const completionSpec = { name : "scc" , description : "Manage Cloud SCC resources" , subcommands : [ { name : "assets" , description : "Manage Cloud SCC assets" , subcommands : [ { name : "describe" , description : "Describe an asset given its resource name or asset id" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--asset" , description : "Cloud SCC specific asset. It's derived from the the asset's relative resource name.\nSee: https://cloud.google.com/apis/design/resource_names#relative_resource_name.\nFor Example, for the given asset name: \"organizations/123/assets/456\", 456 represents\nasset id" , args : { name : "ASSET" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--resource-name" , description : 'Asset\'s resource name. Full resource name of the Google Cloud Platform resource\nthis asset represents. This field is immutable after create time. See:\nhttps://cloud.google.com/apis/design/resource_names#full_resource_name.\nFor Example: "//cloudresourcemanager.googleapis.com/projects/1234567890123" could be the\nresource-name for a project' , args : { name : "RESOURCE_NAME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "get-parent" , description : "Get the Parent for an asset given its resource name or asset id" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--asset" , description : "Cloud SCC specific asset. It's derived from the the asset's relative resource name.\nSee: https://cloud.google.com/apis/design/resource_names#relative_resource_name.\nFor Example, for the given asset name: \"organizations/123/assets/456\", 456 represents\nasset id" , args : { name : "ASSET" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--resource-name" , description : 'Asset\'s resource name. Full resource name of the Google Cloud Platform resource\nthis asset represents. This field is immutable after create time. See:\nhttps://cloud.google.com/apis/design/resource_names#full_resource_name.\nFor Example: "//cloudresourcemanager.googleapis.com/projects/1234567890123" could be the\nresource-name for a project' , args : { name : "RESOURCE_NAME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "get-project" , description : "Get the Project for an asset given its resource name or asset id" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--asset" , description : "Cloud SCC specific asset. It's derived from the the asset's relative resource name.\nSee: https://cloud.google.com/apis/design/resource_names#relative_resource_name.\nFor Example, for the given asset name: \"organizations/123/assets/456\", 456 represents\nasset id" , args : { name : "ASSET" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--resource-name" , description : 'Asset\'s resource name. Full resource name of the Google Cloud Platform resource\nthis asset represents. This field is immutable after create time. See:\nhttps://cloud.google.com/apis/design/resource_names#full_resource_name.\nFor Example: "//cloudresourcemanager.googleapis.com/projects/1234567890123" could be the\nresource-name for a project' , args : { name : "RESOURCE_NAME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "group" , description : "Filter an organization's assets and groups them by their specified properties" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--compare-duration" , description : 'GroupAssetsResult\'s "state_change" attribute is updated to indicate whether the asset was added, removed, or remained present during the compare_duration period of time that precedes the read_time.\nExample duration: "100000s"' , args : { name : "COMPARE_DURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Expression is a list of one or more restrictions combined via logical operators\n'AND' and 'OR'. Parentheses are not supported, and 'OR' has higher precedence than\n'AND'. For example, 'update_time > 100 AND\nsecurity_center_properties.resource_type=\\\"google.cloud.resourcemanager.Organization\\\"'\nis a valid filter string" , args : { name : "FILTER" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--group-by" , description : "Expression that defines what asset fields to use for grouping (including 'state').\nString value should follow SQL syntax: comma separated list of fields.\nFor example: \"parent,resource_name\". The following fields are supported:\n* security_center_properties.resource_project\n* security_center_properties.resource_type\n* security_center_properties.resource_parent\n* state_change" , args : { name : "GROUP_BY" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--page-size" , description : "The maximum number of results to return in a single response. Default is\n10, minimum is 1, maximum is 1000" , args : { name : "PAGE_SIZE" , description : "String" , suggestions : [ ] , } , } , { name : "--page-token" , description : "Value returned by the last 'GroupAssetsResponse'; indicates\nthat this is a continuation of a prior 'GroupAssets' call, and that the\nsystem should return the next page of data" , args : { name : "PAGE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--read-time" , description : "Time used as a reference point when filtering assets. Filter is limited\nto assets existing at the supplied time and their values are those at that\nspecific time. For example: 2019-02-28T07:00:00Z. Absence of this field will\ndefault to the API's version of NOW" , args : { name : "READ_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "list" , description : "List Cloud Security Command Center assets" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--compare-duration" , description : 'ListAssetResult\'s "state" attribute is updated to indicate whether the asset was added, removed, or remained present during the compare_duration period of time that precedes the read_time.