Package com.google.cloud.securitycenter.v1

Class Access

  • All Implemented Interfaces:
    AccessOrBuilder, com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Serializable
    public final class Access
extends com.google.protobuf.GeneratedMessageV3
implements AccessOrBuilder
     Represents an access event.
    Protobuf type google.cloud.securitycenter.v1.Access
    See Also:
    Serialized Form

    • Field Detail

      • PRINCIPAL_EMAIL_FIELD_NUMBER

        public static final int PRINCIPAL_EMAIL_FIELD_NUMBER
        See Also:
        Constant Field Values

      • CALLER_IP_GEO_FIELD_NUMBER

        public static final int CALLER_IP_GEO_FIELD_NUMBER
        See Also:
        Constant Field Values

      • USER_AGENT_FAMILY_FIELD_NUMBER

        public static final int USER_AGENT_FAMILY_FIELD_NUMBER
        See Also:
        Constant Field Values

      • USER_AGENT_FIELD_NUMBER

        public static final int USER_AGENT_FIELD_NUMBER
        See Also:
        Constant Field Values

      • SERVICE_NAME_FIELD_NUMBER

        public static final int SERVICE_NAME_FIELD_NUMBER
        See Also:
        Constant Field Values

      • METHOD_NAME_FIELD_NUMBER

        public static final int METHOD_NAME_FIELD_NUMBER
        See Also:
        Constant Field Values

      • PRINCIPAL_SUBJECT_FIELD_NUMBER

        public static final int PRINCIPAL_SUBJECT_FIELD_NUMBER
        See Also:
        Constant Field Values

      • SERVICE_ACCOUNT_KEY_NAME_FIELD_NUMBER

        public static final int SERVICE_ACCOUNT_KEY_NAME_FIELD_NUMBER
        See Also:
        Constant Field Values

      • SERVICE_ACCOUNT_DELEGATION_INFO_FIELD_NUMBER

        public static final int SERVICE_ACCOUNT_DELEGATION_INFO_FIELD_NUMBER
        See Also:
        Constant Field Values

    • Method Detail

      • newInstance

        protected Object newInstance​(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)
        Overrides:
        newInstance in class com.google.protobuf.GeneratedMessageV3

      • getDescriptor

        public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

      • internalGetFieldAccessorTable

        protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
        Specified by:
        internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3

      • getPrincipalEmail

        public String getPrincipalEmail()
         Associated email, such as "foo@google.com".

 The email address of the authenticated user or a service account acting on
 behalf of a third party principal making the request. For third party
 identity callers, the `principal_subject` field is populated instead of
 this field. For privacy reasons, the principal email address is sometimes
 redacted. For more information, see [Caller identities in audit
 logs](https://cloud.google.com/logging/docs/audit#user-id).
        string principal_email = 1;
        Specified by:
        getPrincipalEmail in interface AccessOrBuilder
        Returns:
        The principalEmail.

      • getPrincipalEmailBytes

        public com.google.protobuf.ByteString getPrincipalEmailBytes()
         Associated email, such as "foo@google.com".

 The email address of the authenticated user or a service account acting on
 behalf of a third party principal making the request. For third party
 identity callers, the `principal_subject` field is populated instead of
 this field. For privacy reasons, the principal email address is sometimes
 redacted. For more information, see [Caller identities in audit
 logs](https://cloud.google.com/logging/docs/audit#user-id).
        string principal_email = 1;
        Specified by:
        getPrincipalEmailBytes in interface AccessOrBuilder
        Returns:
        The bytes for principalEmail.

      • getCallerIp

        public String getCallerIp()
         Caller's IP address, such as "1.1.1.1".
        string caller_ip = 2;
        Specified by:
        getCallerIp in interface AccessOrBuilder
        Returns:
        The callerIp.

      • getCallerIpBytes

        public com.google.protobuf.ByteString getCallerIpBytes()
         Caller's IP address, such as "1.1.1.1".
        string caller_ip = 2;
        Specified by:
        getCallerIpBytes in interface AccessOrBuilder
        Returns:
        The bytes for callerIp.

