mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-23 00:02:45 +00:00
gcloud: Wed Jan 24 10:20:07 UTC 2024
This commit is contained in:
parent
a47e1e835a
commit
7a546ffea4
99 changed files with 2090 additions and 1700 deletions
|
|
@ -36,6 +36,15 @@ GROUPS
|
|||
operations
|
||||
Manage Cloud SCC (Security Command Center) operations.
|
||||
|
||||
posture-deployments
|
||||
Manage Cloud Security Command Center (SCC) posture deployments.
|
||||
|
||||
posture-templates
|
||||
Manage Cloud Security Command Center (SCC) posture templates.
|
||||
|
||||
postures
|
||||
Manage Cloud Security Command Center (SCC) postures.
|
||||
|
||||
sources
|
||||
Manage Cloud SCC (Security Command Center) finding sources.
|
||||
|
||||
|
|
|
|||
107
gcloud/scc/posture-deployments/create
Normal file
107
gcloud/scc/posture-deployments/create
Normal file
|
|
@ -0,0 +1,107 @@
|
|||
NAME
|
||||
gcloud scc posture-deployments create - create a Cloud Security Command
|
||||
Center posture deployment
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-deployments create
|
||||
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
|
||||
--posture-name=POSTURE_NAME --posture-revision-id=POSTURE_REVISION_ID
|
||||
--target-resource=TARGET_RESOURCE [--async] [--description=DESCRIPTION]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Create a Cloud Security Command Center (SCC) posture deployment. First
|
||||
argument is the parent of the posture deployment to be created. Second
|
||||
argument is the name of the posture deployment to be created. It is
|
||||
followed by details of the posture to be deployed and the target_resource
|
||||
to be deployed on.
|
||||
|
||||
LRO operation ID is returned as the response of the command.
|
||||
|
||||
EXAMPLES
|
||||
Create a posture deployment named posture-deployment-foo-1 within parent
|
||||
organizations/123/locations/global(i.e. a posture-deployment in
|
||||
organization 123, location global, with id posture-deployment-foo-1, which
|
||||
deploys posture organizations/123/locations/foo-posture with revision-id
|
||||
foo-posture-revision-id):
|
||||
|
||||
$ gcloud scc posture-deployments create \
|
||||
organizations/123/locations/global posture-deployment-foo-1 \
|
||||
--posture-name=organizations/123/locations/global/foo-posture \
|
||||
--posture-revision-id=foo-posture-revision-id
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture deployment resource - The name of the posture deployment to be
|
||||
created. For example
|
||||
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE_DEPLOYMENT
|
||||
ID of the posture_deployment or fully qualified identifier for the
|
||||
posture_deployment.
|
||||
|
||||
To set the posture_deployment attribute:
|
||||
▸ provide the argument posture_deployment on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--posture-name=POSTURE_NAME
|
||||
Posture that needs to be deployed. Format:
|
||||
organizations/<organizationID>/locations/global/postures/<postureID>
|
||||
|
||||
--posture-revision-id=POSTURE_REVISION_ID
|
||||
Posture revision that needs to be deployed.
|
||||
|
||||
--target-resource=TARGET_RESOURCE
|
||||
Name of the workload on which posture deployment is to be created. It
|
||||
could be an organization, folder or a project. Possible formats: |
|
||||
organizations/<organizationID> | folders/<folderID> |
|
||||
projects/<projectID> The above mentioned IDs need to have numeric
|
||||
format.
|
||||
|
||||
OPTIONAL FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
--description=DESCRIPTION
|
||||
User-provided description of the posture deployment.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-deployments create
|
||||
|
||||
94
gcloud/scc/posture-deployments/delete
Normal file
94
gcloud/scc/posture-deployments/delete
Normal file
|
|
@ -0,0 +1,94 @@
|
|||
NAME
|
||||
gcloud scc posture-deployments delete - delete a Cloud Security Command
|
||||
Center posture deployment
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-deployments delete
|
||||
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
|
||||
[--async] [--etag=ETAG] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Delete a Cloud Security Command Center (SCC) posture deployment.
