1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-23 00:02:45 +00:00

gcloud: Wed Jan 24 10:20:07 UTC 2024

This commit is contained in:
Automated 2024-01-24 10:20:07 +00:00
parent a47e1e835a
commit 7a546ffea4
99 changed files with 2090 additions and 1700 deletions

View file

@ -36,6 +36,15 @@ GROUPS
operations
Manage Cloud SCC (Security Command Center) operations.
posture-deployments
Manage Cloud Security Command Center (SCC) posture deployments.
posture-templates
Manage Cloud Security Command Center (SCC) posture templates.
postures
Manage Cloud Security Command Center (SCC) postures.
sources
Manage Cloud SCC (Security Command Center) finding sources.

View file

@ -0,0 +1,107 @@
NAME
gcloud scc posture-deployments create - create a Cloud Security Command
Center posture deployment
SYNOPSIS
gcloud scc posture-deployments create
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
--posture-name=POSTURE_NAME --posture-revision-id=POSTURE_REVISION_ID
--target-resource=TARGET_RESOURCE [--async] [--description=DESCRIPTION]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Create a Cloud Security Command Center (SCC) posture deployment. First
argument is the parent of the posture deployment to be created. Second
argument is the name of the posture deployment to be created. It is
followed by details of the posture to be deployed and the target_resource
to be deployed on.
LRO operation ID is returned as the response of the command.
EXAMPLES
Create a posture deployment named posture-deployment-foo-1 within parent
organizations/123/locations/global(i.e. a posture-deployment in
organization 123, location global, with id posture-deployment-foo-1, which
deploys posture organizations/123/locations/foo-posture with revision-id
foo-posture-revision-id):
$ gcloud scc posture-deployments create \
organizations/123/locations/global posture-deployment-foo-1 \
--posture-name=organizations/123/locations/global/foo-posture \
--posture-revision-id=foo-posture-revision-id
POSITIONAL ARGUMENTS
Posture deployment resource - The name of the posture deployment to be
created. For example
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE_DEPLOYMENT
ID of the posture_deployment or fully qualified identifier for the
posture_deployment.
To set the posture_deployment attribute:
▸ provide the argument posture_deployment on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --organization on the command line.
REQUIRED FLAGS
--posture-name=POSTURE_NAME
Posture that needs to be deployed. Format:
organizations/<organizationID>/locations/global/postures/<postureID>
--posture-revision-id=POSTURE_REVISION_ID
Posture revision that needs to be deployed.
--target-resource=TARGET_RESOURCE
Name of the workload on which posture deployment is to be created. It
could be an organization, folder or a project. Possible formats: |
organizations/<organizationID> | folders/<folderID> |
projects/<projectID> The above mentioned IDs need to have numeric
format.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--description=DESCRIPTION
User-provided description of the posture deployment.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-deployments create

View file

@ -0,0 +1,94 @@
NAME
gcloud scc posture-deployments delete - delete a Cloud Security Command
Center posture deployment
SYNOPSIS
gcloud scc posture-deployments delete
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
[--async] [--etag=ETAG] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Delete a Cloud Security Command Center (SCC) posture deployment.
EXAMPLES
Delete the posture deployment named
organizations/123/locations/global/postureDeployments/posture-deployment-foo
(i.e. a posture deployment in organization 123, location global, with id
posture-deployment-foo):
$ gcloud scc posture-deployments delete \
organizations/123/locations/global/postureDeployments/\
posture-deployment-foo
Delete the posture deployment named
organizations/123/locations/global/postureDeployments/posture-deployment-foo
(i.e. a posture deployment in organization 123, location global, with id
posture-deployment-foo) for the ETAG
ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iP5SdkSVU
$ gcloud scc posture-deployments delete \
organizations/123/locations/global/postureDeployments/\
posture-deployment-foo \
--etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU
POSITIONAL ARGUMENTS
Posture deployment resource - The posture deployment to delete. For
example
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE_DEPLOYMENT
ID of the posture_deployment or fully qualified identifier for the
posture_deployment.
To set the posture_deployment attribute:
▸ provide the argument posture_deployment on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --organization on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--etag=ETAG
Etag is an optional flag. If the provided Etag doesn't match the server
generated Etag, the delete operation won't proceed.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-deployments delete

