system shells, embedded or stand-alone applications, etc.