      • hasCallerIpGeo

        public boolean hasCallerIpGeo()
         The caller IP's geolocation, which identifies where the call came from.
        .google.cloud.securitycenter.v1.Geolocation caller_ip_geo = 3;
        Specified by:
        hasCallerIpGeo in interface AccessOrBuilder
        Returns:
        Whether the callerIpGeo field is set.

      • getCallerIpGeo

        public Geolocation getCallerIpGeo()
         The caller IP's geolocation, which identifies where the call came from.
        .google.cloud.securitycenter.v1.Geolocation caller_ip_geo = 3;
        Specified by:
        getCallerIpGeo in interface AccessOrBuilder
        Returns:
        The callerIpGeo.

      • getUserAgentFamily

        public String getUserAgentFamily()
         Type of user agent associated with the finding. For example, an operating
 system shell or an embedded or standalone application.
        string user_agent_family = 4;
        Specified by:
        getUserAgentFamily in interface AccessOrBuilder
        Returns:
        The userAgentFamily.

      • getUserAgentFamilyBytes

        public com.google.protobuf.ByteString getUserAgentFamilyBytes()
         Type of user agent associated with the finding. For example, an operating
 system shell or an embedded or standalone application.
        string user_agent_family = 4;
        Specified by:
        getUserAgentFamilyBytes in interface AccessOrBuilder
        Returns:
        The bytes for userAgentFamily.

      • getUserAgent

        public String getUserAgent()
         The caller's user agent string associated with the finding.
        string user_agent = 12;
        Specified by:
        getUserAgent in interface AccessOrBuilder
        Returns:
        The userAgent.

      • getUserAgentBytes

        public com.google.protobuf.ByteString getUserAgentBytes()
         The caller's user agent string associated with the finding.
        string user_agent = 12;
        Specified by:
        getUserAgentBytes in interface AccessOrBuilder
        Returns:
        The bytes for userAgent.

      • getServiceName

        public String getServiceName()
         This is the API service that the service account made a call to, e.g.
 "iam.googleapis.com"
        string service_name = 5;
        Specified by:
        getServiceName in interface AccessOrBuilder
        Returns:
        The serviceName.

      • getServiceNameBytes

        public com.google.protobuf.ByteString getServiceNameBytes()
         This is the API service that the service account made a call to, e.g.
 "iam.googleapis.com"
        string service_name = 5;
        Specified by:
        getServiceNameBytes in interface AccessOrBuilder
        Returns:
        The bytes for serviceName.

      • getMethodName

        public String getMethodName()
         The method that the service account called, e.g. "SetIamPolicy".
        string method_name = 6;
        Specified by:
        getMethodName in interface AccessOrBuilder
        Returns:
        The methodName.

      • getMethodNameBytes

        public com.google.protobuf.ByteString getMethodNameBytes()
         The method that the service account called, e.g. "SetIamPolicy".
        string method_name = 6;
        Specified by:
        getMethodNameBytes in interface AccessOrBuilder
        Returns:
        The bytes for methodName.

      • getPrincipalSubject

        public String getPrincipalSubject()
         A string that represents the principal_subject that is associated with the
 identity. Unlike `principal_email`, `principal_subject` supports principals
 that aren't associated with email addresses, such as third party
 principals. For most identities, the format is
 `principal://iam.googleapis.com/{identity pool name}/subject/{subject}`.
 Some GKE identities, such as GKE_WORKLOAD, FREEFORM, and GKE_HUB_WORKLOAD,
 still use the legacy format `serviceAccount:{identity pool
 name}[{subject}]`.
        string principal_subject = 7;
        Specified by:
        getPrincipalSubject in interface AccessOrBuilder
        Returns:
        The principalSubject.