|
||||
|
||||
EXAMPLES
|
||||
Delete the posture deployment named
|
||||
organizations/123/locations/global/postureDeployments/posture-deployment-foo
|
||||
(i.e. a posture deployment in organization 123, location global, with id
|
||||
posture-deployment-foo):
|
||||
|
||||
$ gcloud scc posture-deployments delete \
|
||||
organizations/123/locations/global/postureDeployments/\
|
||||
posture-deployment-foo
|
||||
|
||||
Delete the posture deployment named
|
||||
organizations/123/locations/global/postureDeployments/posture-deployment-foo
|
||||
(i.e. a posture deployment in organization 123, location global, with id
|
||||
posture-deployment-foo) for the ETAG
|
||||
ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iP5SdkSVU
|
||||
|
||||
$ gcloud scc posture-deployments delete \
|
||||
organizations/123/locations/global/postureDeployments/\
|
||||
posture-deployment-foo \
|
||||
--etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture deployment resource - The posture deployment to delete. For
|
||||
example
|
||||
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE_DEPLOYMENT
|
||||
ID of the posture_deployment or fully qualified identifier for the
|
||||
posture_deployment.
|
||||
|
||||
To set the posture_deployment attribute:
|
||||
▸ provide the argument posture_deployment on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
--etag=ETAG
|
||||
Etag is an optional flag. If the provided Etag doesn't match the server
|
||||
generated Etag, the delete operation won't proceed.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-deployments delete
|
||||
|
||||
78
gcloud/scc/posture-deployments/describe
Normal file
78
gcloud/scc/posture-deployments/describe
Normal file
|
|
@ -0,0 +1,78 @@
|
|||
NAME
|
||||
gcloud scc posture-deployments describe - describe a Cloud Security Command
|
||||
Center posture deployment
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-deployments describe
|
||||
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Describe a Cloud Security Command Center (SCC) posture deployment.
|
||||
|
||||
EXAMPLES
|
||||
To describe posture deployment
|
||||
organizations/123/locations/global/postureDeployments/posture-deployment-foo-1 (i.e. a posture deployment
|
||||
in organization `123`, location `global`, with ID `posture-deployment-foo-1`), run:
|
||||
|
||||
$ gcloud scc posture-deployments describe \
|
||||
organizations/123/locations/global/postureDeployments/\
|
||||
posture-deployment-foo-1
|
||||
|
||||
or, run:
|
||||
|
||||
$ gcloud scc posture-deployments describe posture-deployment-foo-1 \
|
||||
--organization=123 --location=global
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture deployment resource - The posture deployment to describe. For
|
||||
example
|
||||
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE_DEPLOYMENT
|
||||
ID of the posture_deployment or fully qualified identifier for the
|
||||
posture_deployment.
|
||||
|
||||
To set the posture_deployment attribute:
|
||||
▸ provide the argument posture_deployment on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-deployments describe
|
||||
|
||||
40
gcloud/scc/posture-deployments/help
Normal file
40
gcloud/scc/posture-deployments/help
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
NAME
|
||||
gcloud scc posture-deployments - manage Cloud Security Command Center
|
||||
posture deployments
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-deployments COMMAND [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Manage Cloud Security Command Center (SCC) posture deployments.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --help.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
COMMANDS
|
||||
COMMAND is one of the following:
|
||||
|
||||
create
|
||||
Create a Cloud Security Command Center (SCC) posture deployment.
|
||||
|
||||
delete
|
||||
Delete a Cloud Security Command Center (SCC) posture deployment.
|
||||
|
||||
describe
|
||||
Describe a Cloud Security Command Center (SCC) posture deployment.
|
||||
|
||||
list
|
||||
List the details of the Cloud Security Command Center (SCC) posture
|
||||
deployments.
|
||||
|
||||
update
|
||||
Update the given Cloud Security Command Center (SCC) posture
|
||||
deployment.
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-deployments
|
||||
|
||||
69
gcloud/scc/posture-deployments/list
Normal file
69
gcloud/scc/posture-deployments/list
Normal file
|
|
@ -0,0 +1,69 @@
|
|||
NAME
|
||||
gcloud scc posture-deployments list - list the details of the Cloud
|
||||
Security Command Center posture deployments
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-deployments list PARENT [--filter=EXPRESSION]
|
||||
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
List the details of the Cloud Security Command Center (SCC) posture
|
||||
deployments for the specified organization.
|
||||
|
||||
EXAMPLES
|
||||
To list Cloud Security Command Center posture deployments for organization
|
||||
123, run:
|
||||
|
||||
$ gcloud scc posture-deployments list \
|
||||
organizations/123/locations/global
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
PARENT
|
||||
Organization for listing the Cloud Security Command Center posture
|
||||
deployments available at the organization level. Formatted as
|
||||
organizations/<organizationID>/locations/<location>.
