GCP

name: GCP
display: Google Cloud Platform
commonfields:
  id: GCP
  version: -1
sectionorder:
- Connect
- Collect
configuration:
- displaypassword: Service Account Private Key (JSON)
  name: credentials
  required: true
  required:platform: false
  type: 9
  hiddenusername: true
  section: Connect
  additionalinfo: "The full content of a GCP Service Account private key JSON file. In the Google Cloud Console, go to IAM & Admin > Service Accounts and create a service account with the required roles. Then under the Keys tab, create a JSON key. Paste the downloaded JSON contents here."
- display: GCP Project ID
  name: project_id
  type: 0
  required: false
  section: Connect
  additionalinfo: "The GCP project ID to authenticate against when testing the integration (e.g. my-project-123). If left empty, the project ID from the Service Account private key JSON is used."
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  required: false
  advanced: true
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
  advanced: true
category: Cloud Services
provider: Google
description: "Manage and secure Google Cloud Platform resources. On Cortex Platform, authentication is handled automatically via the cloud connector. For Cortex XSOAR and Cortex XSIAM (version < 3.0), configure a GCP Service Account private key JSON and a default GCP Project ID."
script:
  commands:
  - name: gcp-compute-firewall-patch
    description: "Updates a specific firewall rule with the data included in the request. Required permissions: compute.firewalls.update, compute.firewalls.get, compute.firewalls.list, compute.networks.updatePolicy, compute.networks.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: resource_name
      required: true
      description: Name of the firewall rule to update.
    - description: An optional description of this resource, which you provide when you create the resource.
      name: description
    - description: URL of the network resource for this firewall rule. If not specified when creating a firewall rule, the default network is used.
      name: network
    - description: Priority for this rule. This is an integer between 0 and 65535, both inclusive. When not specified, the value assumed is 1000. Relative priorities determine precedence of conflicting rules. Lower value of priority implies higher precedence (eg, a rule with priority 0 has higher precedence than a rule with priority 1). DENY rules take precedence over ALLOW rules.
      name: priority
    - description: 'If source ranges are specified, the firewall applies only to traffic with source IP addresses in these ranges. These ranges must be expressed in CIDR format. One or both of sourceRanges and sourceTags may be set. If both properties are set, the firewall applies to traffic with a source IP address within sourceRanges OR the source IP belonging to a tag listed in the sourceTags property. The connection does not need to match both properties for the firewall to apply. Only IPv4 is supported, comma-separated.'
      name: sourceRanges
    - description: If destination ranges are specified, the firewall applies only to traffic with destination IP addresses in these ranges. These ranges must be expressed in CIDR format. Only IPv4 is supported. Comma-separated.
      name: destinationRanges
    - description: If source tags are specified, the firewall rule applies only to traffic with source IPs that match the primary network interfaces of VM instances that have the tag and are in the same VPC network. Source tags cannot be used to control traffic to an instance's external IP address. It only applies to traffic between instances in the same virtual network, because tags are associated with instances, not IP addresses. One or both of sourceRanges and sourceTags may be set. If both properties are set, the firewall will apply to traffic with a source IP address within sourceRanges OR the source IP belonging to a tag listed in the sourceTags property. The connection does not need to match both properties for the firewall to apply. Comma-separated.
      name: sourceTags
    - description: A list of tags that controls which instances the firewall rule applies to. If targetTags are specified, then the firewall rule applies only to instances in the VPC network that have one of those tags. If no targetTags are specified, the firewall rule applies to all instances on the specified network. Comma-separated.
      name: targetTags
    - description: If source service accounts are specified, the firewall applies only to traffic originating from an instance with a service account in this list. Source service accounts cannot be used to control traffic to an instance's external IP address because service accounts are associated with an instance, not an IP address. sourceRanges can be set at the same time as sourceServiceAccounts. If both are set, the firewall will apply to traffic that has a source IP address within sourceRanges OR the source IP belongs to an instance with a service account listed in sourceServiceAccount. The connection does not need to match both properties for the firewall to apply. sourceServiceAccounts cannot be used simultaneously as sourceTags or targetTags. Comma-separated.
      name: sourceServiceAccounts
    - description: A list of service accounts indicating sets of instances located in the network that may make network connections as specified in allowed[]. targetServiceAccounts cannot be used at the same time as targetTags or sourceTags. If neither targetServiceAccounts nor targetTags are specified, the firewall rule applies to all instances on the specified network. Comma-separated.
      name: targetServiceAccounts
    - description: 'The ALLOW rules list specified by this firewall. Each rule specifies a protocol and port-range tuple that describes a permitted connection. For example, ipprotocol=tcp,ports=22,443;ipprotocol=tcp,ports=8080,80.'
      name: allowed
    - description: 'The DENY rules list specified by this firewall. Each rule specifies a protocol and port-range tuple that describes a denied connection. For example, ipprotocol=tcp,ports=22,443;ipprotocol=tcp,ports=8080,80.'
      name: denied
    - description: 'Direction of traffic to which this firewall applies; default is INGRESS. Note: For INGRESS traffic, it is NOT supported to specify destinationRanges; For EGRESS traffic, it is NOT supported to specify sourceRanges OR sourceTags.'
      name: direction
    - auto: PREDEFINED
      description: This field denotes whether to enable logging for a particular firewall rule.
      name: logConfigEnable
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      description: Denotes whether the firewall rule is disabled, i.e not applied to the network it is associated with. When set to true, the firewall rule is not enforced and the network behaves as if it did not exist. If this is unspecified, the firewall rule will be enabled.
      name: disabled
      predefined:
      - 'true'
      - 'false'
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.clientOperationId
      description: The value of requestId if you provided it in the request. Not present otherwise.
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: The type of operation, such as insert, update, or delete, and so on.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: The unique target ID, which identifies a specific incarnation of the target resource.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.'
      type: string
    - contextPath: GCP.Compute.Operations.statusMessage
      description: An optional textual description of the current status of the operation.
      type: string
    - contextPath: GCP.Compute.Operations.user
      description: The user who requested the operation, for example, EMAILADDRESS.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
      type: number
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time the operation was requested, in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: The time that this operation was started by the server. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.endTime
      description: The time that this operation was completed. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.error
      description: If errors are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.warnings
      description: If warning messages are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.httpErrorStatusCode
      description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
      type: number
    - contextPath: GCP.Compute.Operations.httpErrorMessage
      description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Operations.region
      description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.description
      description: A textual description of the operation, which is set when the operation is created.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource. Always compute#operation for Operation resources.
      type: string
  - name: gcp-compute-firewall-insert
    description: "Creates a new firewall rule in a specific project. Required permission: compute.firewalls.create."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: resource_name
      required: true
      description: Name of the firewall rule to create.
    - name: description
      description: An optional description for the firewall rule.
    - name: network
      description: URL of the network, e.g., global/networks/default.
    - name: priority
      description: Priority 0-65535. Default 1000.
    - name: direction
      description: Direction of traffic to which this firewall applies. Default INGRESS.
      auto: PREDEFINED
      predefined:
      - "INGRESS"
      - "EGRESS"
      defaultValue: "INGRESS"
    - name: allowed
      description: 'ALLOW rules in tuples, e.g., ipprotocol=tcp,ports=443;ipprotocol=tcp,ports=80.'
    - name: denied
      description: 'DENY rules in tuples, e.g., ipprotocol=tcp,ports=22,443.'
    - name: source_ranges
      description: Comma-separated CIDRs for INGRESS.
    - name: destination_ranges
      description: Comma-separated CIDRs for EGRESS.
    - name: source_tags
      description: Comma-separated instance tags to match as source.
    - name: target_tags
      description: Comma-separated tags to apply this rule to.
    - name: source_service_accounts
      description: Comma-separated service accounts for source.
    - name: target_service_accounts
      description: Comma-separated service accounts to target.
    - name: log_config_enable
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable firewall logging.
    - name: disabled
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Whether this firewall rule is disabled.
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: Unique identifier for the operation resource, defined by the server.
      type: String
    - contextPath: GCP.Compute.Operations.name
      description: Name of the operation resource.
      type: String
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource, for example compute#operation.
      type: String
    - contextPath: GCP.Compute.Operations.operationType
      description: Type of operation, such as insert, update, or delete.
      type: String
    - contextPath: GCP.Compute.Operations.status
      description: Current status of the operation.
      type: String
    - contextPath: GCP.Compute.Operations.progress
      description: Progress of the operation as a percentage between 0 and 100.
      type: Number
    - contextPath: GCP.Compute.Operations.targetId
      description: Unique target ID of the resource affected by the operation.
      type: String
    - contextPath: GCP.Compute.Operations.targetLink
      description: URL of the target resource modified by the operation.
      type: String
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the operation resource.
      type: String
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time when the operation resource was created.
      type: Date
    - contextPath: GCP.Compute.Operations.startTime
      description: The time when the operation started running.
      type: Date
    - contextPath: GCP.Compute.Operations.user
      description: The user account that performed the operation.
      type: String
  - name: gcp-compute-firewall-list
    description: "Lists the firewall rules in a specific project. Required permission: compute.firewalls.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: limit
      defaultValue: '50'
      description: "Maximum number of results to return. Acceptable values are 0 to 500, inclusive."
    - name: page_token
      description: Token for pagination.
      required: false
    - name: filter
      description: "A filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.\nFor more options and details, see:\nhttps://cloud.google.com/compute/docs/reference/rest/v1/firewalls/list#:~:text=page%20of%20results.-,filter,-string."
    outputs:
    - contextPath: GCP.Compute.Firewall.id
      description: Unique identifier for the firewall rule.
      type: String
    - contextPath: GCP.Compute.Firewall.name
      description: Name of the firewall rule.
      type: String
    - contextPath: GCP.Compute.Firewall.kind
      description: Type of the resource (for example, compute#firewall).
      type: String
    - contextPath: GCP.Compute.Firewall.description
      description: Description of the firewall rule.
      type: String
    - contextPath: GCP.Compute.Firewall.direction
      description: Direction of traffic for the rule (INGRESS or EGRESS).
      type: String
    - contextPath: GCP.Compute.Firewall.disabled
      description: Indicates whether the firewall rule is disabled.
      type: Boolean
    - contextPath: GCP.Compute.Firewall.priority
      description: Priority value of the firewall rule.
      type: Number
    - contextPath: GCP.Compute.Firewall.network
      description: The network URL this firewall rule applies to.
      type: String
    - contextPath: GCP.Compute.Firewall.selfLink
      description: Server-defined URL for the resource.
      type: String
    - contextPath: GCP.Compute.Firewall.creationTimestamp
      description: The creation timestamp of the firewall rule.
      type: Date
    - contextPath: GCP.Compute.Firewall.logConfig.enable
      description: Indicates whether logging is enabled for the firewall rule.
      type: Boolean
    - contextPath: GCP.Compute.Firewall.sourceRanges
      description: List of source IP ranges that the rule applies to.
      type: Unknown
    - contextPath: GCP.Compute.Firewall.targetTags
      description: List of target instance tags to which the rule applies.
      type: Unknown
    - contextPath: GCP.Compute.FirewallNextToken
      description: Next page token for pagination.
      type: String
  - name: gcp-compute-firewall-get
    description: "Retrieves a specific firewall rule by name. Required permission: compute.firewalls.get."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: resource_name
      required: true
      description: Firewall rule name.
    outputs:
    - contextPath: GCP.Compute.Firewall.name
      description: Firewall rule name.
      type: string
    - contextPath: GCP.Compute.Firewall.network
      description: Network URL for the firewall rule.
      type: string
    - contextPath: GCP.Compute.Firewall.direction
      description: Direction of traffic (INGRESS/EGRESS).
      type: string
    - contextPath: GCP.Compute.Firewall.priority
      description: Priority of the rule.
      type: number
    - contextPath: GCP.Compute.Firewall.allowed
      description: Allowed tuples.
      type: Unknown
    - contextPath: GCP.Compute.Firewall.denied
      description: Denied tuples.
      type: Unknown
    - contextPath: GCP.Compute.Firewall.targetTags
      description: Target instance tags.
      type: Unknown
  - name: gcp-compute-snapshots-list
    description: "Lists snapshots in a specific project. Required permission: compute.snapshots.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: limit
      defaultValue: '50'
      description: "Maximum number of results to return. Acceptable values are 0 to 500, inclusive."
    - name: page_token
      description: Token for pagination.
    - name: filter
      description: "A filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.\nFor more options and details, see:\nhttps://cloud.google.com/compute/docs/reference/rest/v1/snapshots/list#:~:text=page%20of%20results.-,filter,-string."
    outputs:
    - contextPath: GCP.Compute.Snapshot.id
      description: Unique identifier for the snapshot resource.
      type: String
    - contextPath: GCP.Compute.Snapshot.name
      description: Name of the snapshot resource.
      type: String
    - contextPath: GCP.Compute.Snapshot.kind
      description: Type of the resource, for example compute#snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.status
      description: Current status of the snapshot, such as READY or FAILED.
      type: String
    - contextPath: GCP.Compute.Snapshot.autoCreated
      description: Indicates whether the snapshot was automatically created.
      type: Boolean
    - contextPath: GCP.Compute.Snapshot.architecture
      description: CPU architecture of the source disk, for example X86_64.
      type: String
    - contextPath: GCP.Compute.Snapshot.creationTimestamp
      description: The time when the snapshot was created.
      type: Date
    - contextPath: GCP.Compute.Snapshot.creationSizeBytes
      description: Total size of the snapshot in bytes at creation time.
      type: Number
    - contextPath: GCP.Compute.Snapshot.diskSizeGb
      description: Size of the snapshot in gigabytes.
      type: Number
    - contextPath: GCP.Compute.Snapshot.downloadBytes
      description: Total bytes downloaded to create the snapshot.
      type: Number
    - contextPath: GCP.Compute.Snapshot.enableConfidentialCompute
      description: Indicates if confidential compute is enabled for this snapshot.
      type: Boolean
    - contextPath: GCP.Compute.Snapshot.labelFingerprint
      description: Fingerprint for the labels applied to the snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.licenseCodes
      description: List of license code identifiers attached to the snapshot.
      type: Unknown
    - contextPath: GCP.Compute.Snapshot.licenses
      description: List of license URLs associated with the snapshot.
      type: Unknown
    - contextPath: GCP.Compute.Snapshot.selfLink
      description: Server-defined URL for the snapshot resource.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceDisk
      description: URL of the source disk used to create the snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceDiskId
      description: Unique ID of the source disk used to create the snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicy
      description: URL of the snapshot schedule policy used to create this snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyId
      description: Unique ID of the snapshot schedule policy used to create this snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.storageBytes
      description: Total storage size of the snapshot in bytes.
      type: Number
    - contextPath: GCP.Compute.Snapshot.storageBytesStatus
      description: Status of the storage bytes usage, for example UP_TO_DATE.
      type: String
    - contextPath: GCP.Compute.Snapshot.storageLocations
      description: List of storage locations for the snapshot.
      type: Unknown
    - contextPath: GCP.Compute.SnapshotNextToken
      description: Next page token for pagination.
      type: String
  - name: gcp-compute-snapshot-get
    description: "Retrieves details for a specific snapshot. Required permission: compute.snapshots.get."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: resource_name
      required: true
      description: Snapshot name.
    outputs:
    - contextPath: GCP.Compute.Snapshot.id
      description: Unique identifier for the snapshot resource.
      type: String
    - contextPath: GCP.Compute.Snapshot.name
      description: Name of the snapshot resource.
      type: String
    - contextPath: GCP.Compute.Snapshot.kind
      description: Type of the resource, for example compute#snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.status
      description: Current status of the snapshot, such as READY or FAILED.
      type: String
    - contextPath: GCP.Compute.Snapshot.autoCreated
      description: Indicates whether the snapshot was automatically created.
      type: Boolean
    - contextPath: GCP.Compute.Snapshot.architecture
      description: CPU architecture of the source disk, for example X86_64.
      type: String
    - contextPath: GCP.Compute.Snapshot.creationTimestamp
      description: The time when the snapshot was created.
      type: Date
    - contextPath: GCP.Compute.Snapshot.creationSizeBytes
      description: Total size of the snapshot in bytes at creation time.
      type: Number
    - contextPath: GCP.Compute.Snapshot.diskSizeGb
      description: Size of the snapshot in gigabytes.
      type: Number
    - contextPath: GCP.Compute.Snapshot.downloadBytes
      description: Total bytes downloaded to create the snapshot.
      type: Number
    - contextPath: GCP.Compute.Snapshot.enableConfidentialCompute
      description: Indicates if confidential compute is enabled for this snapshot.
      type: Boolean
    - contextPath: GCP.Compute.Snapshot.labelFingerprint
      description: Fingerprint for the labels applied to the snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.licenseCodes
      description: List of license code identifiers attached to the snapshot.
      type: Unknown
    - contextPath: GCP.Compute.Snapshot.licenses
      description: List of license URLs associated with the snapshot.
      type: Unknown
    - contextPath: GCP.Compute.Snapshot.selfLink
      description: Server-defined URL for the snapshot resource.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceDisk
      description: URL of the source disk used to create the snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceDiskId
      description: Unique ID of the source disk used to create the snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicy
      description: URL of the snapshot schedule policy used to create this snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyId
      description: Unique ID of the snapshot schedule policy used to create this snapshot.
      type: String
    - contextPath: GCP.Compute.Snapshot.storageBytes
      description: Total storage size of the snapshot in bytes.
      type: Number
    - contextPath: GCP.Compute.Snapshot.storageBytesStatus
      description: Status of the storage bytes usage, for example UP_TO_DATE.
      type: String
    - contextPath: GCP.Compute.Snapshot.storageLocations
      description: List of storage locations for the snapshot.
      type: Unknown
  - name: gcp-compute-instances-aggregated-list-by-ip
    description: "Returns an aggregated list of instances across all zones that can be filtered by internal or external IP. Required permission: cloudasset.assets.searchAllResources."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: ip_address
      required: true
      description: The IP address to search for.
    - name: match_external
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: If true, match against external NAT IPs; otherwise internal NIC IPs.
    - name: limit
      defaultValue: '50'
      description: "Maximum number of results to return. Acceptable values are 0 to 500, inclusive."
    - name: page_token
      description: Token for pagination.
    outputs:
    - contextPath: GCP.Compute.Instance.name
      description: Instance name.
      type: string
    - contextPath: GCP.Compute.Instance.id
      description: Instance ID.
      type: string
    - contextPath: GCP.Compute.Instance.zone
      description: Instance zone URL.
      type: string
    - contextPath: GCP.Compute.Instance.status
      description: Instance status.
      type: string
    - contextPath: GCP.Compute.Instance.networkInterfaces
      description: Network interfaces of the instance.
      type: Unknown
  - name: gcp-compute-network-tag-set
    description: "Adds a network tag to a VM instance (merges with existing tags). Required permission: compute.instances.setTags."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: zone
      required: true
      description: Zone of the VM (e.g., us-central1-a).
    - name: resource_name
      required: true
      description: Instance name.
    - name: tag
      required: true
      description: Tag to add.
    - name: tags_fingerprint
      description: Fingerprint of the previous set of tags for this resource, used to prevent conflicts. Provide the latest fingerprint value when making a request to add or change tags. To retrieve the fingerprint use the command gcp-compute-instance-get.
      required: true
    - name: add_tag
      defaultValue: "true"
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: If true, adds the tag to the existing tags; otherwise, overrides them. The default is true.
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: Operation ID.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Operation name.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: Current operation status (e.g., RUNNING, DONE).
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: Type of operation being performed.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: Operation progress percentage (0-100).
      type: number
    - contextPath: GCP.Compute.Operations.user
      description: User or service account that initiated the operation.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: Full URL of the target resource for this operation.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: Target resource ID.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: Zone where the operation is performed.
      type: string
    - contextPath: GCP.Compute.Operations.insertTime
      description: Time when the operation was inserted.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: Time when the operation started.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: URL for this operation resource.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource (e.g., compute#operation).
      type: string
  - name: gcp-compute-firewall-patch-disable-gcp-default-firewall-rule-quick-action
    description: "Disables a default GCP firewall rule that is overly permissive (except HTTP and HTTPS). Required permissions: compute.firewalls.update, compute.firewalls.get, compute.firewalls.list, compute.networks.updatePolicy, compute.networks.list."
    prettyname: Disable GCP Firewall Rule
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: resource_name
        required: true
        description: Name of the firewall rule to disable.
        prettyname: GCP Firewall Rule Name
        defaultValue: GCP Firewall Rule Name
        prettypredefined:
          GCP Firewall Rule Name: ${asset.xdm.asset.name}
      - description: Denotes whether the firewall rule is disabled, i.e not applied to the network it is associated with. When set to true, the firewall rule is not enforced and the network behaves as if it did not exist. If this is unspecified, the firewall rule will be enabled.
        name: disabled
        defaultValue: "true"
        hidden: true
    outputs:
      - contextPath: GCP.Compute.Operations.id
        description: The unique identifier for the resource. This identifier is defined by the server.
        type: string
      - contextPath: GCP.Compute.Operations.name
        description: Name of the resource.
        type: string
      - contextPath: GCP.Compute.Operations.zone
        description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
        type: string
      - contextPath: GCP.Compute.Operations.clientOperationId
        description: The value of requestId if you provided it in the request. Not present otherwise.
        type: string
      - contextPath: GCP.Compute.Operations.operationType
        description: The type of operation, such as insert, update, or delete, and so on.
        type: string
      - contextPath: GCP.Compute.Operations.targetLink
        description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
        type: string
      - contextPath: GCP.Compute.Operations.targetId
        description: The unique target ID, which identifies a specific incarnation of the target resource.
        type: string
      - contextPath: GCP.Compute.Operations.status
        description: 'The status of the operation, which can be one of the following: PENDING, RUNNING, or DONE.'
        type: string
      - contextPath: GCP.Compute.Operations.statusMessage
        description: An optional textual description of the current status of the operation.
        type: string
      - contextPath: GCP.Compute.Operations.user
        description: The user who requested the operation, for example, EMAILADDRESS.
        type: string
      - contextPath: GCP.Compute.Operations.progress
        description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
        type: number
      - contextPath: GCP.Compute.Operations.insertTime
        description: The time that this operation was requested. This value is in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Operations.startTime
        description: The time that this operation was started by the server. This value is in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Operations.endTime
        description: The time that this operation was completed. This value is in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Operations.error
        description: If errors are generated during processing of the operation, this field will be populated.
        type: string
      - contextPath: GCP.Compute.Operations.warnings
        description: If warning messages are generated during processing of the operation, this field will be populated.
        type: string
      - contextPath: GCP.Compute.Operations.httpErrorStatusCode
        description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
        type: number
      - contextPath: GCP.Compute.Operations.httpErrorMessage
        description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
        type: string
      - contextPath: GCP.Compute.Operations.selfLink
        description: Server-defined URL for the resource.
        type: string
      - contextPath: GCP.Compute.Operations.region
        description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
        type: string
      - contextPath: GCP.Compute.Operations.description
        description: A textual description of the operation, which is set when the operation is created.
        type: string
      - contextPath: GCP.Compute.Operations.kind
        description: Type of the resource. Always compute#operation for Operation resources.
        type: string

