gcloud: Thu Jan 19 00:56:33 UTC 2023

gcloud/beta/ids/endpoints/create

@@ -5,7 +5,8 @@ SYNOPSIS
     gcloud beta ids endpoints create (ENDPOINT : --zone=ZONE) --network=NETWORK
         --severity=SEVERITY [--async] [--description=DESCRIPTION]
         [--enable-traffic-logs] [--labels=[KEY=VALUE,...]]
-        [--max-wait=MAX_WAIT; default="60m"] [GCLOUD_WIDE_FLAG ...]
+        [--max-wait=MAX_WAIT; default="60m"]
+        [--threat-exceptions=[exc1,exc2,...,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (BETA) Create an endpoint for the specified VPC network. Successful
@@ -21,6 +22,14 @@ EXAMPLES
         $ gcloud beta ids endpoints create my-endpoint --network=my-net \
             --zone=us-central1-a --project=my-project --severity=LOW
 
+    To create an endpoint called my-endpoint for VPC network my-net, in zone
+    us-central1-a, alerting on LOW threats or higher, excluding threat IDs 1000
+    and 2000, run:
+
+        $ gcloud beta ids endpoints create my-endpoint --network=my-net \
+            --zone=us-central1-a --project=my-project --severity=LOW \
+            --threat-exceptions=1000,2000
+
 POSITIONAL ARGUMENTS
      Endpoint resource - endpoint. The arguments in this group can be used to
      specify the attributes of this resource. (NOTE) Some attributes are not
@@ -83,6 +92,10 @@ OPTIONAL FLAGS
         specified. See $ gcloud topic datetimes for information on time
         formats.
 
+     --threat-exceptions=[exc1,exc2,...,...]
+        List of threat IDs to be excepted from alerting. Passing empty list
+        clears the exceptions.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,

gcloud/beta/ids/endpoints/help

@@ -32,6 +32,9 @@ COMMANDS
      list
         (BETA) List Cloud IDS endpoints.
 
+     update
+        (BETA) Update an existing Cloud IDS endpoint.
+
 NOTES
     This command is currently in beta and might change without notice. These
     variants are also available:

gcloud/beta/ids/endpoints/update

@@ -0,0 +1,84 @@
+NAME
+    gcloud beta ids endpoints update - update an existing Cloud IDS endpoint
+
+SYNOPSIS
+    gcloud beta ids endpoints update (ENDPOINT : --zone=ZONE) [--async]
+        [--max-wait=MAX_WAIT; default="60m"]
+        [--threat-exceptions=[exc1,exc2,...,...]] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Update the endpoint for the specified VPC network. Check the
+    progress of endpoint update by using gcloud alpha ids endpoints list.
+
+    For more examples, refer to the EXAMPLES section below.
+
+EXAMPLES
+    To update an endpoint called my-endpoint, excluding threat IDs 1000 and
+    2000, run:
+
+        $ gcloud beta ids endpoints update my-endpoint \
+            --threat-exceptions=1000,2000
+
+    To update an endpoint called my-endpoint, clearing the excluded threat
+    list, run:
+
+        $ gcloud beta ids endpoints update my-endpoint --threat-exceptions=
+
+POSITIONAL ARGUMENTS
+     Endpoint resource - endpoint. The arguments in this group can be used to
+     specify the attributes of this resource. (NOTE) Some attributes are not
+     given arguments in this group but can be set in other ways. To set the
+     project attribute:
+      ◆ provide the argument endpoint on the command line with a fully
+        specified name;
+      ◆ provide the argument --project on the command line;
+      ◆ set the property core/project.
+
+     This must be specified.
+
+       ENDPOINT
+          ID of the endpoint or fully qualified identifier for the endpoint. To
+          set the endpoint attribute:
+          ▸ provide the argument endpoint on the command line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --zone=ZONE
+          Zone of the endpoint. To set the zone attribute:
+          ▸ provide the argument endpoint on the command line with a fully
+            specified name;
+          ▸ provide the argument --zone on the command line.
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete. The default is True. Enabled by default, use --no-async to
+        disable.
+
+     --max-wait=MAX_WAIT; default="60m"
+        Time to synchronously wait for the operation to complete, after which
+        the operation continues asynchronously. Ignored if --no-async isn't
+        specified. See $ gcloud topic datetimes for information on time
+        formats.
+
+     --threat-exceptions=[exc1,exc2,...,...]
+        List of threat IDs to be excepted from alerting. Passing empty list
+        clears the exceptions.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in beta and might change without notice. These
+    variants are also available:
+
+        $ gcloud ids endpoints update
+
+        $ gcloud alpha ids endpoints update
+