|
||||
|
||||
LIST COMMAND FLAGS
|
||||
--filter=EXPRESSION
|
||||
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
||||
If the expression evaluates True, then that item is listed. For more
|
||||
details and examples of filter expressions, run $ gcloud topic filters.
|
||||
This flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--limit=LIMIT
|
||||
Maximum number of resources to list. The default is unlimited. This
|
||||
flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--page-size=PAGE_SIZE
|
||||
Some services group resource list output into pages. This flag
|
||||
specifies the maximum number of resources per page. The default is
|
||||
determined by the service if it supports paging, otherwise it is
|
||||
unlimited (no paging). Paging may be applied before or after --filter
|
||||
and --limit depending on the service.
|
||||
|
||||
--sort-by=[FIELD,...]
|
||||
Comma-separated list of resource field key names to sort by. The
|
||||
default order is ascending. Prefix a field with ``~'' for descending
|
||||
order on that field. This flag interacts with other flags that are
|
||||
applied in this order: --flatten, --sort-by, --filter, --limit.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-deployments list
|
||||
|
||||
112
gcloud/scc/posture-deployments/update
Normal file
112
gcloud/scc/posture-deployments/update
Normal file
|
|
@ -0,0 +1,112 @@
|
|||
NAME
|
||||
gcloud scc posture-deployments update - update the given Cloud Security
|
||||
Command Center posture deployment
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-deployments update
|
||||
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
|
||||
[--async] [--description=DESCRIPTION] [--etag=ETAG]
|
||||
[--update-mask=UPDATE_MASK]
|
||||
[--posture-id=POSTURE_ID --posture-revision-id=POSTURE_REVISION_ID]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Update a Cloud Security Command Center (SCC) posture deployment.
|
||||
|
||||
Fields specified in update-mask flag are updated. Updatable fields are
|
||||
description and posture_name with posture_revision-id. The target_resource
|
||||
for a posture deployment cannot be updated. The posture deployment to be
|
||||
updated should be in ACTIVE State. If posture details of posture deployment
|
||||
need to be updated, then the desired posture needs to be in ACTIVE state.
|
||||
LRO operation ID is returned as the response of the command.
|
||||
|
||||
EXAMPLES
|
||||
Update the description of the posture deployment named
|
||||
foo-posture-deployment in the organization
|
||||
organizations/123/locations/global: $ gcloud scc posture-deployments update \
|
||||
organizations/123/locations/global/postureDeployments/\
|
||||
foo-posture-deployment --update-mask=description \
|
||||
--description="updated-description"
|
||||
|
||||
Update posture deployment named foo-posture-deployment with the posture
|
||||
named foo-posture and revision_id abcdefgh in the organization
|
||||
organizations/123/locations/global: $ gcloud scc posture-deployments update \
|
||||
organizations/123/locations/global/postureDeployments/\
|
||||
foo-posture-deployment \
|
||||
--update-mask=posture_id,posture_revision-id \
|
||||
--posture-id=foo-posture --posture-revision-id=abcdefgh
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture deployment resource - The posture deployment to update. For
|
||||
example
|
||||
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE_DEPLOYMENT
|
||||
ID of the posture_deployment or fully qualified identifier for the
|
||||
posture_deployment.
|
||||
|
||||
To set the posture_deployment attribute:
|
||||
▸ provide the argument posture_deployment on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture_deployment on the command line with
|
||||
a fully specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
--description=DESCRIPTION
|
||||
Updated description of posture deployment.
|
||||
|
||||
--etag=ETAG
|
||||
Etag is an optional flag. If the provided Etag doesn't match the server
|
||||
generated Etag, the update operation won't proceed.
|
||||
|
||||
--update-mask=UPDATE_MASK
|
||||
Comma-separated string containing list of fields to be updated.
|
||||
|
||||
--posture-id=POSTURE_ID
|
||||
Relative name of the posture to be updated, like
|
||||
organizations/<organizationID>/locations/<location>/postures/<postureID>.
|
||||
|
||||
--posture-revision-id=POSTURE_REVISION_ID
|
||||
Revision ID of the posture to be updated.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-deployments update
|
||||
|
||||
87
gcloud/scc/posture-templates/describe
Normal file
87
gcloud/scc/posture-templates/describe
Normal file
|
|
@ -0,0 +1,87 @@
|
|||
NAME
|
||||
gcloud scc posture-templates describe - describe a Cloud Security Command
|
||||
Center posture template
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-templates describe
|
||||
(POSTURE_TEMPLATE : --location=LOCATION --organization=ORGANIZATION)
|
||||
[--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Describe a Cloud Security Command Center (SCC) posture template.