  - name: gcp-storage-bucket-policy-delete
    description: "Removes an entity from a bucket's Access Control List. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: resource_name
      required: true
      description: Name of the GCS bucket.
    - name: entity
      auto: PREDEFINED
      defaultValue: "allUsers"
      required: false
      isArray: true
      description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:<userId or email>\n* group:<groupId or email>\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource "

  - name: gcp-storage-bucket-policy-delete-remove-allusers-access-quick-action
    description: "Revokes 'allUsers' permission access in GCP storage buckets. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy."
    prettyname: Remove GCP Bucket AllUsers Access
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: resource_name
        required: true
        description: Name of the GCS bucket.
        prettyname: GCP Storage Bucket Name
        defaultValue: GCP Storage Bucket Name
        prettypredefined:
          GCP Storage Bucket Name: ${asset.xdm.asset.name}
      - name: entity
        auto: PREDEFINED
        defaultValue: "allUsers"
        required: false
        isArray: true
        hidden: true
        description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:<userId or email>\n* group:<groupId or email>\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource "

  - name: gcp-storage-bucket-policy-delete-remove-AllAuthenticatedUser-access-quick-action
    description: "Revokes 'allAuthenticatedUsers' permission access in GCP storage buckets. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy."
    prettyname: Remove GCP Bucket AllAuthenticatedUser Access
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: resource_name
        required: true
        description: Name of the GCS bucket.
        prettyname: Bucket Name
        defaultValue: Bucket Name
        prettypredefined:
          Bucket Name: ${asset.xdm.asset.name}
      - name: entity
        auto: PREDEFINED
        defaultValue: "allAuthenticatedUsers"
        required: false
        hidden: true
        isArray: true
        description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:<userId or email>\n* group:<groupId or email>\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource "

  - name: gcp-storage-bucket-policy-delete-make-gcp-bucket-private-quick-action
    description: "Revokes 'allUsers' and 'allAuthenticatedUsers' permissions access in a GCP storage bucket. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy."
    prettyname: Make GCP Bucket Private
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: resource_name
        required: true
        description: Name of the GCP bucket.
        prettyname: Bucket Name
        defaultValue: Bucket Name
        prettypredefined:
          Bucket Name: ${asset.xdm.asset.name}
      - name: entity
        auto: PREDEFINED
        defaultValue: "allAuthenticatedUsers,allUsers"
        required: false
        hidden: true
        isArray: true
        description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:<userId or email>\n* group:<groupId or email>\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource "


  - name: gcp-compute-subnet-update
    description: "Enables flow logs or Private Google Access on a subnet. Required permissions: compute.subnetworks.setPrivateIpGoogleAccess, compute.subnetworks.update, compute.subnetworks.get, compute.subnetworks.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: region
      required: true
      description: GCP region.
    - name: resource_name
      required: true
      description: Subnet name.
    - name: enable_flow_logs
      required: false
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable VPC Flow Logs.
    - name: enable_private_ip_google_access
      required: false
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable Private Google Access.
    outputs:
    - contextPath: GCP.Compute.Operations.name
      description: The name of the updated subnet.
      type: String
    - contextPath: GCP.Compute.Operations.region
      description: The region of the updated subnet.
      type: String
    - contextPath: GCP.Compute.Operations.subnetName
      description: The name of the subnet that was updated.
      type: String
    - contextPath: GCP.Compute.Operations.enableFlowLogs
      description: Whether flow logs are enabled for the subnet.
      type: Boolean
    - contextPath: GCP.Compute.Operations.ipCidrRange
      description: The updated CIDR range for the subnet.
      type: String
    - contextPath: GCP.Compute.Operations.privateIpGoogleAccess
      description: Whether private Google access is enabled for the subnet.
      type: Boolean
    - contextPath: GCP.Compute.Operations.privateIpv6GoogleAccess
      description: Whether private IPv6 Google access is enabled for the subnet.
      type: Boolean
    - contextPath: GCP.Compute.Operations.stackType
      description: The stack type of the subnet (e.g., `IPV4`, `IPV6`).
      type: String
    - contextPath: GCP.Compute.Operations.rangeName
      description: The name of the IP range associated with the subnet.
      type: String
    - contextPath: GCP.Compute.Operations.secondaryIpRanges
      description: List of secondary IP ranges for the subnet.
      type: Unknown
    - contextPath: GCP.Compute.Operations.description
      description: The description of the subnet.
      type: String

  - name: gcp-compute-subnet-update-enable-gcp-subnet-flow-logs-quick-action
    description: "Enables VPC Flow Logs on a GCP subnet. Required permissions: compute.subnetworks.setPrivateIpGoogleAccess, compute.subnetworks.update, compute.subnetworks.get, compute.subnetworks.list."
    prettyname: Enable GCP Subnet Flow Logs
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: region
        required: true
        description: GCP region.
        prettyname: Region
        defaultValue: Region
        prettypredefined:
         Region: ${asset.xdm.asset.cloud.region}
      - name: resource_name
        required: true
        description: Subnet name.
        prettyname: GCP Subnet Name
        defaultValue: GCP Subnet Name
        prettypredefined:
          GCP Subnet Name: ${asset.xdm.asset.name}
      - name: enable_flow_logs
        required: false
        auto: PREDEFINED
        predefined:
          - "true"
          - "false"
        defaultValue: "true"
        hidden: true
        description: Enable VPC Flow Logs.
    outputs:
      - contextPath: GCP.Compute.Operations.name
        description: The name of the updated subnet.
        type: String
      - contextPath: GCP.Compute.Operations.region
        description: The region of the updated subnet.
        type: String
      - contextPath: GCP.Compute.Operations.subnetName
        description: The name of the subnet that was updated.
        type: String
      - contextPath: GCP.Compute.Operations.enableFlowLogs
        description: Whether flow logs are enabled for the subnet.
        type: Boolean
      - contextPath: GCP.Compute.Operations.ipCidrRange
        description: The updated CIDR range for the subnet.
        type: String
      - contextPath: GCP.Compute.Operations.privateIpGoogleAccess
        description: Whether private Google access is enabled for the subnet.
        type: Boolean
      - contextPath: GCP.Compute.Operations.privateIpv6GoogleAccess
        description: Whether private IPv6 Google access is enabled for the subnet.
        type: Boolean
      - contextPath: GCP.Compute.Operations.stackType
        description: The stack type of the subnet (e.g., `IPV4`, `IPV6`).
        type: String
      - contextPath: GCP.Compute.Operations.rangeName
        description: The name of the IP range associated with the subnet.
        type: String
      - contextPath: GCP.Compute.Operations.secondaryIpRanges
        description: List of secondary IP ranges for the subnet.
        type: Unknown
      - contextPath: GCP.Compute.Operations.description
        description: The description of the subnet.
        type: String

  - name: gcp-compute-enable-private-ip-access-on-subnet-quick-action
    description: "Enables Private Google Access on a GCP subnet. Required permissions: compute.subnetworks.setPrivateIpGoogleAccess, compute.subnetworks.update, compute.subnetworks.get, compute.subnetworks.list."
    prettyname: Enable Private IP Access on Subnet
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: region
        required: true
        description: GCP region.
        prettyname: Region
        defaultValue: Region
        prettypredefined:
          Region: ${asset.xdm.asset.cloud.region}
      - name: resource_name
        required: true
        description: Subnet name.
        prettyname: GCP Subnet Name
        defaultValue: GCP Subnet Name
        prettypredefined:
          GCP Subnet Name: ${asset.xdm.asset.name}
      - name: enable_private_ip_google_access
        required: false
        auto: PREDEFINED
        predefined:
          - "true"
          - "false"
        defaultValue: "true"
        hidden: true
        description: Enable Private Google Access.
    outputs:
      - contextPath: GCP.Compute.Operations.name
        description: The name of the updated subnet.
        type: String
      - contextPath: GCP.Compute.Operations.region
        description: The region of the updated subnet.
        type: String
      - contextPath: GCP.Compute.Operations.subnetName
        description: The name of the subnet that was updated.
        type: String
      - contextPath: GCP.Compute.Operations.enableFlowLogs
        description: Whether flow logs are enabled for the subnet.
        type: Boolean
      - contextPath: GCP.Compute.Operations.ipCidrRange
        description: The updated CIDR range for the subnet.
        type: String
      - contextPath: GCP.Compute.Operations.privateIpGoogleAccess
        description: Whether private Google access is enabled for the subnet.
        type: Boolean
      - contextPath: GCP.Compute.Operations.privateIpv6GoogleAccess
        description: Whether private IPv6 Google access is enabled for the subnet.
        type: Boolean
      - contextPath: GCP.Compute.Operations.stackType
        description: The stack type of the subnet (e.g., `IPV4`, `IPV6`).
        type: String
      - contextPath: GCP.Compute.Operations.rangeName
        description: The name of the IP range associated with the subnet.
        type: String
      - contextPath: GCP.Compute.Operations.secondaryIpRanges
        description: List of secondary IP ranges for the subnet.
        type: Unknown
      - contextPath: GCP.Compute.Operations.description
        description: The description of the subnet.
        type: String

  - name: gcp-container-cluster-security-update
    description: "Configures security settings for GKE clusters, including access controls and visibility. Required permissions: container.clusters.update, container.clusters.get, container.clusters.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: region
      required: true
      description: GCP region.
    - name: resource_name
      required: true
      description: Name of the GKE cluster.
    - name: enable_intra_node_visibility
      required: false
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable intra-node visibility.
    - name: enable_master_authorized_networks
      required: false
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable Master Authorized Networks.
    - name: cidrs
      description: |
        Comma-separated list of up to 50 CIDR blocks (e.g., "192.168.0.0/24,10.0.0.0/32") that are allowed to access the Kubernetes master via HTTPS.
        If enable_master_authorized_networks is true and no CIDRs are provided, all access will be blocked.
      isArray: true
    outputs:
    - contextPath: GCP.Container.Operations.name
      description: The name of the GKE cluster.
      type: String
    - contextPath: GCP.Container.Operations.zone
      description: The zone of the GKE cluster.
      type: String
    - contextPath: GCP.Container.Operations.enableStackdriverLogging
      description: Whether Stackdriver Logging is enabled for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableStackdriverMonitoring
      description: Whether Stackdriver Monitoring is enabled for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enablePrivateNodes
      description: Whether private nodes are enabled for the GKE cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enablePrivateEndpoint
      description: Whether private endpoint is enabled for the GKE cluster control plane.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableHttpsOnly
      description: Whether HTTPS-only traffic is enforced for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableNetworkPolicy
      description: Whether network policies are enabled for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableAutoscaling
      description: Whether autoscaling is enabled for the cluster nodes.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableIstio
      description: Whether Istio is enabled for the GKE cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enablePodSecurityPolicy
      description: Whether PodSecurityPolicy is enabled for the GKE cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableBinaryAuthorization
      description: Whether Binary Authorization is enabled for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.enableLegacyABAC
      description: Whether legacy ABAC is enabled for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.clusterIpv4Cidr
      description: The cluster’s IPv4 CIDR block.
      type: String
    - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocks
      description: List of authorized CIDR blocks that can access the GKE cluster master.
      type: Unknown
    - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.enabled
      description: Whether master authorized networks are enabled for the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.network
      description: The network to which the GKE cluster belongs.
      type: String
    - contextPath: GCP.Container.Operations.subnetwork
      description: The subnetwork to which the GKE cluster belongs.
      type: String
    - contextPath: GCP.Container.Operations.loggingService
      description: The logging service used for the cluster (e.g., "logging.googleapis.com").
      type: String
    - contextPath: GCP.Container.Operations.monitoringService
      description: The monitoring service used for the cluster (e.g., "monitoring.googleapis.com").
      type: String
    - contextPath: GCP.Container.Operations.nodePools
      description: A list of node pools in the cluster, with their configuration and security settings.
      type: Unknown
    - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateNodes
      description: Whether private nodes are enabled in the cluster.
      type: Boolean
    - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateEndpoint
      description: Whether private endpoint is enabled for the cluster control plane.
      type: Boolean
    - contextPath: GCP.Container.Operations.masterVersion
      description: The current version of the Kubernetes master in the GKE cluster.
      type: String

  - name: gcp-container-cluster-security-update-enable-gke-cluster-intra-node-visibility-quick-action
    description: "Enables intra-node visibility on a GKE cluster for enhanced network monitoring. Required permissions: container.clusters.update, container.clusters.get, container.clusters.list."
    prettyname: Enable GKE Cluster Intra-Node Visibility
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: region
        required: true
        description: GCP region.
        prettyname: Region
        defaultValue: Region
        prettypredefined:
          Region: ${asset.xdm.asset.cloud.region}
      - name: resource_name
        required: true
        description: Name of the GKE cluster.
        prettyname: Cluster Name
        defaultValue: Cluster Name
        prettypredefined:
          Cluster Name: ${asset.xdm.asset.name}
      - name: enable_intra_node_visibility
        required: false
        auto: PREDEFINED
        predefined:
          - "true"
          - "false"
        defaultValue: "true"
        hidden: true
        description: Enable intra-node visibility.
    outputs:
      - contextPath: GCP.Container.Operations.name
        description: The name of the GKE cluster.
        type: String
      - contextPath: GCP.Container.Operations.zone
        description: The zone of the GKE cluster.
        type: String
      - contextPath: GCP.Container.Operations.enableStackdriverLogging
        description: Whether Stackdriver Logging is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableStackdriverMonitoring
        description: Whether Stackdriver Monitoring is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enablePrivateNodes
        description: Whether private nodes are enabled for the GKE cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enablePrivateEndpoint
        description: Whether private endpoint is enabled for the GKE cluster control plane.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableHttpsOnly
        description: Whether HTTPS-only traffic is enforced for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableNetworkPolicy
        description: Whether network policies are enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableAutoscaling
        description: Whether autoscaling is enabled for the cluster nodes.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableIstio
        description: Whether Istio is enabled for the GKE cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enablePodSecurityPolicy
        description: Whether PodSecurityPolicy is enabled for the GKE cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableBinaryAuthorization
        description: Whether Binary Authorization is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableLegacyABAC
        description: Whether legacy ABAC is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.clusterIpv4Cidr
        description: The cluster's IPv4 CIDR block.
        type: String
      - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocks
        description: List of authorized CIDR blocks that can access the GKE cluster master.
        type: Unknown
      - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.enabled
        description: Whether master authorized networks are enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.network
        description: The network to which the GKE cluster belongs.
        type: String
      - contextPath: GCP.Container.Operations.subnetwork
        description: The subnetwork to which the GKE cluster belongs.
        type: String
      - contextPath: GCP.Container.Operations.loggingService
        description: The logging service used for the cluster (e.g., "logging.googleapis.com").
        type: String
      - contextPath: GCP.Container.Operations.monitoringService
        description: The monitoring service used for the cluster (e.g., "monitoring.googleapis.com").
        type: String
      - contextPath: GCP.Container.Operations.nodePools
        description: A list of node pools in the cluster, with their configuration and security settings.
        type: Unknown
      - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateNodes
        description: Whether private nodes are enabled in the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateEndpoint
        description: Whether private endpoint is enabled for the cluster control plane.
        type: Boolean
      - contextPath: GCP.Container.Operations.masterVersion
        description: The current version of the Kubernetes master in the GKE cluster.
        type: String

  - name: gcp-container-cluster-security-update-enable-master-authorized-networks-on-gke-quick-action
    description: "Enables Master Authorized Networks on a GKE cluster to restrict API server access. Required permissions: container.clusters.update, container.clusters.get, container.clusters.list."
    prettyname: Enable Master Authorized Networks on GKE
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: region
        required: true
        description: GCP region.
        prettyname: Region
        defaultValue: Region
        prettypredefined:
          Region: ${asset.xdm.asset.cloud.region}
      - name: resource_name
        required: true
        description: Name of the GKE cluster.
        prettyname: Cluster Name
        defaultValue: Cluster Name
        prettypredefined:
          Cluster Name: ${asset.xdm.asset.name}
      - name: enable_master_authorized_networks
        required: false
        defaultValue: "true"
        hidden: true
        description: Enable Master Authorized Networks.
    outputs:
      - contextPath: GCP.Container.Operations.name
        description: The name of the GKE cluster.
        type: String
      - contextPath: GCP.Container.Operations.zone
        description: The zone of the GKE cluster.
        type: String
      - contextPath: GCP.Container.Operations.enableStackdriverLogging
        description: Whether Stackdriver Logging is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableStackdriverMonitoring
        description: Whether Stackdriver Monitoring is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enablePrivateNodes
        description: Whether private nodes are enabled for the GKE cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enablePrivateEndpoint
        description: Whether private endpoint is enabled for the GKE cluster control plane.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableHttpsOnly
        description: Whether HTTPS-only traffic is enforced for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableNetworkPolicy
        description: Whether network policies are enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableAutoscaling
        description: Whether autoscaling is enabled for the cluster nodes.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableIstio
        description: Whether Istio is enabled for the GKE cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enablePodSecurityPolicy
        description: Whether PodSecurityPolicy is enabled for the GKE cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableBinaryAuthorization
        description: Whether Binary Authorization is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.enableLegacyABAC
        description: Whether legacy ABAC is enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.clusterIpv4Cidr
        description: The cluster's IPv4 CIDR block.
        type: String
      - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocks
        description: List of authorized CIDR blocks that can access the GKE cluster master.
        type: Unknown
      - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.enabled
        description: Whether master authorized networks are enabled for the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.network
        description: The network to which the GKE cluster belongs.
        type: String
      - contextPath: GCP.Container.Operations.subnetwork
        description: The subnetwork to which the GKE cluster belongs.
        type: String
      - contextPath: GCP.Container.Operations.loggingService
        description: The logging service used for the cluster (e.g., "logging.googleapis.com").
        type: String
      - contextPath: GCP.Container.Operations.monitoringService
        description: The monitoring service used for the cluster (e.g., "monitoring.googleapis.com").
        type: String
      - contextPath: GCP.Container.Operations.nodePools
        description: A list of node pools in the cluster, with their configuration and security settings.
        type: Unknown
      - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateNodes
        description: Whether private nodes are enabled in the cluster.
        type: Boolean
      - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateEndpoint
        description: Whether private endpoint is enabled for the cluster control plane.
        type: Boolean
      - contextPath: GCP.Container.Operations.masterVersion
        description: The current version of the Kubernetes master in the GKE cluster.
        type: String

  - name: gcp-storage-bucket-metadata-update
    description: "Updates Google Cloud Storage (GCS) bucket metadata, including settings such as versioning and Uniform Bucket-Level Access (UBLA). Required permission: storage.buckets.update."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: resource_name
      required: true
      description: Name of the bucket.
    - name: enable_versioning
      required: false
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable versioning.
    - name: enable_uniform_access
      required: false
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: Enable uniform bucket-level access.
    outputs:
    - contextPath: GCP.StorageBucket.Metadata
      description: Updated bucket metadata.
      type: Unknown
    - contextPath: GCP.StorageBucket.Metadata.name
      description: The name of the GCP bucket.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.id
      description: The ID of the GCP bucket.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.location
      description: The location of the bucket.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.storageClass
      description: The storage class of the bucket (e.g., STANDARD, NEARLINE).
      type: String
    - contextPath: GCP.StorageBucket.Metadata.created
      description: The creation timestamp of the bucket.
      type: Date
    - contextPath: GCP.StorageBucket.Metadata.updated
      description: The last update timestamp of the bucket.
      type: Date
    - contextPath: GCP.StorageBucket.Metadata.metageneration
      description: The metadata generation of the bucket.
      type: Number
    - contextPath: GCP.StorageBucket.Metadata.labels
      description: The labels attached to the bucket.
      type: Unknown
    - contextPath: GCP.StorageBucket.Metadata.defaultEventBasedHold
      description: Whether a default event-based hold is enabled on the bucket.
      type: Boolean
    - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriod
      description: The duration in seconds that objects in the bucket must be retained.
      type: Number
    - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.effectiveTime
      description: The time from which the retention policy is effective.
      type: Date
    - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.isLocked
      description: Whether the retention policy is locked.
      type: Boolean
    - contextPath: GCP.StorageBucket.Metadata.versioning.enabled
      description: Whether object versioning is enabled.
      type: Boolean
    - contextPath: GCP.StorageBucket.Metadata.logging.logBucket
      description: The destination bucket where access logs are stored.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.logging.logObjectPrefix
      description: The object prefix used for logging.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.lifecycle.rule
      description: A list of lifecycle management rules for the bucket.
      type: Unknown
    - contextPath: GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccess
      description: Whether uniform bucket-level access is enabled.
      type: Boolean
    - contextPath: GCP.StorageBucket.Metadata.cors
      description: CORS configuration for the bucket.
      type: Unknown
    - contextPath: GCP.StorageBucket.Metadata.customPlacementConfig
      description: Custom placement configuration for multi-region buckets.
      type: Unknown
    - contextPath: GCP.StorageBucket.Metadata.encryption.defaultKmsKeyName
      description: The default Cloud KMS key used to encrypt objects.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.billing.requesterPays
      description: Whether requester pays is enabled.
      type: Boolean
    - contextPath: GCP.StorageBucket.Metadata.website.mainPageSuffix
      description: Suffix appended to requests for the bucket's website configuration.
      type: String
    - contextPath: GCP.StorageBucket.Metadata.website.notFoundPage
      description: The path to the custom 404 page for the bucket website.
      type: String

  - name: gcp-storage-bucket-metadata-update-enable-GCP-bucket-versioning-quick-action
    description: "Enables versioning on a GCP storage bucket to preserve object versions. Required permission: storage.buckets.update."
    prettyname: Enable GCP Bucket Versioning
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: resource_name
        required: true
        description: Name of the bucket.
        prettyname: Bucket Name
        defaultValue: Bucket Name
        prettypredefined:
          Bucket Name: ${asset.xdm.asset.name}
      - name: enable_versioning
        required: false
        auto: PREDEFINED
        hidden: true
        predefined:
          - "true"
          - "false"
        defaultValue: "true"
        description: Enable versioning.
    outputs:
      - contextPath: GCP.StorageBucket.Metadata
        description: Updated bucket metadata.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.name
        description: The name of the GCP bucket.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.id
        description: The ID of the GCP bucket.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.location
        description: The location of the bucket.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.storageClass
        description: The storage class of the bucket (e.g., STANDARD, NEARLINE).
        type: String
      - contextPath: GCP.StorageBucket.Metadata.created
        description: The creation timestamp of the bucket.
        type: Date
      - contextPath: GCP.StorageBucket.Metadata.updated
        description: The last update timestamp of the bucket.
        type: Date
      - contextPath: GCP.StorageBucket.Metadata.metageneration
        description: The metadata generation of the bucket.
        type: Number
      - contextPath: GCP.StorageBucket.Metadata.labels
        description: The labels attached to the bucket.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.defaultEventBasedHold
        description: Whether a default event-based hold is enabled on the bucket.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriod
        description: The duration in seconds that objects in the bucket must be retained.
        type: Number
      - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.effectiveTime
        description: The time from which the retention policy is effective.
        type: Date
      - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.isLocked
        description: Whether the retention policy is locked.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.versioning.enabled
        description: Whether object versioning is enabled.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.logging.logBucket
        description: The destination bucket where access logs are stored.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.logging.logObjectPrefix
        description: The object prefix used for logging.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.lifecycle.rule
        description: A list of lifecycle management rules for the bucket.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccess
        description: Whether uniform bucket-level access is enabled.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.cors
        description: CORS configuration for the bucket.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.customPlacementConfig
        description: Custom placement configuration for multi-region buckets.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.encryption.defaultKmsKeyName
        description: The default Cloud KMS key used to encrypt objects.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.billing.requesterPays
        description: Whether requester pays is enabled.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.website.mainPageSuffix
        description: Suffix appended to requests for the bucket's website configuration.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.website.notFoundPage
        description: The path to the custom 404 page for the bucket website.
        type: String

