gcloud alpha compute security-policies update

NAME: gcloud alpha compute security-policies update - update a Compute Engine security policy
SYNOPSIS: gcloud alpha compute security-policies update NAME [--ddos-protection=DDOS_PROTECTION] [--description=DESCRIPTION] [--enable-layer7-ddos-defense] [--enable-ml] [--json-custom-content-types=[CONTENT_TYPE,…]] [--json-parsing=JSON_PARSING] [--layer7-ddos-defense-auto-deploy-confidence-threshold=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_CONFIDENCE_THRESHOLD] [--layer7-ddos-defense-auto-deploy-expiration-sec=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_EXPIRATION_SEC] [--layer7-ddos-defense-auto-deploy-impacted-baseline-threshold=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_IMPACTED_BASELINE_THRESHOLD] [--layer7-ddos-defense-auto-deploy-load-threshold=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_LOAD_THRESHOLD] [--layer7-ddos-defense-rule-visibility=VISIBILITY_TYPE] [--log-level=LOG_LEVEL] [--network-ddos-protection=NETWORK_DDOS_PROTECTION] [--recaptcha-redirect-site-key=RECAPTCHA_REDIRECT_SITE_KEY] [--user-ip-request-headers=[USER_IP_REQUEST_HEADER,…]] [--global | --region=REGION] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: (ALPHA) gcloud alpha compute security-policies update is used to update security policies.
EXAMPLES: To update the description run this:
gcloud alpha compute security-policies update SECURITY_POLICY --description='new description'
POSITIONAL ARGUMENTS: NAME

Name of the security policy to update.
FLAGS: --ddos-protection=DDOS_PROTECTION

The DDoS protection level for network load balancing and instances with external IPs. DDOS_PROTECTION must be one of: STANDARD, ADVANCED, ADVANCED_PREVIEW.

--description=DESCRIPTION

An optional, textual description for the security policy.

--enable-layer7-ddos-defense

Whether to enable Cloud Armor Layer 7 DDoS Defense Adaptive Protection.

--enable-ml

Whether to enable Cloud Armor Adaptive Protection

--json-custom-content-types=[CONTENT_TYPE,…]

A comma-separated list of custom Content-Type header values to apply JSON parsing for preconfigured WAF rules. Only applicable when JSON parsing is enabled, like --json-parsing=STANDARD. When configuring a Content-Type header value, only the type/subtype needs to be specified, and the parameters should be excluded.

--json-parsing=JSON_PARSING

The JSON parsing behavior for this rule. Must be one of the following values: [DISABLED, STANDARD, STANDARD_WITH_GRAPHQL]. JSON_PARSING must be one of: DISABLED, STANDARD, STANDARD_WITH_GRAPHQL.

--layer7-ddos-defense-auto-deploy-confidence-threshold=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_CONFIDENCE_THRESHOLD

Confidence threshold above which Adaptive Protection's auto-deploy takes actions

--layer7-ddos-defense-auto-deploy-expiration-sec=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_EXPIRATION_SEC

Duration over which Adaptive Protection's auto-deployed actions last

--layer7-ddos-defense-auto-deploy-impacted-baseline-threshold=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_IMPACTED_BASELINE_THRESHOLD

Impacted baseline threshold below which Adaptive Protection's auto-deploy takes actions

--layer7-ddos-defense-auto-deploy-load-threshold=LAYER7_DDOS_DEFENSE_AUTO_DEPLOY_LOAD_THRESHOLD

Load threshold above which Adaptive Protection's auto-deploy takes actions

--layer7-ddos-defense-rule-visibility=VISIBILITY_TYPE

The visibility type indicates whether the rules are opaque or transparent. VISIBILITY_TYPE must be one of: STANDARD, PREMIUM.

--log-level=LOG_LEVEL

The level of detail to display for WAF logging. LOG_LEVEL must be one of: NORMAL, VERBOSE.

--network-ddos-protection=NETWORK_DDOS_PROTECTION

The DDoS protection level for network load balancing and instances with external IPs. NETWORK_DDOS_PROTECTION must be one of: STANDARD, ADVANCED, ADVANCED_PREVIEW.

--recaptcha-redirect-site-key=RECAPTCHA_REDIRECT_SITE_KEY

The reCAPTCHA site key to be used for rules using the redirect action and the google-recaptcha redirect type under the security policy.

--user-ip-request-headers=[USER_IP_REQUEST_HEADER,…]

A comma-separated list of request header names to use for resolving the caller's user IP address.

At most one of these can be specified:

--global

If set, the security policy is global.

--region=REGION

Region of the security policy to update. Overrides the default compute/region property value for this command invocation.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES: This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
gcloud compute security-policies update

gcloud beta compute security-policies update