-
Notifications
You must be signed in to change notification settings - Fork 584
/
security_center.group_assets.js
176 lines (166 loc) · 7.63 KB
/
security_center.group_assets.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
// Copyright 2024 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// ** This file is automatically generated by gapic-generator-typescript. **
// ** https://github.com/googleapis/gapic-generator-typescript **
// ** All changes to this file may be overwritten. **
'use strict';
function main(parent, groupBy) {
// [START securitycenter_v1_generated_SecurityCenter_GroupAssets_async]
/**
* This snippet has been automatically generated and should be regarded as a code template only.
* It will require modifications to work.
* It may require correct/in-range values for request initialization.
* TODO(developer): Uncomment these variables before running the sample.
*/
/**
* Required. The name of the parent to group the assets by. Its format is
* `organizations/[organization_id]`, `folders/[folder_id]`, or
* `projects/[project_id]`.
*/
// const parent = 'abc123'
/**
* Expression that defines the filter to apply across assets.
* The expression is a list of zero or more restrictions combined via logical
* operators `AND` and `OR`.
* Parentheses are supported, and `OR` has higher precedence than `AND`.
* Restrictions have the form `<field> <operator> <value>` and may have a `-`
* character in front of them to indicate negation. The fields map to those
* defined in the Asset resource. Examples include:
* * name
* * security_center_properties.resource_name
* * resource_properties.a_property
* * security_marks.marks.marka
* The supported operators are:
* * `=` for all value types.
* * `>`, `<`, `>=`, `<=` for integer values.
* * `:`, meaning substring matching, for strings.
* The supported value types are:
* * string literals in quotes.
* * integer literals without quotes.
* * boolean literals `true` and `false` without quotes.
* The following field and operator combinations are supported:
* * name: `=`
* * update_time: `=`, `>`, `<`, `>=`, `<=`
* Usage: This should be milliseconds since epoch or an RFC3339 string.
* Examples:
* `update_time = "2019-06-10T16:07:18-07:00"`
* `update_time = 1560208038000`
* * create_time: `=`, `>`, `<`, `>=`, `<=`
* Usage: This should be milliseconds since epoch or an RFC3339 string.
* Examples:
* `create_time = "2019-06-10T16:07:18-07:00"`
* `create_time = 1560208038000`
* * iam_policy.policy_blob: `=`, `:`
* * resource_properties: `=`, `:`, `>`, `<`, `>=`, `<=`
* * security_marks.marks: `=`, `:`
* * security_center_properties.resource_name: `=`, `:`
* * security_center_properties.resource_display_name: `=`, `:`
* * security_center_properties.resource_type: `=`, `:`
* * security_center_properties.resource_parent: `=`, `:`
* * security_center_properties.resource_parent_display_name: `=`, `:`
* * security_center_properties.resource_project: `=`, `:`
* * security_center_properties.resource_project_display_name: `=`, `:`
* * security_center_properties.resource_owners: `=`, `:`
* For example, `resource_properties.size = 100` is a valid filter string.
* Use a partial match on the empty string to filter based on a property
* existing: `resource_properties.my_property : ""`
* Use a negated partial match on the empty string to filter based on a
* property not existing: `-resource_properties.my_property : ""`
*/
// const filter = 'abc123'
/**
* Required. Expression that defines what assets fields to use for grouping.
* The string value should follow SQL syntax: comma separated list of fields.
* For example:
* "security_center_properties.resource_project,security_center_properties.project".
* The following fields are supported when compare_duration is not set:
* * security_center_properties.resource_project
* * security_center_properties.resource_project_display_name
* * security_center_properties.resource_type
* * security_center_properties.resource_parent
* * security_center_properties.resource_parent_display_name
* The following fields are supported when compare_duration is set:
* * security_center_properties.resource_type
* * security_center_properties.resource_project_display_name
* * security_center_properties.resource_parent_display_name
*/
// const groupBy = 'abc123'
/**
* When compare_duration is set, the GroupResult's "state_change" property is
* updated to indicate whether the asset was added, removed, or remained
* present during the compare_duration period of time that precedes the
* read_time. This is the time between (read_time - compare_duration) and
* read_time.
* The state change value is derived based on the presence of the asset at the
* two points in time. Intermediate state changes between the two times don't
* affect the result. For example, the results aren't affected if the asset is
* removed and re-created again.
* Possible "state_change" values when compare_duration is specified:
* * "ADDED": indicates that the asset was not present at the start of
* compare_duration, but present at reference_time.
* * "REMOVED": indicates that the asset was present at the start of
* compare_duration, but not present at reference_time.
* * "ACTIVE": indicates that the asset was present at both the
* start and the end of the time period defined by
* compare_duration and reference_time.
* If compare_duration is not specified, then the only possible state_change
* is "UNUSED", which will be the state_change set for all assets present at
* read_time.
* If this field is set then `state_change` must be a specified field in
* `group_by`.
*/
// const compareDuration = {}
/**
* Time used as a reference point when filtering assets. The filter is limited
* to assets existing at the supplied time and their values are those at that
* specific time. Absence of this field will default to the API's version of
* NOW.
*/
// const readTime = {}
/**
* The value returned by the last `GroupAssetsResponse`; indicates
* that this is a continuation of a prior `GroupAssets` call, and that the
* system should return the next page of data.
*/
// const pageToken = 'abc123'
/**
* The maximum number of results to return in a single response. Default is
* 10, minimum is 1, maximum is 1000.
*/
// const pageSize = 1234
// Imports the Securitycenter library
const {SecurityCenterClient} = require('@google-cloud/security-center').v1;
// Instantiates a client
const securitycenterClient = new SecurityCenterClient();
async function callGroupAssets() {
// Construct request
const request = {
parent,
groupBy,
};
// Run request
const iterable = securitycenterClient.groupAssetsAsync(request);
for await (const response of iterable) {
console.log(response);
}
}
callGroupAssets();
// [END securitycenter_v1_generated_SecurityCenter_GroupAssets_async]
}
process.on('unhandledRejection', err => {
console.error(err.message);
process.exitCode = 1;
});
main(...process.argv.slice(2));