지정한 필터를 기반으로 기존 발견 항목을 대량으로 숨기는 방법을 보여줍니다.
더 살펴보기
이 코드 샘플이 포함된 자세한 문서는 다음을 참조하세요.
코드 샘플
Go
Security Command Center에 인증하려면 애플리케이션 기본 사용자 인증 정보를 설정합니다. 자세한 내용은 로컬 개발 환경의 인증 설정을 참조하세요.
import (
"context"
"fmt"
"io"
securitycenter "cloud.google.com/go/securitycenter/apiv1"
"cloud.google.com/go/securitycenter/apiv1/securitycenterpb"
)
// bulkMute kicks off a long-running operation (LRO) to bulk mute findings for a parent based on a filter.
// The parent can be either an organization, folder, or project. The findings
// matched by the filter will be muted after the LRO is done.
func bulkMute(w io.Writer, parent string, muteRule string) error {
// parent: Use any one of the following options:
// - organizations/{organization_id}
// - folders/{folder_id}
// - projects/{project_id}
// parent := fmt.Sprintf("projects/%s", "your-google-cloud-project-id")
// muteRule: Expression that identifies findings that should be muted.
// To create mute rules, see:
// https://cloud.google.com/security-command-center/docs/how-to-mute-findings#create_mute_rules
// muteRule := "filter-condition"
ctx := context.Background()
client, err := securitycenter.NewClient(ctx)
if err != nil {
return fmt.Errorf("securitycenter.NewClient: %w", err)
}
defer client.Close()
req := &securitycenterpb.BulkMuteFindingsRequest{
Parent: parent,
Filter: muteRule,
}
op, err := client.BulkMuteFindings(ctx, req)
if err != nil {
return fmt.Errorf("failed to bulk mute findings: %w", err)
}
response, err := op.Wait(ctx)
if err != nil {
return fmt.Errorf("failed to bulk mute findings: %w", err)
}
fmt.Fprintf(w, "Bulk mute findings completed successfully! %s", response)
return nil
}
Java
Security Command Center에 인증하려면 애플리케이션 기본 사용자 인증 정보를 설정합니다. 자세한 내용은 로컬 개발 환경의 인증 설정을 참조하세요.
import com.google.cloud.securitycenter.v1.BulkMuteFindingsRequest;
import com.google.cloud.securitycenter.v1.BulkMuteFindingsResponse;
import com.google.cloud.securitycenter.v1.SecurityCenterClient;
import java.io.IOException;
import java.util.concurrent.ExecutionException;
public class BulkMuteFindings {
public static void main(String[] args) {
// TODO: Replace the variables within {}
// parentPath: Use any one of the following options:
// - organizations/{organization_id}
// - folders/{folder_id}
// - projects/{project_id}
String parentPath = String.format("projects/%s", "your-google-cloud-project-id");
// muteRule: Expression that identifies findings that should be muted.
// eg: "resource.project_display_name=\"PROJECT_ID\""
String muteRule = "{filter-condition}";
bulkMute(parentPath, muteRule);
}
// Kicks off a long-running operation (LRO) to bulk mute findings for a parent based on a filter.
// The parent can be either an organization, folder, or project. The findings
// matched by the filter will be muted after the LRO is done.
public static void bulkMute(String parentPath, String muteRule) {
// Initialize client that will be used to send requests. This client only needs to be created
// once, and can be reused for multiple requests. After completing all of your requests, call
// the "close" method on the client to safely clean up any remaining background resources.
try (SecurityCenterClient client = SecurityCenterClient.create()) {
BulkMuteFindingsRequest bulkMuteFindingsRequest =
BulkMuteFindingsRequest.newBuilder()
.setParent(parentPath)
// To create mute rules, see:
// https://cloud.google.com/security-command-center/docs/how-to-mute-findings#create_mute_rules
.setFilter(muteRule)
.build();
// ExecutionException is thrown if the below call fails.
BulkMuteFindingsResponse response =
client.bulkMuteFindingsAsync(bulkMuteFindingsRequest).get();
System.out.println("Bulk mute findings completed successfully! " + response);
} catch (IOException | InterruptedException | ExecutionException e) {
System.out.println("Bulk mute findings failed! \n Exception: " + e);
}
}
}
Python
Security Command Center에 인증하려면 애플리케이션 기본 사용자 인증 정보를 설정합니다. 자세한 내용은 로컬 개발 환경의 인증 설정을 참조하세요.
def bulk_mute_findings(parent_path: str, mute_rule: str) -> None:
"""
Kicks off a long-running operation (LRO) to bulk mute findings for a parent based on a filter.
The parent can be either an organization, folder, or project. The findings
matched by the filter will be muted after the LRO is done.
Args:
parent_path: use any one of the following options:
- organizations/{organization}
- folders/{folder}
- projects/{project}
mute_rule: Expression that identifies findings that should be updated.
"""
from google.cloud import securitycenter
client = securitycenter.SecurityCenterClient()
request = securitycenter.BulkMuteFindingsRequest()
request.parent = parent_path
# To create mute rules, see:
# https://cloud.google.com/security-command-center/docs/how-to-mute-findings#create_mute_rules
request.filter = mute_rule
response = client.bulk_mute_findings(request)
print(f"Bulk mute findings completed successfully! : {response}")
다음 단계
다른 Google Cloud 제품의 코드 샘플을 검색하고 필터링하려면 Google Cloud 샘플 브라우저를 참조하세요.