View file

@ -0,0 +1,78 @@
NAME
gcloud scc posture-deployments describe - describe a Cloud Security Command
Center posture deployment
SYNOPSIS
gcloud scc posture-deployments describe
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Describe a Cloud Security Command Center (SCC) posture deployment.
EXAMPLES
To describe posture deployment
organizations/123/locations/global/postureDeployments/posture-deployment-foo-1 (i.e. a posture deployment
in organization `123`, location `global`, with ID `posture-deployment-foo-1`), run:
$ gcloud scc posture-deployments describe \
organizations/123/locations/global/postureDeployments/\
posture-deployment-foo-1
or, run:
$ gcloud scc posture-deployments describe posture-deployment-foo-1 \
--organization=123 --location=global
POSITIONAL ARGUMENTS
Posture deployment resource - The posture deployment to describe. For
example
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE_DEPLOYMENT
ID of the posture_deployment or fully qualified identifier for the
posture_deployment.
To set the posture_deployment attribute:
▸ provide the argument posture_deployment on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --organization on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-deployments describe

View file

@ -0,0 +1,40 @@
NAME
gcloud scc posture-deployments - manage Cloud Security Command Center
posture deployments
SYNOPSIS
gcloud scc posture-deployments COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Manage Cloud Security Command Center (SCC) posture deployments.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
create
Create a Cloud Security Command Center (SCC) posture deployment.
delete
Delete a Cloud Security Command Center (SCC) posture deployment.
describe
Describe a Cloud Security Command Center (SCC) posture deployment.
list
List the details of the Cloud Security Command Center (SCC) posture
deployments.
update
Update the given Cloud Security Command Center (SCC) posture
deployment.
NOTES
This variant is also available:
$ gcloud alpha scc posture-deployments

View file

@ -0,0 +1,69 @@
NAME
gcloud scc posture-deployments list - list the details of the Cloud
Security Command Center posture deployments
SYNOPSIS
gcloud scc posture-deployments list PARENT [--filter=EXPRESSION]
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
List the details of the Cloud Security Command Center (SCC) posture
deployments for the specified organization.
EXAMPLES
To list Cloud Security Command Center posture deployments for organization
123, run:
$ gcloud scc posture-deployments list \
organizations/123/locations/global
POSITIONAL ARGUMENTS
PARENT
Organization for listing the Cloud Security Command Center posture
deployments available at the organization level. Formatted as
organizations/<organizationID>/locations/<location>.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-deployments list

View file

@ -0,0 +1,112 @@
NAME
gcloud scc posture-deployments update - update the given Cloud Security
Command Center posture deployment
SYNOPSIS
gcloud scc posture-deployments update
(POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION)
[--async] [--description=DESCRIPTION] [--etag=ETAG]
[--update-mask=UPDATE_MASK]
[--posture-id=POSTURE_ID --posture-revision-id=POSTURE_REVISION_ID]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Update a Cloud Security Command Center (SCC) posture deployment.
Fields specified in update-mask flag are updated. Updatable fields are
description and posture_name with posture_revision-id. The target_resource
for a posture deployment cannot be updated. The posture deployment to be
updated should be in ACTIVE State. If posture details of posture deployment
need to be updated, then the desired posture needs to be in ACTIVE state.
LRO operation ID is returned as the response of the command.
EXAMPLES
Update the description of the posture deployment named
foo-posture-deployment in the organization
organizations/123/locations/global: $ gcloud scc posture-deployments update \
organizations/123/locations/global/postureDeployments/\
foo-posture-deployment --update-mask=description \
--description="updated-description"
Update posture deployment named foo-posture-deployment with the posture
named foo-posture and revision_id abcdefgh in the organization
organizations/123/locations/global: $ gcloud scc posture-deployments update \
organizations/123/locations/global/postureDeployments/\
foo-posture-deployment \
--update-mask=posture_id,posture_revision-id \
--posture-id=foo-posture --posture-revision-id=abcdefgh
POSITIONAL ARGUMENTS
Posture deployment resource - The posture deployment to update. For
example
organizations/<organizationID>/locations/<location>/postureDeployments/<postureDeploymentID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE_DEPLOYMENT
ID of the posture_deployment or fully qualified identifier for the
posture_deployment.
To set the posture_deployment attribute:
▸ provide the argument posture_deployment on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture_deployment on the command line with
a fully specified name;
▸ provide the argument --organization on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--description=DESCRIPTION
Updated description of posture deployment.
--etag=ETAG
Etag is an optional flag. If the provided Etag doesn't match the server
generated Etag, the update operation won't proceed.
--update-mask=UPDATE_MASK
Comma-separated string containing list of fields to be updated.
--posture-id=POSTURE_ID
Relative name of the posture to be updated, like
organizations/<organizationID>/locations/<location>/postures/<postureID>.
--posture-revision-id=POSTURE_REVISION_ID
Revision ID of the posture to be updated.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-deployments update