      • getPrincipalSubjectBytes

        public com.google.protobuf.ByteString getPrincipalSubjectBytes()
         A string that represents the principal_subject that is associated with the
 identity. Unlike `principal_email`, `principal_subject` supports principals
 that aren't associated with email addresses, such as third party
 principals. For most identities, the format is
 `principal://iam.googleapis.com/{identity pool name}/subject/{subject}`.
 Some GKE identities, such as GKE_WORKLOAD, FREEFORM, and GKE_HUB_WORKLOAD,
 still use the legacy format `serviceAccount:{identity pool
 name}[{subject}]`.
        string principal_subject = 7;
        Specified by:
        getPrincipalSubjectBytes in interface AccessOrBuilder
        Returns:
        The bytes for principalSubject.

      • getServiceAccountKeyName

        public String getServiceAccountKeyName()
         The name of the service account key that was used to create or exchange
 credentials when authenticating the service account that made the request.
 This is a scheme-less URI full resource name. For example:

 "//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}".
        string service_account_key_name = 8;
        Specified by:
        getServiceAccountKeyName in interface AccessOrBuilder
        Returns:
        The serviceAccountKeyName.

      • getServiceAccountKeyNameBytes

        public com.google.protobuf.ByteString getServiceAccountKeyNameBytes()
         The name of the service account key that was used to create or exchange
 credentials when authenticating the service account that made the request.
 This is a scheme-less URI full resource name. For example:

 "//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}".
        string service_account_key_name = 8;
        Specified by:
        getServiceAccountKeyNameBytes in interface AccessOrBuilder
        Returns:
        The bytes for serviceAccountKeyName.

      • getServiceAccountDelegationInfoList

        public List<ServiceAccountDelegationInfo> getServiceAccountDelegationInfoList()
         The identity delegation history of an authenticated service account that
 made the request. The `serviceAccountDelegationInfo[]` object contains
 information about the real authorities that try to access Google Cloud
 resources by delegating on a service account. When multiple authorities are
 present, they are guaranteed to be sorted based on the original ordering of
 the identity delegation events.
        repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
        Specified by:
        getServiceAccountDelegationInfoList in interface AccessOrBuilder

      • getServiceAccountDelegationInfoOrBuilderList

        public List<? extends ServiceAccountDelegationInfoOrBuilder> getServiceAccountDelegationInfoOrBuilderList()
         The identity delegation history of an authenticated service account that
 made the request. The `serviceAccountDelegationInfo[]` object contains
 information about the real authorities that try to access Google Cloud
 resources by delegating on a service account. When multiple authorities are
 present, they are guaranteed to be sorted based on the original ordering of
 the identity delegation events.
        repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
        Specified by:
        getServiceAccountDelegationInfoOrBuilderList in interface AccessOrBuilder

      • getServiceAccountDelegationInfoCount

        public int getServiceAccountDelegationInfoCount()
         The identity delegation history of an authenticated service account that
 made the request. The `serviceAccountDelegationInfo[]` object contains
 information about the real authorities that try to access Google Cloud
 resources by delegating on a service account. When multiple authorities are
 present, they are guaranteed to be sorted based on the original ordering of
 the identity delegation events.
        repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
        Specified by:
        getServiceAccountDelegationInfoCount in interface AccessOrBuilder

      • getServiceAccountDelegationInfo

        public ServiceAccountDelegationInfo getServiceAccountDelegationInfo​(int index)
         The identity delegation history of an authenticated service account that
 made the request. The `serviceAccountDelegationInfo[]` object contains
 information about the real authorities that try to access Google Cloud
 resources by delegating on a service account. When multiple authorities are
 present, they are guaranteed to be sorted based on the original ordering of
 the identity delegation events.
        repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
        Specified by:
        getServiceAccountDelegationInfo in interface AccessOrBuilder