|
||||
|
||||
By default, the latest created revision of the posture template is
|
||||
described. Users must provide revision ID to describe a specific revision.
|
||||
|
||||
EXAMPLES
|
||||
Describe a posture template named
|
||||
organizations/123/locations/global/postureTemplates/secure_by_default (i.e.
|
||||
a posture in organization 123, location global, with id secure_by_default):
|
||||
|
||||
$ gcloud scc posture-templates describe \
|
||||
organizations/123/locations/global/postureTemplates/\
|
||||
secure_by_default
|
||||
|
||||
Describe a specific revision v1.0.0 of posture template named
|
||||
organizations/123/locations/global/postureTemplates/secure_by_default:
|
||||
|
||||
$ gcloud scc posture-templates describe \
|
||||
organizations/123/locations/global/postureTemplates/\
|
||||
secure_by_default --revision-id=v1.0.0
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture template resource - The posture template to describe. For example
|
||||
organizations/<organizationID>/locations/<location>/postureTemplates/<postureTemplateID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE_TEMPLATE
|
||||
ID of the posture_template or fully qualified identifier for the
|
||||
posture_template.
|
||||
|
||||
To set the posture_template attribute:
|
||||
▸ provide the argument posture_template on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture_template on the command line with a
|
||||
fully specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture_template on the command line with a
|
||||
fully specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
FLAGS
|
||||
--revision-id=REVISION_ID
|
||||
ID of the specific posture template revision to describe. If not
|
||||
specified, latest revision is described.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-templates describe
|
||||
|
||||
30
gcloud/scc/posture-templates/help
Normal file
30
gcloud/scc/posture-templates/help
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
NAME
|
||||
gcloud scc posture-templates - manage Cloud Security Command Center posture
|
||||
templates
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-templates COMMAND [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Manage Cloud Security Command Center (SCC) posture templates.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --help.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
COMMANDS
|
||||
COMMAND is one of the following:
|
||||
|
||||
describe
|
||||
Describe a Cloud Security Command Center (SCC) posture template.
|
||||
|
||||
list
|
||||
List the details of the Cloud Security Command Center (SCC) posture
|
||||
templates.
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-templates
|
||||
|
||||
69
gcloud/scc/posture-templates/list
Normal file
69
gcloud/scc/posture-templates/list
Normal file
|
|
@ -0,0 +1,69 @@
|
|||
NAME
|
||||
gcloud scc posture-templates list - list the details of the Cloud Security
|
||||
Command Center posture templates
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc posture-templates list PARENT [--filter=EXPRESSION]
|
||||
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
List the details of the Cloud Security Command Center (SCC) posture
|
||||
templates for the specified organization.
|
||||
|
||||
EXAMPLES
|
||||
To list Cloud Security Command Center posture templates for organization
|
||||
123, run:
|
||||
|
||||
$ gcloud scc posture-templates list \
|
||||
organizations/123/locations/global
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
PARENT
|
||||
Organization for listing the Cloud Security Command Center posture
|
||||
templates available at the organization level. Formatted as
|
||||
organizations/<organizationID>/locations/<location>.
|
||||
|
||||
LIST COMMAND FLAGS
|
||||
--filter=EXPRESSION
|
||||
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
||||
If the expression evaluates True, then that item is listed. For more
|
||||
details and examples of filter expressions, run $ gcloud topic filters.
|
||||
This flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--limit=LIMIT
|
||||
Maximum number of resources to list. The default is unlimited. This
|
||||
flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--page-size=PAGE_SIZE
|
||||
Some services group resource list output into pages. This flag
|
||||
specifies the maximum number of resources per page. The default is
|
||||
determined by the service if it supports paging, otherwise it is
|
||||
unlimited (no paging). Paging may be applied before or after --filter
|
||||
and --limit depending on the service.
|
||||
|
||||
--sort-by=[FIELD,...]