View file

@ -0,0 +1,87 @@
NAME
gcloud scc posture-templates describe - describe a Cloud Security Command
Center posture template
SYNOPSIS
gcloud scc posture-templates describe
(POSTURE_TEMPLATE : --location=LOCATION --organization=ORGANIZATION)
[--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Describe a Cloud Security Command Center (SCC) posture template.
By default, the latest created revision of the posture template is
described. Users must provide revision ID to describe a specific revision.
EXAMPLES
Describe a posture template named
organizations/123/locations/global/postureTemplates/secure_by_default (i.e.
a posture in organization 123, location global, with id secure_by_default):
$ gcloud scc posture-templates describe \
organizations/123/locations/global/postureTemplates/\
secure_by_default
Describe a specific revision v1.0.0 of posture template named
organizations/123/locations/global/postureTemplates/secure_by_default:
$ gcloud scc posture-templates describe \
organizations/123/locations/global/postureTemplates/\
secure_by_default --revision-id=v1.0.0
POSITIONAL ARGUMENTS
Posture template resource - The posture template to describe. For example
organizations/<organizationID>/locations/<location>/postureTemplates/<postureTemplateID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE_TEMPLATE
ID of the posture_template or fully qualified identifier for the
posture_template.
To set the posture_template attribute:
▸ provide the argument posture_template on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture_template on the command line with a
fully specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture_template on the command line with a
fully specified name;
▸ provide the argument --organization on the command line.
FLAGS
--revision-id=REVISION_ID
ID of the specific posture template revision to describe. If not
specified, latest revision is described.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-templates describe

View file

@ -0,0 +1,30 @@
NAME
gcloud scc posture-templates - manage Cloud Security Command Center posture
templates
SYNOPSIS
gcloud scc posture-templates COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Manage Cloud Security Command Center (SCC) posture templates.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
describe
Describe a Cloud Security Command Center (SCC) posture template.
list
List the details of the Cloud Security Command Center (SCC) posture
templates.
NOTES
This variant is also available:
$ gcloud alpha scc posture-templates

View file

@ -0,0 +1,69 @@
NAME
gcloud scc posture-templates list - list the details of the Cloud Security
Command Center posture templates
SYNOPSIS
gcloud scc posture-templates list PARENT [--filter=EXPRESSION]
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
List the details of the Cloud Security Command Center (SCC) posture
templates for the specified organization.
EXAMPLES
To list Cloud Security Command Center posture templates for organization
123, run:
$ gcloud scc posture-templates list \
organizations/123/locations/global
POSITIONAL ARGUMENTS
PARENT
Organization for listing the Cloud Security Command Center posture
templates available at the organization level. Formatted as
organizations/<organizationID>/locations/<location>.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc posture-templates list

View file

@ -0,0 +1,84 @@
NAME
gcloud scc postures create - create a Cloud Security Command Center posture
SYNOPSIS
gcloud scc postures create
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
--posture-from-file=POSTURE_FROM_FILE [--async] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Create a Cloud Security Command Center (SCC) posture. First argument is the
parent of the posture to be created. Second argument is the name of the
posture to be created. The posture details are provided in YAML file. The
file path is mentioned in posture-from-file flag.
Created posture is returned as the response of the command. LRO operation
ID is printed as the standard output.
EXAMPLES
Create a posture named posture-foo-1 within parent
organizations/123/locations/global(i.e. a posture in organization 123,
location global, with id posture-foo-1):
$ gcloud scc postures create organizations/123/locations/global \
posture-foo-1 --posture-from-file=posture.yaml
POSITIONAL ARGUMENTS
Posture resource - The name of the posture to be created. For example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE
ID of the posture or fully qualified identifier for the posture.
To set the posture attribute:
▸ provide the argument posture on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --organization on the command line.
REQUIRED FLAGS
--posture-from-file=POSTURE_FROM_FILE
YAML file containing the body of the posture to be created.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures create

View file

@ -0,0 +1,91 @@
NAME
gcloud scc postures delete - delete a Cloud Security Command Center posture
SYNOPSIS
gcloud scc postures delete
(POSTURE : --location=LOCATION --organization=ORGANIZATION) [--async]
[--etag=ETAG] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Delete a Cloud Security Command Center (SCC) posture.
Posture with all it's revisions is deleted. Deletion won't be allowed in
case any of the versions of the posture is deployed on a workload. ETAG can
be provided as an optional flag.
EXAMPLES
Delete the posture named
organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture
in organization 123, location global, with id posture-foo-1):
$ gcloud scc postures delete \
organizations/123/locations/global/postures/posture-foo-1
Delete the posture named
organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture
in organization 123, location global, with id posture-foo-1) for the ETAG
ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iP5SdkSVU
$ gcloud scc postures delete \
organizations/123/locations/global/postures/posture-foo-1 \
--etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU
POSITIONAL ARGUMENTS
Posture resource - The posture to delete. For example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE
ID of the posture or fully qualified identifier for the posture.
To set the posture attribute:
▸ provide the argument posture on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --organization on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--etag=ETAG
Etag is an optional flag. If the provided Etag doesn't match the server
generated Etag, the delete operation won't proceed.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures delete