      • getServiceAccountDelegationInfoOrBuilder

        public ServiceAccountDelegationInfoOrBuilder getServiceAccountDelegationInfoOrBuilder​(int index)
         The identity delegation history of an authenticated service account that
 made the request. The `serviceAccountDelegationInfo[]` object contains
 information about the real authorities that try to access Google Cloud
 resources by delegating on a service account. When multiple authorities are
 present, they are guaranteed to be sorted based on the original ordering of
 the identity delegation events.
        repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
        Specified by:
        getServiceAccountDelegationInfoOrBuilder in interface AccessOrBuilder

      • getUserName

        public String getUserName()
         A string that represents a username. The username provided depends on the
 type of the finding and is likely not an IAM principal. For example, this
 can be a system username if the finding is related to a virtual machine, or
 it can be an application login username.
        string user_name = 11;
        Specified by:
        getUserName in interface AccessOrBuilder
        Returns:
        The userName.

      • getUserNameBytes

        public com.google.protobuf.ByteString getUserNameBytes()
         A string that represents a username. The username provided depends on the
 type of the finding and is likely not an IAM principal. For example, this
 can be a system username if the finding is related to a virtual machine, or
 it can be an application login username.
        string user_name = 11;
        Specified by:
        getUserNameBytes in interface AccessOrBuilder
        Returns:
        The bytes for userName.

      • isInitialized

        public final boolean isInitialized()
        Specified by:
        isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
        Overrides:
        isInitialized in class com.google.protobuf.GeneratedMessageV3

      • writeTo

        public void writeTo​(com.google.protobuf.CodedOutputStream output)
             throws IOException
        Specified by:
        writeTo in interface com.google.protobuf.MessageLite
        Overrides:
        writeTo in class com.google.protobuf.GeneratedMessageV3
        Throws:
        IOException

      • getSerializedSize

        public int getSerializedSize()
        Specified by:
        getSerializedSize in interface com.google.protobuf.MessageLite
        Overrides:
        getSerializedSize in class com.google.protobuf.GeneratedMessageV3

      • equals

        public boolean equals​(Object obj)
        Specified by:
        equals in interface com.google.protobuf.Message
        Overrides:
        equals in class com.google.protobuf.AbstractMessage

      • hashCode

        public int hashCode()
        Specified by:
        hashCode in interface com.google.protobuf.Message
        Overrides:
        hashCode in class com.google.protobuf.AbstractMessage

      • parseFrom

        public static Access parseFrom​(ByteBuffer data)
                        throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Access parseFrom​(ByteBuffer data,
                               com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                        throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Access parseFrom​(com.google.protobuf.ByteString data)
                        throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Access parseFrom​(com.google.protobuf.ByteString data,
                               com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                        throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Access parseFrom​(byte[] data)
                        throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Access parseFrom​(byte[] data,
                               com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                        throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Access parseFrom​(com.google.protobuf.CodedInputStream input,
                               com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                        throws IOException
        Throws:
        IOException

      • newBuilderForType

        public Access.Builder newBuilderForType()
        Specified by:
        newBuilderForType in interface com.google.protobuf.Message
        Specified by:
        newBuilderForType in interface com.google.protobuf.MessageLite

      • toBuilder

        public Access.Builder toBuilder()
        Specified by:
        toBuilder in interface com.google.protobuf.Message
        Specified by:
        toBuilder in interface com.google.protobuf.MessageLite

      • newBuilderForType

        protected Access.Builder newBuilderForType​(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
        Specified by:
        newBuilderForType in class com.google.protobuf.GeneratedMessageV3

      • getDefaultInstance

        public static Access getDefaultInstance()

      • parser

        public static com.google.protobuf.Parser<Access> parser()

      • getParserForType

        public com.google.protobuf.Parser<Access> getParserForType()
        Specified by:
        getParserForType in interface com.google.protobuf.Message
        Specified by:
        getParserForType in interface com.google.protobuf.MessageLite
        Overrides:
        getParserForType in class com.google.protobuf.GeneratedMessageV3

      • getDefaultInstanceForType

        public Access getDefaultInstanceForType()
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder