public sealed class CloudControl : IMessage<CloudControl>, IEquatable<CloudControl>, IDeepCloneable<CloudControl>, IBufferMessage, IMessage
Reference documentation and code samples for the Cloud Security Compliance v1 API class CloudControl.
A CloudControl is the fundamental unit encapsulating the rules to meet a specific security or compliance intent. It can contain various rule types (like Organization Policies, CEL expressions, etc.) enabling different enforcement modes (Preventive, Detective, Audit). CloudControls are often parameterized for reusability and can be either BUILT_IN (provided by Google) or CUSTOM (defined by the user).
Implements
IMessageCloudControl, IEquatableCloudControl, IDeepCloneableCloudControl, IBufferMessage, IMessageNamespace
Google.Cloud.CloudSecurityCompliance.V1Assembly
Google.Cloud.CloudSecurityCompliance.V1.dll
Constructors
CloudControl()
public CloudControl()
CloudControl(CloudControl)
public CloudControl(CloudControl other)
Parameter | |
---|---|
Name | Description |
other |
CloudControl |
Properties
Categories
public RepeatedField<CloudControlCategory> Categories { get; }
Optional. The categories of the cloud control.
Property Value | |
---|---|
Type | Description |
RepeatedFieldCloudControlCategory |
CloudControlName
public CloudControlName CloudControlName { get; set; }
CloudControlName-typed view over the Name resource name property.
Property Value | |
---|---|
Type | Description |
CloudControlName |
CreateTime
public Timestamp CreateTime { get; set; }
Output only. The last updated time of the cloud control. The create_time is used because a new CC is created whenever we update an existing CC.
Property Value | |
---|---|
Type | Description |
Timestamp |
Description
public string Description { get; set; }
Optional. A description of the cloud control. The maximum length is 2000 characters.
Property Value | |
---|---|
Type | Description |
string |
DisplayName
public string DisplayName { get; set; }
Optional. The display name of the cloud control. The maximum length is 200 characters.
Property Value | |
---|---|
Type | Description |
string |
FindingCategory
public string FindingCategory { get; set; }
Optional. The finding_category of the cloud control. The maximum length is 255 characters.
Property Value | |
---|---|
Type | Description |
string |
MajorRevisionId
public long MajorRevisionId { get; set; }
Output only. Major revision of the cloud control incremented in ascending order.
Property Value | |
---|---|
Type | Description |
long |
Name
public string Name { get; set; }
Required. Identifier. The resource name of the cloud control. Format: organizations/{organization}/locations/{location}/cloudControls/{cloud_control_id}
Property Value | |
---|---|
Type | Description |
string |
ParameterSpec
public RepeatedField<ParameterSpec> ParameterSpec { get; }
Optional. The parameter spec of the cloud control.
Property Value | |
---|---|
Type | Description |
RepeatedFieldParameterSpec |
RelatedFrameworks
public RepeatedField<string> RelatedFrameworks { get; }
Output only. The Frameworks that include this CloudControl
Property Value | |
---|---|
Type | Description |
RepeatedFieldstring |
RemediationSteps
public string RemediationSteps { get; set; }
Optional. The remediation steps for the findings generated by the cloud control. The maximum length is 400 characters.
Property Value | |
---|---|
Type | Description |
string |
Rules
public RepeatedField<Rule> Rules { get; }
Optional. The Policy to be enforced to prevent/detect resource non-compliance.
Property Value | |
---|---|
Type | Description |
RepeatedFieldRule |
Severity
public Severity Severity { get; set; }
Optional. The severity of findings generated by the cloud control.
Property Value | |
---|---|
Type | Description |
Severity |
SupportedCloudProviders
public RepeatedField<CloudProvider> SupportedCloudProviders { get; }
Optional. cloud providers supported
Property Value | |
---|---|
Type | Description |
RepeatedFieldCloudProvider |
SupportedEnforcementModes
public RepeatedField<EnforcementMode> SupportedEnforcementModes { get; }
Output only. The supported enforcement mode of the cloud control. Default is DETECTIVE.
Property Value | |
---|---|
Type | Description |
RepeatedFieldEnforcementMode |
SupportedTargetResourceTypes
public RepeatedField<TargetResourceType> SupportedTargetResourceTypes { get; }
Optional. target resource types supported by the CloudControl.
Property Value | |
---|---|
Type | Description |
RepeatedFieldTargetResourceType |