View file

@ -0,0 +1,85 @@
NAME
gcloud scc postures describe - describe a Cloud Security Command Center
posture
SYNOPSIS
gcloud scc postures describe
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
[--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Describe a Cloud Security Command Center (SCC) posture.
By default, the latest updated revision of the posture is described. Users
must provide revision ID to describe a specific revision.
EXAMPLES
Describe the latest updated revision of a posture named
organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture
in organization 123, location global, with id posture-foo-1):
$ gcloud scc postures describe \
organizations/123/locations/global/postures/posture-foo-1
Describe a specific revision abcdefg of posture named
organizations/123/locations/global/postures/posture-foo-1:
$ gcloud scc postures describe \
organizations/123/locations/global/postures/posture-foo-1 \
--revision-id=abcdefg
POSITIONAL ARGUMENTS
Posture resource - The posture to describe. For example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE
ID of the posture or fully qualified identifier for the posture.
To set the posture attribute:
▸ provide the argument posture on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --organization on the command line.
FLAGS
--revision-id=REVISION_ID
ID of the specific posture revision to describe. If not specified,
latest revision is described.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures describe

View file

@ -0,0 +1,87 @@
NAME
gcloud scc postures extract - extract a Cloud Security Command Center
posture from a workload
SYNOPSIS
gcloud scc postures extract
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
--workload=WORKLOAD [--async] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Extract a Cloud Security Command Center (SCC) posture from a workload.
First argument is the parent of the posture to be created. Second argument
is the name of the posture to be created. The workload from where the
organization policies need to be extracted is provided via 'workload' flag.
Extracted posture is returned as the response of the command. LRO operation
ID is printed as the standard output.
EXAMPLES
Extract a posture named posture-foo-1 within parent
organizations/123/locations/global(i.e. a posture in organization 123,
location global, with id posture-foo-1) from workload projects/456:
$ gcloud scc postures extract organizations/123/locations/global \
posture-foo-1 --workload=projects/456
POSITIONAL ARGUMENTS
Posture resource - The name of the posture to be created. For example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE
ID of the posture or fully qualified identifier for the posture.
To set the posture attribute:
▸ provide the argument posture on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --organization on the command line.
REQUIRED FLAGS
--workload=WORKLOAD
Workload from where policies has to be extracted into a posture. It can
be in one of the following formats: projects/projectNumber,
folders/folderNumber, organizations/organizationNumber.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures extract

44
gcloud/scc/postures/help Normal file
View file

@ -0,0 +1,44 @@
NAME
gcloud scc postures - manage Cloud Security Command Center postures
SYNOPSIS
gcloud scc postures COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Manage Cloud Security Command Center (SCC) postures.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
create
Create a Cloud Security Command Center (SCC) posture.
delete
Delete a Cloud Security Command Center (SCC) posture.
describe
Describe a Cloud Security Command Center (SCC) posture.
extract
Extract a Cloud Security Command Center (SCC) posture from a workload.
list
Lists all the Cloud Security Command Center (SCC) postures for an
organization.
list-revisions
List the revisions of a Cloud Security Command Center (SCC) posture.
update
Update the given Cloud Security Command Center (SCC) posture.
NOTES
This variant is also available:
$ gcloud alpha scc postures

72
gcloud/scc/postures/list Normal file
View file

@ -0,0 +1,72 @@
NAME
gcloud scc postures list - lists all the Cloud Security Command Center
postures for an organization
SYNOPSIS
gcloud scc postures list PARENT [--filter=EXPRESSION] [--limit=LIMIT]
[--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Lists all Cloud Security Command Center (SCC) postures for an organization.
By default, postures created in global location are returned.
EXAMPLES
List all postures in organization 123. If location is omitted, this returns
postures from location 'global'. For a posture with multiple revisions,
only the latest updated revision of the posture is returned in the output.
$ gcloud scc postures list organizations/123
List all postures in organization 123, location global
$ gcloud scc postures list organizations/123/locations/global
POSITIONAL ARGUMENTS
PARENT
Resource name of the parent, like organizations/<organizationID> or
organizations/<organizationID>/locations/<location>.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures list