\nExample duration: "100000s"' , args : { name : "COMPARE_DURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--field-mask" , description : 'Field mask to specify the Asset fields to be listed in the response. An empty field mask will list all fields.\nExample field mask: "asset.security_center_properties.resource_type,asset.security_center_properties.resource_parent"' , args : { name : "FIELD_MASK" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Apply a Boolean filter _EXPRESSION_ to each resource item to be listed.\nIf the expression evaluates `True`, then that item is listed. For more\ndetails and examples of filter expressions, run $ gcloud topic filters. This\nflag interacts with other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "EXPRESSION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--limit" , description : "Maximum number of resources to list. The default is *unlimited*.\nThis flag interacts with other flags that are applied in this order:\n*--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "LIMIT" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--order-by" , description : 'Expression that defines what fields and order to use for sorting.\nExample order by: "resource_properties.sort_prop ASC"' , args : { name : "ORDER_BY" , description : "String" , suggestions : [ ] , } , } , { name : "--page-size" , description : "Some services group resource list output into pages. This flag specifies\nthe maximum number of resources per page. The default is determined by the\nservice if it supports paging, otherwise it is *unlimited* (no paging).\nPaging may be applied before or after *--filter* and *--limit* depending\non the service" , args : { name : "PAGE_SIZE" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--page-token" , description : "The value returned by the last 'ListAssetsResponse'; indicates\nthat this is a continuation of a prior 'ListAssets' call, and that the\nsystem should return the next page of data" , args : { name : "PAGE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--read-time" , description : 'Time used as a reference point when filtering assets. Default: NOW\nExample read time: "2019-02-28T07:00:06.861Z"' , args : { name : "READ_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--sort-by" , description : "Comma-separated list of resource field key names to sort by. The\ndefault order is ascending. Prefix a field with ``~'' for descending\norder on that field. This flag interacts with other flags that are applied\nin this order: *--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "FIELD" , description : "List" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "list-marks" , description : "List an assets's security marks" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Apply a Boolean filter _EXPRESSION_ to each resource item to be listed.\nIf the expression evaluates `True`, then that item is listed. For more\ndetails and examples of filter expressions, run $ gcloud topic filters. This\nflag interacts with other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "EXPRESSION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--limit" , description : "Maximum number of resources to list. The default is *unlimited*.\nThis flag interacts with other flags that are applied in this order:\n*--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "LIMIT" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--page-size" , description : "Some services group resource list output into pages. This flag specifies\nthe maximum number of resources per page. The default is determined by the\nservice if it supports paging, otherwise it is *unlimited* (no paging).\nPaging may be applied before or after *--filter* and *--limit* depending\non the service" , args : { name : "PAGE_SIZE" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--page-token" , description : "Response objects will return a non-null value for page-token to indicate that there is at least\none additional page of data. User can either directly request that page by specifying the\npage-token explicitly or let gcloud fetch one-page-at-a-time" , args : { name : "PAGE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--read-time" , description : 'Time used as a reference point when filtering. Absence of this field will default to the API\'s\nversion of NOW. For example --read-time "2019-02-28T07:00:00Z"' , args : { name : "READ_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--sort-by" , description : "Comma-separated list of resource field key names to sort by. The\ndefault order is ascending. Prefix a field with ``~'' for descending\norder on that field. This flag interacts with other flags that are applied\nin this order: *--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "FIELD" , description : "List" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ASSET" , description : "ID of the asset or fully qualified identifier for the asset" , isVariadic : false , } , } , { name : "run-discovery" , description : "Scan an organization for new/modified/deleted assets" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "update-marks" , description : "Update Cloud Security Command Center asset's security marks" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--security-marks" , description : 'SecurityMarks resource to be passed as the request body. It\'s a key=value pair separated\nby comma (,). For example: --security-marks="key1=val1,key2=val2"' , args : { name : "SECURITY_MARKS" , description : "Dict" , suggestions : [ ] , } , } , { name : "--start-time" , description : "Time at which the updated SecurityMarks take effect. For example 2019-02-28T07:00:00Z" , args : { name : "START_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--update-mask" , description : "Use update-mask if you want to selectively update marks represented by --security-marks\nflag. For example: --update-mask=\"marks.key1,marks.key2\". If you want to override all the\nmarks for the given asset either skip the update-mask flag or provide an empty value\n(--update-mask '') for it" , args : { name : "UPDATE_MASK" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ASSET" , description : "ID of the asset or fully qualified identifier for the asset" , isVariadic : false , } , } , ] , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , } , { name : "findings" , description : "Manage Cloud SCC findings" , subcommands : [ { name : "create" , description : "Create a Cloud Security Command Center finding" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--category" , description : "Taxonomy group within findings from a given source. Example: XSS_FLASH_INJECTION" , args : { name : "CATEGORY" , description : "String" , suggestions : [ ] , } , priority : 100 , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--event-time" , description : "Time at which the event took place. For example, if the finding represents an open\nfirewall it would capture the time the open firewall was detected. If event-time is not\nprovided, it will default to UTC version of NOW. For example 2019-02-28T07:00:00Z" , args : { name : "EVENT_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--external-uri" , description : "URI that, if available, points to a web page outside of Cloud SCC (Security Command Center)\nwhere additional information about the finding can be found. This field is guaranteed to be\neither empty or a well formed URL" , args : { name : "EXTERNAL_URI" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--resource-name" , description : "Full resource name of the Google Cloud Platform resource this finding is for" , args : { name : "RESOURCE_NAME" , description : "String" , suggestions : [ ] , } , priority : 100 , } , { name : "--source" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123/sources/456, then\nprovide the source id which is the suffix of the source.\nExample: organizations/123/sources/456, the id is 456" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--source-properties" , description : 'Source specific properties. These properties are managed by the source that writes the\nfinding. The key names in the source_properties map must be between 1 and 255 characters,\nand must start with a letter and contain alphanumeric characters or underscores only.\nFor example "key1=val1,key2=val2"' , args : { name : "SOURCE_PROPERTIES" , description : "Dict" , suggestions : [ ] , } , } , { name : "--state" , description : "State is one of: [ACTIVE, INACTIVE]. _STATE_ must be one of: *active*, *inactive*, *state-unspecified*" , args : { name : "STATE" , description : "Googlecloudsdk.command_lib.util.apis.arg_utils:EnumNameToChoice" , suggestions : [ "active" , "inactive" , "state-unspecified" ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "FINDING" , description : "ID of the finding or fully qualified identifier for the finding" , isVariadic : false , } , } , { name : "group" , description : "Filter an organization or source's findings and groups them by their specified properties" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--compare-duration" , description : "When compare_duration is set, the GroupResult's \"state_change\" attribute is updated to\nindicate whether the finding had its state changed, the finding's state remained unchanged,\nor if the finding was added during the compare_duration period of time that precedes the\nread_time. This is the time between (read_time - compare_duration) and read_time.\nThe state_change value is derived based on the presence and state of the finding at the two\npoints in time. Intermediate state changes between the two times don't affect the result.\nFor example, the results aren't affected if the finding is made inactive and then active\nagain. Possible \"state_change\" values when compare_duration is specified:\n* 'CHANGED': indicates that the finding was present at the start of compare_duration, but changed its state at read_time.\n* 'UNCHANGED': indicates that the finding was present at the start of compare_duration and did not change state at read_time.