  - name: gcp-storage-bucket-metadata-update-set-GCP-bucket-access-to-uniform-quick-action
    description: "Enables uniform bucket-level access on a GCP storage bucket for enhanced security. Required permission: storage.buckets.update."
    prettyname: Set GCP Bucket Access to Uniform
    quickaction: true
    hidden: true
    arguments:
      - name: project_id
        required: true
        description: The GCP project ID.
        prettyname: GCP Project ID
        defaultValue: GCP Project ID
        prettypredefined:
          GCP Project ID: ${asset.xdm.asset.realm}
      - name: resource_name
        required: true
        description: Name of the bucket.
        prettyname: Bucket Name
        defaultValue: Bucket Name
        prettypredefined:
          Bucket Name: ${asset.xdm.asset.name}
      - name: enable_uniform_access
        required: false
        hidden: true
        defaultValue: "true"
        description: Enable uniform bucket-level access.
    outputs:
      - contextPath: GCP.StorageBucket.Metadata
        description: Updated bucket metadata.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.name
        description: The name of the GCP bucket.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.id
        description: The ID of the GCP bucket.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.location
        description: The location of the bucket.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.storageClass
        description: The storage class of the bucket (e.g., STANDARD, NEARLINE).
        type: String
      - contextPath: GCP.StorageBucket.Metadata.created
        description: The creation timestamp of the bucket.
        type: Date
      - contextPath: GCP.StorageBucket.Metadata.updated
        description: The last update timestamp of the bucket.
        type: Date
      - contextPath: GCP.StorageBucket.Metadata.metageneration
        description: The metadata generation of the bucket.
        type: Number
      - contextPath: GCP.StorageBucket.Metadata.labels
        description: The labels attached to the bucket.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.defaultEventBasedHold
        description: Whether a default event-based hold is enabled on the bucket.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriod
        description: The duration in seconds that objects in the bucket must be retained.
        type: Number
      - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.effectiveTime
        description: The time from which the retention policy is effective.
        type: Date
      - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.isLocked
        description: Whether the retention policy is locked.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.versioning.enabled
        description: Whether object versioning is enabled.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.logging.logBucket
        description: The destination bucket where access logs are stored.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.logging.logObjectPrefix
        description: The object prefix used for logging.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.lifecycle.rule
        description: A list of lifecycle management rules for the bucket.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccess
        description: Whether uniform bucket-level access is enabled.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.cors
        description: CORS configuration for the bucket.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.customPlacementConfig
        description: Custom placement configuration for multi-region buckets.
        type: Unknown
      - contextPath: GCP.StorageBucket.Metadata.encryption.defaultKmsKeyName
        description: The default Cloud KMS key used to encrypt objects.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.billing.requesterPays
        description: Whether requester pays is enabled.
        type: Boolean
      - contextPath: GCP.StorageBucket.Metadata.website.mainPageSuffix
        description: Suffix appended to requests for the bucket's website configuration.
        type: String
      - contextPath: GCP.StorageBucket.Metadata.website.notFoundPage
        description: The path to the custom 404 page for the bucket website.
        type: String
  - name: gcp-storage-bucket-list
    description: "Retrieves the list of buckets in the project associated with the client. Required permission: storage.buckets.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: limit
      required: false
      description: Maximum number of buckets to return.
    - name: prefix
      required: false
      description: Filter results to buckets whose names begin with this prefix.
    - name: page_token
      required: false
      description: Token for pagination.
    outputs:
      - contextPath: GCP.Storage.Bucket.id
        description: The unique identifier for the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.name
        description: The name of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.kind
        description: The type of resource (for example, storage#bucket).
        type: String
      - contextPath: GCP.Storage.Bucket.location
        description: The location of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.locationType
        description: The type of location (for example, multi-region).
        type: String
      - contextPath: GCP.Storage.Bucket.projectNumber
        description: The GCP project number associated with the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.storageClass
        description: The storage class of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.rpo
        description: The recovery point objective setting of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.etag
        description: The HTTP entity tag of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.generation
        description: The generation number of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.metageneration
        description: The metageneration number of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.timeCreated
        description: The time the bucket was created.
        type: Date
      - contextPath: GCP.Storage.Bucket.timeUpdated
        description: The time the bucket was last updated.
        type: Date
      - contextPath: GCP.Storage.Bucket.selfLink
        description: The link to the bucket resource on the GCP API.
        type: String
  - name: gcp-storage-bucket-get
    description: "Retrieves information about a specific bucket. Required permission: storage.buckets.get."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: bucket_name
      required: true
      description: Name of the bucket to retrieve.
    outputs:
      - contextPath: GCP.Storage.Bucket.id
        description: The unique identifier for the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.name
        description: The name of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.kind
        description: The type of resource (for example, storage#bucket).
        type: String
      - contextPath: GCP.Storage.Bucket.location
        description: The location of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.locationType
        description: The type of location (for example, multi-region).
        type: String
      - contextPath: GCP.Storage.Bucket.projectNumber
        description: The GCP project number associated with the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.storageClass
        description: The storage class of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.rpo
        description: The recovery point objective setting of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.etag
        description: The HTTP entity tag of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.generation
        description: The generation number of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.metageneration
        description: The metageneration number of the bucket.
        type: String
      - contextPath: GCP.Storage.Bucket.timeCreated
        description: The time the bucket was created.
        type: Date
      - contextPath: GCP.Storage.Bucket.timeUpdated
        description: The time the bucket was last updated.
        type: Date
      - contextPath: GCP.Storage.Bucket.selfLink
        description: The link to the bucket resource on the GCP API.
        type: String
  - name: gcp-storage-bucket-objects-list
    description: "Retrieves the list of objects in a bucket. Required permission: storage.objects.list."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: bucket_name
      required: true
      description: Name of the bucket to list objects from.
    - name: prefix
      required: false
      description: Filter results to objects whose names begin with this prefix.
    - name: delimiter
      required: false
      description: Delimiter to use for grouping objects. For example delimiter="/" Returns results in a directory-like mode, with / being a common value for the delimiter.
    - name: limit
      required: false
      description: Maximum number of objects to return.
    - name: page_token
      required: false
      description: Token for pagination.
    outputs:
    - contextPath: GCP.Storage.BucketObject.id
      description: The unique identifier for the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.name
      description: The name of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.kind
      description: The type of resource (for example, storage#object).
      type: String
    - contextPath: GCP.Storage.BucketObject.bucket
      description: The name of the bucket containing the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.contentType
      description: The MIME type of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.size
      description: The size of the object in bytes.
      type: Number
    - contextPath: GCP.Storage.BucketObject.crc32c
      description: The CRC32C checksum of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.md5Hash
      description: The MD5 hash of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.etag
      description: The HTTP entity tag of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.generation
      description: The generation number of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.metageneration
      description: The metageneration number of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.storageClass
      description: The storage class of the object.
      type: String
    - contextPath: GCP.Storage.BucketObject.mediaLink
      description: The link for downloading the object content.
      type: String
    - contextPath: GCP.Storage.BucketObject.selfLink
      description: The link to the object resource in the GCP API.
      type: String
    - contextPath: GCP.Storage.BucketObject.timeCreated
      description: The time when the object was created.
      type: Date
    - contextPath: GCP.Storage.BucketObject.timeFinalized
      description: The time when the object was finalized.
      type: Date
    - contextPath: GCP.Storage.BucketObject.timeStorageClassUpdated
      description: The time when the object's storage class was last updated.
      type: Date
    - contextPath: GCP.Storage.BucketObject.updated
      description: The time when the object was last modified.
      type: Date
  - name: gcp-storage-bucket-policy-list
    description: "Retrieves the IAM policy for a bucket. Required permissions: storage.buckets.getIamPolicy, storage.buckets.get."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: bucket_name
      required: true
      description: Name of the bucket to retrieve IAM policy from.
    - name: requested_policy_version
      required: false
      description: The IAM policy version to be returned. If the optionsRequestedPolicyVersion is for an older version that doesn't support part of the requested IAM policy, the request fails. Required to be 3 or greater for buckets with IAM Conditions.
      type: Number
    outputs:
    - contextPath: GCP.Storage.BucketPolicy.version
      description: IAM policy version.
      type: Number
    - contextPath: GCP.Storage.BucketPolicy.etag
      description: ETag of the IAM policy.
      type: String
    - contextPath: GCP.Storage.BucketPolicy.bindings
      description: List of role bindings for the bucket.
      type: List
    - contextPath: GCP.Storage.BucketPolicy.resourceId
      description: Resource ID of the updated IAM policy. e.g. projects/_/buckets/BUCKET_NAME.
      type: String
  - name: gcp-storage-bucket-policy-set
    description: "Sets the IAM policy for a bucket. Required permission: storage.buckets.setIamPolicy."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: bucket_name
      required: true
      description: Name of the bucket to set IAM policy on.
    - name: policy
      required: true
      description: JSON string representing the IAM policy to set.
    - name: add
      defaultValue: "false"
      auto: PREDEFINED
      predefined:
      - "true"
      - "false"
      description: |
        When true, merges the provided policy bindings into the current bucket policy (per role, deduplicating members) by first calling getIamPolicy and then setIamPolicy with the merged result. When false, replaces the entire policy with the provided JSON via setIamPolicy.
    outputs:
    - contextPath: GCP.Storage.BucketPolicy.version
      description: IAM policy version after update.
      type: Number
    - contextPath: GCP.Storage.BucketPolicy.etag
      description: ETag of the updated IAM policy.
      type: String
    - contextPath: GCP.Storage.BucketPolicy.bindings
      description: List of role bindings for the bucket.
      type: List
  - name: gcp-storage-bucket-object-policy-list
    description: "Retrieves the IAM policy for a specific object in a bucket. Required permission: storage.objects.getIamPolicy."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: bucket_name
      required: true
      description: Name of the bucket containing the object.
    - name: object_name
      required: true
      description: Name of the object to retrieve IAM policy from.
    - name: generation
      required: false
      description: Generation of the object.
    outputs:
    - contextPath: GCP.Storage.BucketObjectPolicy.bucketName
      description: Name of the bucket containing the object.
      type: String
    - contextPath: GCP.Storage.BucketObjectPolicy.objectName
      description: Name of the object.
      type: String
    - contextPath: GCP.Storage.BucketObjectPolicy.bindings
      description: List of role bindings for the object.
      type: List
  - name: gcp-storage-bucket-object-policy-set
    description: "Sets the IAM policy for a specific object in a bucket. Required permission: storage.objects.setIamPolicy."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: bucket_name
      required: true
      description: Name of the bucket containing the object.
    - name: object_name
      required: true
      description: Name of the object to set IAM policy on.
    - name: policy
      required: true
      description: JSON string representing the IAM policy to set.
    - name: generation
      required: false
      description: Generation of the object.
    outputs:
    - contextPath: GCP.Storage.BucketObjectPolicy.version
      description: IAM policy version after update.
      type: Number
    - contextPath: GCP.Storage.BucketObjectPolicy.etag
      description: ETag of the updated IAM policy.
      type: String
    - contextPath: GCP.Storage.BucketObjectPolicy.bindings
      description: List of role bindings for the object.
      type: Unknown  
  - name: gcp-iam-project-policy-binding-remove
    description: "Removes a specified IAM role binding from a GCP project. Required permissions: resourcemanager.projects.getIamPolicy, resourcemanager.projects.setIamPolicy."
    arguments:
    - name: project_id
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      required: false
      required:platform: true
    - name: member
      description: Member to remove (e.g., user:test@example.com).
      required: true
      isArray: true
    - name: role
      description: Role to remove (e.g., roles/viewer).
      required: true
    outputs: []
  - name: gcp-bq-dataset-policy-remove
    description: "Removes an email from the BigQuery dataset policy. Required Permissions: bigquery.datasets.update, bigquery.datasets.get, bigquery.datasets.getIamPolicy, bigquery.datasets.setIamPolicy."
    arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - name: dataset_id
      required: true
      description: The dataset ID of the requested dataset.
    - name: email
      description: The email address to remove from the dataset access list.
      required: true
    outputs:
      - contextPath: GCP.BigQuery.Datasets.kind
        description: The resource type.
        type: String
      - contextPath: GCP.BigQuery.Datasets.etag
        description: A hash of the resource.
        type: String
      - contextPath: GCP.BigQuery.Datasets.id
        description: The fully-qualified unique name of the dataset in the format projectId:datasetId.
        type: String
      - contextPath: GCP.BigQuery.Datasets.selfLink
        description: A URL that can be used to access the resource again.
        type: String
      - contextPath: GCP.BigQuery.Datasets.datasetReference
        description: A reference that identifies the dataset.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.friendlyName
        description: A descriptive name for the dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.description
        description: A user-friendly description of the dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.defaultTableExpirationMs
        description: The default lifetime of all tables in the dataset, in milliseconds.
        type: String
      - contextPath: GCP.BigQuery.Datasets.defaultPartitionExpirationMs
        description: The default partition expiration, in milliseconds.
        type: String
      - contextPath: GCP.BigQuery.Datasets.labels
        description: The labels associated with this dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.role
        description: The role assigned to the entity.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.userByEmail
        description: An email address of a user to grant access to.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.groupByEmail
        description: An email address of a group to grant access to.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.domain
        description: A domain to grant access to.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.specialGroup
        description: A special group to grant access to.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.iamMember
        description: A type of member that appears in the IAM Policy that isn't a user, group, domain, or special group.
        type: String
      - contextPath: GCP.BigQuery.Datasets.access.view
        description: A view from a different dataset to grant access to.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.access.routine
        description: A routine from a different dataset to grant access to.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.access.dataset
        description: A grant authorizing access to this dataset for all resources of a particular type.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.access.condition
        description: The binding condition.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.creationTime
        description: The time since the epoch the dataset was created, in milliseconds.
        type: String
      - contextPath: GCP.BigQuery.Datasets.lastModifiedTime
        description: The time since the epoch the dataset was last modified, in milliseconds.
        type: String
      - contextPath: GCP.BigQuery.Datasets.location
        description: The geographic location where the dataset resides.
        type: String
      - contextPath: GCP.BigQuery.Datasets.defaultEncryptionConfiguration
        description: The default encryption configuration for all tables in the dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.type
        description: The type of the dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.linkedDatasetSource
        description: The source dataset reference when the dataset is of type LINKED.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.linkedDatasetMetadata
        description: Metadata about the LinkedDataset.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.externalDatasetReference
        description: Reference to a read-only external dataset defined in data catalogs outside of BigQuery.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.externalCatalogDatasetOptions
        description: Options defining open source compatible datasets in the BigQuery catalog. Contains metadata of the open source database, schema, or namespace of the current dataset.
        type: Unknown
      - contextPath: GCP.BigQuery.Datasets.isCaseInsensitive
        description: True if the dataset and its table names are case-insensitive.
        type: String
      - contextPath: GCP.BigQuery.Datasets.defaultCollation
        description: The default collation specification of future tables created in the dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.defaultRoundingMode
        description: The default rounding mode specification of new tables created within this dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.maxTimeTravelHours
        description: The time travel window in hours.
        type: String
      - contextPath: GCP.BigQuery.Datasets.resourceTags
        description: The tags attached to this dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.storageBillingModel
        description: The billing model that will be applied to the dataset.
        type: String
      - contextPath: GCP.BigQuery.Datasets.catalogSource
        description: The origin of the dataset.
        type: String

# The command is currently unsupported.
#  - name: gcp-iam-project-deny-policy-create
#    description: Creates an IAM deny policy that explicitly blocks specified principals from performing specified permissions on a GCP project.
#    arguments:
#      - name: project_id
#        description: The GCP project ID.
#        required: true
#        type: string
#      - name: policy_id
#        description: Unique identifier for the deny policy (0-63 chars, starts with lowercase letter).
#        required: true
#        type: string
#      - name: display_name
#        description: Display name for the deny policy.
#        required: true
#        type: string
#      - name: denied_principals
#        description: Comma-separated list of principals to deny (e.g., principalSet://goog/public:all, principal://goog/subject/test@example.com).
#        required: true
#        type: string
#      - name: denied_permissions
#        description: Comma-separated list of permissions to deny (e.g., cloudresourcemanager.googleapis.com/projects.delete).
#        required: true
#        type: string
#    outputs:
#      - contextPath: GCP.IAM.DenyPolicy.policyId
#        description: ID of the deny policy.
#        type: string
#      - contextPath: GCP.IAM.DenyPolicy.name
#        description: Full resource name of the created deny policy.
#        type: string
#      - contextPath: GCP.IAM.DenyPolicy.displayName
#        description: Display name of the deny policy.
#        type: string
#      - contextPath: GCP.IAM.DenyPolicy.rules
#        description: List of deny rules included in the policy.
#        type: unknown
#      - contextPath: GCP.IAM.DenyPolicy.etag
#        description: Etag for concurrency control.
#        type: string

  - name: gcp-compute-instance-service-account-set
    description: >
      Sets the service account for a GCP Compute Engine VM instance.
      The instance must be stopped before the service account can be changed. Required permissions: compute.instances.setServiceAccount, compute.instances.get.
    arguments:
    - name: project_id
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      required: false
      required:platform: true
    - name: zone
      description: The name of the zone for this request.
      required: true
    - name: resource_name
      description: Name of the VM instance.
      required: true
    - name: service_account_email
      description: Email of the service account.
      required: true
    - name: scopes
      description: OAuth scopes to assign (full URLs), e.g., `https://www.googleapis.com/auth/cloud-platform`. Empty list means no scopes.
      isArray: true
      required: true
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.clientOperationId
      description: The value of requestId if you provided it in the request. Not present otherwise.
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: The type of operation, such as insert, update, or delete, and so on.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: The unique target ID, which identifies a specific incarnation of the target resource.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.'
      type: string
    - contextPath: GCP.Compute.Operations.statusMessage
      description: An optional textual description of the current status of the operation.
      type: string
    - contextPath: GCP.Compute.Operations.user
      description: The user who requested the operation, for example, EMAILADDRESS.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
      type: number
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time the operation was requested, in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: The time that this operation was started by the server. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.endTime
      description: The time that this operation was completed. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.error
      description: If errors are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.warnings
      description: If warning messages are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.httpErrorStatusCode
      description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
      type: number
    - contextPath: GCP.Compute.Operations.httpErrorMessage
      description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Operations.region
      description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.description
      description: A textual description of the operation, which is set when the operation is created.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource. Always compute#operation for Operation resources.
      type: string


  - name: gcp-compute-instance-service-account-remove
    description: >
      Removes the service account associated with a GCP Compute Engine VM instance.
      The instance must be stopped before the service account can be changed. Required permissions: compute.instances.setServiceAccount, compute.instances.get.
    arguments:
    - name: project_id
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      required: false
      required:platform: true
      isArray: false
    - name: zone
      description: The name of the zone for this request.
      required: true
      isArray: false
    - name: resource_name
      description: Name of the VM instance.
      required: true
      isArray: false
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.clientOperationId
      description: The value of requestId if you provided it in the request. Not present otherwise.
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: The type of operation, such as insert, update, or delete, and so on.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: The unique target ID, which identifies a specific incarnation of the target resource.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.'
      type: string
    - contextPath: GCP.Compute.Operations.statusMessage
      description: An optional textual description of the current status of the operation.
      type: string
    - contextPath: GCP.Compute.Operations.user
      description: The user who requested the operation, for example, EMAILADDRESS.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
      type: number
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time that this operation was requested. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: The time that this operation was started by the server. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.endTime
      description: The time that this operation was completed. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.error
      description: If errors are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.warnings
      description: If warning messages are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.httpErrorStatusCode
      description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
      type: number
    - contextPath: GCP.Compute.Operations.httpErrorMessage
      description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Operations.region
      description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.description
      description: A textual description of the operation, which is set when the operation is created.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource. Always compute#operation for Operation resources.
      type: string

# The command is currently unsupported.
#  - name: gcp-iam-group-membership-delete
#    deprecated: false
#    description: Deletes a group membership from a GSuite group.
#    arguments:
#    - name: project_id
#      description: The GCP project ID.
#      required: true
#      isArray: false
#    - name: group_id
#      description: ID or email of the group.
#      required: true
#      isArray: false
#    - name: membership_id
#      description: ID or email of the member to remove.
#      required: true
#      isArray: false
#    outputs: []