|
||||
Comma-separated list of resource field key names to sort by. The
|
||||
default order is ascending. Prefix a field with ``~'' for descending
|
||||
order on that field. This flag interacts with other flags that are
|
||||
applied in this order: --flatten, --sort-by, --filter, --limit.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc posture-templates list
|
||||
|
||||
84
gcloud/scc/postures/create
Normal file
84
gcloud/scc/postures/create
Normal file
|
|
@ -0,0 +1,84 @@
|
|||
NAME
|
||||
gcloud scc postures create - create a Cloud Security Command Center posture
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures create
|
||||
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
|
||||
--posture-from-file=POSTURE_FROM_FILE [--async] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Create a Cloud Security Command Center (SCC) posture. First argument is the
|
||||
parent of the posture to be created. Second argument is the name of the
|
||||
posture to be created. The posture details are provided in YAML file. The
|
||||
file path is mentioned in posture-from-file flag.
|
||||
|
||||
Created posture is returned as the response of the command. LRO operation
|
||||
ID is printed as the standard output.
|
||||
|
||||
EXAMPLES
|
||||
Create a posture named posture-foo-1 within parent
|
||||
organizations/123/locations/global(i.e. a posture in organization 123,
|
||||
location global, with id posture-foo-1):
|
||||
|
||||
$ gcloud scc postures create organizations/123/locations/global \
|
||||
posture-foo-1 --posture-from-file=posture.yaml
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture resource - The name of the posture to be created. For example
|
||||
organizations/<organizationID>/locations/<location>/postures/<postureID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE
|
||||
ID of the posture or fully qualified identifier for the posture.
|
||||
|
||||
To set the posture attribute:
|
||||
▸ provide the argument posture on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--posture-from-file=POSTURE_FROM_FILE
|
||||
YAML file containing the body of the posture to be created.
|
||||
|
||||
OPTIONAL FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures create
|
||||
|
||||
91
gcloud/scc/postures/delete
Normal file
91
gcloud/scc/postures/delete
Normal file
|
|
@ -0,0 +1,91 @@
|
|||
NAME
|
||||
gcloud scc postures delete - delete a Cloud Security Command Center posture
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures delete
|
||||
(POSTURE : --location=LOCATION --organization=ORGANIZATION) [--async]
|
||||
[--etag=ETAG] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Delete a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
Posture with all it's revisions is deleted. Deletion won't be allowed in
|
||||
case any of the versions of the posture is deployed on a workload. ETAG can
|
||||
be provided as an optional flag.
|
||||
|
||||
EXAMPLES
|
||||
Delete the posture named
|
||||
organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture
|
||||
in organization 123, location global, with id posture-foo-1):
|
||||
|
||||
$ gcloud scc postures delete \
|
||||
organizations/123/locations/global/postures/posture-foo-1
|
||||
|
||||
Delete the posture named
|
||||
organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture
|
||||
in organization 123, location global, with id posture-foo-1) for the ETAG
|
||||
ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iP5SdkSVU
|
||||
|
||||
$ gcloud scc postures delete \
|
||||
organizations/123/locations/global/postures/posture-foo-1 \
|
||||
--etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture resource - The posture to delete. For example
|
||||
organizations/<organizationID>/locations/<location>/postures/<postureID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE
|
||||
ID of the posture or fully qualified identifier for the posture.
|
||||
|
||||
To set the posture attribute:
|
||||
▸ provide the argument posture on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
--etag=ETAG
|
||||
Etag is an optional flag. If the provided Etag doesn't match the server
|
||||
generated Etag, the delete operation won't proceed.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures delete
|
||||
|
||||
85
gcloud/scc/postures/describe
Normal file
85
gcloud/scc/postures/describe
Normal file
|
|
@ -0,0 +1,85 @@
|
|||
NAME
|
||||
gcloud scc postures describe - describe a Cloud Security Command Center
|
||||
posture
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures describe
|
||||
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
|
||||
[--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Describe a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
By default, the latest updated revision of the posture is described. Users
|
||||
must provide revision ID to describe a specific revision.
|
||||
|
||||
EXAMPLES
|
||||
Describe the latest updated revision of a posture named
|
||||
organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture
|
||||
in organization 123, location global, with id posture-foo-1):
|
||||
|
||||
$ gcloud scc postures describe \
|
||||
organizations/123/locations/global/postures/posture-foo-1
|
||||
|
||||
Describe a specific revision abcdefg of posture named
|
||||
organizations/123/locations/global/postures/posture-foo-1:
|
||||
|
||||
$ gcloud scc postures describe \
|
||||
organizations/123/locations/global/postures/posture-foo-1 \
|
||||
--revision-id=abcdefg
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture resource - The posture to describe. For example
|
||||
organizations/<organizationID>/locations/<location>/postures/<postureID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE
|
||||
ID of the posture or fully qualified identifier for the posture.
