gcloud: Thu Jan 19 00:56:33 UTC 2023

gcloud/ids/endpoints/create

@@ -5,7 +5,8 @@ SYNOPSIS
     gcloud ids endpoints create (ENDPOINT : --zone=ZONE) --network=NETWORK
         --severity=SEVERITY [--async] [--description=DESCRIPTION]
         [--enable-traffic-logs] [--labels=[KEY=VALUE,...]]
-        [--max-wait=MAX_WAIT; default="60m"] [GCLOUD_WIDE_FLAG ...]
+        [--max-wait=MAX_WAIT; default="60m"]
+        [--threat-exceptions=[exc1,exc2,...,...]] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     Create an endpoint for the specified VPC network. Successful creation of an
@@ -21,6 +22,14 @@ EXAMPLES
         $ gcloud ids endpoints create my-endpoint --network=my-net \
             --zone=us-central1-a --project=my-project --severity=LOW
 
+    To create an endpoint called my-endpoint for VPC network my-net, in zone
+    us-central1-a, alerting on LOW threats or higher, excluding threat IDs 1000
+    and 2000, run:
+
+        $ gcloud ids endpoints create my-endpoint --network=my-net \
+            --zone=us-central1-a --project=my-project --severity=LOW \
+            --threat-exceptions=1000,2000
+
 POSITIONAL ARGUMENTS
      Endpoint resource - endpoint. The arguments in this group can be used to
      specify the attributes of this resource. (NOTE) Some attributes are not
@@ -83,6 +92,10 @@ OPTIONAL FLAGS
         specified. See $ gcloud topic datetimes for information on time
         formats.
 
+     --threat-exceptions=[exc1,exc2,...,...]
+        List of threat IDs to be excepted from alerting. Passing empty list
+        clears the exceptions.
+
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,
     --billing-project, --configuration, --flags-file, --flatten, --format,