# The command is currently unsupported.
#  - name: gcp-iam-service-account-delete
#    description: Deletes a GCP IAM service account.
#    arguments:
#    - name: project_id
#      description: The GCP project ID.
#      required: true
#      isArray: false
#    - name: service_account_email
#      description: Email of the service account to delete.
#      required: true
#      isArray: false
#    outputs: []


  - name: gcp-compute-instance-start
    description: "Starts an instance that was stopped using the instances().stop method. Required permission: compute.instances.start."
    arguments:
    - name: project_id
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      required: false
      required:platform: true
    - name: zone
      description: The name of the zone for this request.
      required: true
    - name: resource_name
      description: Name of the instance resource to start.
      required: true
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.clientOperationId
      description: The value of requestId if you provided it in the request. Not present otherwise.
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: The type of operation, such as insert, update, or delete, and so on.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: The unique target ID, which identifies a specific incarnation of the target resource.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: 'The status of the operation, which can be one of the following: PENDING RUNNING or DONE.'
      type: string
    - contextPath: GCP.Compute.Operations.statusMessage
      description: An optional textual description of the current status of the operation.
      type: string
    - contextPath: GCP.Compute.Operations.user
      description: The user who requested the operation, for example, EMAILADDRESS.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
      type: number
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time that this operation was requested. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: The time that this operation was started by the server. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.endTime
      description: The time that this operation was completed. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.error
      description: If errors are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.warnings
      description: If warning messages are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.httpErrorStatusCode
      description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
      type: number
    - contextPath: GCP.Compute.Operations.httpErrorMessage
      description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Operations.region
      description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.description
      description: A textual description of the operation, which is set when the operation is created.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource. Always compute#operation for Operation resources.
      type: string


# gcp-compute-network-get
  - arguments:
    - description: Name of the network to return.
      name: network
      required: true
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    description: Returns the specified network.
    name: gcp-compute-network-get
    outputs:
    - contextPath: GCP.Compute.Networks.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Networks.creationTimestamp
      description: Creation timestamp in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Networks.name
      description: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
      type: string
    - contextPath: GCP.Compute.Networks.description
      description: An optional description of this resource.
      type: string
    - contextPath: GCP.Compute.Networks.gatewayIPv4
      description: The gateway address for default routing out of the network. This value is read only and is selected by GCP.
      type: string
    - contextPath: GCP.Compute.Networks.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Networks.autoCreateSubnetworks
      description: When set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode.
      type: boolean
    - contextPath: GCP.Compute.Networks.subnetworks
      description: Server-defined fully-qualified URLs for all subnetworks in this VPC network.
      type: string
    - contextPath: GCP.Compute.Networks.peerings
      description: ' A list of network peerings for the resource.'
      type: string
    - contextPath: GCP.Compute.Networks.peerings.name
      description: Name of this peering. Provided by the client when the peering is created. The name must comply with RFC1035. Specifically, the name must be 1-63 characters long and match regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all the following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.network
      description: The URL of the peer network. It can be either full URL or partial URL. The peer network may belong to a different project. If the partial URL does not contain project, it is assumed that the peer network is in the same project as the current network.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.state
      description: State for the peering.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.stateDetails
      description: Details about the current state of the peering.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.autoCreateRoutes
      description: This field will be deprecated soon. Prefer using exchangeSubnetRoutes instead. Indicates whether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network.
      type: boolean
    - contextPath: GCP.Compute.Networks.peerings.exchangeSubnetRoutes
      description: Whether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the peering state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network.
      type: boolean
    - contextPath: GCP.Compute.Networks.routingConfig
      description: The network-level routing configuration for this network. Used by Cloud Router to determine what type of network-wide routing behavior to enforce.
      type: string
    - contextPath: GCP.Compute.Networks.routingConfig.routingMode
      description: The network-wide routing mode to use. If set to REGIONAL, this networks cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this networks cloud routers will advertise routes with all subnets of this network, across regions.
      type: string
    - contextPath: GCP.Compute.Networks.kind
      description: Type of the resource. Always compute#network for networks.
      type: string

# gcp-compute-image-get
  - arguments:
    - description: The project ID for this request. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    - description: Name of the image resource to return.
      name: image
      required: true
    description: "Returns a specific image. Required permission: compute.images.get."
    name: gcp-compute-image-get
    outputs:
    - contextPath: GCP.Compute.Images.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Images.creationTimestamp
      description: Creation timestamp in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Images.name
      description: Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
      type: string
    - contextPath: GCP.Compute.Images.description
      description: An optional description of this resource.
      type: string
    - contextPath: GCP.Compute.Images.sourceType
      description: The type of the image used to create this disk. The default and only value is RAW.
      type: string
    - contextPath: GCP.Compute.Images.rawDisk
      description: The parameters of the raw disk image.
      type: string
    - contextPath: GCP.Compute.Images.rawDisk.source
      description: The full Google Cloud Storage URL where the disk image is stored. You must provide either this property or the sourceDisk property but not both.
      type: string
    - contextPath: GCP.Compute.Images.rawDisk.sha1Checksum
      description: An optional SHA1 checksum of the disk image before unpackaging provided by the client when the disk image is created.
      type: string
    - contextPath: GCP.Compute.Images.rawDisk.containerType
      description: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created.
      type: string
    - contextPath: GCP.Compute.Images.deprecated
      description: The deprecation status associated with this image.
      type: string
    - contextPath: GCP.Compute.Images.deprecated.state
      description: The deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error.
      type: string
    - contextPath: GCP.Compute.Images.deprecated.replacement
      description: The URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource.
      type: string
    - contextPath: GCP.Compute.Images.deprecated.deprecated
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Images.deprecated.obsolete
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Images.deprecated.deleted
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Images.status
      description: The status of the image. An image can be used to create other resources, such as instances, only after the image has been successfully created and the status is set to READY. Possible values are FAILED, PENDING, or READY.
      type: string
    - contextPath: GCP.Compute.Images.archiveSizeBytes
      description: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
      type: string
    - contextPath: GCP.Compute.Images.diskSizeGb
      description: Size of the image when restored onto a persistent disk (in GB).
      type: string
    - contextPath: GCP.Compute.Images.sourceDisk
      description: 'URL of the source disk used to create this image. This can be a full or valid partial URL. You must provide either this property or the rawDisk.source property but not both to create an image. For example, the following are valid values: https://www.googleapis.com/compute/v1/projects/project/zones/zone/disks/disk , projects/project/zones/zone/disks/disk , zones/zone/disks/disk.'
      type: string
    - contextPath: GCP.Compute.Images.sourceDiskId
      description: The ID value of the disk used to create this image. This value may be used to determine whether the image was taken from the current or a previous instance of a given disk name.
      type: string
    - contextPath: GCP.Compute.Images.licenses
      description: Any applicable license URI.
      type: string
    - contextPath: GCP.Compute.Images.family
      description: The name of the image family to which this image belongs. You can create disks by specifying an image family instead of a specific image name. The image family always returns its latest image that is not deprecated. The name of the image family must comply with RFC1035.
      type: string
    - contextPath: GCP.Compute.Images.imageEncryptionKey
      description: Encrypts the image using a customer-supplied encryption key. After you encrypt an image with a customer-supplied key, you must provide the same key if you use the image later (e.g. to create a disk from the image). Customer-supplied encryption keys do not protect access to metadata of the disk. If you do not provide an encryption key when creating the image, then the disk will be encrypted using an automatically generated key and you do not need to provide a key to use the image later.
      type: string
    - contextPath: GCP.Compute.Images.imageEncryptionKey.rawKey
      description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
      type: string
    - contextPath: GCP.Compute.Images.imageEncryptionKey.kmsKeyName
      description: The name of the encryption key that is stored in Google Cloud KMS.
      type: string
    - contextPath: GCP.Compute.Images.imageEncryptionKey.sha256
      description: The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
      type: string
    - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey
      description: The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key.
      type: string
    - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey.rawKey
      description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
      type: string
    - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey.kmsKeyName
      description: The name of the encryption key that is stored in Google Cloud KMS.
      type: string
    - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey.sha256
      description: The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
      type: string
    - contextPath: GCP.Compute.Images.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Images.labels
      description: Labels to apply to this image. These can be later modified by the setLabels method.
      type: string
    - contextPath: GCP.Compute.Images.labelFingerprint
      description: A fingerprint for the labels being applied to this image, which is essentially a hash of the labels used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels, otherwise the request will fail with error 412 conditionNotMet.
      type: string
    - contextPath: GCP.Compute.Images.guestOsFeatures
      description: A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.
      type: string
    - contextPath: GCP.Compute.Images.guestOsFeatures.type
      description: The ID of a supported feature. Read Enabling guest operating system features to see a list of available options.
      type: string
    - contextPath: GCP.Compute.Images.licenseCodes
      description: Integer license codes indicating which licenses are attached to this image.
      type: string
    - contextPath: GCP.Compute.Images.sourceImage
      description: URL of the source image used to create this image. This can be a full or valid partial URL.
      type: string
    - contextPath: GCP.Compute.Images.sourceImageId
      description: The ID value of the image used to create this image. This value may be used to determine whether the image was taken from the current or a previous instance of a given image name.
      type: string
    - contextPath: GCP.Compute.Images.sourceImageEncryptionKey
      description: The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key.
      type: string
    - contextPath: GCP.Compute.Images.sourceImageEncryptionKey.rawKey
      description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
      type: string
    - contextPath: GCP.Compute.Images.sourceImageEncryptionKey.kmsKeyName
      description: The name of the encryption key that is stored in Google Cloud KMS.
      type: string
    - contextPath: GCP.Compute.Images.sourceImageEncryptionKey.sha256
      description: ' The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.'
      type: string
    - contextPath: GCP.Compute.Images.sourceSnapshot
      description: URL of the source snapshot used to create this image. This can be a full or valid partial URL.
      type: string
    - contextPath: GCP.Compute.Images.sourceSnapshotId
      description: ' The ID value of the snapshot used to create this image. This value may be used to determine whether the snapshot was taken from the current or a previous instance of a given snapshot name.'
      type: string
    - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey
      description: The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key.
      type: string
    - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey.rawKey
      description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
      type: string
    - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey.kmsKeyName
      description: The name of the encryption key that is stored in Google Cloud KMS.
      type: string
    - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey.sha256
      description: The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
      type: string
    - contextPath: GCP.Compute.Images.kind
      description: Type of the resource. Always compute#image for images.
      type: string

# gcp-compute-region-get
  - arguments:
    - description: Name of the region resource to return.
      name: region
      required: true
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    description: "Returns a specific region resource. Required permission: compute.regions.get."
    name: gcp-compute-region-get
    outputs:
    - contextPath: GCP.Compute.Regions.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Regions.creationTimestamp
      description: ' Creation timestamp in RFC3339 text format.'
      type: string
    - contextPath: GCP.Compute.Regions.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Regions.description
      description: Textual description of the resource.
      type: string
    - contextPath: GCP.Compute.Regions.status
      description: Status of the region, either UP or DOWN.
      type: string
    - contextPath: GCP.Compute.Regions.zones
      description: A list of zones available in this region, in the form of resource URLs.
      type: string
    - contextPath: GCP.Compute.Regions.quotas
      description: Quotas assigned to this region.
      type: string
    - contextPath: GCP.Compute.Regions.quotas.metric
      description: Name of the quota metric.
      type: string
    - contextPath: GCP.Compute.Regions.quotas.limit
      description: Quota limit for this metric.
      type: string
    - contextPath: GCP.Compute.Regions.quotas.usage
      description: ' Current usage of this metric.'
      type: string
    - contextPath: GCP.Compute.Regions.quotas.owner
      description: Owning resource. The resource to which this quota applies.
      type: string
    - contextPath: GCP.Compute.Regions.deprecated
      description: The deprecation status associated with this region.
      type: string
    - contextPath: GCP.Compute.Regions.deprecated.state
      description: The deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error.
      type: string
    - contextPath: GCP.Compute.Regions.deprecated.replacement
      description: The URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource.
      type: string
    - contextPath: GCP.Compute.Regions.deprecated.deprecated
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Regions.deprecated.obsolete
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Regions.deprecated.deleted
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Regions.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Regions.kind
      description: Type of the resource. Always compute#region for regions.
      type: string

# gcp-compute-instance-group-get
  - arguments:
    - description: The name of the instance group.
      name: instance_group
      required: true
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    - description: The name of the zone where the instance group is located.
      name: zone
      required: true
    description: "Returns a specific instance group. Required permission: compute.instanceGroups.get."
    name: gcp-compute-instance-group-get
    outputs:
    - contextPath: GCP.Compute.InstanceGroups.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.creationTimestamp
      description: The creation timestamp for this instance group in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.name
      description: The name of the instance group. The name must be 1-63 characters long, and comply with RFC1035.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.description
      description: An optional description of this resource.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.namedPorts
      description: Assigns a name to a port number.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.namedPorts.name
      description: The name for this named port. The name must be 1-63 characters long, and comply with RFC1035.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.namedPorts.port
      description: The port number, which can be a value between 1 and 65535.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.network
      description: The URL of the network to which all instances in the instance group belong.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.fingerprint
      description: The fingerprint of the named ports. The system uses this fingerprint to detect conflicts when multiple users change the named ports concurrently.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.zone
      description: The URL of the zone where the instance group is located (for zonal resources).
      type: string
    - contextPath: GCP.Compute.InstanceGroups.selfLink
      description: The URL for this instance group. The server generates this URL.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.size
      description: The total number of instances in the instance group.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.region
      description: The URL of the region where the instance group is located (for regional resources).
      type: string
    - contextPath: GCP.Compute.InstanceGroups.subnetwork
      description: The URL of the subnetwork to which all instances in the instance group belong.
      type: string
    - contextPath: GCP.Compute.InstanceGroups.kind
      description: ' The resource type, which is always compute#instance_group for instance groups.'
      type: string

# gcp-compute-zone-get
  - arguments:
    - description: Name of the zone resource to return.
      name: zone
      required: true
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    description: "Returns a specific zone resource. Required permission: compute.zones.get."
    name: gcp-compute-zone-get
    outputs:
    - contextPath: GCP.Compute.Zones.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Zones.creationTimestamp
      description: ' Creation timestamp in RFC3339 text format.'
      type: string
    - contextPath: GCP.Compute.Zones.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Zones.description
      description: Textual description of the resource.
      type: string
    - contextPath: GCP.Compute.Zones.status
      description: Status of the zone, either UP or DOWN.
      type: string
    - contextPath: GCP.Compute.Zones.deprecated
      description: The deprecation status associated with this zone.
      type: string
    - contextPath: GCP.Compute.Zones.deprecated.state
      description: The deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error.
      type: string
    - contextPath: GCP.Compute.Zones.deprecated.replacement
      description: The URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource.
      type: string
    - contextPath: GCP.Compute.Zones.deprecated.deprecated
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Zones.deprecated.obsolete
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Zones.deprecated.deleted
      description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it.
      type: string
    - contextPath: GCP.Compute.Zones.region
      description: Full URL reference to the region which hosts the zone.
      type: string
    - contextPath: GCP.Compute.Zones.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Zones.availableCpuPlatforms
      description: Available cpu/platform selections for the zone. Do not use field = 7 or field = 11. Next available field = 14.
      type: string
    - contextPath: GCP.Compute.Zones.kind
      description: Type of the resource. Always compute#zone for zones.
      type: string

