Skip to main content

custom_modules

Creates, updates, deletes, gets or lists a custom_modules resource.

Overview

Namecustom_modules
TypeResource
Idgoogle.securitycenter.custom_modules

Fields

The following fields are returned by SELECT queries:

Successful response

NameDatatypeDescription
namestringImmutable. The resource name of the Event Threat Detection custom module. Its format is: * organizations/{organization}/eventThreatDetectionSettings/customModules/{module}. * folders/{folder}/eventThreatDetectionSettings/customModules/{module}. * projects/{project}/eventThreatDetectionSettings/customModules/{module}.
ancestorModulestringOutput only. The closest ancestor module that this module inherits the enablement state from. The format is the same as the EventThreatDetectionCustomModule resource name.
cloudProviderstringThe cloud provider of the custom module.
configobjectConfig for the module. For the resident module, its config value is defined at this level. For the inherited module, its config value is inherited from the ancestor module.
descriptionstringThe description for the module.
displayNamestringThe human readable name to be displayed for the module.
enablementStatestringThe state of enablement for the module at the given level of the hierarchy.
lastEditorstringOutput only. The editor the module was last updated by.
typestringType for the module. e.g. CONFIGURABLE_BAD_IP.
updateTimestring (google-datetime)Output only. The time the module was last updated.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
folders_event_threat_detection_settings_custom_modules_getselectfoldersId, customModulesIdGets an Event Threat Detection custom module.
projects_event_threat_detection_settings_custom_modules_getselectprojectsId, customModulesIdGets an Event Threat Detection custom module.
organizations_event_threat_detection_settings_custom_modules_getselectorganizationsId, customModulesIdGets an Event Threat Detection custom module.
folders_security_health_analytics_settings_custom_modules_patchupdatefoldersId, customModulesIdupdateMaskUpdates the SecurityHealthAnalyticsCustomModule under the given name based on the given update mask. Updating the enablement state is supported on both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name and custom config of a module is supported on resident modules only.
folders_event_threat_detection_settings_custom_modules_patchupdatefoldersId, customModulesIdupdateMaskUpdates the Event Threat Detection custom module with the given name based on the given update mask. Updating the enablement state is supported for both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name or configuration of a module is supported for resident modules only. The type of a module cannot be changed.
projects_security_health_analytics_settings_custom_modules_patchupdateprojectsId, customModulesIdupdateMaskUpdates the SecurityHealthAnalyticsCustomModule under the given name based on the given update mask. Updating the enablement state is supported on both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name and custom config of a module is supported on resident modules only.
projects_event_threat_detection_settings_custom_modules_patchupdateprojectsId, customModulesIdupdateMaskUpdates the Event Threat Detection custom module with the given name based on the given update mask. Updating the enablement state is supported for both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name or configuration of a module is supported for resident modules only. The type of a module cannot be changed.
organizations_security_health_analytics_settings_custom_modules_patchupdateorganizationsId, customModulesIdupdateMaskUpdates the SecurityHealthAnalyticsCustomModule under the given name based on the given update mask. Updating the enablement state is supported on both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name and custom config of a module is supported on resident modules only.
organizations_event_threat_detection_settings_custom_modules_patchupdateorganizationsId, customModulesIdupdateMaskUpdates the Event Threat Detection custom module with the given name based on the given update mask. Updating the enablement state is supported for both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name or configuration of a module is supported for resident modules only. The type of a module cannot be changed.
folders_security_health_analytics_settings_custom_modules_simulateexecfoldersIdSimulates a given SecurityHealthAnalyticsCustomModule and Resource.
projects_security_health_analytics_settings_custom_modules_simulateexecprojectsIdSimulates a given SecurityHealthAnalyticsCustomModule and Resource.
organizations_security_health_analytics_settings_custom_modules_simulateexecorganizationsIdSimulates a given SecurityHealthAnalyticsCustomModule and Resource.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
customModulesIdstring
foldersIdstring
organizationsIdstring
projectsIdstring
updateMaskstring (google-fieldmask)

SELECT examples

Gets an Event Threat Detection custom module.

SELECT
name,
ancestorModule,
cloudProvider,
config,
description,
displayName,
enablementState,
lastEditor,
type,
updateTime
FROM google.securitycenter.custom_modules
WHERE foldersId = '{{ foldersId }}' -- required
AND customModulesId = '{{ customModulesId }}' -- required;

UPDATE examples

Updates the SecurityHealthAnalyticsCustomModule under the given name based on the given update mask. Updating the enablement state is supported on both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name and custom config of a module is supported on resident modules only.

UPDATE google.securitycenter.custom_modules
SET
data__name = '{{ name }}',
data__displayName = '{{ displayName }}',
data__enablementState = '{{ enablementState }}',
data__customConfig = '{{ customConfig }}',
data__cloudProvider = '{{ cloudProvider }}'
WHERE
foldersId = '{{ foldersId }}' --required
AND customModulesId = '{{ customModulesId }}' --required
AND updateMask = '{{ updateMask}}'
RETURNING
name,
ancestorModule,
cloudProvider,
customConfig,
displayName,
enablementState,
lastEditor,
updateTime;

Lifecycle Methods

Simulates a given SecurityHealthAnalyticsCustomModule and Resource.

EXEC google.securitycenter.custom_modules.folders_security_health_analytics_settings_custom_modules_simulate 
@foldersId='{{ foldersId }}' --required
@@json=
'{
"customConfig": "{{ customConfig }}",
"resource": "{{ resource }}"
}';