\n* 'ADDED': indicates that the finding was not present at the start of compare_duration, but\nwas present at read_time.\nIf compare_duration is not specified, then the only possible state_change is \"UNUSED\",\nwhich will be the state_change set for all findings present at read_time. If this field is\nset then 'state_change' must be a specified field in 'group_by'" , args : { name : "COMPARE_DURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Expression that defines the filter to apply across findings. The expression is a list of\none or more restrictions combined via logical operators 'AND' and 'OR'. Parentheses are\nsupported, and 'OR' has higher precedence than 'AND'. Restrictions have the form\n'<field> <operator> <value>' and may have a '-' character in front of them to indicate\nnegation. Examples include: name, source_properties.a_property, security_marks.marks.marka.\nThe supported operators are:\n*  '=' for all value types.\n*  '>', '<', '>=', '<=' for integer values.\n*  ':', meaning substring matching, for strings.\nThe supported value types are:string literals in quotes, integer literals without quotes,\nboolean literals 'true' and 'false' without quotes.\nSome example filters: 'source_properties.size = 100', 'category=\\\"XSS\\\" AND event_time > 10'\netc" , args : { name : "FILTER" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--group-by" , description : "Expression that defines what findings fields to use for grouping (including 'state').\nString value should follow SQL syntax: comma separated list  of fields.\nFor example: \"parent,resource_name\".  The following fields are supported:\n* resource_name\n* category\n* state\n* parent" , args : { name : "GROUP_BY" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--page-size" , description : "Maximum number of results to return in a single response. Default is 10, minimum is 1,\nmaximum is 1000" , args : { name : "PAGE_SIZE" , description : "String" , suggestions : [ ] , } , } , { name : "--page-token" , description : "Response objects will return a non-null value for page-token to indicate that there is at least\none additional page of data. User can either directly request that page by specifying the\npage-token explicitly or let gcloud fetch one-page-at-a-time" , args : { name : "PAGE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--read-time" , description : "Time used as a reference point when filtering findings. The filter is limited\nto findings existing at the supplied time and their values are those at that\nspecific time. For example. 2019-02-28T07:00:00Z. Absence of this field will\ndefault to the API's version of NOW" , args : { name : "READ_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--source" , description : "Source id. Defaults to all sources" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "list" , description : "List an organization or source's findings" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--compare-duration" , description : 'ListFindingsResult\'s "state_change" attribute is updated to indicate whether the finding had\nits state changed, the finding\'s state remained unchanged, or if the finding was added in\nany state during the compare_duration period of time that precedes the read_time.\nThis is the time between (read_time - compare_duration) and read_time.\nThe state_change value is derived based on the presence and state of the finding at the two\npoints in time. Intermediate state changes between the two times don\'t affect the result.\nFor example, the results aren\'t affected if the finding is made inactive and then active\nagain. Possible "state_change" values when compare_duration is specified:\n"CHANGED" indicates that the finding was present at the start of compare_duration, but\nchanged its state at read_time.\n"UNCHANGED" indicates that the finding was present at the start of compare_duration and did\nnot change state at read_time.\n"ADDED" indicates that the finding was not present at the start of compare_duration, but was\npresent at read_time.\nIf compare_duration is not specified, then the only possible state_change is "UNUSED", which\nwill be the state_change set for all findings present at read_time.\nExample duration: "100000s"' , args : { name : "COMPARE_DURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--field-mask" , description : 'Field mask to specify the finding fields listed in the response. An empty field\nmask will list all fields. For example: --field-mask="finding.category,finding.resource_name" will only\noutput category and resource_name for the findings in addition to default attributes. Notice\nthe difference between hyphens (-) used with flags v/s camel case used in field masks.\nAn empty or missing field mask will list all fields' , args : { name : "FIELD_MASK" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Apply a Boolean filter _EXPRESSION_ to each resource item to be listed.\nIf the expression evaluates `True`, then that item is listed. For more\ndetails and examples of filter expressions, run $ gcloud topic filters. This\nflag interacts with other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "EXPRESSION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--limit" , description : "Maximum number of resources to list. The default is *unlimited*.