feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/manage/services/__init__.py

@@ -0,0 +1,29 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command group for Cloud SCC services."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.ALPHA)
+class Services(base.Group):
+  """Manage Cloud SCC (Security Command Center) services."""
+
+  category = base.SECURITY_CATEGORY

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/manage/services/describe.py

@@ -0,0 +1,88 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to get an SCC service."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.scc.manage.services import clients
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.manage import flags
+from googlecloudsdk.command_lib.scc.manage import parsing
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.ALPHA)
+class Describe(base.DescribeCommand):
+  """Get the details of a Security Command Center service.
+
+  Get the details of a Security Command Center service. It
+  resolves INHERITED enablement states
+  to ENABLED or DISABLED for services at ancestor levels. For example, if
+  the service is enabled
+  at the ancestor level, services for all child resources will have the
+  enablement state set to
+  ENABLED.
+
+  ## EXAMPLES
+
+  To get the details of a Security Command Center service with name
+  `sha` for organization `123`, run:
+
+    $ {command} sha --organization=123
+
+  To get the details of a Security Command Center service with name
+  `sha` for folder `456`, run:
+
+    $ {command} sha --folder=456
+
+  To get the details of a Security Command Center service with ID
+  `sha` for project `789`, run:
+
+    $ {command} sha --project=789
+
+  You can also specify the parent more generally:
+
+    $ {command} sha --parent=organizations/123
+
+  To get the details of modules, `[ABC, DEF]` of a Security Command
+  Center service with name `sha` for organization `123`, run:
+
+    $ {command} sha --module-list=[ABC, DEF] --organization=123
+  """
+
+  @staticmethod
+  def Args(parser):
+    flags.CreateServiceNameArg().AddToParser(parser)
+    flags.CreateParentFlag(required=True).AddToParser(parser)
+    flags.CreateModuleList().AddToParser(parser)
+
+  def Run(self, args):
+    name = parsing.GetServiceNameFromArgs(args)
+    module_list = parsing.GetModuleListFromArgs(args)
+    client = clients.SecurityCenterServicesClient()
+
+    response = client.Get(name)
+
+    if not module_list:
+      return response
+    else:
+      filtered_response = [
+          module_value
+          for module_value in response.modules.additionalProperties
+          if module_value.key in module_list
+      ]
+      return filtered_response

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/manage/services/list.py

@@ -0,0 +1,76 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to list the details of an SCC service."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.scc.manage.services import clients
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.manage import flags
+from googlecloudsdk.command_lib.scc.manage import parsing
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.ALPHA)
+class List(base.ListCommand):
+  """List the details of Security Command Center services.
+
+  List the details of Security Command Center services for the specified folder,
+  project or organization. Services along with their corresponding module
+  information is returned as the response.
+
+  ## EXAMPLES
+
+  To list the Security Center services for
+  organization `123`, run:
+
+  $ {command} --organization=organizations/123
+
+  To list Security Center services for
+  folder `456`, run:
+
+  $ {command} --folder=folders/456
+
+  To list Security Center services for
+  project `789`, run:
+
+  $ {command} --project=projects/789
+
+  You can also specify the parent more generally:
+
+  $ {command} --parent=organizations/123
+  """
+
+  @staticmethod
+  def Args(parser):
+    base.URI_FLAG.RemoveFromParser(parser)
+    flags.CreateParentFlag(
+        resource_name="Security Center service", required=True
+    ).AddToParser(parser)
+
+  def Run(self, args):
+    parent = parsing.GetParentResourceNameFromArgs(args)
+    page_size = args.page_size
+    limit = args.limit
+
+    client = clients.SecurityCenterServicesClient()
+
+    return client.List(
+        page_size=page_size,
+        parent=parent,
+        limit=limit,
+    )

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/manage/services/update.py

@@ -0,0 +1,96 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command to update an SCC service."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.scc.manage.services import clients
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.manage import flags
+from googlecloudsdk.command_lib.scc.manage import parsing
+from googlecloudsdk.core.console import console_io
+
+
+@base.DefaultUniverseOnly
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.ALPHA)
+class Update(base.Command):
+  """Update a Security Command Center service.
+
+  Update the enablement state of the Security Center service and its
+  corresponding modules for the specified folder, project or organization.
+
+  ## EXAMPLES
+
+  To update a Security Center Service with name `sha` for organization 123, run:
+
+      $ {command} sha
+          --organization=organizations/123 --enablement-state="ENABLED"
+
+  To update a Security Center Service with name `sha` and its modules for
+  organization 123, run:
+
+      $ {command} sha
+          --organization=organizations/123 --enablement-state="ENABLED"
+          --module-config-file=module_config.yaml
+
+  To validate an update of Security Center Service with name `sha` and its
+  modules for organization 123, run:
+
+      $ {command} sha
+          --organization=organizations/123 --enablement-state="ENABLED"
+          --module-config-file=module_config.yaml --validate-only
+  """
+
+  @staticmethod
+  def Args(parser):
+    flags.CreateServiceNameArg().AddToParser(parser)
+    flags.CreateParentFlag(required=True).AddToParser(parser)
+    flags.CreateValidateOnlyFlag(required=False).AddToParser(parser)
+    flags.CreateServiceUpdateFlags(
+        required=True,
+        file_type='JSON or YAML',
+    ).AddToParser(parser)
+
+  def Run(self, args):
+    name = parsing.GetServiceNameFromArgs(args)
+
+    validate_only = args.validate_only
+    module_config = parsing.GetModuleConfigValueFromArgs(
+        args.module_config_file
+    )
+    enablement_state = parsing.GetServiceEnablementStateFromArgs(
+        args.enablement_state
+    )
+    update_mask = parsing.CreateUpdateMaskFromArgsForService(args)
+
+    if not validate_only:
+      console_io.PromptContinue(
+          message=(
+              'Are you sure you want to update the Security Center Service'
+              ' {}?\n'.format(name)
+          ),
+          cancel_on_no=True,
+      )
+    client = clients.SecurityCenterServicesClient()
+
+    return client.Update(
+        name=name,
+        validate_only=validate_only,
+        module_config=module_config,
+        enablement_state=enablement_state,
+        update_mask=update_mask,
+    )