feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/settings/services/modules/__init__.py

@@ -0,0 +1,24 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2019 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Command group for Cloud SCC Modules Settings Operations."""
+
+from googlecloudsdk.calliope import base
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class Modules(base.Group):
+  """Manage Cloud SCC modules settings."""
+
+  category = base.SECURITY_CATEGORY

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/settings/services/modules/describe.py

@@ -0,0 +1,60 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2020 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud alpha scc settings services modules describe` command."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.settings import flags
+from googlecloudsdk.command_lib.scc.settings import utils
+from googlecloudsdk.core import log
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class Describe(base.DescribeCommand):
+  """Display effective module settings of Security Command Center(SCC)."""
+
+  detailed_help = {
+      'DESCRIPTION':
+          """\
+      Describe effective module settings of Security Command Center(SCC).
+      """,
+      'EXAMPLES':
+          """\
+        To describe the 'OPEN_FIREWALL' module setting in service 'SECURITY_HEALTH_ANALYTICS' of project "12345", run:
+
+          $ {command} --project=12345 --service=SECURITY_HEALTH_ANALYTICS --module=OPEN_FIREWALL
+      """
+  }
+
+  @staticmethod
+  def Args(parser):
+    flags.ExtractRequiredFlags(parser)
+    flags.AddServiceArgument(parser)
+    flags.AddModuleArgument(parser)
+
+  def Run(self, args):
+    """Call corresponding APIs based on the flag."""
+    response = utils.SettingsClient().DescribeService(args)
+    configs = response.modules.additionalProperties if response.modules else []
+    config = [p.value for p in configs if p.key == args.module]
+    if config:
+      return config[0]
+    else:
+      log.err.Print('No effective setting found for module {}'.format(
+          args.module))
+      return None

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/settings/services/modules/describe_explicit.py

@@ -0,0 +1,63 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2020 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud alpha scc settings services modules describe-explicit` command."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.settings import flags
+from googlecloudsdk.command_lib.scc.settings import utils
+from googlecloudsdk.core import log
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class DescribeExplicit(base.DescribeCommand):
+  """Display module settings of Security Command Center(SCC)."""
+
+  detailed_help = {
+      'DESCRIPTION':
+          """\
+      Describe explicit module settings of Security Command Center(SCC).
+      """,
+      'EXAMPLES':
+          """\
+        To describe the explict 'OPEN_FIREWALL' module setting in service 'SECURITY_HEALTH_ANALYTICS' of project "12345", run:
+
+          $ {command} --project=12345 --service=SECURITY_HEALTH_ANALYTICS --module=OPEN_FIREWALL
+      """
+  }
+
+  @staticmethod
+  def Args(parser):
+    flags.ExtractRequiredFlags(parser)
+    flags.AddServiceArgument(parser)
+    flags.AddModuleArgument(parser)
+
+  def Run(self, args):
+    """Call corresponding APIs based on the flag."""
+    response = utils.SettingsClient().DescribeServiceExplicit(args)
+    configs = response.modules.additionalProperties if response.modules else []
+    state = [
+        p.value.moduleEnablementState for p in configs if p.key == args.module
+    ]
+    if state:
+      return state[0]
+    else:
+      log.status.Print(
+          'No setting found for module {}. The module may not exist or no explicit setting is set.'
+          .format(args.module))
+      return None

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/settings/services/modules/disable.py

@@ -0,0 +1,51 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2020 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud alpha scc settings services modules disable` command."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.settings import flags
+from googlecloudsdk.command_lib.scc.settings import utils
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class Disable(base.UpdateCommand):
+  """Disable a module in Security Command Center(SCC)."""
+
+  detailed_help = {
+      'DESCRIPTION':
+          """\
+          Disable a module in Security Command Center(SCC).
+          """,
+      'EXAMPLES':
+          """\
+          To disable the "PUBLIC_BUCKET_ACL" module in service SECURITY_HEALTH_ANALYTICS of organization "12345", run:
+
+            $ {command} --organization=12345  --service=SECURITY_HEALTH_ANALYTICS --module=PUBLIC_BUCKET_ACL
+      """
+  }
+
+  @staticmethod
+  def Args(parser):
+    flags.ExtractRequiredFlags(parser)
+    flags.AddServiceArgument(parser)
+    flags.AddModuleArgument(parser)
+
+  def Run(self, args):
+    """Call corresponding APIs based on the flag."""
+    return utils.SettingsClient().DisableModule(args)

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/settings/services/modules/enable.py

@@ -0,0 +1,51 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2020 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud alpha scc settings services modules enable` command."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.settings import flags
+from googlecloudsdk.command_lib.scc.settings import utils
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class Enable(base.UpdateCommand):
+  """Enable a module in Security Command Center(SCC)."""
+
+  detailed_help = {
+      'DESCRIPTION':
+          """\
+          Enable a module in Security Command Center(SCC).
+          """,
+      'EXAMPLES':
+          """\
+          To enable the "PUBLIC_BUCKET_ACL" module in service SECURITY_HEALTH_ANALYTICS of organization "12345", run:
+
+            $ {command} --organization=12345  --service=SECURITY_HEALTH_ANALYTICS --module=PUBLIC_BUCKET_ACL
+      """
+  }
+
+  @staticmethod
+  def Args(parser):
+    flags.ExtractRequiredFlags(parser)
+    flags.AddServiceArgument(parser)
+    flags.AddModuleArgument(parser)
+
+  def Run(self, args):
+    """Call corresponding APIs based on the flag."""
+    return utils.SettingsClient().EnableModule(args)

gcloud auth application-default login/google-cloud-sdk/lib/surface/scc/settings/services/modules/update.py

@@ -0,0 +1,68 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2020 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""`gcloud alpha scc settings services modules update` command."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.scc.settings import flags
+from googlecloudsdk.command_lib.scc.settings import utils
+
+
+@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
+class Enable(base.UpdateCommand):
+  """Update a module config in Security Command Center(SCC)."""
+
+  detailed_help = {
+      'DESCRIPTION':
+          """\
+          Update a module config in Security Command Center(SCC).
+          """,
+      'EXAMPLES':
+          """\
+          To update the "CONFIGURABLE_BAD_DOMAIN" module in service EVENT_THREAT_DETECTION of organization "12345", run:
+
+            $ {command} --organization=12345  --service=EVENT_THREAT_DETECTION --module=CONFIGURABLE_BAD_DOMAIN --enablement-state=ENABLED --config='{
+                "domains": {
+                  "domain1": {
+                    "ed11": "ed-1",
+                    "ed12": "ed-2"
+                  }
+                },
+                "metadata": {
+                  "module_name": "etd_bad_domain",
+                  "severity": "CRITICAL"
+                }
+              }'
+
+          To clear the config value and disable the module in the "CONFIGURABLE_BAD_DOMAIN" module in service EVENT_THREAT_DETECTION of organization "12345", run:
+
+            $ {command} --organization=12345  --service=EVENT_THREAT_DETECTION --module=CONFIGURABLE_BAD_DOMAIN --enablement-state=DISABLED --clear-config
+      """
+  }
+
+  @staticmethod
+  def Args(parser):
+    flags.ExtractRequiredFlags(parser)
+    flags.AddServiceArgument(parser)
+    flags.AddModuleArgument(parser)
+    flags.ExtractModuleConfigFlags(parser)
+    flags.AddModuleEnablementArgument(parser)
+
+  def Run(self, args):
+    """Call corresponding APIs based on the flag."""
+    return utils.SettingsClient().UpdateModuleConfig(args)