# gcp-compute-networks-list
  - arguments:
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    - defaultValue: '50'
      description: 'The maximum number of results per page that should be returned. If the number of available results is larger than limit, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests. Acceptable values are 0 to 50, inclusive.'
      name: limit
    - description: A filter expression that filters resources listed in the response. The expression must specify the field name, a comparison operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The comparison operator must be either =, !=, >, or <.  For example, if you are filtering Compute Engine instances, you can exclude instances named example-instance by specifying name != example-instance.
      name: filters
    - description: Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name.  You can also sort results in descending order based on the creation timestamp using order_by="creationTimestamp desc". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.
      name: order_by
    - description: Specifies a page token to use. Set page_token to the nextPageToken returned by a previous list request to get the next page of results.
      name: page_token
    description: "Retrieves a list of networks available for the specified project. Required permission: compute.networks.list."
    name: gcp-compute-networks-list
    outputs:
    - contextPath: GCP.Compute.Networks.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Networks.creationTimestamp
      description: Creation timestamp in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Networks.name
      description: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
      type: string
    - contextPath: GCP.Compute.Networks.description
      description: An optional description of this resource.
      type: string
    - contextPath: GCP.Compute.Networks.gatewayIPv4
      description: The gateway address for default routing out of the network. This value is read only and is selected by GCP.
      type: string
    - contextPath: GCP.Compute.Networks.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Networks.autoCreateSubnetworks
      description: When set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode.
      type: boolean
    - contextPath: GCP.Compute.Networks.subnetworks
      description: Server-defined fully-qualified URLs for all subnetworks in this VPC network.
      type: string
    - contextPath: GCP.Compute.Networks.peerings
      description: ' A list of network peerings for the resource.'
      type: string
    - contextPath: GCP.Compute.Networks.peerings.name
      description: Name of this peering. Provided by the client when the peering is created. The name must comply with RFC1035. Specifically, the name must be 1-63 characters long and match regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all the following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.network
      description: The URL of the peer network. It can be either full URL or partial URL. The peer network may belong to a different project. If the partial URL does not contain project, it is assumed that the peer network is in the same project as the current network.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.state
      description: State for the peering.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.stateDetails
      description: Details about the current state of the peering.
      type: string
    - contextPath: GCP.Compute.Networks.peerings.autoCreateRoutes
      description: This field will be deprecated soon. Prefer using exchangeSubnetRoutes instead. Indicates whether full mesh connectivity is created and managed automatically. When set to true, Google Compute Engine automatically creates and manages the routes between two networks while the state is ACTIVE. If set to false, the user must manually create routes to direct packets to the peer network.
      type: boolean
    - contextPath: GCP.Compute.Networks.peerings.exchangeSubnetRoutes
      description: Whether full mesh connectivity is created and managed automatically. When set to true, Google Compute Engine automatically creates and manages the routes between two networks while the peering state is ACTIVE. If set to false, the user must manually create routes to send packets to the peer network.
      type: boolean
    - contextPath: GCP.Compute.Networks.routingConfig
      description: The network-level routing configuration for this network. Used by Cloud Router to determine what type of network-wide routing behavior to enforce.
      type: string
    - contextPath: GCP.Compute.Networks.routingConfig.routingMode
      description: Specifies the network-wide routing mode. If set to REGIONAL, the network’s cloud routers advertise routes only for subnets in the same region as the router. If set to GLOBAL, cloud routers advertise routes for all subnets in the network across all regions.
      type: string
    - contextPath: GCP.Compute.Networks.kind
      description: Type of the resource. Always compute#network for networks.
      type: string


# gcp-compute-network-insert
  - arguments:
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    - description: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
      name: name
      required: true
    - description: An optional description of this resource.
      name: description
    - auto: PREDEFINED
      description: When set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode. An auto mode VPC network starts with one subnet per region. Each subnet has a predetermined range as described in Auto mode VPC network IP ranges.
      name: auto_create_sub_networks
      predefined:
      - 'true'
      - 'false'
    - auto: PREDEFINED
      description: The network-wide routing mode to use. If set to REGIONAL, this network's cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this network's cloud routers will advertise routes with all subnets of this network, across regions.
      name: routing_config_routing_mode
      predefined:
      - REGIONAL
      - GLOBAL
    description: "Creates a network in the specified project using the data included in the request. Required permission: compute.networks.create."
    name: gcp-compute-network-insert
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.clientOperationId
      description: The value of requestId if you provided it in the request. Not present otherwise.
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: The type of operation, such as insert, update, or delete, and so on.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk that the snapshot was created from.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: The unique target ID, which identifies a specific incarnation of the target resource.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: 'The status of the operation, which can be one of the following: PENDING RUNNING or DONE.'
      type: string
    - contextPath: GCP.Compute.Operations.statusMessage
      description: An optional textual description of the current status of the operation.
      type: string
    - contextPath: GCP.Compute.Operations.user
      description: User who requested the operation for example EMAILADDRESS.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
      type: number
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time that this operation was requested. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: The time that this operation was started by the server. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.endTime
      description: The time that this operation was completed. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.error
      description: If errors are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.error.errors
      description: The array of errors encountered while processing this operation.
      type: string
    - contextPath: GCP.Compute.Operations.error.errors
      description: The error type identifier for this error.
      type: string
    - contextPath: GCP.Compute.Operations.error.errors
      description: Indicates the field in the request that caused the error. This property is optional.
      type: string
    - contextPath: GCP.Compute.Operations.error.errors
      description: An optional, human-readable error message.
      type: string
    - contextPath: GCP.Compute.Operations.warnings
      description: If warning messages are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.warnings.code
      description: A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response.
      type: string
    - contextPath: GCP.Compute.Operations.warnings.message
      description: A human-readable description of the warning code.
      type: string
    - contextPath: GCP.Compute.Operations.warnings.data
      description: 'Metadata about this warning in key: value format.'
      type: string
    - contextPath: GCP.Compute.Operations.warnings.data
      description: A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone, this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding).
      type: string
    - contextPath: GCP.Compute.Operations.warnings.data
      description: A warning data value corresponding to the key.
      type: string
    - contextPath: GCP.Compute.Operations.httpErrorStatusCode
      description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
      type: number
    - contextPath: GCP.Compute.Operations.httpErrorMessage
      description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Operations.region
      description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.description
      description: A textual description of the operation, which is set when the operation is created.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource. Always compute#operation for Operation resources.
      type: string


  - name: gcp-compute-instance-stop
    description: "Stops and cleanly shuts down a running instance, allowing you to restart the instance at a later time. Stopped instances do not incur VM usage charges while they are stopped. However, resources that the VM is using such as persistent disks and static IP addresses will continue to be charged until they are deleted. Required permission: compute.instances.stop."
    arguments:
    - name: project_id
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      required: false
      required:platform: true
    - name: zone
      description: The name of the zone for this request.
      required: true
    - name: resource_name
      description: Name of the instance resource to stop.
      required: true
    outputs:
    - contextPath: GCP.Compute.Operations.id
      description: The unique identifier for the resource. This identifier is defined by the server.
      type: string
    - contextPath: GCP.Compute.Operations.name
      description: Name of the resource.
      type: string
    - contextPath: GCP.Compute.Operations.zone
      description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.clientOperationId
      description: The value of requestId if you provided it in the request. Not present otherwise.
      type: string
    - contextPath: GCP.Compute.Operations.operationType
      description: The type of operation, such as insert, update, or delete, and so on.
      type: string
    - contextPath: GCP.Compute.Operations.targetLink
      description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
      type: string
    - contextPath: GCP.Compute.Operations.targetId
      description: The unique target ID, which identifies a specific incarnation of the target resource.
      type: string
    - contextPath: GCP.Compute.Operations.status
      description: 'The status of the operation, which can be one of the following: PENDING RUNNING or DONE.'
      type: string
    - contextPath: GCP.Compute.Operations.statusMessage
      description: An optional textual description of the current status of the operation.
      type: string
    - contextPath: GCP.Compute.Operations.user
      description: The user who requested the operation, for example, EMAILADDRESS.
      type: string
    - contextPath: GCP.Compute.Operations.progress
      description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
      type: number
    - contextPath: GCP.Compute.Operations.insertTime
      description: The time that this operation was requested. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.startTime
      description: The time that this operation was started by the server. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.endTime
      description: The time that this operation was completed. This value is in RFC3339 text format.
      type: string
    - contextPath: GCP.Compute.Operations.error
      description: If errors are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.warnings
      description: If warning messages are generated during processing of the operation, this field will be populated.
      type: string
    - contextPath: GCP.Compute.Operations.httpErrorStatusCode
      description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
      type: number
    - contextPath: GCP.Compute.Operations.httpErrorMessage
      description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
      type: string
    - contextPath: GCP.Compute.Operations.selfLink
      description: Server-defined URL for the resource.
      type: string
    - contextPath: GCP.Compute.Operations.region
      description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
      type: string
    - contextPath: GCP.Compute.Operations.description
      description: A textual description of the operation, which is set when the operation is created.
      type: string
    - contextPath: GCP.Compute.Operations.kind
      description: Type of the resource. Always compute#operation for Operation resources.
      type: string
  - arguments:
    - name: project_id
      required: false
      required:platform: true
      description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
    - description: The name of the zone for this request.
      name: zone
      required: true
    - description: A filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.
      name: filters
    - defaultValue: '50'
      description: 'The maximum number of results per page that should be returned. Acceptable values are 0 to 500, inclusive.'
      name: limit
    - description: Sorts list results in a specific order. By default, results are returned in alphanumerical order based on the resource name.  You can also sort results in descending order based on the creation timestamp using order_by="creationTimestamp desc".
      name: order_by
    - description: Specifies a page token. Set page_token to the nextPageToken returned by a previous list request to get the next page of results.
      name: page_token
    description: "Retrieves the list of instances in the specified zone. Required permission: compute.instances.list."
    name: gcp-compute-instances-list
    outputs:
      - contextPath: GCP.Compute.Instances.kind
        description: Type of the resource.Always compute#instance for instances.
        type: String
      - contextPath: GCP.Compute.Instances.id
        description: The unique identifier of the resource.
        type: String
      - contextPath: GCP.Compute.Instances.creationTimestamp
        description: Creation timestamp in RFC3339 text format.
        type: String
      - contextPath: GCP.Compute.Instances.name
        description: The name of the resource, provided by the client when the resource is first created.
        type: String
      - contextPath: GCP.Compute.Instances.description
        description: An optional description for this resource.
        type: String
      - contextPath: GCP.Compute.Instances.tags
        description: Tags to apply to this instance.
        type: String
      - contextPath: GCP.Compute.Instances.machineType
        description: 'Full or partial URL of the machine type resource to use for this instance, in the format: zones/zone/machineTypes/machine-type.'
        type: String
      - contextPath: GCP.Compute.Instances.status
        description: The status of the instance.
        type: String
      - contextPath: GCP.Compute.Instances.statusMessage
        description: An optional, human-readable explanation of the status.
        type: String
      - contextPath: GCP.Compute.Instances.zone
        description: URL of the zone where the instance resides.
        type: String
      - contextPath: GCP.Compute.Instances.canIpForward
        description: Allows this instance to send and receive packets with non-matching destination or source IPs.
        type: String
      - contextPath: GCP.Compute.Instances.networkInterfaces
        description: An array of network configurations for the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.disks
        description: Array of disks associated with the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.metadata
        description: The metadata key/value pairs assigned to the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.serviceAccounts
        description: A list of service accounts, with their specified scopes, authorized for the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.selfLink
        description: Server-defined URL for the resource.
        type: String
      - contextPath: GCP.Compute.Instances.scheduling
        description: Sets the scheduling options for the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.cpuPlatform
        description: The CPU platform used by the instance.
        type: String
      - contextPath: GCP.Compute.Instances.labels
        description: Labels to apply to the instance.
        type: String
      - contextPath: GCP.Compute.Instances.labelFingerprint
        description: A fingerprint for this request, which is essentially a hash of the label's contents and used for optimistic locking.
        type: String
      - contextPath: GCP.Compute.Instances.instanceEncryptionKey
        description: Encrypts suspended data for an instance with a customer-managed encryption key.
        type: Object
      - contextPath: GCP.Compute.Instances.minCpuPlatform
        description: Specifies a minimum CPU platform for the VM instance.
        type: String
      - contextPath: GCP.Compute.Instances.guestAccelerators
        description: A list of the type and count of accelerator cards attached to the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.startRestricted
        description: Indicates whether a VM has been restricted from starting because Compute Engine detected suspicious activity.
        type: Boolean
      - contextPath: GCP.Compute.Instances.deletionProtection
        description: Whether the resource should be protected against deletion.
        type: Boolean
      - contextPath: GCP.Compute.Instances.resourcePolicies
        description: Resource policies applied to this instance.
        type: String
      - contextPath: GCP.Compute.Instances.sourceMachineImage
        description: Source machine image.
        type: String
      - contextPath: GCP.Compute.Instances.reservationAffinity
        description: Specifies the reservations that the instance can consume from.
        type: Object
      - contextPath: GCP.Compute.Instances.hostname
        description: Specifies the hostname of the instance.
        type: String
      - contextPath: GCP.Compute.Instances.displayDevice
        description: Enables display device for the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.shieldedInstanceConfig
        description: Shielded VM configuration for the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.sourceMachineImageEncryptionKey
        description: The source machine image encryption key used when creating an instance from a machine image.
        type: Object
      - contextPath: GCP.Compute.Instances.confidentialInstanceConfig
        description: Confidential computing configuration for the instance.
        type: Object
      - contextPath: GCP.Compute.Instances.fingerprint
        description: Specifies a fingerprint for this resource, which is essentially a hash of the instance's contents and used for optimistic locking.
        type: String
      - contextPath: GCP.Compute.Instances.privateIpv6GoogleAccess
        description: The private IPv6 Google access type for the VM.
        type: String
      - contextPath: GCP.Compute.Instances.advancedMachineFeatures
        description: Controls for advanced machine-related behavior features.
        type: Object
      - contextPath: GCP.Compute.Instances.lastStartTimestamp
        description: Last start timestamp in RFC3339 text format.
        type: String
      - contextPath: GCP.Compute.Instances.lastStopTimestamp
        description: Last stop timestamp in RFC3339 text format.
        type: String
      - contextPath: GCP.Compute.Instances.lastSuspendedTimestamp
        description: Last suspended timestamp in RFC3339 text format.
        type: String
      - contextPath: GCP.Compute.Instances.satisfiesPzs
        description: Indicates whether the instance satisfies physical zone separation requirements.
        type: String
      - contextPath: GCP.Compute.Instances.satisfiesPzi
        description: Indicates whether the instance satisfies physical zone isolation requirements.
        type: String
      - contextPath: GCP.Compute.Instances.resourceStatus
        description: The resource status.
        type: Object
      - contextPath: GCP.Compute.Instances.networkPerformanceConfig
        description: Network performance configuration.
        type: Object
      - contextPath: GCP.Compute.Instances.keyRevocationActionType
        description: KeyRevocationActionType of the instance.
        type: String
      - contextPath: GCP.Compute.InstancesNextPageToken
        description: The token used to retrieve the next page of results for list requests.
        type: String
      - contextPath: GCP.Compute.InstancesSelfLink
        description: Server-defined URL for the resource.
        type: String
      - contextPath: GCP.Compute.InstancesWarning
        description: Informational warning message.
        type: Object
  - arguments:
    - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
      name: project_id
      required: false
      required:platform: true
    - description: The name of the zone for this request.
      name: zone
      required: true
    - description: Name of the instance resource to return.
      name: instance
      required: true
    description: "Returns a specific instance resource. To get a list of available instances, make a list() request. Required permission: compute.instances.get."
    name: gcp-compute-instance-get
    outputs:
      - contextPath: GCP.Compute.Instances.id
        description: The unique identifier for the resource, defined by the server.
        type: string
      - contextPath: GCP.Compute.Instances.creationTimestamp
        description: Creation timestamp in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Instances.name
        description: The name of the resource, provided by the client when first creating it. The name must be 1–63 characters long and comply with RFC1035. It must match the regular expression [a-z]([-a-z0-9]*[a-z0-9])?, meaning the first character must be a lowercase letter, and all following characters can be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
        type: string
      - contextPath: GCP.Compute.Instances.description
        description: An optional description of this resource. Provide this property when you create the resource.
        type: string
      - contextPath: GCP.Compute.Instances.tags
        description: Tags to apply to this instance. Tags identify valid sources or targets for network firewalls and are specified by the client during instance creation. Tags can later be modified using the setTags method. Each tag must comply with RFC1035. Multiple tags can be specified via the tags.items field.
        type: string
      - contextPath: GCP.Compute.Instances.tags.items
        description: An array of tags. Each tag must be 1-63 characters long, and comply with RFC1035.
        type: string
      - contextPath: GCP.Compute.Instances.tags.fingerprint
        description: Specifies a fingerprint for this request, which is essentially a hash of the tags contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update tags. You must always provide an up-to-date fingerprint hash in order to update or change tags.
        type: string
      - contextPath: GCP.Compute.Instances.machineType
        description: 'Full or partial URL of the machine type resource to use for this instance, in the format: zones/zone/machineTypes/machine-type. This is provided by the client when the instance is created.'
        type: string
      - contextPath: GCP.Compute.Instances.status
        description: 'The status of the instance. One of the following values: PROVISIONING, STAGING, RUNNING, STOPPING, STOPPED, SUSPENDING, SUSPENDED, and TERMINATED.'
        type: string
      - contextPath: GCP.Compute.Instances.statusMessage
        description: An optional, human-readable explanation of the status.
        type: string
      - contextPath: GCP.Compute.Instances.zone
        description: URL of the zone where the instance resides. This field must be specified in the HTTP request URL and cannot be set in the request body.
        type: string
      - contextPath: GCP.Compute.Instances.canIpForward
        description: Allows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes.
        type: boolean
      - contextPath: GCP.Compute.Instances.networkInterfaces
        description: An array of network configurations for this instance. These specify how interfaces are configured to interact with other network services, such as connecting to the internet. Multiple interfaces are supported per instance.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.network
        description: URL of the network resource for this instance. When creating an instance, if neither the network nor the subnetwork is specified, the default network global/networks/default is used; if the network is not specified but the subnetwork is specified, the network is inferred.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.subnetwork
        description: The URL of the Subnetwork resource for this instance. For legacy networks, do not provide this property. For auto subnet networks, specifying the subnetwork is optional. For custom subnet networks, this field must be specified. If provided, the subnetwork can be a full or partial URL.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.networkIP
        description: An IPv4 internal network address to assign to the instance for this network interface. If not specified by the user, an unused internal IP is assigned by the system.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.name
        description: ' The name of the network interface, generated by the server. For network devices, these are eth0, eth1, etc.'
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.accessConfigs
        description: An array of configurations for this interface. Currently, only one access config, ONE_TO_ONE_NAT, is supported. If there are no accessConfigs specified, then the instance will have no external internet access.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.aliasIpRanges
        description: An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.fingerprint
        description: Fingerprint hash of the contents stored in this network interface. This field is ignored when inserting an instance or adding a network interface. To update the network interface, an up-to-date fingerprint must be provided; otherwise, the request fails with error 412 conditionNotMet.
        type: string
      - contextPath: GCP.Compute.Instances.networkInterfaces.kind
        description: Type of the resource. Always compute#networkInterface for network interfaces.
        type: string
      - contextPath: GCP.Compute.Instances.disks
        description: Array of disks associated with this instance. Persistent disks must be created before you can assign them.
        type: string
      - contextPath: GCP.Compute.Instances.disks.type
        description: Specifies the type of the disk, either SCRATCH or PERSISTENT. If not specified, the default is PERSISTENT.
        type: string
      - contextPath: GCP.Compute.Instances.disks.mode
        description: The mode in which to attach this disk, either READ_WRITE or READ_ONLY. If not specified, the default is to attach the disk in READ_WRITE mode.
        type: string
      - contextPath: GCP.Compute.Instances.disks.source
        description: Specifies a valid partial or full URL to an existing Persistent Disk resource. When creating a new instance, one of initializeParams.sourceImage or disks.source is required except for local SSD.
        type: string
      - contextPath: GCP.Compute.Instances.disks.deviceName
        description: Specifies a unique device name of your choice that is reflected into the /dev/disk/by-id/google-* tree of a Linux operating system running within the instance. This name can be used to reference the device for mounting, resizing, and other operations from within the instance.
        type: string
      - contextPath: GCP.Compute.Instances.disks.index
        description: A zero-based index for this disk, where 0 is reserved for the boot disk. Each attached disk on an instance has a unique index number.
        type: number
      - contextPath: GCP.Compute.Instances.disks.boot
        description: Indicates that this is a boot disk. The VM uses the first partition of the disk as its root filesystem.
        type: boolean
      - contextPath: GCP.Compute.Instances.disks.initializeParams
        description: Specifies parameters for a new disk to be created with the instance. Use initialization parameters to create boot disks or local SSDs attached to the instance.
        type: string
      - contextPath: GCP.Compute.Instances.disks.autoDelete
        description: Specifies whether the disk is auto-deleted when the instance is deleted (not when the disk is detached).
        type: boolean
      - contextPath: GCP.Compute.Instances.disks.licenses
        description: ' Any valid publicly visible licenses.'
        type: string
      - contextPath: GCP.Compute.Instances.disks.interface
        description: Specifies the disk interface for attaching this disk, either SCSI or NVME. The default is SCSI. Persistent disks must use SCSI; attaching a persistent disk with any other interface will fail. Local SSDs can use either NVME or SCSI. For performance characteristics of SCSI versus NVMe, see Local SSD performance.
        type: string
      - contextPath: GCP.Compute.Instances.disks.guestOsFeatures
        description: A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.
        type: string
      - contextPath: GCP.Compute.Instances.disks.diskEncryptionKey
        description: Encrypts or decrypts a disk using a customer-supplied encryption key.
        type: Object
      - contextPath: GCP.Compute.Instances.disks.kind
        description: Type of the resource. Always compute#attachedDisk for attached disks.
        type: string
      - contextPath: GCP.Compute.Instances.metadata
        description: The metadata key/value pairs assigned to the instance. This includes custom metadata and predefined keys.
        type: string
      - contextPath: GCP.Compute.Instances.metadata.fingerprint
        description: Specifies a fingerprint for this request, which is a hash of the metadata contents used for optimistic locking. The fingerprint is generated by Compute Engine and changes after every metadata update. You must provide an up-to-date fingerprint to modify metadata; otherwise, the request fails with error 412 conditionNotMet.
        type: string
      - contextPath: GCP.Compute.Instances.metadata.items
        description: Array of key/value pairs. The total size of all keys and values must be less than 512 KB.
        type: string
      - contextPath: GCP.Compute.Instances.metadata.kind
        description: Type of the resource. Always compute#metadata for metadata.
        type: string
      - contextPath: GCP.Compute.Instances.serviceAccounts
        description: A list of service accounts, with their specified scopes, authorized for the instance. Only one service account per VM instance is supported.
        type: string
      - contextPath: GCP.Compute.Instances.serviceAccounts.email
        description: Email address of the service account.
        type: string
      - contextPath: GCP.Compute.Instances.serviceAccounts.scopes
        description: The list of scopes to be made available for this service account.
        type: string
      - contextPath: GCP.Compute.Instances.selfLink
        description: Server-defined URL for the resource.
        type: string
      - contextPath: GCP.Compute.Instances.scheduling
        description: Sets the scheduling options for the instance.
        type: string
      - contextPath: GCP.Compute.Instances.scheduling.onHostMaintenance
        description: Defines the maintenance behavior for this instance. For standard instances, the default behavior is MIGRATE. For preemptible instances, the default and only possible behavior is TERMINATE. For more information, see Setting Instance Scheduling Options.
        type: string
      - contextPath: GCP.Compute.Instances.scheduling.automaticRestart
        description: Specifies whether the instance should be automatically restarted if it is terminated by Compute Engine (not terminated by a user). You can only set the automatic restart option for standard instances. Preemptible instances cannot be automatically restarted.
        type: boolean
      - contextPath: GCP.Compute.Instances.scheduling.preemptible
        description: Defines whether the instance is preemptible. This can only be set during instance creation, it cannot be set or changed after the instance has been created.
        type: boolean
      - contextPath: GCP.Compute.Instances.scheduling.nodeAffinities
        description: A set of node affinity and anti-affinity.
        type: string
      - contextPath: GCP.Compute.Instances.cpuPlatform
        description: The CPU platform used by the instance.
        type: string
      - contextPath: GCP.Compute.Instances.labels
        description: Labels to apply to the instance. These can be later modified by the setLabels method.
        type: string
      - contextPath: GCP.Compute.Instances.labels.key
        description: The label key.
        type: string
      - contextPath: GCP.Compute.Instances.labels.value
        description: The label value.
        type: string
      - contextPath: GCP.Compute.Instances.labelFingerprint
        description: A fingerprint for this request, which is essentially a hash of the labels contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels.
        type: string
      - contextPath: GCP.Compute.Instances.minCpuPlatform
        description: 'Specifies a minimum CPU platform for the VM instance. Applicable values are the friendly names of CPU platforms, such as minCpuPlatform: "Intel Haswell" or minCpuPlatform: "Intel Sandy Bridge".'
        type: string
      - contextPath: GCP.Compute.Instances.guestAccelerators
        description: A list of the type and count of accelerator cards attached to the instance.
        type: string
      - contextPath: GCP.Compute.Instances.guestAccelerators.acceleratorType
        description: 'Full or partial URL of the accelerator type resource to attach to this instance. For example: projects/my-project/zones/us-central1-c/acceleratorTypes/nvidia-tesla-p100. When creating an instance template, specify only the accelerator name.'
        type: string
      - contextPath: GCP.Compute.Instances.guestAccelerators.acceleratorCount
        description: The number of the guest accelerator cards exposed to the instance.
        type: string
      - contextPath: GCP.Compute.Instances.startRestricted
        description: Indicates whether a VM has been restricted from starting because Compute Engine detected suspicious activity.
        type: boolean
      - contextPath: GCP.Compute.Instances.deletionProtection
        description: Whether the resource should be protected against deletion.
        type: boolean
      - contextPath: GCP.Compute.Instances.hostname
        description: Hostname.
        type: string
      - contextPath: GCP.Compute.Instances.kind
        description: 'Type of the resource. Always compute#instance for instances.'
        type: string
  - arguments:
      - description: Name of the instance resource to return.
        name: instance
        required: true
      - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration.
        name: project_id
        required: false
        required:platform: true
      - description: The name of the zone for this request.
        name: zone
        required: true
      - description: 'An object containing a list of "key": value pairs, without spaces. Example: key=abc,value=123;key=ABC,value=321.'
        name: labels
        required: true
      - description: Fingerprint of the previous set of labels for this resource, used to prevent conflicts. Provide the latest fingerprint value when making a request to add or change labels.
        name: label_fingerprint
        required: true
      - description: Whether to add the new labels to the existing ones or override the previous labels with the news. True - add, False - override.
        name: add_labels
        defaultValue: 'false'
        auto: PREDEFINED
        predefined:
          - 'true'
          - 'false'
    description: "Sets labels on an instance. Required permission: compute.instances.setLabels."
    name: gcp-compute-instance-labels-set
    outputs:
      - contextPath: GCP.Compute.Operations.id
        description: The unique identifier for the resource. This identifier is defined by the server.
        type: string
      - contextPath: GCP.Compute.Operations.name
        description: Name of the resource.
        type: string
      - contextPath: GCP.Compute.Operations.zone
        description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
        type: string
      - contextPath: GCP.Compute.Operations.clientOperationId
        description: The value of requestId if you provided it in the request. Not present otherwise.
        type: string
      - contextPath: GCP.Compute.Operations.operationType
        description: The type of operation, such as insert, update, or delete.
        type: string
      - contextPath: GCP.Compute.Operations.targetLink
        description: The URL of the resource that the operation modifies. For snapshot-creation operations, this points to the persistent disk from which the snapshot was created.
        type: string
      - contextPath: GCP.Compute.Operations.targetId
        description: The unique target ID, which identifies a specific incarnation of the target resource.
        type: string
      - contextPath: GCP.Compute.Operations.status
        description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.'
        type: string
      - contextPath: GCP.Compute.Operations.statusMessage
        description: An optional textual description of the current status of the operation.
        type: string
      - contextPath: GCP.Compute.Operations.user
        description: User who requested the operation, for example, EMAILADDRESS.
        type: string
      - contextPath: GCP.Compute.Operations.progress
        description: An optional progress indicator ranging from 0 to 100. It does not need to be linear or support any specific granularity of operations. This indicator should not be used to estimate completion time. The value should monotonically increase as the operation progresses.
        type: number
      - contextPath: GCP.Compute.Operations.insertTime
        description: The time the operation was requested, in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Operations.startTime
        description: The time that the operation was started by the server, in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Operations.endTime
        description: The time that the operation was completed, in RFC3339 text format.
        type: string
      - contextPath: GCP.Compute.Operations.error
        description: If errors are generated during processing of the operation, this field will be populated.
        type: string
      - contextPath: GCP.Compute.Operations.httpErrorStatusCode
        description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
        type: number
      - contextPath: GCP.Compute.Operations.httpErrorMessage
        description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
        type: string
      - contextPath: GCP.Compute.Operations.selfLink
        description: Server-defined URL for the resource.
        type: string
      - contextPath: GCP.Compute.Operations.region
        description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
        type: string
      - contextPath: GCP.Compute.Operations.description
        description: A textual description of the operation, which is set when the operation is created.
        type: string
      - contextPath: GCP.Compute.Operations.kind
        description: Type of the resource. Always compute#operation for Operation resources.
        type: string