|
||||
|
||||
To set the posture attribute:
|
||||
▸ provide the argument posture on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
FLAGS
|
||||
--revision-id=REVISION_ID
|
||||
ID of the specific posture revision to describe. If not specified,
|
||||
latest revision is described.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures describe
|
||||
|
||||
87
gcloud/scc/postures/extract
Normal file
87
gcloud/scc/postures/extract
Normal file
|
|
@ -0,0 +1,87 @@
|
|||
NAME
|
||||
gcloud scc postures extract - extract a Cloud Security Command Center
|
||||
posture from a workload
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures extract
|
||||
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
|
||||
--workload=WORKLOAD [--async] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Extract a Cloud Security Command Center (SCC) posture from a workload.
|
||||
First argument is the parent of the posture to be created. Second argument
|
||||
is the name of the posture to be created. The workload from where the
|
||||
organization policies need to be extracted is provided via 'workload' flag.
|
||||
|
||||
Extracted posture is returned as the response of the command. LRO operation
|
||||
ID is printed as the standard output.
|
||||
|
||||
EXAMPLES
|
||||
Extract a posture named posture-foo-1 within parent
|
||||
organizations/123/locations/global(i.e. a posture in organization 123,
|
||||
location global, with id posture-foo-1) from workload projects/456:
|
||||
|
||||
$ gcloud scc postures extract organizations/123/locations/global \
|
||||
posture-foo-1 --workload=projects/456
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture resource - The name of the posture to be created. For example
|
||||
organizations/<organizationID>/locations/<location>/postures/<postureID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE
|
||||
ID of the posture or fully qualified identifier for the posture.
|
||||
|
||||
To set the posture attribute:
|
||||
▸ provide the argument posture on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--workload=WORKLOAD
|
||||
Workload from where policies has to be extracted into a posture. It can
|
||||
be in one of the following formats: projects/projectNumber,
|
||||
folders/folderNumber, organizations/organizationNumber.
|
||||
|
||||
OPTIONAL FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures extract
|
||||
|
||||
44
gcloud/scc/postures/help
Normal file
44
gcloud/scc/postures/help
Normal file
|
|
@ -0,0 +1,44 @@
|
|||
NAME
|
||||
gcloud scc postures - manage Cloud Security Command Center postures
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures COMMAND [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Manage Cloud Security Command Center (SCC) postures.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --help.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
COMMANDS
|
||||
COMMAND is one of the following:
|
||||
|
||||
create
|
||||
Create a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
delete
|
||||
Delete a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
describe
|
||||
Describe a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
extract
|
||||
Extract a Cloud Security Command Center (SCC) posture from a workload.
|
||||
|
||||
list
|
||||
Lists all the Cloud Security Command Center (SCC) postures for an
|
||||
organization.
|
||||
|
||||
list-revisions
|
||||
List the revisions of a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
update
|
||||
Update the given Cloud Security Command Center (SCC) posture.
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures
|
||||
|
||||
72
gcloud/scc/postures/list
Normal file
72
gcloud/scc/postures/list
Normal file
|
|
@ -0,0 +1,72 @@
|
|||
NAME
|
||||
gcloud scc postures list - lists all the Cloud Security Command Center
|
||||
postures for an organization
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures list PARENT [--filter=EXPRESSION] [--limit=LIMIT]
|
||||
[--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Lists all Cloud Security Command Center (SCC) postures for an organization.
|
||||
|
||||
By default, postures created in global location are returned.
|
||||
|
||||
EXAMPLES
|
||||
List all postures in organization 123. If location is omitted, this returns
|
||||
postures from location 'global'. For a posture with multiple revisions,
|
||||
only the latest updated revision of the posture is returned in the output.
|
||||
|
||||
$ gcloud scc postures list organizations/123
|
||||
|
||||
List all postures in organization 123, location global
|
||||
|
||||
$ gcloud scc postures list organizations/123/locations/global
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
PARENT
|
||||
Resource name of the parent, like organizations/<organizationID> or
|
||||
organizations/<organizationID>/locations/<location>.