\nThis flag interacts with other flags that are applied in this order:\n*--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "LIMIT" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--order-by" , description : 'Expression that defines what fields and order to use for sorting. String value\nshould follow SQL syntax: comma separated list of fields. For example:\n"name,resource_properties.a_property". The default sorting order is ascending.\nTo specify descending order for a field, a suffix " desc" should be appended to\nthe field name. For example: --order-by="name desc,source_properties.a_property" will\norder by name in descending order while source_properties.a_property in ascending order' , args : { name : "ORDER_BY" , description : "String" , suggestions : [ ] , } , } , { name : "--page-size" , description : "Some services group resource list output into pages. This flag specifies\nthe maximum number of resources per page. The default is determined by the\nservice if it supports paging, otherwise it is *unlimited* (no paging).\nPaging may be applied before or after *--filter* and *--limit* depending\non the service" , args : { name : "PAGE_SIZE" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--page-token" , description : "Response objects will return a non-null value for page-token to indicate that there is at least\none additional page of data. User can either directly request that page by specifying the\npage-token explicitly or let gcloud fetch one-page-at-a-time" , args : { name : "PAGE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--read-time" , description : 'Time used as a reference point when filtering. Absence of this field will default to the API\'s\nversion of NOW. For example --read-time "2019-02-28T07:00:00Z"' , args : { name : "READ_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--sort-by" , description : "Comma-separated list of resource field key names to sort by. The\ndefault order is ascending. Prefix a field with ``~'' for descending\norder on that field. This flag interacts with other flags that are applied\nin this order: *--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "FIELD" , description : "List" , suggestions : [ ] , } , } , { name : "--source" , description : "Source id. Defaults to all sources" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "list-marks" , description : "List a finding's security marks" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Apply a Boolean filter _EXPRESSION_ to each resource item to be listed.\nIf the expression evaluates `True`, then that item is listed. For more\ndetails and examples of filter expressions, run $ gcloud topic filters. This\nflag interacts with other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "EXPRESSION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--limit" , description : "Maximum number of resources to list. The default is *unlimited*.\nThis flag interacts with other flags that are applied in this order:\n*--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "LIMIT" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--page-size" , description : "Some services group resource list output into pages. This flag specifies\nthe maximum number of resources per page. The default is determined by the\nservice if it supports paging, otherwise it is *unlimited* (no paging).\nPaging may be applied before or after *--filter* and *--limit* depending\non the service" , args : { name : "PAGE_SIZE" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--page-token" , description : "Response objects will return a non-null value for page-token to indicate that there is at least\none additional page of data. User can either directly request that page by specifying the\npage-token explicitly or let gcloud fetch one-page-at-a-time" , args : { name : "PAGE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--read-time" , description : 'Time used as a reference point when filtering. Absence of this field will default to the API\'s\nversion of NOW. For example --read-time "2019-02-28T07:00:00Z"' , args : { name : "READ_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--sort-by" , description : "Comma-separated list of resource field key names to sort by. The\ndefault order is ascending. Prefix a field with ``~'' for descending\norder on that field. This flag interacts with other flags that are applied\nin this order: *--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "FIELD" , description : "List" , suggestions : [ ] , } , } , { name : "--source" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123/sources/456, then\nprovide the source id which is the suffix of the source.\nExample: organizations/123/sources/456, the id is 456" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "FINDING" , description : "ID of the finding or fully qualified identifier for the finding" , isVariadic : false , } , } , { name : "update" , description : "Update a Cloud Security Command Center finding" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--event-time" , description : "Time at which the event took place. For example, if the finding represents an open\nfirewall it would capture the time the open firewall was detected. If event-time is not\nprovided, it will default to UTC version of NOW. For example 2019-02-28T07:00:00Z" , args : { name : "EVENT_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--external-uri" , description : "URI that, if available, points to a web page outside of Cloud SCC (Security Command Center)\nwhere additional information about the finding can be found. This field is guaranteed to be\neither empty or a well formed URL" , args : { name : "EXTERNAL_URI" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--source" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123/sources/456, then\nprovide the source id which is the suffix of the source.