# The command is currently unsupported.
#  - name: gcp-admin-user-update
#    description: Updates user account fields in GSuite, such as names, org unit, or status.
#    arguments:
#    - name: project_id
#      description: The GCP project ID.
#      required: true
#    - name: user_key
#      description: Identifies the user in the API request. The value can be the user's primary email address, alias email address, or unique user ID.
#      required: true
#    - name: update_fields
#      description: JSON payload of fields to update.
#      required: true
#    outputs:
#    - contextPath: GCP.GSuite.User.id
#      description: The unique ID for the user.
#      type: String
#    - contextPath: GCP.GSuite.User.primaryEmail
#      description: The user's primary email address.
#      type: String
#    - contextPath: GCP.GSuite.User.firstName
#      description: The user's first name.
#      type: String
#    - contextPath: GCP.GSuite.User.lastName
#      description: The user's last name.
#      type: String
#    - contextPath: GCP.GSuite.User.customerId
#      description: The unique ID for the customer's G Suite account.
#      type: String
#    - contextPath: GCP.GSuite.User.gender
#      description: Gender.
#      type: String
#    - contextPath: GCP.GSuite.User.suspended
#      description: Indicates if the user is suspended.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.notesValue
#      description: Contents of notes.
#      type: String
#    - contextPath: GCP.GSuite.User.notesContentType
#      description: Content type of notes.
#      type: String
#    - contextPath: GCP.GSuite.User.isAdmin
#      description: Indicates a user with super administrator privileges.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.creationTime
#      description: The time the user's account was created.
#      type: Date
#    - contextPath: GCP.GSuite.User.phones.value
#      description: A human-readable phone number. It may be in any telephone number format.
#      type: String
#    - contextPath: GCP.GSuite.User.phones.type
#      description: The type of phone number.
#      type: String
#    - contextPath: GCP.GSuite.User.phones.primary
#      description: Indicates if this is the user's primary phone number.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.phones.customType
#      description: If the value of type is custom, this property contains the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.type
#      description: The address type.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.customType
#      description: If the address type is custom, this property contains the custom value.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.sourceIsStructured
#      description: Indicates if the user-supplied address was formatted. Formatted addresses are not currently supported.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.addresses.formatted
#      description: A full and unstructured postal address. This is not synced with the structured address fields.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.poBox
#      description: The post office box, if present.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.locality
#      description: The town or city of the address.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.countryCode
#      description: The country code. Uses the ISO 3166-1 standard.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.country
#      description: Country.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.postalCode
#      description: The ZIP or postal code.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.region
#      description: The abbreviated province or state.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.streetAddress
#      description: The street address.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.extendedAddress
#      description: For extended addresses, such as an  address that includes a sub-region.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.primary
#      description: If this is the user's primary address.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.emails.address
#      description: The user's secondary email.
#      type: String
#    - contextPath: GCP.GSuite.User.emails.type
#      description: The secondary email type.
#      type: String
#    - contextPath: GCP.GSuite.User.emails.customType
#      description: If the value of type is custom, this property contains the custom type string.
#      type: String
#    - contextPath: GCP.GSuite.User.emails.primary
#      description: Indicates if this is the user's primary email. Only one entry can be marked as primary.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.ipWhitelisted
#      description: If true, the user's IP address is added to allow list.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.recoveryEmail
#      description: Recovery email of the user.
#      type: String
#    - contextPath: GCP.GSuite.User.isDelegatedAdmin
#      description: Indicates if the user is a delegated administrator.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.recoveryPhone
#      description: Recovery phone of the user.
#      type: String
#    - contextPath: GCP.GSuite.User.orgUnitPath
#      description: The full path of the parent organization associated with the user. If the parent organization is the top-level, it is represented as a forward slash (/).
#      type: String
#    - contextPath: GCP.GSuite.User.isMailboxSetup
#      description: Indicates if the user's Google mailbox is created.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.kind
#      description: The type of the API resource.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.etag
#      description: ETag of the resource.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.hashFunction
#      description: Stores the hash format of the password property.
#      type: String
#    - contextPath: GCP.GSuite.User.archived
#      description: Indicates if the user is archived.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.fullName
#      description: The user's full name formed by concatenating the first and last name values.
#      type: String
#    - contextPath: GCP.GSuite.User.lastLoginTime
#      description: The last time the user logged into the user's account. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example, 2010-04-05T17:30:04+01:00.
#      type: Date
#    - contextPath: GCP.GSuite.User.deletionTime
#      description: The time the user's account was deleted. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example 2010-04-05T17:30:04+01:00.
#      type: Date
#    - contextPath: GCP.GSuite.User.agreedToTerms
#      description: This property is true if the user has completed an initial login and accepted the Terms of Service agreement.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.suspensionReason
#      description: Has the reason a user account is suspended either by the administrator or by Google at the time of suspension. The property is returned only if the suspended property is true.
#      type: String
#    - contextPath: GCP.GSuite.User.changePasswordAtNextLogin
#      description: Indicates if the user is forced to change their password at next login. This setting doesn't apply when the user signs in via a third-party identity provider.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.ims.type
#      description: Type of the user's Instant Messenger (IM) account.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.ims.customType
#      description: If the IM type is custom, this property holds the custom type string.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.protocol
#      description: An IM protocol identifies the IM network. The value can be a custom network or the standard network.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.customProtocol
#      description: If the protocol value is custom_protocol, this property holds the custom protocol's string.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.im
#      description: The user's IM network ID.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.primary
#      description: If this is the user's primary IM. Only one entry in the IM list can have a value of true.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.externalIds.value
#      description: The value of the external ID.
#      type: String
#    - contextPath: GCP.GSuite.User.externalIds.type
#      description: The type of the external ID.
#      type: String
#    - contextPath: GCP.GSuite.User.externalIds.customType
#      description: If the external ID type is custom, this property holds the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.relations.value
#      description: The name of the person the user is related to.
#      type: String
#    - contextPath: GCP.GSuite.User.relations.type
#      description: The type of relation.
#      type: String
#    - contextPath: GCP.GSuite.User.relations.customType
#      description: If the value of type is custom, this property contains the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.name
#      description: The name of the organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.title
#      description: The user's title within the organization, for example 'member' or 'engineer'.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.primary
#      description: Indicates if this is the user's primary organization. A user may only have one primary organization.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.organizations.type
#      description: The type of organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.customType
#      description: If the value of type is custom, this property contains the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.department
#      description: Specifies the department within the organization, such as 'sales' or 'engineering'.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.symbol
#      description: Text string symbol of the organization. For example, the text symbol for Google is GOOG.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.location
#      description: The physical location of the organization. This does not need to be a fully qualified address.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.description
#      description: The description of the organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.domain
#      description: The domain the organization belongs to.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.costCenter
#      description: The cost center of the user's organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.fullTimeEquivalent
#      description: The full-time equivalent millipercent within the organization (100000 = 100%).
#      type: String
#    - contextPath: GCP.GSuite.User.languages.languageCode
#      description: Language Code. Should be used for storing Google III LanguageCode string representation for language. Illegal values cause SchemaException.
#      type: String
#    - contextPath: GCP.GSuite.User.languages.customLanguage
#      description: Other language. A user can provide their own language name if there is no corresponding Google III language code. If this is set, LanguageCode can't be set.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.username
#      description: The username of the account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.uid
#      description: The POSIX compliant user ID.
#      type: Number
#    - contextPath: GCP.GSuite.User.posixAccounts.gid
#      description: The default group ID.
#      type: Number
#    - contextPath: GCP.GSuite.User.posixAccounts.homeDirectory
#      description: The path to the home directory for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.shell
#      description: The path to the login shell for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.gecos
#      description: The GECOS (user information) for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.systemId
#      description: System identifier for which account Username or Uid apply to.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.primary
#      description: If this is user's primary account within the SystemId.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.posixAccounts.accountId
#      description: A POSIX account field identifier.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.operatingSystemType
#      description: The operating system type for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.sshPublicKeys.key
#      description: An SSH public key.
#      type: String
#    - contextPath: GCP.GSuite.User.sshPublicKeys.expirationTimeUsec
#      description: An expiration time in microseconds since epoch.
#      type: String
#    - contextPath: GCP.GSuite.User.sshPublicKeys.fingerprint
#      description: A SHA-256 fingerprint of the SSH public key.
#      type: String
#    - contextPath: GCP.GSuite.User.aliases
#      description: List of the user's alias email addresses.
#      type: Unknown
#    - contextPath: GCP.GSuite.User.nonEditableAliases
#      description: List of the user's non-editable alias email addresses. These are typically outside the account's primary domain or sub-domain.
#      type: Unknown
#    - contextPath: GCP.GSuite.User.websites.value
#      description: The URL of the website.
#      type: String
#    - contextPath: GCP.GSuite.User.websites.primary
#      description: If this is user's primary website or not.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.websites.type
#      description: The type or purpose of the website. For example, a website could be labeled as home or blog. Alternatively, an entry can have a custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.websites.customType
#      description: The custom type. Only used if the type is custom.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.type
#      description: The location type.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.customType
#      description: If the location type is custom, this property contains the custom value.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.area
#      description: Textual location. This is most useful for display purposes to concisely describe the location. For example, "Mountain View, CA", "Near Seattle".
#      type: String
#    - contextPath: GCP.GSuite.User.locations.buildingId
#      description: Building identifier.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.floorName
#      description: Floor name/number.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.floorSection
#      description: Floor section. More specific location within the floor. For example, if a floor is divided into sections "A", "B", and "C", this field would identify one of those values.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.deskCode
#      description: Most specific textual code of individual desk location.
#      type: String
#    - contextPath: GCP.GSuite.User.keywords.type
#      description: Each entry can have a type which indicates standard type of that entry. For example, keyword could be of type occupation or outlook. In addition to the standard type, an entry can have a custom type and can give it any name. Such types should have the CUSTOM value as type and also have a customType value.
#      type: String
#    - contextPath: GCP.GSuite.User.keywords.customType
#      description: Custom Type.
#      type: String
#    - contextPath: GCP.GSuite.User.keywords.value
#      description: Keyword.
#      type: String
#    - contextPath: GCP.GSuite.User.isEnrolledIn2Sv
#      description: Is enrolled in 2-step verification.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.isEnforcedIn2Sv
#      description: Is 2-step verification enforced.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.includeInGlobalAddressList
#      description: Indicates if the user's profile is visible in the G Suite global address list when the contact sharing feature is enabled for the domain.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.thumbnailPhotoUrl
#      description: Photo Url of the user.
#      type: String
#    - contextPath: GCP.GSuite.User.thumbnailPhotoEtag
#      description: ETag of the user's photo.
#      type: String
#    - contextPath: GCP.GSuite.User.customSchemas
#      description: Custom fields of the user.
#      type: Unknown

