gcloud compliance-manager frameworks create

NAME

gcloud compliance-manager frameworks create - create a framework

SYNOPSIS

gcloud compliance-manager frameworks create (FRAMEWORK : --location=LOCATION --organization=ORGANIZATION) [--category=[CATEGORY,…]] [--cloud-control-details=[majorRevisionId=MAJORREVISIONID],[name=NAME],[parameters=PARAMETERS]] [--description=DESCRIPTION] [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

Create a framework for a given organization and location.

EXAMPLES

To create a framework my-framework-id in organization my-organization-id and location global, run:

gcloud compliance-manager frameworks create my-framework-id --organization=my-organization-id --location=global --description="My framework description" --display-name="My framework display name" --controls='[{"name":
 "organizations/my-organization-id/locations/global/cloudControls/my\
-control-1", "majorRevisionId": "1", "parameters": []}]' \

POSITIONAL ARGUMENTS

Framework resource - Identifier. The name of the framework, in the format organizations/{organization}/locations/{location}/frameworks/{framework_id}. The only supported location is global. The arguments in this group can be used to specify the attributes of this resource.

This must be specified.

FRAMEWORK

ID of the framework or fully qualified identifier for the framework.

To set the framework attribute:

• provide the argument framework on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION

The location id of the framework resource.

To set the location attribute:

• provide the argument framework on the command line with a fully specified name;
• provide the argument --location on the command line.

--organization=ORGANIZATION

The organization id of the framework resource.

To set the organization attribute:

• provide the argument framework on the command line with a fully specified name;
• provide the argument --organization on the command line.

FLAGS

--category=[CATEGORY,…]

The category of the framework. CATEGORY must be one of:

assured-workloads

An Assured Workloads framework.

custom-framework

A user-created framework.

data-security

A data security posture framework.

google-best-practices

A Google's best practices framework.

industry-defined-standard

An industry-defined framework.

--cloud-control-details=[majorRevisionId=MAJORREVISIONID],[name=NAME],[parameters=PARAMETERS]

The cloud control details that are directly added without any grouping in the framework.

majorRevisionId

The major version of the cloud control.

name

The name of the cloud control, in the format organizations/{organization}/locations/{location}/cloudControls/{cloud-control}. The only supported location is global.

parameters

Parameters are key-value pairs that let you provide your custom location requirements, environment requirements, or other settings that are relevant to the cloud control. An example parameter is {"name": "location","value": "us-west-1"}.

name

The name or key of the parameter.

Shorthand Example:

--cloud-control-details=majorRevisionId=int,name=string,parameters=[{name=string}] --cloud-control-details=majorRevisionId=int,name=string,parameters=[{name=string}]

JSON Example:

--cloud-control-details='[{"majorRevisionId": int, "name": "string", "parameters": [{"name": "string"}]}]'

File Example:

--cloud-control-details=path_to_file.(yaml|json)

--description=DESCRIPTION

The description of the framework. The maximum length is 2000 characters.

--display-name=DISPLAY_NAME

The friendly name of the framework. The maximum length is 200 characters.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

API REFERENCE

This command uses the cloudsecuritycompliance/v1 API. The full documentation for this API can be found at: https://cloud.google.com/security-command-center#compliance-management