\nExample: organizations/123/sources/456, the id is 456" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--source-properties" , description : 'Source specific properties. These properties are managed by the source that writes the\nfinding. The key names in the source_properties map must be between 1 and 255 characters,\nand must start with a letter and contain alphanumeric characters or underscores only.\nFor example "key1=val1,key2=val2"' , args : { name : "SOURCE_PROPERTIES" , description : "Dict" , suggestions : [ ] , } , } , { name : "--state" , description : "State is one of: [ACTIVE, INACTIVE]. _STATE_ must be one of: *active*, *inactive*, *state-unspecified*" , args : { name : "STATE" , description : "Googlecloudsdk.command_lib.util.apis.arg_utils:EnumNameToChoice" , suggestions : [ "active" , "inactive" , "state-unspecified" ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--update-mask" , description : "Optional: If left unspecified (default), an update-mask is automatically created using the\nflags specified in the command and only those values are updated.\nFor example: --external-uri='<some-uri>' --event-time='<some-time>' would automatically\ngenerate --update-mask='external_uri,event_time'. Note that as a result, only external-uri\nand event-time are updated for the given finding and everything else remains untouched. If\nyou want to delete attributes/properties (that are not being changed in the update command)\nuse an empty update-mask (''). That will delete all the mutable properties/attributes that\naren't specified as flags in the update command. In the above example it would delete\nsource-properties. State can be toggled from ACTIVE to INACTIVE and vice-versa but it cannot\nbe deleted" , args : { name : "UPDATE_MASK" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "FINDING" , description : "ID of the finding or fully qualified identifier for the finding" , isVariadic : false , } , } , { name : "update-marks" , description : "Update Cloud Security Command Center finding's security marks" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--security-marks" , description : 'SecurityMarks resource to be passed as the request body. It\'s a key=value pair separated\nby comma (,). For example: --security-marks="key1=val1,key2=val2"' , args : { name : "SECURITY_MARKS" , description : "Dict" , suggestions : [ ] , } , } , { name : "--source" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123/sources/456, then\nprovide the source id which is the suffix of the source.\nExample: organizations/123/sources/456, the id is 456" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--start-time" , description : "Time at which the updated SecurityMarks take effect. For example: 2019-02-28T07:00:00Z" , args : { name : "START_TIME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--update-mask" , description : "Use update-mask if you want to selectively update marks represented by --security-marks\nflag. For example: --update-mask=\"marks.key1,marks.key2\". If you want to override all the\nmarks for the given finding either skip the update-mask flag or provide an empty value\n(--update-mask '') for it" , args : { name : "UPDATE_MASK" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "FINDING" , description : "ID of the finding or fully qualified identifier for the finding" , isVariadic : false , } , } , ] , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , } , { name : "notifications" , description : "Manage Cloud SCC notifications" , subcommands : [ { name : "create" , description : "Create a Cloud Security Command Center notification config" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--description" , description : "The text that will be used to describe a notification configuration" , args : { name : "DESCRIPTION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Filter to be used for notification config" , args : { name : "FILTER" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : 'The organization where the notification config resides. Formatted as "organizations/123" or just "123". Required if notificationConfigId does not contain organization information' , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--pubsub-topic" , description : 'The Pub/Sub topic which will receive notifications. Its format is\n"projects/[project_id]/topics/[topic]"' , args : { name : "PUBSUB_TOPIC" , description : "String" , suggestions : [ ] , } , priority : 100 , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "NOTIFICATION_CONFIG_ID" , description : 'The ID of the notification config. Formatted as "organizations/123/notificationConfigs/456" or just "456"' , isVariadic : false , } , } , { name : "delete" , description : "Delete a Cloud Security Command Center notification config" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : 'The organization where the notification config resides. Formatted as "organizations/123" or just "123". Required if notificationConfigId does not contain organization information' , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "NOTIFICATION_CONFIG_ID" , description : 'The ID of the notification config. Formatted as "organizations/123/notificationConfigs/456" or just "456"' , isVariadic : false , } , } , { name : "describe" , description : "Describe a Cloud Security Command Center notification config" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : 'The organization where the notification config resides. Formatted as "organizations/123" or just "123". Required if notificationConfigId does not contain organization information' , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "NOTIFICATION_CONFIG_ID" , description : 'The ID of the notification config. Formatted as "organizations/123/notificationConfigs/456" or just "456"' , isVariadic : false , } , } , { name : "list" , description : "List Cloud Security Command Center notification configs" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "Apply a Boolean filter _EXPRESSION_ to each resource item to be listed.\nIf the expression evaluates `True`, then that item is listed. For more\ndetails and examples of filter expressions, run $ gcloud topic filters. This\nflag interacts with other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "EXPRESSION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--limit" , description : "Maximum number of resources to list. The default is *unlimited*.\nThis flag interacts with other flags that are applied in this order:\n*--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "LIMIT" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--page-size" , description : "Some services group resource list output into pages. This flag specifies\nthe maximum number of resources per page. The default is determined by the\nservice if it supports paging, otherwise it is *unlimited* (no paging).\nPaging may be applied before or after *--filter* and *--limit* depending\non the service" , args : { name : "PAGE_SIZE" , description : "Googlecloudsdk.calliope.arg_parsers:Parse" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--sort-by" , description : "Comma-separated list of resource field key names to sort by. The\ndefault order is ascending. Prefix a field with ``~'' for descending\norder on that field. This flag interacts with other flags that are applied\nin this order: *--flatten*, *--sort-by*, *--filter*, *--limit*" , args : { name : "FIELD" , description : "List" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , { name : "update" , description : "Update a Cloud Security Command Center notification config" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--description" , description : "The text that will be used to describe a notification configuration" , args : { name : "DESCRIPTION" , description : "String" , suggestions : [ ] , } , } , { name : "--filter" , description : "The filter string which will applied to events of findings of a\nnotification configuration" , args : { name : "FILTER" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : 'The organization where the notification config resides. Formatted as "organizations/123" or just "123". Required if notificationConfigId does not contain organization information' , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--pubsub-topic" , description : 'The Pub/Sub topic which will receive notifications. Its format is\n"projects/[project_id]/topics/[topic]"' , args : { name : "PUBSUB_TOPIC" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "NOTIFICATION_CONFIG_ID" , description : 'The ID of the notification config. Formatted as "organizations/123/notificationConfigs/456" or just "456"' , isVariadic : false , } , } , ] , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , } , { name : "operations" , description : "Manage Cloud SCC operations" , subcommands : [ { name : "describe" , description : "Describe a Cloud SCC's long running scan operation" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--organization" , description : "(Optional) If the full resource name isn't provided e.g. organizations/123, then provide the\norganization id which is the suffix of the organization. Example: organizations/123, the id is\n123" , args : { name : "ORGANIZATION" , description : "String" , suggestions : [ ] , } , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "OPERATION" , description : "ID of the operation or fully qualified identifier for the operation" , isVariadic : false , } , } , ] , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , } , { name : "sources" , description : "Manage Cloud SCC finding sources" , subcommands : [ { name : "describe" , description : "Describe a source given its display name or source id" , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--source" , description : "Cloud SCC specific source. It's derived from the the source's relative resource name.\nSee: https://cloud.google.com/apis/design/resource_names#relative_resource_name.