## The command is currently unsupported.
#  - name: gcp-admin-user-password-reset
#    description: Resets the password for a GSuite user account.
#    arguments:
#    - name: project_id
#      description: The GCP project ID.
#      required: true
#    - name: user_key
#      description: Identifies the user in the API request. The value can be the user's primary email address, alias email address, or unique user ID.
#      required: true
#    - name: new_password
#      description: New password to set.
#      required: true
#    outputs:
#    - contextPath: GCP.GSuite.User.id
#      description: The unique ID for the user.
#      type: String
#    - contextPath: GCP.GSuite.User.primaryEmail
#      description: The user's primary email address.
#      type: String
#    - contextPath: GCP.GSuite.User.firstName
#      description: The user's first name.
#      type: String
#    - contextPath: GCP.GSuite.User.lastName
#      description: The user's last name.
#      type: String
#    - contextPath: GCP.GSuite.User.customerId
#      description: The unique ID for the customer's G Suite account.
#      type: String
#    - contextPath: GCP.GSuite.User.gender
#      description: The user's gender.
#      type: String
#    - contextPath: GCP.GSuite.User.suspended
#      description: Indicates if the user is suspended.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.notesValue
#      description: Content of the notes.
#      type: String
#    - contextPath: GCP.GSuite.User.notesContentType
#      description: Content type of the notes.
#      type: String
#    - contextPath: GCP.GSuite.User.isAdmin
#      description: Indicates a user with super administrator privileges.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.creationTime
#      description: The time the user's account was created.
#      type: Date
#    - contextPath: GCP.GSuite.User.phones.value
#      description: A human-readable phone number. It may be in any telephone number format.
#      type: String
#    - contextPath: GCP.GSuite.User.phones.type
#      description: The type of phone number.
#      type: String
#    - contextPath: GCP.GSuite.User.phones.primary
#      description: Indicates if this is the user's primary phone number.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.phones.customType
#      description: If the value of type is custom, this property contains the custom type string.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.type
#      description: The address type.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.customType
#      description: If the value of type is custom, this property contains the custom type string.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.sourceIsStructured
#      description: Indicates if the user-supplied address was formatted. Formatted addresses are not currently supported.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.addresses.formatted
#      description: A full and unstructured postal address. This is not synced with the structured address fields.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.poBox
#      description: The post office box, if present.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.locality
#      description: The town or city of the address.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.countryCode
#      description: The country code. Uses the ISO 3166-1 standard.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.country
#      description: Country.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.postalCode
#      description: The ZIP or postal code.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.region
#      description: The abbreviated province or state.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.streetAddress
#      description: The street address.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.extendedAddress
#      description: For extended addresses, such as an address that includes a sub-region.
#      type: String
#    - contextPath: GCP.GSuite.User.addresses.primary
#      description: If this is the user's primary address.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.emails.address
#      description: The user's secondary email.
#      type: String
#    - contextPath: GCP.GSuite.User.emails.type
#      description: The secondary email type.
#      type: String
#    - contextPath: GCP.GSuite.User.emails.customType
#      description: If the value of type is custom, this property contains the custom type string.
#      type: String
#    - contextPath: GCP.GSuite.User.emails.primary
#      description: Indicates if this is the user's primary email. Only one entry can be marked as primary.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.ipWhitelisted
#      description: If true, the user's IP address is added to the allow list.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.recoveryEmail
#      description: Recovery email of the user.
#      type: String
#    - contextPath: GCP.GSuite.User.isDelegatedAdmin
#      description: Indicates if the user is a delegated administrator.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.recoveryPhone
#      description: Recovery phone of the user.
#      type: String
#    - contextPath: GCP.GSuite.User.orgUnitPath
#      description: The full path of the parent organization associated with the user. If the parent organization is the top-level, it is represented as a forward slash (/).
#      type: String
#    - contextPath: GCP.GSuite.User.isMailboxSetup
#      description: Indicates if the user's Google mailbox is created.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.kind
#      description: The type of the API resource.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.etag
#      description: ETag of the resource.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.hashFunction
#      description: Stores the hash format of the password property.
#      type: String
#    - contextPath: GCP.GSuite.User.archived
#      description: Indicates if the user is archived.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.fullName
#      description: The user's full name formed by concatenating the first and last name values.
#      type: String
#    - contextPath: GCP.GSuite.User.lastLoginTime
#      description: The last time the user logged into the user's account. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example, 2010-04-05T17:30:04+01:00.
#      type: Date
#    - contextPath: GCP.GSuite.User.deletionTime
#      description: The time the user's account was deleted. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example 2010-04-05T17:30:04+01:00.
#      type: Date
#    - contextPath: GCP.GSuite.User.agreedToTerms
#      description: This property is true if the user has completed an initial login and accepted the Terms of Service agreement.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.suspensionReason
#      description: The reason a user account is suspended either by the administrator or by Google at the time of suspension. The property is returned only if the suspended property is true.
#      type: String
#    - contextPath: GCP.GSuite.User.changePasswordAtNextLogin
#      description: Indicates if the user is forced to change their password at next login. This setting doesn't apply when the user signs in via a third-party identity provider.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.ims.type
#      description: Type of the user's Instant Messenger (IM) account.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.ims.customType
#      description: If the IM type is custom, this property holds the custom type string.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.protocol
#      description: An IM protocol identifies the IM network. The value can be a custom network or the standard network.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.customProtocol
#      description: If the protocol value is custom_protocol, this property holds the custom protocol's string.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.im
#      description: The user's IM network ID.
#      type: String
#    - contextPath: GCP.GSuite.User.ims.primary
#      description: If this is the user's primary IM. Only one entry in the IM list can have a value of true.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.externalIds.value
#      description: The value of the external ID.
#      type: String
#    - contextPath: GCP.GSuite.User.externalIds.type
#      description: The type of the external ID.
#      type: String
#    - contextPath: GCP.GSuite.User.externalIds.customType
#      description: If the external ID type is custom, this property holds the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.relations.value
#      description: The name of the person the user is related to.
#      type: String
#    - contextPath: GCP.GSuite.User.relations.type
#      description: The type of relationship.
#      type: String
#    - contextPath: GCP.GSuite.User.relations.customType
#      description: If the value of type is custom, this property contains the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.name
#      description: The name of the organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.title
#      description: The user's title within the organization, for example 'member' or 'engineer'.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.primary
#      description: Indicates if this is the user's primary organization. A user may only have one primary organization.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.organizations.type
#      description: The type of organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.customType
#      description: If the value of type is custom, this property contains the custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.department
#      description: Specifies the department within the organization, such as 'sales' or 'engineering'.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.symbol
#      description: Text string symbol of the organization. For example, the text symbol for Google is GOOG.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.location
#      description: The physical location of the organization. This does not need to be a fully qualified address.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.description
#      description: The description of the organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.domain
#      description: The domain the organization belongs to.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.costCenter
#      description: The cost center of the user's organization.
#      type: String
#    - contextPath: GCP.GSuite.User.organizations.fullTimeEquivalent
#      description: The full-time equivalent millipercent within the organization (100000 = 100%).
#      type: String
#    - contextPath: GCP.GSuite.User.languages.languageCode
#      description: Language Code. Should be used for storing Google III LanguageCode string representation for language. Illegal values cause SchemaException.
#      type: String
#    - contextPath: GCP.GSuite.User.languages.customLanguage
#      description: Other language. A user can provide their own language name if there is no corresponding Google III language code. If this is set, LanguageCode can't be set.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.username
#      description: The username of the account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.uid
#      description: The POSIX compliant user ID.
#      type: Number
#    - contextPath: GCP.GSuite.User.posixAccounts.gid
#      description: The default group ID.
#      type: Number
#    - contextPath: GCP.GSuite.User.posixAccounts.homeDirectory
#      description: The path to the home directory for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.shell
#      description: The path to the login shell for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.gecos
#      description: The GECOS (user information) for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.systemId
#      description: System identifier for which account Username or UID applies to.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.primary
#      description: If this is the user's primary account within the SystemId.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.posixAccounts.accountId
#      description: A POSIX account field identifier.
#      type: String
#    - contextPath: GCP.GSuite.User.posixAccounts.operatingSystemType
#      description: The operating system type for this account.
#      type: String
#    - contextPath: GCP.GSuite.User.sshPublicKeys.key
#      description: An SSH public key.
#      type: String
#    - contextPath: GCP.GSuite.User.sshPublicKeys.expirationTimeUsec
#      description: An expiration time in microseconds since epoch.
#      type: String
#    - contextPath: GCP.GSuite.User.sshPublicKeys.fingerprint
#      description: A SHA-256 fingerprint of the SSH public key.
#      type: String
#    - contextPath: GCP.GSuite.User.aliases
#      description: List of the user's alias email addresses.
#      type: Unknown
#    - contextPath: GCP.GSuite.User.nonEditableAliases
#      description: List of the user's non-editable alias email addresses. These are typically outside the account's primary domain or sub-domain.
#      type: Unknown
#    - contextPath: GCP.GSuite.User.websites.value
#      description: The URL of the website.
#      type: String
#    - contextPath: GCP.GSuite.User.websites.primary
#      description: If this is the user's primary website or not.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.websites.type
#      description: The type or purpose of the website. For example, a website could be labeled as home or blog. Alternatively, an entry can have a custom type.
#      type: String
#    - contextPath: GCP.GSuite.User.websites.customType
#      description: The custom type. Only used if the type is custom.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.type
#      description: The location type.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.customType
#      description: If the location type is custom, this property contains the custom value.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.area
#      description: Textual location. This is most useful for display purposes to concisely describe the location. For example, "Mountain View, CA", "Near Seattle".
#      type: String
#    - contextPath: GCP.GSuite.User.locations.buildingId
#      description: Building identifier.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.floorName
#      description: Floor name/number.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.floorSection
#      description: Floor section. More specific location within the floor. For example, if a floor is divided into sections "A", "B", and "C", this field would identify one of those values.
#      type: String
#    - contextPath: GCP.GSuite.User.locations.deskCode
#      description: Most specific textual code of individual desk location.
#      type: String
#    - contextPath: GCP.GSuite.User.keywords.type
#      description: Each entry can have a type which indicates the standard type of that entry. For example, keyword could be of type occupation or outlook. In addition to the standard type, an entry can have a custom type and can give it any name. Such types should have the CUSTOM value as type and also have a customType value.
#      type: String
#    - contextPath: GCP.GSuite.User.keywords.customType
#      description: Custom Type.
#      type: String
#    - contextPath: GCP.GSuite.User.keywords.value
#      description: Keyword.
#      type: String
#    - contextPath: GCP.GSuite.User.isEnrolledIn2Sv
#      description: Is enrolled in 2-step verification.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.isEnforcedIn2Sv
#      description: Is 2-step verification enforced.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.includeInGlobalAddressList
#      description: Indicates if the user's profile is visible in the G Suite global address list when the contact sharing feature is enabled for the domain.
#      type: Boolean
#    - contextPath: GCP.GSuite.User.thumbnailPhotoUrl
#      description: Photo URL of the user.
#      type: String
#    - contextPath: GCP.GSuite.User.thumbnailPhotoEtag
#      description: ETag of the user's photo.
#      type: String
#    - contextPath: GCP.GSuite.User.customSchemas
#      description: Custom fields of the user.
#      type: Unknown

# The command is currently unsupported.
#  - name: gcp-admin-user-signout
#    description: Signs a user out of all web and device sessions and reset their sign-in cookies.
#    execution: true
#    arguments:
#    - name: project_id
#      description: The GCP project ID.
#      required: true
#    - name: user_key
#      description: Identifies the user in the API request. The value can be the user's primary email address, alias email address, or unique user ID.
#      required: true
#    outputs: []

  isfetch: false
  runonce: false
  script: '-'
  type: python
  subtype: python3
  dockerimage: demisto/googleapi-python3:1.0.0.10182333
source: 'cooc'
fromversion: 8.11.0
supportsquickactions: true
isCloudProviderIntegration: true
tests:
- No tests (auto formatted)
internal: true