View file

@ -0,0 +1,97 @@
NAME
gcloud scc postures list-revisions - list the revisions of a Cloud Security
Command Center posture
SYNOPSIS
gcloud scc postures list-revisions
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
List the revisions of a Cloud Security Command Center (SCC) posture.
EXAMPLES
To list Cloud Security Command Center posture revisions for posture
organizations/123/locations/global/postures/posture123 , run:
$ gcloud scc postures list-revisions \
organizations/123/locations/global/postures/posture123
POSITIONAL ARGUMENTS
Posture resource - The posture whose revisions are to be listed. For
example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
POSTURE
ID of the posture or fully qualified identifier for the posture.
To set the posture attribute:
▸ provide the argument posture on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --organization on the command line.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures list-revisions

140
gcloud/scc/postures/update Normal file
View file

@ -0,0 +1,140 @@
NAME
gcloud scc postures update - update the given Cloud Security Command Center
posture
SYNOPSIS
gcloud scc postures update
(POSTURE : --location=LOCATION --organization=ORGANIZATION)
--posture-from-file=POSTURE_FROM_FILE --revision-id=REVISION_ID
[--async] [--update-mask=UPDATE_MASK] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Update a Cloud Security Command Center (SCC) posture.
Fields specified in update-mask flag are updated. Updatable fields are
state, description and policy_sets. State of the posture can't be updated
along with update of other fields. An empty or "" as field mask will result
in update of policy_sets and description. In case of the update of
policy_sets, the value mentioned in the update posture request overwrites
the exisiting value of policy_sets.
Valid state transitions are: a) ACTIVE to DRAFT b) ACTIVE to DEPRECATED c)
DRAFT to ACTIVE d) DEPRECATED to ACTIVE
The update operation will result in the update of the revision-id specified
in the request, unless the posture revision is currently deployed on a
workload. A new revision is created for an already deployed posture
revision.
EXAMPLES
Update the revision-id abcdefgh of the posture named foo-posture in the
organization organizations/123/locations/global: Change State to ACTIVE. $ gcloud scc postures update \
organizations/123/locations/global/postures/foo-posture \
--posture-from-file=update_posture.yaml --revision-id=abcdefgh \
update_mask=state
Contents of update_posture.yaml are |
name: organizations/123/locations/global/postures/foo-posture
state: ACTIVE
Update the revision-id abcdefgh of the posture named foo-posture in the
organization organizations/123/locations/global: Change description and
policy_sets to the values mentioned in update_posture.yaml $ gcloud scc postures update \
organizations/123/locations/global/postures/foo-posture \
--posture-from-file=update_posture.yaml --revision-id=abcdefgh \
update_mask=description,policy_sets
Contents of update_posture.yaml are |
name: organizations/123/locations/global/postures/foo-posture
description: updated description
policy_sets:
- policy_set_id: newPolicySet1
policies:
- policy_id: newPolicy
constraint:
org_policy_canned_constraint:
canned_constraint_id: storage.uniformBucketLevelAccess
policy_rules:
enforce: false
- policy_set_id: PolicySet2
policies:
- policy_id: Policy3
constraint:
org_policy_custom_constraint:
custom_constraint:
name: organizations/9454078371/customConstraints/custom.newConstraint
resource_types: container.$$UNIVERSE_DOMAIN$$/NodePool
method_types: UPDATE
condition: resource.management.autoUpgrade == false
action_type: ALLOW
policy_rules:
enforce: true
POSITIONAL ARGUMENTS
Posture resource - Arguments and flags that specify the Posture instance
to update. The arguments in this group can be used to specify the
attributes of this resource.
This must be specified.
POSTURE
ID of the posture or fully qualified identifier for the posture.
To set the posture attribute:
▸ provide the argument posture on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
ID of the location where the resource exists (for example, global).
To set the location attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --location on the command line.
--organization=ORGANIZATION
ID of the organization which is the parent of the resource.
To set the organization attribute:
▸ provide the argument posture on the command line with a fully
specified name;
▸ provide the argument --organization on the command line.
REQUIRED FLAGS
--posture-from-file=POSTURE_FROM_FILE
Path of the file containing the details of the field to be updated.
Contents include the name of the posture to be updated and value of the
fields to be updated.
--revision-id=REVISION_ID
Revision ID of the posture to be updated. The same revision ID will be
updated in case the posture revision is not deployed on any workload. A
new revision will be created for a deployed posture.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--update-mask=UPDATE_MASK
Comma separated string containing list of fields to be updated.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the securityposture/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/security-command-center
NOTES
This variant is also available:
$ gcloud alpha scc postures update