\nFor Example: For the given source name: \"organizations/123/sources/456\", 456 represents\nsource id" , args : { name : "SOURCE" , description : "String" , suggestions : [ ] , } , } , { name : "--source-display-name" , description : "Source's display name must be unique amongst its siblings, for example, two sources\nwith the same parent can't share the same display name.\nDisplay name must start and end with a letter or digit, may contain letters, digits,\nspaces, hyphens, and underscores, and can be no longer than 32 characters. This is\ncaptured by the regular expression: [\\p{L}\\p{N}]({\\p{L}\\p{N}_- ]{0,30}[\\p{L}\\p{N}])?.\nFor example: 'Cloud Security Scanner' is the source display name" , args : { name : "SOURCE_DISPLAY_NAME" , description : "String" , suggestions : [ ] , } , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , args : { name : "ORGANIZATION" , description : "ID of the organization or fully qualified identifier for the organization" , isVariadic : false , } , } , ] , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" , ] , } , } , ] , } , ] , options : [ { name : "--account" , description : "Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation" , args : { name : "ACCOUNT" , description : "String" , suggestions : [ ] , } , } , { name : "--billing-project" , description : "The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`" , args : { name : "BILLING_PROJECT" , description : "String" , suggestions : [ ] , } , } , { name : "--configuration" , description : "The configuration to use for this command invocation. For more\ninformation on how to use configurations, run:\n`gcloud topic configurations`.  You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment\nvariable to set the equivalent of this flag for a terminal\nsession" , args : { name : "CONFIGURATION" , description : "String" , suggestions : [ ] , } , } , { name : "--flags-file" , description : "A YAML or JSON file that specifies a *--flag*:*value* dictionary.\nUseful for specifying complex flag values with special characters\nthat work with any command interpreter. Additionally, each\n*--flags-file* arg is replaced by its constituent flags. See\n$ gcloud topic flags-file for more information" , args : { name : "YAML_FILE" , description : "String" , suggestions : [ ] , } , } , { name : "--flatten" , description : "Flatten _name_[] output resource slices in _KEY_ into separate records\nfor each item in each slice. Multiple keys and slices may be specified.\nThis also flattens keys for *--format* and *--filter*. For example,\n*--flatten=abc.def* flattens *abc.def[].ghi* references to\n*abc.def.ghi*. A resource record containing *abc.def[]* with N elements\nwill expand to N records in the flattened output. This flag interacts\nwith other flags that are applied in this order: *--flatten*,\n*--sort-by*, *--filter*, *--limit*" , args : { name : "KEY" , description : "List" , suggestions : [ ] , } , } , { name : "--format" , description : "Set the format for printing command output resources. The default is a\ncommand-specific human-friendly output format. The supported formats\nare: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats" , args : { name : "FORMAT" , description : "String" , suggestions : [ ] , } , } , { name : "--help" , description : "Display detailed help" , } , { name : "--impersonate-service-account" , description : "For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation" , args : { name : "SERVICE_ACCOUNT_EMAIL" , description : "String" , suggestions : [ ] , } , } , { name : "--log-http" , description : "Log all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation" , } , { name : "--project" , description : "The Google Cloud Platform project ID to use for this invocation. If\nomitted, then the current project is assumed; the current project can\nbe listed using `gcloud config list --format='text(core.project)'`\nand can be set using `gcloud config set project PROJECTID`.\n+\n`--project` and its fallback `core/project` property play two roles\nin the invocation. It specifies the project of the resource to\noperate on. It also specifies the project for API enablement check,\nquota, and billing. To specify a different project for quota and\nbilling, use `--billing-project` or `billing/quota_project` property" , args : { name : "PROJECT_ID" , description : "String" , suggestions : [ ] , } , } , { name : "--quiet" , description : "Disable all interactive prompts when running gcloud commands. If input\nis required, defaults will be used, or an error will be raised.\nOverrides the default core/disable_prompts property value for this\ncommand invocation. This is equivalent to setting the environment\nvariable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1" , } , { name : "--trace-token" , description : "Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation" , args : { name : "TRACE_TOKEN" , description : "String" , suggestions : [ ] , } , } , { name : "--user-output-enabled" , description : "Print user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable" , } , { name : "--verbosity" , description : "Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*" , args : { name : "VERBOSITY" , description : "String" , suggestions : [ "debug" , "info" , "warning" , "error" , "critical" , "none" ] , } , } , ] , } ; export default completionSpec ;