Cloud Security Compliance v1 API - Class CloudControl (1.0.0-beta02)

public sealed class CloudControl : IMessage<CloudControl>, IEquatable<CloudControl>, IDeepCloneable<CloudControl>, IBufferMessage, IMessage

Reference documentation and code samples for the Cloud Security Compliance v1 API class CloudControl.

A CloudControl is the fundamental unit encapsulating the rules to meet a specific security or compliance intent. It can contain various rule types (like Organization Policies, CEL expressions, etc.) enabling different enforcement modes (Preventive, Detective, Audit). CloudControls are often parameterized for reusability and can be either BUILT_IN (provided by Google) or CUSTOM (defined by the user).

Inheritance

object > CloudControl

Namespace

Google.Cloud.CloudSecurityCompliance.V1

Assembly

Google.Cloud.CloudSecurityCompliance.V1.dll

Constructors

CloudControl()

public CloudControl()

CloudControl(CloudControl)

public CloudControl(CloudControl other)
Parameter
Name Description
other CloudControl

Properties

Categories

public RepeatedField<CloudControlCategory> Categories { get; }

Optional. The categories of the cloud control.

Property Value
Type Description
RepeatedFieldCloudControlCategory

CloudControlName

public CloudControlName CloudControlName { get; set; }

CloudControlName-typed view over the Name resource name property.

Property Value
Type Description
CloudControlName

CreateTime

public Timestamp CreateTime { get; set; }

Output only. The last updated time of the cloud control. The create_time is used because a new CC is created whenever we update an existing CC.

Property Value
Type Description
Timestamp

Description

public string Description { get; set; }

Optional. A description of the cloud control. The maximum length is 2000 characters.

Property Value
Type Description
string

DisplayName

public string DisplayName { get; set; }

Optional. The display name of the cloud control. The maximum length is 200 characters.

Property Value
Type Description
string

FindingCategory

public string FindingCategory { get; set; }

Optional. The finding_category of the cloud control. The maximum length is 255 characters.

Property Value
Type Description
string

MajorRevisionId

public long MajorRevisionId { get; set; }

Output only. Major revision of the cloud control incremented in ascending order.

Property Value
Type Description
long

Name

public string Name { get; set; }

Required. Identifier. The resource name of the cloud control. Format: organizations/{organization}/locations/{location}/cloudControls/{cloud_control_id}

Property Value
Type Description
string

ParameterSpec

public RepeatedField<ParameterSpec> ParameterSpec { get; }

Optional. The parameter spec of the cloud control.

Property Value
Type Description
RepeatedFieldParameterSpec

RelatedFrameworks

public RepeatedField<string> RelatedFrameworks { get; }

Output only. The Frameworks that include this CloudControl

Property Value
Type Description
RepeatedFieldstring

RemediationSteps

public string RemediationSteps { get; set; }

Optional. The remediation steps for the findings generated by the cloud control. The maximum length is 400 characters.

Property Value
Type Description
string

Rules

public RepeatedField<Rule> Rules { get; }

Optional. The Policy to be enforced to prevent/detect resource non-compliance.

Property Value
Type Description
RepeatedFieldRule

Severity

public Severity Severity { get; set; }

Optional. The severity of findings generated by the cloud control.

Property Value
Type Description
Severity

SupportedCloudProviders

public RepeatedField<CloudProvider> SupportedCloudProviders { get; }

Optional. cloud providers supported

Property Value
Type Description
RepeatedFieldCloudProvider

SupportedEnforcementModes

public RepeatedField<EnforcementMode> SupportedEnforcementModes { get; }

Output only. The supported enforcement mode of the cloud control. Default is DETECTIVE.

Property Value
Type Description
RepeatedFieldEnforcementMode

SupportedTargetResourceTypes

public RepeatedField<TargetResourceType> SupportedTargetResourceTypes { get; }

Optional. target resource types supported by the CloudControl.

Property Value
Type Description
RepeatedFieldTargetResourceType