|
||||
|
||||
LIST COMMAND FLAGS
|
||||
--filter=EXPRESSION
|
||||
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
||||
If the expression evaluates True, then that item is listed. For more
|
||||
details and examples of filter expressions, run $ gcloud topic filters.
|
||||
This flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--limit=LIMIT
|
||||
Maximum number of resources to list. The default is unlimited. This
|
||||
flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--page-size=PAGE_SIZE
|
||||
Some services group resource list output into pages. This flag
|
||||
specifies the maximum number of resources per page. The default is
|
||||
determined by the service if it supports paging, otherwise it is
|
||||
unlimited (no paging). Paging may be applied before or after --filter
|
||||
and --limit depending on the service.
|
||||
|
||||
--sort-by=[FIELD,...]
|
||||
Comma-separated list of resource field key names to sort by. The
|
||||
default order is ascending. Prefix a field with ``~'' for descending
|
||||
order on that field. This flag interacts with other flags that are
|
||||
applied in this order: --flatten, --sort-by, --filter, --limit.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures list
|
||||
|
||||
97
gcloud/scc/postures/list-revisions
Normal file
97
gcloud/scc/postures/list-revisions
Normal file
|
|
@ -0,0 +1,97 @@
|
|||
NAME
|
||||
gcloud scc postures list-revisions - list the revisions of a Cloud Security
|
||||
Command Center posture
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures list-revisions
|
||||
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
|
||||
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
|
||||
[--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
List the revisions of a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
EXAMPLES
|
||||
To list Cloud Security Command Center posture revisions for posture
|
||||
organizations/123/locations/global/postures/posture123 , run:
|
||||
|
||||
$ gcloud scc postures list-revisions \
|
||||
organizations/123/locations/global/postures/posture123
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture resource - The posture whose revisions are to be listed. For
|
||||
example
|
||||
organizations/<organizationID>/locations/<location>/postures/<postureID>.
|
||||
The arguments in this group can be used to specify the attributes of this
|
||||
resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE
|
||||
ID of the posture or fully qualified identifier for the posture.
|
||||
|
||||
To set the posture attribute:
|
||||
▸ provide the argument posture on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
LIST COMMAND FLAGS
|
||||
--filter=EXPRESSION
|
||||
Apply a Boolean filter EXPRESSION to each resource item to be listed.
|
||||
If the expression evaluates True, then that item is listed. For more
|
||||
details and examples of filter expressions, run $ gcloud topic filters.
|
||||
This flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--limit=LIMIT
|
||||
Maximum number of resources to list. The default is unlimited. This
|
||||
flag interacts with other flags that are applied in this order:
|
||||
--flatten, --sort-by, --filter, --limit.
|
||||
|
||||
--page-size=PAGE_SIZE
|
||||
Some services group resource list output into pages. This flag
|
||||
specifies the maximum number of resources per page. The default is
|
||||
determined by the service if it supports paging, otherwise it is
|
||||
unlimited (no paging). Paging may be applied before or after --filter
|
||||
and --limit depending on the service.
|
||||
|
||||
--sort-by=[FIELD,...]
|
||||
Comma-separated list of resource field key names to sort by. The
|
||||
default order is ascending. Prefix a field with ``~'' for descending
|
||||
order on that field. This flag interacts with other flags that are
|
||||
applied in this order: --flatten, --sort-by, --filter, --limit.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures list-revisions
|
||||
|
||||
140
gcloud/scc/postures/update
Normal file
140
gcloud/scc/postures/update
Normal file
|
|
@ -0,0 +1,140 @@
|
|||
NAME
|
||||
gcloud scc postures update - update the given Cloud Security Command Center
|
||||
posture
|
||||
|
||||
SYNOPSIS
|
||||
gcloud scc postures update
|
||||
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
|
||||
--posture-from-file=POSTURE_FROM_FILE --revision-id=REVISION_ID
|
||||
[--async] [--update-mask=UPDATE_MASK] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
Update a Cloud Security Command Center (SCC) posture.
|
||||
|
||||
Fields specified in update-mask flag are updated. Updatable fields are
|
||||
state, description and policy_sets. State of the posture can't be updated
|
||||
along with update of other fields. An empty or "" as field mask will result
|
||||
in update of policy_sets and description. In case of the update of
|
||||
policy_sets, the value mentioned in the update posture request overwrites
|
||||
the exisiting value of policy_sets.
