Resource: ResourceValueConfig
A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.
JSON representation |
---|
{ "name": string, "resourceValue": enum ( |
Fields | |
---|---|
name |
Name for the resource value config |
resourceValue |
Required. Resource value level this expression represents |
tagValues[] |
Required. Tag values combined with AND to check against. Values in the form "tagValues/123" E.g. [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing |
resourceType |
Apply resourceValue only to resources that match resourceType. resourceType will be checked with "AND" of other resources. E.g. "storage.googleapis.com/Bucket" with resourceValue "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources. |
scope |
Project or folder to scope this config to. For example, "project/456" would apply this config only to resources in "project/456" scope will be checked with "AND" of other resources. |
resourceLabelsSelector |
List of resource labels to search for, evaluated with AND. E.g. "resourceLabelsSelector": {"key": "value", "env": "prod"} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels An object containing a list of |
description |
Description of the resource value config. |
createTime |
Output only. Timestamp this resource value config was created. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: |
updateTime |
Output only. Timestamp this resource value config was last updated. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: |
cloudProvider |
Cloud provider this configuration applies to |
sensitiveDataProtectionMapping |
A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resourceType that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset". |
ResourceValue
Value enum to map to a resource
Enums | |
---|---|
RESOURCE_VALUE_UNSPECIFIED |
Unspecific value |
HIGH |
High resource value |
MEDIUM |
Medium resource value |
LOW |
Low resource value |
NONE |
No resource value, e.g. ignore these resources |
SensitiveDataProtectionMapping
Resource value mapping for Sensitive Data Protection findings. If any of these mappings have a resource value that is not unspecified, the resourceValue field will be ignored when reading this configuration.
JSON representation |
---|
{ "highSensitivityMapping": enum ( |
Fields | |
---|---|
highSensitivityMapping |
Resource value mapping for high-sensitivity Sensitive Data Protection findings |
mediumSensitivityMapping |
Resource value mapping for medium-sensitivity Sensitive Data Protection findings |
Methods |
|
---|---|
|
Creates a ResourceValueConfig for an organization. |
|
Deletes a ResourceValueConfig. |
|
Gets a ResourceValueConfig. |
|
Lists all ResourceValueConfigs. |
|
Updates an existing ResourceValueConfigs with new rules. |