|
||||
|
||||
Valid state transitions are: a) ACTIVE to DRAFT b) ACTIVE to DEPRECATED c)
|
||||
DRAFT to ACTIVE d) DEPRECATED to ACTIVE
|
||||
|
||||
The update operation will result in the update of the revision-id specified
|
||||
in the request, unless the posture revision is currently deployed on a
|
||||
workload. A new revision is created for an already deployed posture
|
||||
revision.
|
||||
|
||||
EXAMPLES
|
||||
Update the revision-id abcdefgh of the posture named foo-posture in the
|
||||
organization organizations/123/locations/global: Change State to ACTIVE. $ gcloud scc postures update \
|
||||
organizations/123/locations/global/postures/foo-posture \
|
||||
--posture-from-file=update_posture.yaml --revision-id=abcdefgh \
|
||||
update_mask=state
|
||||
|
||||
Contents of update_posture.yaml are |
|
||||
name: organizations/123/locations/global/postures/foo-posture
|
||||
state: ACTIVE
|
||||
|
||||
Update the revision-id abcdefgh of the posture named foo-posture in the
|
||||
organization organizations/123/locations/global: Change description and
|
||||
policy_sets to the values mentioned in update_posture.yaml $ gcloud scc postures update \
|
||||
organizations/123/locations/global/postures/foo-posture \
|
||||
--posture-from-file=update_posture.yaml --revision-id=abcdefgh \
|
||||
update_mask=description,policy_sets
|
||||
|
||||
Contents of update_posture.yaml are |
|
||||
name: organizations/123/locations/global/postures/foo-posture
|
||||
description: updated description
|
||||
policy_sets:
|
||||
- policy_set_id: newPolicySet1
|
||||
policies:
|
||||
- policy_id: newPolicy
|
||||
constraint:
|
||||
org_policy_canned_constraint:
|
||||
canned_constraint_id: storage.uniformBucketLevelAccess
|
||||
policy_rules:
|
||||
enforce: false
|
||||
- policy_set_id: PolicySet2
|
||||
policies:
|
||||
- policy_id: Policy3
|
||||
constraint:
|
||||
org_policy_custom_constraint:
|
||||
custom_constraint:
|
||||
name: organizations/9454078371/customConstraints/custom.newConstraint
|
||||
resource_types: container.$$UNIVERSE_DOMAIN$$/NodePool
|
||||
method_types: UPDATE
|
||||
condition: resource.management.autoUpgrade == false
|
||||
action_type: ALLOW
|
||||
policy_rules:
|
||||
enforce: true
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
Posture resource - Arguments and flags that specify the Posture instance
|
||||
to update. The arguments in this group can be used to specify the
|
||||
attributes of this resource.
|
||||
|
||||
This must be specified.
|
||||
|
||||
POSTURE
|
||||
ID of the posture or fully qualified identifier for the posture.
|
||||
|
||||
To set the posture attribute:
|
||||
▸ provide the argument posture on the command line.
|
||||
|
||||
This positional argument must be specified if any of the other
|
||||
arguments in this group are specified.
|
||||
|
||||
--location=LOCATION
|
||||
ID of the location where the resource exists (for example, global).
|
||||
|
||||
To set the location attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --location on the command line.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
ID of the organization which is the parent of the resource.
|
||||
|
||||
To set the organization attribute:
|
||||
▸ provide the argument posture on the command line with a fully
|
||||
specified name;
|
||||
▸ provide the argument --organization on the command line.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--posture-from-file=POSTURE_FROM_FILE
|
||||
Path of the file containing the details of the field to be updated.
|
||||
Contents include the name of the posture to be updated and value of the
|
||||
fields to be updated.
|
||||
|
||||
--revision-id=REVISION_ID
|
||||
Revision ID of the posture to be updated. The same revision ID will be
|
||||
updated in case the posture revision is not deployed on any workload. A
|
||||
new revision will be created for a deployed posture.
|
||||
|
||||
OPTIONAL FLAGS
|
||||
--async
|
||||
Return immediately, without waiting for the operation in progress to
|
||||
complete.
|
||||
|
||||
--update-mask=UPDATE_MASK
|
||||
Comma separated string containing list of fields to be updated.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
API REFERENCE
|
||||
This command uses the securityposture/v1 API. The full documentation for
|
||||
this API can be found at: https://cloud.google.com/security-command-center
|
||||
|
||||
NOTES
|
||||
This variant is also available:
|
||||
|
||||
$ gcloud alpha scc postures update
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue