name: GCP display: Google Cloud Platform commonfields: id: GCP version: -1 sectionorder: - Connect - Collect configuration: - displaypassword: Service Account Private Key (JSON) name: credentials required: true required:platform: false type: 9 hiddenusername: true section: Connect additionalinfo: "The full content of a GCP Service Account private key JSON file. In the Google Cloud Console, go to IAM & Admin > Service Accounts and create a service account with the required roles. Then under the Keys tab, create a JSON key. Paste the downloaded JSON contents here." - display: GCP Project ID name: project_id type: 0 required: false section: Connect additionalinfo: "The GCP project ID to authenticate against when testing the integration (e.g. my-project-123). If left empty, the project ID from the Service Account private key JSON is used." - display: Use system proxy settings name: proxy type: 8 section: Connect required: false advanced: true - display: Trust any certificate (not secure) name: insecure type: 8 required: false section: Connect advanced: true category: Cloud Services provider: Google description: "Manage and secure Google Cloud Platform resources. On Cortex Platform, authentication is handled automatically via the cloud connector. For Cortex XSOAR and Cortex XSIAM (version < 3.0), configure a GCP Service Account private key JSON and a default GCP Project ID." script: commands: - name: gcp-compute-firewall-patch description: "Updates a specific firewall rule with the data included in the request. Required permissions: compute.firewalls.update, compute.firewalls.get, compute.firewalls.list, compute.networks.updatePolicy, compute.networks.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: resource_name required: true description: Name of the firewall rule to update. - description: An optional description of this resource, which you provide when you create the resource. name: description - description: URL of the network resource for this firewall rule. If not specified when creating a firewall rule, the default network is used. name: network - description: Priority for this rule. This is an integer between 0 and 65535, both inclusive. When not specified, the value assumed is 1000. Relative priorities determine precedence of conflicting rules. Lower value of priority implies higher precedence (eg, a rule with priority 0 has higher precedence than a rule with priority 1). DENY rules take precedence over ALLOW rules. name: priority - description: 'If source ranges are specified, the firewall applies only to traffic with source IP addresses in these ranges. These ranges must be expressed in CIDR format. One or both of sourceRanges and sourceTags may be set. If both properties are set, the firewall applies to traffic with a source IP address within sourceRanges OR the source IP belonging to a tag listed in the sourceTags property. The connection does not need to match both properties for the firewall to apply. Only IPv4 is supported, comma-separated.' name: sourceRanges - description: If destination ranges are specified, the firewall applies only to traffic with destination IP addresses in these ranges. These ranges must be expressed in CIDR format. Only IPv4 is supported. Comma-separated. name: destinationRanges - description: If source tags are specified, the firewall rule applies only to traffic with source IPs that match the primary network interfaces of VM instances that have the tag and are in the same VPC network. Source tags cannot be used to control traffic to an instance's external IP address. It only applies to traffic between instances in the same virtual network, because tags are associated with instances, not IP addresses. One or both of sourceRanges and sourceTags may be set. If both properties are set, the firewall will apply to traffic with a source IP address within sourceRanges OR the source IP belonging to a tag listed in the sourceTags property. The connection does not need to match both properties for the firewall to apply. Comma-separated. name: sourceTags - description: A list of tags that controls which instances the firewall rule applies to. If targetTags are specified, then the firewall rule applies only to instances in the VPC network that have one of those tags. If no targetTags are specified, the firewall rule applies to all instances on the specified network. Comma-separated. name: targetTags - description: If source service accounts are specified, the firewall applies only to traffic originating from an instance with a service account in this list. Source service accounts cannot be used to control traffic to an instance's external IP address because service accounts are associated with an instance, not an IP address. sourceRanges can be set at the same time as sourceServiceAccounts. If both are set, the firewall will apply to traffic that has a source IP address within sourceRanges OR the source IP belongs to an instance with a service account listed in sourceServiceAccount. The connection does not need to match both properties for the firewall to apply. sourceServiceAccounts cannot be used simultaneously as sourceTags or targetTags. Comma-separated. name: sourceServiceAccounts - description: A list of service accounts indicating sets of instances located in the network that may make network connections as specified in allowed[]. targetServiceAccounts cannot be used at the same time as targetTags or sourceTags. If neither targetServiceAccounts nor targetTags are specified, the firewall rule applies to all instances on the specified network. Comma-separated. name: targetServiceAccounts - description: 'The ALLOW rules list specified by this firewall. Each rule specifies a protocol and port-range tuple that describes a permitted connection. For example, ipprotocol=tcp,ports=22,443;ipprotocol=tcp,ports=8080,80.' name: allowed - description: 'The DENY rules list specified by this firewall. Each rule specifies a protocol and port-range tuple that describes a denied connection. For example, ipprotocol=tcp,ports=22,443;ipprotocol=tcp,ports=8080,80.' name: denied - description: 'Direction of traffic to which this firewall applies; default is INGRESS. Note: For INGRESS traffic, it is NOT supported to specify destinationRanges; For EGRESS traffic, it is NOT supported to specify sourceRanges OR sourceTags.' name: direction - auto: PREDEFINED description: This field denotes whether to enable logging for a particular firewall rule. name: logConfigEnable predefined: - 'true' - 'false' - auto: PREDEFINED description: Denotes whether the firewall rule is disabled, i.e not applied to the network it is associated with. When set to true, the firewall rule is not enforced and the network behaves as if it did not exist. If this is unspecified, the firewall rule will be enabled. name: disabled predefined: - 'true' - 'false' outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: The user who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time the operation was requested, in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string - name: gcp-compute-firewall-insert description: "Creates a new firewall rule in a specific project. Required permission: compute.firewalls.create." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: resource_name required: true description: Name of the firewall rule to create. - name: description description: An optional description for the firewall rule. - name: network description: URL of the network, e.g., global/networks/default. - name: priority description: Priority 0-65535. Default 1000. - name: direction description: Direction of traffic to which this firewall applies. Default INGRESS. auto: PREDEFINED predefined: - "INGRESS" - "EGRESS" defaultValue: "INGRESS" - name: allowed description: 'ALLOW rules in tuples, e.g., ipprotocol=tcp,ports=443;ipprotocol=tcp,ports=80.' - name: denied description: 'DENY rules in tuples, e.g., ipprotocol=tcp,ports=22,443.' - name: source_ranges description: Comma-separated CIDRs for INGRESS. - name: destination_ranges description: Comma-separated CIDRs for EGRESS. - name: source_tags description: Comma-separated instance tags to match as source. - name: target_tags description: Comma-separated tags to apply this rule to. - name: source_service_accounts description: Comma-separated service accounts for source. - name: target_service_accounts description: Comma-separated service accounts to target. - name: log_config_enable auto: PREDEFINED predefined: - "true" - "false" description: Enable firewall logging. - name: disabled auto: PREDEFINED predefined: - "true" - "false" description: Whether this firewall rule is disabled. outputs: - contextPath: GCP.Compute.Operations.id description: Unique identifier for the operation resource, defined by the server. type: String - contextPath: GCP.Compute.Operations.name description: Name of the operation resource. type: String - contextPath: GCP.Compute.Operations.kind description: Type of the resource, for example compute#operation. type: String - contextPath: GCP.Compute.Operations.operationType description: Type of operation, such as insert, update, or delete. type: String - contextPath: GCP.Compute.Operations.status description: Current status of the operation. type: String - contextPath: GCP.Compute.Operations.progress description: Progress of the operation as a percentage between 0 and 100. type: Number - contextPath: GCP.Compute.Operations.targetId description: Unique target ID of the resource affected by the operation. type: String - contextPath: GCP.Compute.Operations.targetLink description: URL of the target resource modified by the operation. type: String - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the operation resource. type: String - contextPath: GCP.Compute.Operations.insertTime description: The time when the operation resource was created. type: Date - contextPath: GCP.Compute.Operations.startTime description: The time when the operation started running. type: Date - contextPath: GCP.Compute.Operations.user description: The user account that performed the operation. type: String - name: gcp-compute-firewall-list description: "Lists the firewall rules in a specific project. Required permission: compute.firewalls.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: limit defaultValue: '50' description: "Maximum number of results to return. Acceptable values are 0 to 500, inclusive." - name: page_token description: Token for pagination. required: false - name: filter description: "A filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.\nFor more options and details, see:\nhttps://cloud.google.com/compute/docs/reference/rest/v1/firewalls/list#:~:text=page%20of%20results.-,filter,-string." outputs: - contextPath: GCP.Compute.Firewall.id description: Unique identifier for the firewall rule. type: String - contextPath: GCP.Compute.Firewall.name description: Name of the firewall rule. type: String - contextPath: GCP.Compute.Firewall.kind description: Type of the resource (for example, compute#firewall). type: String - contextPath: GCP.Compute.Firewall.description description: Description of the firewall rule. type: String - contextPath: GCP.Compute.Firewall.direction description: Direction of traffic for the rule (INGRESS or EGRESS). type: String - contextPath: GCP.Compute.Firewall.disabled description: Indicates whether the firewall rule is disabled. type: Boolean - contextPath: GCP.Compute.Firewall.priority description: Priority value of the firewall rule. type: Number - contextPath: GCP.Compute.Firewall.network description: The network URL this firewall rule applies to. type: String - contextPath: GCP.Compute.Firewall.selfLink description: Server-defined URL for the resource. type: String - contextPath: GCP.Compute.Firewall.creationTimestamp description: The creation timestamp of the firewall rule. type: Date - contextPath: GCP.Compute.Firewall.logConfig.enable description: Indicates whether logging is enabled for the firewall rule. type: Boolean - contextPath: GCP.Compute.Firewall.sourceRanges description: List of source IP ranges that the rule applies to. type: Unknown - contextPath: GCP.Compute.Firewall.targetTags description: List of target instance tags to which the rule applies. type: Unknown - contextPath: GCP.Compute.FirewallNextToken description: Next page token for pagination. type: String - name: gcp-compute-firewall-get description: "Retrieves a specific firewall rule by name. Required permission: compute.firewalls.get." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: resource_name required: true description: Firewall rule name. outputs: - contextPath: GCP.Compute.Firewall.name description: Firewall rule name. type: string - contextPath: GCP.Compute.Firewall.network description: Network URL for the firewall rule. type: string - contextPath: GCP.Compute.Firewall.direction description: Direction of traffic (INGRESS/EGRESS). type: string - contextPath: GCP.Compute.Firewall.priority description: Priority of the rule. type: number - contextPath: GCP.Compute.Firewall.allowed description: Allowed tuples. type: Unknown - contextPath: GCP.Compute.Firewall.denied description: Denied tuples. type: Unknown - contextPath: GCP.Compute.Firewall.targetTags description: Target instance tags. type: Unknown - name: gcp-compute-snapshots-list description: "Lists snapshots in a specific project. Required permission: compute.snapshots.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: limit defaultValue: '50' description: "Maximum number of results to return. Acceptable values are 0 to 500, inclusive." - name: page_token description: Token for pagination. - name: filter description: "A filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.\nFor more options and details, see:\nhttps://cloud.google.com/compute/docs/reference/rest/v1/snapshots/list#:~:text=page%20of%20results.-,filter,-string." outputs: - contextPath: GCP.Compute.Snapshot.id description: Unique identifier for the snapshot resource. type: String - contextPath: GCP.Compute.Snapshot.name description: Name of the snapshot resource. type: String - contextPath: GCP.Compute.Snapshot.kind description: Type of the resource, for example compute#snapshot. type: String - contextPath: GCP.Compute.Snapshot.status description: Current status of the snapshot, such as READY or FAILED. type: String - contextPath: GCP.Compute.Snapshot.autoCreated description: Indicates whether the snapshot was automatically created. type: Boolean - contextPath: GCP.Compute.Snapshot.architecture description: CPU architecture of the source disk, for example X86_64. type: String - contextPath: GCP.Compute.Snapshot.creationTimestamp description: The time when the snapshot was created. type: Date - contextPath: GCP.Compute.Snapshot.creationSizeBytes description: Total size of the snapshot in bytes at creation time. type: Number - contextPath: GCP.Compute.Snapshot.diskSizeGb description: Size of the snapshot in gigabytes. type: Number - contextPath: GCP.Compute.Snapshot.downloadBytes description: Total bytes downloaded to create the snapshot. type: Number - contextPath: GCP.Compute.Snapshot.enableConfidentialCompute description: Indicates if confidential compute is enabled for this snapshot. type: Boolean - contextPath: GCP.Compute.Snapshot.labelFingerprint description: Fingerprint for the labels applied to the snapshot. type: String - contextPath: GCP.Compute.Snapshot.licenseCodes description: List of license code identifiers attached to the snapshot. type: Unknown - contextPath: GCP.Compute.Snapshot.licenses description: List of license URLs associated with the snapshot. type: Unknown - contextPath: GCP.Compute.Snapshot.selfLink description: Server-defined URL for the snapshot resource. type: String - contextPath: GCP.Compute.Snapshot.sourceDisk description: URL of the source disk used to create the snapshot. type: String - contextPath: GCP.Compute.Snapshot.sourceDiskId description: Unique ID of the source disk used to create the snapshot. type: String - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicy description: URL of the snapshot schedule policy used to create this snapshot. type: String - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyId description: Unique ID of the snapshot schedule policy used to create this snapshot. type: String - contextPath: GCP.Compute.Snapshot.storageBytes description: Total storage size of the snapshot in bytes. type: Number - contextPath: GCP.Compute.Snapshot.storageBytesStatus description: Status of the storage bytes usage, for example UP_TO_DATE. type: String - contextPath: GCP.Compute.Snapshot.storageLocations description: List of storage locations for the snapshot. type: Unknown - contextPath: GCP.Compute.SnapshotNextToken description: Next page token for pagination. type: String - name: gcp-compute-snapshot-get description: "Retrieves details for a specific snapshot. Required permission: compute.snapshots.get." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: resource_name required: true description: Snapshot name. outputs: - contextPath: GCP.Compute.Snapshot.id description: Unique identifier for the snapshot resource. type: String - contextPath: GCP.Compute.Snapshot.name description: Name of the snapshot resource. type: String - contextPath: GCP.Compute.Snapshot.kind description: Type of the resource, for example compute#snapshot. type: String - contextPath: GCP.Compute.Snapshot.status description: Current status of the snapshot, such as READY or FAILED. type: String - contextPath: GCP.Compute.Snapshot.autoCreated description: Indicates whether the snapshot was automatically created. type: Boolean - contextPath: GCP.Compute.Snapshot.architecture description: CPU architecture of the source disk, for example X86_64. type: String - contextPath: GCP.Compute.Snapshot.creationTimestamp description: The time when the snapshot was created. type: Date - contextPath: GCP.Compute.Snapshot.creationSizeBytes description: Total size of the snapshot in bytes at creation time. type: Number - contextPath: GCP.Compute.Snapshot.diskSizeGb description: Size of the snapshot in gigabytes. type: Number - contextPath: GCP.Compute.Snapshot.downloadBytes description: Total bytes downloaded to create the snapshot. type: Number - contextPath: GCP.Compute.Snapshot.enableConfidentialCompute description: Indicates if confidential compute is enabled for this snapshot. type: Boolean - contextPath: GCP.Compute.Snapshot.labelFingerprint description: Fingerprint for the labels applied to the snapshot. type: String - contextPath: GCP.Compute.Snapshot.licenseCodes description: List of license code identifiers attached to the snapshot. type: Unknown - contextPath: GCP.Compute.Snapshot.licenses description: List of license URLs associated with the snapshot. type: Unknown - contextPath: GCP.Compute.Snapshot.selfLink description: Server-defined URL for the snapshot resource. type: String - contextPath: GCP.Compute.Snapshot.sourceDisk description: URL of the source disk used to create the snapshot. type: String - contextPath: GCP.Compute.Snapshot.sourceDiskId description: Unique ID of the source disk used to create the snapshot. type: String - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicy description: URL of the snapshot schedule policy used to create this snapshot. type: String - contextPath: GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyId description: Unique ID of the snapshot schedule policy used to create this snapshot. type: String - contextPath: GCP.Compute.Snapshot.storageBytes description: Total storage size of the snapshot in bytes. type: Number - contextPath: GCP.Compute.Snapshot.storageBytesStatus description: Status of the storage bytes usage, for example UP_TO_DATE. type: String - contextPath: GCP.Compute.Snapshot.storageLocations description: List of storage locations for the snapshot. type: Unknown - name: gcp-compute-instances-aggregated-list-by-ip description: "Returns an aggregated list of instances across all zones that can be filtered by internal or external IP. Required permission: cloudasset.assets.searchAllResources." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: ip_address required: true description: The IP address to search for. - name: match_external auto: PREDEFINED predefined: - "true" - "false" description: If true, match against external NAT IPs; otherwise internal NIC IPs. - name: limit defaultValue: '50' description: "Maximum number of results to return. Acceptable values are 0 to 500, inclusive." - name: page_token description: Token for pagination. outputs: - contextPath: GCP.Compute.Instance.name description: Instance name. type: string - contextPath: GCP.Compute.Instance.id description: Instance ID. type: string - contextPath: GCP.Compute.Instance.zone description: Instance zone URL. type: string - contextPath: GCP.Compute.Instance.status description: Instance status. type: string - contextPath: GCP.Compute.Instance.networkInterfaces description: Network interfaces of the instance. type: Unknown - name: gcp-compute-network-tag-set description: "Adds a network tag to a VM instance (merges with existing tags). Required permission: compute.instances.setTags." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: zone required: true description: Zone of the VM (e.g., us-central1-a). - name: resource_name required: true description: Instance name. - name: tag required: true description: Tag to add. - name: tags_fingerprint description: Fingerprint of the previous set of tags for this resource, used to prevent conflicts. Provide the latest fingerprint value when making a request to add or change tags. To retrieve the fingerprint use the command gcp-compute-instance-get. required: true - name: add_tag defaultValue: "true" auto: PREDEFINED predefined: - "true" - "false" description: If true, adds the tag to the existing tags; otherwise, overrides them. The default is true. outputs: - contextPath: GCP.Compute.Operations.id description: Operation ID. type: string - contextPath: GCP.Compute.Operations.name description: Operation name. type: string - contextPath: GCP.Compute.Operations.status description: Current operation status (e.g., RUNNING, DONE). type: string - contextPath: GCP.Compute.Operations.operationType description: Type of operation being performed. type: string - contextPath: GCP.Compute.Operations.progress description: Operation progress percentage (0-100). type: number - contextPath: GCP.Compute.Operations.user description: User or service account that initiated the operation. type: string - contextPath: GCP.Compute.Operations.targetLink description: Full URL of the target resource for this operation. type: string - contextPath: GCP.Compute.Operations.targetId description: Target resource ID. type: string - contextPath: GCP.Compute.Operations.zone description: Zone where the operation is performed. type: string - contextPath: GCP.Compute.Operations.insertTime description: Time when the operation was inserted. type: string - contextPath: GCP.Compute.Operations.startTime description: Time when the operation started. type: string - contextPath: GCP.Compute.Operations.selfLink description: URL for this operation resource. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource (e.g., compute#operation). type: string - name: gcp-compute-firewall-patch-disable-gcp-default-firewall-rule-quick-action description: "Disables a default GCP firewall rule that is overly permissive (except HTTP and HTTPS). Required permissions: compute.firewalls.update, compute.firewalls.get, compute.firewalls.list, compute.networks.updatePolicy, compute.networks.list." prettyname: Disable GCP Firewall Rule quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: resource_name required: true description: Name of the firewall rule to disable. prettyname: GCP Firewall Rule Name defaultValue: GCP Firewall Rule Name prettypredefined: GCP Firewall Rule Name: ${asset.xdm.asset.name} - description: Denotes whether the firewall rule is disabled, i.e not applied to the network it is associated with. When set to true, the firewall rule is not enforced and the network behaves as if it did not exist. If this is unspecified, the firewall rule will be enabled. name: disabled defaultValue: "true" hidden: true outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING, RUNNING, or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: The user who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time that this operation was requested. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string - name: gcp-storage-bucket-policy-delete description: "Removes an entity from a bucket's Access Control List. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: resource_name required: true description: Name of the GCS bucket. - name: entity auto: PREDEFINED defaultValue: "allUsers" required: false isArray: true description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:\n* group:\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource " - name: gcp-storage-bucket-policy-delete-remove-allusers-access-quick-action description: "Revokes 'allUsers' permission access in GCP storage buckets. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy." prettyname: Remove GCP Bucket AllUsers Access quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: resource_name required: true description: Name of the GCS bucket. prettyname: GCP Storage Bucket Name defaultValue: GCP Storage Bucket Name prettypredefined: GCP Storage Bucket Name: ${asset.xdm.asset.name} - name: entity auto: PREDEFINED defaultValue: "allUsers" required: false isArray: true hidden: true description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:\n* group:\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource " - name: gcp-storage-bucket-policy-delete-remove-AllAuthenticatedUser-access-quick-action description: "Revokes 'allAuthenticatedUsers' permission access in GCP storage buckets. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy." prettyname: Remove GCP Bucket AllAuthenticatedUser Access quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: resource_name required: true description: Name of the GCS bucket. prettyname: Bucket Name defaultValue: Bucket Name prettypredefined: Bucket Name: ${asset.xdm.asset.name} - name: entity auto: PREDEFINED defaultValue: "allAuthenticatedUsers" required: false hidden: true isArray: true description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:\n* group:\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource " - name: gcp-storage-bucket-policy-delete-make-gcp-bucket-private-quick-action description: "Revokes 'allUsers' and 'allAuthenticatedUsers' permissions access in a GCP storage bucket. Required permissions: storage.buckets.getIamPolicy, storage.buckets.setIamPolicy." prettyname: Make GCP Bucket Private quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: resource_name required: true description: Name of the GCP bucket. prettyname: Bucket Name defaultValue: Bucket Name prettypredefined: Bucket Name: ${asset.xdm.asset.name} - name: entity auto: PREDEFINED defaultValue: "allAuthenticatedUsers,allUsers" required: false hidden: true isArray: true description: "Entity to remove from the Access Control List.\nCommon entity formats are:\n* user:\n* group:\n* allUsers\n* allAuthenticatedUsers\nFor more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource " - name: gcp-compute-subnet-update description: "Enables flow logs or Private Google Access on a subnet. Required permissions: compute.subnetworks.setPrivateIpGoogleAccess, compute.subnetworks.update, compute.subnetworks.get, compute.subnetworks.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: region required: true description: GCP region. - name: resource_name required: true description: Subnet name. - name: enable_flow_logs required: false auto: PREDEFINED predefined: - "true" - "false" description: Enable VPC Flow Logs. - name: enable_private_ip_google_access required: false auto: PREDEFINED predefined: - "true" - "false" description: Enable Private Google Access. outputs: - contextPath: GCP.Compute.Operations.name description: The name of the updated subnet. type: String - contextPath: GCP.Compute.Operations.region description: The region of the updated subnet. type: String - contextPath: GCP.Compute.Operations.subnetName description: The name of the subnet that was updated. type: String - contextPath: GCP.Compute.Operations.enableFlowLogs description: Whether flow logs are enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.ipCidrRange description: The updated CIDR range for the subnet. type: String - contextPath: GCP.Compute.Operations.privateIpGoogleAccess description: Whether private Google access is enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.privateIpv6GoogleAccess description: Whether private IPv6 Google access is enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.stackType description: The stack type of the subnet (e.g., `IPV4`, `IPV6`). type: String - contextPath: GCP.Compute.Operations.rangeName description: The name of the IP range associated with the subnet. type: String - contextPath: GCP.Compute.Operations.secondaryIpRanges description: List of secondary IP ranges for the subnet. type: Unknown - contextPath: GCP.Compute.Operations.description description: The description of the subnet. type: String - name: gcp-compute-subnet-update-enable-gcp-subnet-flow-logs-quick-action description: "Enables VPC Flow Logs on a GCP subnet. Required permissions: compute.subnetworks.setPrivateIpGoogleAccess, compute.subnetworks.update, compute.subnetworks.get, compute.subnetworks.list." prettyname: Enable GCP Subnet Flow Logs quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: region required: true description: GCP region. prettyname: Region defaultValue: Region prettypredefined: Region: ${asset.xdm.asset.cloud.region} - name: resource_name required: true description: Subnet name. prettyname: GCP Subnet Name defaultValue: GCP Subnet Name prettypredefined: GCP Subnet Name: ${asset.xdm.asset.name} - name: enable_flow_logs required: false auto: PREDEFINED predefined: - "true" - "false" defaultValue: "true" hidden: true description: Enable VPC Flow Logs. outputs: - contextPath: GCP.Compute.Operations.name description: The name of the updated subnet. type: String - contextPath: GCP.Compute.Operations.region description: The region of the updated subnet. type: String - contextPath: GCP.Compute.Operations.subnetName description: The name of the subnet that was updated. type: String - contextPath: GCP.Compute.Operations.enableFlowLogs description: Whether flow logs are enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.ipCidrRange description: The updated CIDR range for the subnet. type: String - contextPath: GCP.Compute.Operations.privateIpGoogleAccess description: Whether private Google access is enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.privateIpv6GoogleAccess description: Whether private IPv6 Google access is enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.stackType description: The stack type of the subnet (e.g., `IPV4`, `IPV6`). type: String - contextPath: GCP.Compute.Operations.rangeName description: The name of the IP range associated with the subnet. type: String - contextPath: GCP.Compute.Operations.secondaryIpRanges description: List of secondary IP ranges for the subnet. type: Unknown - contextPath: GCP.Compute.Operations.description description: The description of the subnet. type: String - name: gcp-compute-enable-private-ip-access-on-subnet-quick-action description: "Enables Private Google Access on a GCP subnet. Required permissions: compute.subnetworks.setPrivateIpGoogleAccess, compute.subnetworks.update, compute.subnetworks.get, compute.subnetworks.list." prettyname: Enable Private IP Access on Subnet quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: region required: true description: GCP region. prettyname: Region defaultValue: Region prettypredefined: Region: ${asset.xdm.asset.cloud.region} - name: resource_name required: true description: Subnet name. prettyname: GCP Subnet Name defaultValue: GCP Subnet Name prettypredefined: GCP Subnet Name: ${asset.xdm.asset.name} - name: enable_private_ip_google_access required: false auto: PREDEFINED predefined: - "true" - "false" defaultValue: "true" hidden: true description: Enable Private Google Access. outputs: - contextPath: GCP.Compute.Operations.name description: The name of the updated subnet. type: String - contextPath: GCP.Compute.Operations.region description: The region of the updated subnet. type: String - contextPath: GCP.Compute.Operations.subnetName description: The name of the subnet that was updated. type: String - contextPath: GCP.Compute.Operations.enableFlowLogs description: Whether flow logs are enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.ipCidrRange description: The updated CIDR range for the subnet. type: String - contextPath: GCP.Compute.Operations.privateIpGoogleAccess description: Whether private Google access is enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.privateIpv6GoogleAccess description: Whether private IPv6 Google access is enabled for the subnet. type: Boolean - contextPath: GCP.Compute.Operations.stackType description: The stack type of the subnet (e.g., `IPV4`, `IPV6`). type: String - contextPath: GCP.Compute.Operations.rangeName description: The name of the IP range associated with the subnet. type: String - contextPath: GCP.Compute.Operations.secondaryIpRanges description: List of secondary IP ranges for the subnet. type: Unknown - contextPath: GCP.Compute.Operations.description description: The description of the subnet. type: String - name: gcp-container-cluster-security-update description: "Configures security settings for GKE clusters, including access controls and visibility. Required permissions: container.clusters.update, container.clusters.get, container.clusters.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: region required: true description: GCP region. - name: resource_name required: true description: Name of the GKE cluster. - name: enable_intra_node_visibility required: false auto: PREDEFINED predefined: - "true" - "false" description: Enable intra-node visibility. - name: enable_master_authorized_networks required: false auto: PREDEFINED predefined: - "true" - "false" description: Enable Master Authorized Networks. - name: cidrs description: | Comma-separated list of up to 50 CIDR blocks (e.g., "192.168.0.0/24,10.0.0.0/32") that are allowed to access the Kubernetes master via HTTPS. If enable_master_authorized_networks is true and no CIDRs are provided, all access will be blocked. isArray: true outputs: - contextPath: GCP.Container.Operations.name description: The name of the GKE cluster. type: String - contextPath: GCP.Container.Operations.zone description: The zone of the GKE cluster. type: String - contextPath: GCP.Container.Operations.enableStackdriverLogging description: Whether Stackdriver Logging is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableStackdriverMonitoring description: Whether Stackdriver Monitoring is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePrivateNodes description: Whether private nodes are enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePrivateEndpoint description: Whether private endpoint is enabled for the GKE cluster control plane. type: Boolean - contextPath: GCP.Container.Operations.enableHttpsOnly description: Whether HTTPS-only traffic is enforced for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableNetworkPolicy description: Whether network policies are enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableAutoscaling description: Whether autoscaling is enabled for the cluster nodes. type: Boolean - contextPath: GCP.Container.Operations.enableIstio description: Whether Istio is enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePodSecurityPolicy description: Whether PodSecurityPolicy is enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enableBinaryAuthorization description: Whether Binary Authorization is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableLegacyABAC description: Whether legacy ABAC is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.clusterIpv4Cidr description: The cluster’s IPv4 CIDR block. type: String - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocks description: List of authorized CIDR blocks that can access the GKE cluster master. type: Unknown - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.enabled description: Whether master authorized networks are enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.network description: The network to which the GKE cluster belongs. type: String - contextPath: GCP.Container.Operations.subnetwork description: The subnetwork to which the GKE cluster belongs. type: String - contextPath: GCP.Container.Operations.loggingService description: The logging service used for the cluster (e.g., "logging.googleapis.com"). type: String - contextPath: GCP.Container.Operations.monitoringService description: The monitoring service used for the cluster (e.g., "monitoring.googleapis.com"). type: String - contextPath: GCP.Container.Operations.nodePools description: A list of node pools in the cluster, with their configuration and security settings. type: Unknown - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateNodes description: Whether private nodes are enabled in the cluster. type: Boolean - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateEndpoint description: Whether private endpoint is enabled for the cluster control plane. type: Boolean - contextPath: GCP.Container.Operations.masterVersion description: The current version of the Kubernetes master in the GKE cluster. type: String - name: gcp-container-cluster-security-update-enable-gke-cluster-intra-node-visibility-quick-action description: "Enables intra-node visibility on a GKE cluster for enhanced network monitoring. Required permissions: container.clusters.update, container.clusters.get, container.clusters.list." prettyname: Enable GKE Cluster Intra-Node Visibility quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: region required: true description: GCP region. prettyname: Region defaultValue: Region prettypredefined: Region: ${asset.xdm.asset.cloud.region} - name: resource_name required: true description: Name of the GKE cluster. prettyname: Cluster Name defaultValue: Cluster Name prettypredefined: Cluster Name: ${asset.xdm.asset.name} - name: enable_intra_node_visibility required: false auto: PREDEFINED predefined: - "true" - "false" defaultValue: "true" hidden: true description: Enable intra-node visibility. outputs: - contextPath: GCP.Container.Operations.name description: The name of the GKE cluster. type: String - contextPath: GCP.Container.Operations.zone description: The zone of the GKE cluster. type: String - contextPath: GCP.Container.Operations.enableStackdriverLogging description: Whether Stackdriver Logging is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableStackdriverMonitoring description: Whether Stackdriver Monitoring is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePrivateNodes description: Whether private nodes are enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePrivateEndpoint description: Whether private endpoint is enabled for the GKE cluster control plane. type: Boolean - contextPath: GCP.Container.Operations.enableHttpsOnly description: Whether HTTPS-only traffic is enforced for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableNetworkPolicy description: Whether network policies are enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableAutoscaling description: Whether autoscaling is enabled for the cluster nodes. type: Boolean - contextPath: GCP.Container.Operations.enableIstio description: Whether Istio is enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePodSecurityPolicy description: Whether PodSecurityPolicy is enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enableBinaryAuthorization description: Whether Binary Authorization is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableLegacyABAC description: Whether legacy ABAC is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.clusterIpv4Cidr description: The cluster's IPv4 CIDR block. type: String - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocks description: List of authorized CIDR blocks that can access the GKE cluster master. type: Unknown - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.enabled description: Whether master authorized networks are enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.network description: The network to which the GKE cluster belongs. type: String - contextPath: GCP.Container.Operations.subnetwork description: The subnetwork to which the GKE cluster belongs. type: String - contextPath: GCP.Container.Operations.loggingService description: The logging service used for the cluster (e.g., "logging.googleapis.com"). type: String - contextPath: GCP.Container.Operations.monitoringService description: The monitoring service used for the cluster (e.g., "monitoring.googleapis.com"). type: String - contextPath: GCP.Container.Operations.nodePools description: A list of node pools in the cluster, with their configuration and security settings. type: Unknown - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateNodes description: Whether private nodes are enabled in the cluster. type: Boolean - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateEndpoint description: Whether private endpoint is enabled for the cluster control plane. type: Boolean - contextPath: GCP.Container.Operations.masterVersion description: The current version of the Kubernetes master in the GKE cluster. type: String - name: gcp-container-cluster-security-update-enable-master-authorized-networks-on-gke-quick-action description: "Enables Master Authorized Networks on a GKE cluster to restrict API server access. Required permissions: container.clusters.update, container.clusters.get, container.clusters.list." prettyname: Enable Master Authorized Networks on GKE quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: region required: true description: GCP region. prettyname: Region defaultValue: Region prettypredefined: Region: ${asset.xdm.asset.cloud.region} - name: resource_name required: true description: Name of the GKE cluster. prettyname: Cluster Name defaultValue: Cluster Name prettypredefined: Cluster Name: ${asset.xdm.asset.name} - name: enable_master_authorized_networks required: false defaultValue: "true" hidden: true description: Enable Master Authorized Networks. outputs: - contextPath: GCP.Container.Operations.name description: The name of the GKE cluster. type: String - contextPath: GCP.Container.Operations.zone description: The zone of the GKE cluster. type: String - contextPath: GCP.Container.Operations.enableStackdriverLogging description: Whether Stackdriver Logging is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableStackdriverMonitoring description: Whether Stackdriver Monitoring is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePrivateNodes description: Whether private nodes are enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePrivateEndpoint description: Whether private endpoint is enabled for the GKE cluster control plane. type: Boolean - contextPath: GCP.Container.Operations.enableHttpsOnly description: Whether HTTPS-only traffic is enforced for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableNetworkPolicy description: Whether network policies are enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableAutoscaling description: Whether autoscaling is enabled for the cluster nodes. type: Boolean - contextPath: GCP.Container.Operations.enableIstio description: Whether Istio is enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enablePodSecurityPolicy description: Whether PodSecurityPolicy is enabled for the GKE cluster. type: Boolean - contextPath: GCP.Container.Operations.enableBinaryAuthorization description: Whether Binary Authorization is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.enableLegacyABAC description: Whether legacy ABAC is enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.clusterIpv4Cidr description: The cluster's IPv4 CIDR block. type: String - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocks description: List of authorized CIDR blocks that can access the GKE cluster master. type: Unknown - contextPath: GCP.Container.Operations.masterAuthorizedNetworksConfig.enabled description: Whether master authorized networks are enabled for the cluster. type: Boolean - contextPath: GCP.Container.Operations.network description: The network to which the GKE cluster belongs. type: String - contextPath: GCP.Container.Operations.subnetwork description: The subnetwork to which the GKE cluster belongs. type: String - contextPath: GCP.Container.Operations.loggingService description: The logging service used for the cluster (e.g., "logging.googleapis.com"). type: String - contextPath: GCP.Container.Operations.monitoringService description: The monitoring service used for the cluster (e.g., "monitoring.googleapis.com"). type: String - contextPath: GCP.Container.Operations.nodePools description: A list of node pools in the cluster, with their configuration and security settings. type: Unknown - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateNodes description: Whether private nodes are enabled in the cluster. type: Boolean - contextPath: GCP.Container.Operations.privateClusterConfig.enablePrivateEndpoint description: Whether private endpoint is enabled for the cluster control plane. type: Boolean - contextPath: GCP.Container.Operations.masterVersion description: The current version of the Kubernetes master in the GKE cluster. type: String - name: gcp-storage-bucket-metadata-update description: "Updates Google Cloud Storage (GCS) bucket metadata, including settings such as versioning and Uniform Bucket-Level Access (UBLA). Required permission: storage.buckets.update." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: resource_name required: true description: Name of the bucket. - name: enable_versioning required: false auto: PREDEFINED predefined: - "true" - "false" description: Enable versioning. - name: enable_uniform_access required: false auto: PREDEFINED predefined: - "true" - "false" description: Enable uniform bucket-level access. outputs: - contextPath: GCP.StorageBucket.Metadata description: Updated bucket metadata. type: Unknown - contextPath: GCP.StorageBucket.Metadata.name description: The name of the GCP bucket. type: String - contextPath: GCP.StorageBucket.Metadata.id description: The ID of the GCP bucket. type: String - contextPath: GCP.StorageBucket.Metadata.location description: The location of the bucket. type: String - contextPath: GCP.StorageBucket.Metadata.storageClass description: The storage class of the bucket (e.g., STANDARD, NEARLINE). type: String - contextPath: GCP.StorageBucket.Metadata.created description: The creation timestamp of the bucket. type: Date - contextPath: GCP.StorageBucket.Metadata.updated description: The last update timestamp of the bucket. type: Date - contextPath: GCP.StorageBucket.Metadata.metageneration description: The metadata generation of the bucket. type: Number - contextPath: GCP.StorageBucket.Metadata.labels description: The labels attached to the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.defaultEventBasedHold description: Whether a default event-based hold is enabled on the bucket. type: Boolean - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriod description: The duration in seconds that objects in the bucket must be retained. type: Number - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.effectiveTime description: The time from which the retention policy is effective. type: Date - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.isLocked description: Whether the retention policy is locked. type: Boolean - contextPath: GCP.StorageBucket.Metadata.versioning.enabled description: Whether object versioning is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.logging.logBucket description: The destination bucket where access logs are stored. type: String - contextPath: GCP.StorageBucket.Metadata.logging.logObjectPrefix description: The object prefix used for logging. type: String - contextPath: GCP.StorageBucket.Metadata.lifecycle.rule description: A list of lifecycle management rules for the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccess description: Whether uniform bucket-level access is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.cors description: CORS configuration for the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.customPlacementConfig description: Custom placement configuration for multi-region buckets. type: Unknown - contextPath: GCP.StorageBucket.Metadata.encryption.defaultKmsKeyName description: The default Cloud KMS key used to encrypt objects. type: String - contextPath: GCP.StorageBucket.Metadata.billing.requesterPays description: Whether requester pays is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.website.mainPageSuffix description: Suffix appended to requests for the bucket's website configuration. type: String - contextPath: GCP.StorageBucket.Metadata.website.notFoundPage description: The path to the custom 404 page for the bucket website. type: String - name: gcp-storage-bucket-metadata-update-enable-GCP-bucket-versioning-quick-action description: "Enables versioning on a GCP storage bucket to preserve object versions. Required permission: storage.buckets.update." prettyname: Enable GCP Bucket Versioning quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: resource_name required: true description: Name of the bucket. prettyname: Bucket Name defaultValue: Bucket Name prettypredefined: Bucket Name: ${asset.xdm.asset.name} - name: enable_versioning required: false auto: PREDEFINED hidden: true predefined: - "true" - "false" defaultValue: "true" description: Enable versioning. outputs: - contextPath: GCP.StorageBucket.Metadata description: Updated bucket metadata. type: Unknown - contextPath: GCP.StorageBucket.Metadata.name description: The name of the GCP bucket. type: String - contextPath: GCP.StorageBucket.Metadata.id description: The ID of the GCP bucket. type: String - contextPath: GCP.StorageBucket.Metadata.location description: The location of the bucket. type: String - contextPath: GCP.StorageBucket.Metadata.storageClass description: The storage class of the bucket (e.g., STANDARD, NEARLINE). type: String - contextPath: GCP.StorageBucket.Metadata.created description: The creation timestamp of the bucket. type: Date - contextPath: GCP.StorageBucket.Metadata.updated description: The last update timestamp of the bucket. type: Date - contextPath: GCP.StorageBucket.Metadata.metageneration description: The metadata generation of the bucket. type: Number - contextPath: GCP.StorageBucket.Metadata.labels description: The labels attached to the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.defaultEventBasedHold description: Whether a default event-based hold is enabled on the bucket. type: Boolean - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriod description: The duration in seconds that objects in the bucket must be retained. type: Number - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.effectiveTime description: The time from which the retention policy is effective. type: Date - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.isLocked description: Whether the retention policy is locked. type: Boolean - contextPath: GCP.StorageBucket.Metadata.versioning.enabled description: Whether object versioning is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.logging.logBucket description: The destination bucket where access logs are stored. type: String - contextPath: GCP.StorageBucket.Metadata.logging.logObjectPrefix description: The object prefix used for logging. type: String - contextPath: GCP.StorageBucket.Metadata.lifecycle.rule description: A list of lifecycle management rules for the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccess description: Whether uniform bucket-level access is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.cors description: CORS configuration for the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.customPlacementConfig description: Custom placement configuration for multi-region buckets. type: Unknown - contextPath: GCP.StorageBucket.Metadata.encryption.defaultKmsKeyName description: The default Cloud KMS key used to encrypt objects. type: String - contextPath: GCP.StorageBucket.Metadata.billing.requesterPays description: Whether requester pays is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.website.mainPageSuffix description: Suffix appended to requests for the bucket's website configuration. type: String - contextPath: GCP.StorageBucket.Metadata.website.notFoundPage description: The path to the custom 404 page for the bucket website. type: String - name: gcp-storage-bucket-metadata-update-set-GCP-bucket-access-to-uniform-quick-action description: "Enables uniform bucket-level access on a GCP storage bucket for enhanced security. Required permission: storage.buckets.update." prettyname: Set GCP Bucket Access to Uniform quickaction: true hidden: true arguments: - name: project_id required: true description: The GCP project ID. prettyname: GCP Project ID defaultValue: GCP Project ID prettypredefined: GCP Project ID: ${asset.xdm.asset.realm} - name: resource_name required: true description: Name of the bucket. prettyname: Bucket Name defaultValue: Bucket Name prettypredefined: Bucket Name: ${asset.xdm.asset.name} - name: enable_uniform_access required: false hidden: true defaultValue: "true" description: Enable uniform bucket-level access. outputs: - contextPath: GCP.StorageBucket.Metadata description: Updated bucket metadata. type: Unknown - contextPath: GCP.StorageBucket.Metadata.name description: The name of the GCP bucket. type: String - contextPath: GCP.StorageBucket.Metadata.id description: The ID of the GCP bucket. type: String - contextPath: GCP.StorageBucket.Metadata.location description: The location of the bucket. type: String - contextPath: GCP.StorageBucket.Metadata.storageClass description: The storage class of the bucket (e.g., STANDARD, NEARLINE). type: String - contextPath: GCP.StorageBucket.Metadata.created description: The creation timestamp of the bucket. type: Date - contextPath: GCP.StorageBucket.Metadata.updated description: The last update timestamp of the bucket. type: Date - contextPath: GCP.StorageBucket.Metadata.metageneration description: The metadata generation of the bucket. type: Number - contextPath: GCP.StorageBucket.Metadata.labels description: The labels attached to the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.defaultEventBasedHold description: Whether a default event-based hold is enabled on the bucket. type: Boolean - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriod description: The duration in seconds that objects in the bucket must be retained. type: Number - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.effectiveTime description: The time from which the retention policy is effective. type: Date - contextPath: GCP.StorageBucket.Metadata.retentionPolicy.isLocked description: Whether the retention policy is locked. type: Boolean - contextPath: GCP.StorageBucket.Metadata.versioning.enabled description: Whether object versioning is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.logging.logBucket description: The destination bucket where access logs are stored. type: String - contextPath: GCP.StorageBucket.Metadata.logging.logObjectPrefix description: The object prefix used for logging. type: String - contextPath: GCP.StorageBucket.Metadata.lifecycle.rule description: A list of lifecycle management rules for the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccess description: Whether uniform bucket-level access is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.cors description: CORS configuration for the bucket. type: Unknown - contextPath: GCP.StorageBucket.Metadata.customPlacementConfig description: Custom placement configuration for multi-region buckets. type: Unknown - contextPath: GCP.StorageBucket.Metadata.encryption.defaultKmsKeyName description: The default Cloud KMS key used to encrypt objects. type: String - contextPath: GCP.StorageBucket.Metadata.billing.requesterPays description: Whether requester pays is enabled. type: Boolean - contextPath: GCP.StorageBucket.Metadata.website.mainPageSuffix description: Suffix appended to requests for the bucket's website configuration. type: String - contextPath: GCP.StorageBucket.Metadata.website.notFoundPage description: The path to the custom 404 page for the bucket website. type: String - name: gcp-storage-bucket-list description: "Retrieves the list of buckets in the project associated with the client. Required permission: storage.buckets.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: limit required: false description: Maximum number of buckets to return. - name: prefix required: false description: Filter results to buckets whose names begin with this prefix. - name: page_token required: false description: Token for pagination. outputs: - contextPath: GCP.Storage.Bucket.id description: The unique identifier for the bucket. type: String - contextPath: GCP.Storage.Bucket.name description: The name of the bucket. type: String - contextPath: GCP.Storage.Bucket.kind description: The type of resource (for example, storage#bucket). type: String - contextPath: GCP.Storage.Bucket.location description: The location of the bucket. type: String - contextPath: GCP.Storage.Bucket.locationType description: The type of location (for example, multi-region). type: String - contextPath: GCP.Storage.Bucket.projectNumber description: The GCP project number associated with the bucket. type: String - contextPath: GCP.Storage.Bucket.storageClass description: The storage class of the bucket. type: String - contextPath: GCP.Storage.Bucket.rpo description: The recovery point objective setting of the bucket. type: String - contextPath: GCP.Storage.Bucket.etag description: The HTTP entity tag of the bucket. type: String - contextPath: GCP.Storage.Bucket.generation description: The generation number of the bucket. type: String - contextPath: GCP.Storage.Bucket.metageneration description: The metageneration number of the bucket. type: String - contextPath: GCP.Storage.Bucket.timeCreated description: The time the bucket was created. type: Date - contextPath: GCP.Storage.Bucket.timeUpdated description: The time the bucket was last updated. type: Date - contextPath: GCP.Storage.Bucket.selfLink description: The link to the bucket resource on the GCP API. type: String - name: gcp-storage-bucket-get description: "Retrieves information about a specific bucket. Required permission: storage.buckets.get." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: bucket_name required: true description: Name of the bucket to retrieve. outputs: - contextPath: GCP.Storage.Bucket.id description: The unique identifier for the bucket. type: String - contextPath: GCP.Storage.Bucket.name description: The name of the bucket. type: String - contextPath: GCP.Storage.Bucket.kind description: The type of resource (for example, storage#bucket). type: String - contextPath: GCP.Storage.Bucket.location description: The location of the bucket. type: String - contextPath: GCP.Storage.Bucket.locationType description: The type of location (for example, multi-region). type: String - contextPath: GCP.Storage.Bucket.projectNumber description: The GCP project number associated with the bucket. type: String - contextPath: GCP.Storage.Bucket.storageClass description: The storage class of the bucket. type: String - contextPath: GCP.Storage.Bucket.rpo description: The recovery point objective setting of the bucket. type: String - contextPath: GCP.Storage.Bucket.etag description: The HTTP entity tag of the bucket. type: String - contextPath: GCP.Storage.Bucket.generation description: The generation number of the bucket. type: String - contextPath: GCP.Storage.Bucket.metageneration description: The metageneration number of the bucket. type: String - contextPath: GCP.Storage.Bucket.timeCreated description: The time the bucket was created. type: Date - contextPath: GCP.Storage.Bucket.timeUpdated description: The time the bucket was last updated. type: Date - contextPath: GCP.Storage.Bucket.selfLink description: The link to the bucket resource on the GCP API. type: String - name: gcp-storage-bucket-objects-list description: "Retrieves the list of objects in a bucket. Required permission: storage.objects.list." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: bucket_name required: true description: Name of the bucket to list objects from. - name: prefix required: false description: Filter results to objects whose names begin with this prefix. - name: delimiter required: false description: Delimiter to use for grouping objects. For example delimiter="/" Returns results in a directory-like mode, with / being a common value for the delimiter. - name: limit required: false description: Maximum number of objects to return. - name: page_token required: false description: Token for pagination. outputs: - contextPath: GCP.Storage.BucketObject.id description: The unique identifier for the object. type: String - contextPath: GCP.Storage.BucketObject.name description: The name of the object. type: String - contextPath: GCP.Storage.BucketObject.kind description: The type of resource (for example, storage#object). type: String - contextPath: GCP.Storage.BucketObject.bucket description: The name of the bucket containing the object. type: String - contextPath: GCP.Storage.BucketObject.contentType description: The MIME type of the object. type: String - contextPath: GCP.Storage.BucketObject.size description: The size of the object in bytes. type: Number - contextPath: GCP.Storage.BucketObject.crc32c description: The CRC32C checksum of the object. type: String - contextPath: GCP.Storage.BucketObject.md5Hash description: The MD5 hash of the object. type: String - contextPath: GCP.Storage.BucketObject.etag description: The HTTP entity tag of the object. type: String - contextPath: GCP.Storage.BucketObject.generation description: The generation number of the object. type: String - contextPath: GCP.Storage.BucketObject.metageneration description: The metageneration number of the object. type: String - contextPath: GCP.Storage.BucketObject.storageClass description: The storage class of the object. type: String - contextPath: GCP.Storage.BucketObject.mediaLink description: The link for downloading the object content. type: String - contextPath: GCP.Storage.BucketObject.selfLink description: The link to the object resource in the GCP API. type: String - contextPath: GCP.Storage.BucketObject.timeCreated description: The time when the object was created. type: Date - contextPath: GCP.Storage.BucketObject.timeFinalized description: The time when the object was finalized. type: Date - contextPath: GCP.Storage.BucketObject.timeStorageClassUpdated description: The time when the object's storage class was last updated. type: Date - contextPath: GCP.Storage.BucketObject.updated description: The time when the object was last modified. type: Date - name: gcp-storage-bucket-policy-list description: "Retrieves the IAM policy for a bucket. Required permissions: storage.buckets.getIamPolicy, storage.buckets.get." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: bucket_name required: true description: Name of the bucket to retrieve IAM policy from. - name: requested_policy_version required: false description: The IAM policy version to be returned. If the optionsRequestedPolicyVersion is for an older version that doesn't support part of the requested IAM policy, the request fails. Required to be 3 or greater for buckets with IAM Conditions. type: Number outputs: - contextPath: GCP.Storage.BucketPolicy.version description: IAM policy version. type: Number - contextPath: GCP.Storage.BucketPolicy.etag description: ETag of the IAM policy. type: String - contextPath: GCP.Storage.BucketPolicy.bindings description: List of role bindings for the bucket. type: List - contextPath: GCP.Storage.BucketPolicy.resourceId description: Resource ID of the updated IAM policy. e.g. projects/_/buckets/BUCKET_NAME. type: String - name: gcp-storage-bucket-policy-set description: "Sets the IAM policy for a bucket. Required permission: storage.buckets.setIamPolicy." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: bucket_name required: true description: Name of the bucket to set IAM policy on. - name: policy required: true description: JSON string representing the IAM policy to set. - name: add defaultValue: "false" auto: PREDEFINED predefined: - "true" - "false" description: | When true, merges the provided policy bindings into the current bucket policy (per role, deduplicating members) by first calling getIamPolicy and then setIamPolicy with the merged result. When false, replaces the entire policy with the provided JSON via setIamPolicy. outputs: - contextPath: GCP.Storage.BucketPolicy.version description: IAM policy version after update. type: Number - contextPath: GCP.Storage.BucketPolicy.etag description: ETag of the updated IAM policy. type: String - contextPath: GCP.Storage.BucketPolicy.bindings description: List of role bindings for the bucket. type: List - name: gcp-storage-bucket-object-policy-list description: "Retrieves the IAM policy for a specific object in a bucket. Required permission: storage.objects.getIamPolicy." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: bucket_name required: true description: Name of the bucket containing the object. - name: object_name required: true description: Name of the object to retrieve IAM policy from. - name: generation required: false description: Generation of the object. outputs: - contextPath: GCP.Storage.BucketObjectPolicy.bucketName description: Name of the bucket containing the object. type: String - contextPath: GCP.Storage.BucketObjectPolicy.objectName description: Name of the object. type: String - contextPath: GCP.Storage.BucketObjectPolicy.bindings description: List of role bindings for the object. type: List - name: gcp-storage-bucket-object-policy-set description: "Sets the IAM policy for a specific object in a bucket. Required permission: storage.objects.setIamPolicy." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: bucket_name required: true description: Name of the bucket containing the object. - name: object_name required: true description: Name of the object to set IAM policy on. - name: policy required: true description: JSON string representing the IAM policy to set. - name: generation required: false description: Generation of the object. outputs: - contextPath: GCP.Storage.BucketObjectPolicy.version description: IAM policy version after update. type: Number - contextPath: GCP.Storage.BucketObjectPolicy.etag description: ETag of the updated IAM policy. type: String - contextPath: GCP.Storage.BucketObjectPolicy.bindings description: List of role bindings for the object. type: Unknown - name: gcp-iam-project-policy-binding-remove description: "Removes a specified IAM role binding from a GCP project. Required permissions: resourcemanager.projects.getIamPolicy, resourcemanager.projects.setIamPolicy." arguments: - name: project_id description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: member description: Member to remove (e.g., user:test@example.com). required: true isArray: true - name: role description: Role to remove (e.g., roles/viewer). required: true outputs: [] - name: gcp-bq-dataset-policy-remove description: "Removes an email from the BigQuery dataset policy. Required Permissions: bigquery.datasets.update, bigquery.datasets.get, bigquery.datasets.getIamPolicy, bigquery.datasets.setIamPolicy." arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: dataset_id required: true description: The dataset ID of the requested dataset. - name: email description: The email address to remove from the dataset access list. required: true outputs: - contextPath: GCP.BigQuery.Datasets.kind description: The resource type. type: String - contextPath: GCP.BigQuery.Datasets.etag description: A hash of the resource. type: String - contextPath: GCP.BigQuery.Datasets.id description: The fully-qualified unique name of the dataset in the format projectId:datasetId. type: String - contextPath: GCP.BigQuery.Datasets.selfLink description: A URL that can be used to access the resource again. type: String - contextPath: GCP.BigQuery.Datasets.datasetReference description: A reference that identifies the dataset. type: Unknown - contextPath: GCP.BigQuery.Datasets.friendlyName description: A descriptive name for the dataset. type: String - contextPath: GCP.BigQuery.Datasets.description description: A user-friendly description of the dataset. type: String - contextPath: GCP.BigQuery.Datasets.defaultTableExpirationMs description: The default lifetime of all tables in the dataset, in milliseconds. type: String - contextPath: GCP.BigQuery.Datasets.defaultPartitionExpirationMs description: The default partition expiration, in milliseconds. type: String - contextPath: GCP.BigQuery.Datasets.labels description: The labels associated with this dataset. type: String - contextPath: GCP.BigQuery.Datasets.access.role description: The role assigned to the entity. type: String - contextPath: GCP.BigQuery.Datasets.access.userByEmail description: An email address of a user to grant access to. type: String - contextPath: GCP.BigQuery.Datasets.access.groupByEmail description: An email address of a group to grant access to. type: String - contextPath: GCP.BigQuery.Datasets.access.domain description: A domain to grant access to. type: String - contextPath: GCP.BigQuery.Datasets.access.specialGroup description: A special group to grant access to. type: String - contextPath: GCP.BigQuery.Datasets.access.iamMember description: A type of member that appears in the IAM Policy that isn't a user, group, domain, or special group. type: String - contextPath: GCP.BigQuery.Datasets.access.view description: A view from a different dataset to grant access to. type: Unknown - contextPath: GCP.BigQuery.Datasets.access.routine description: A routine from a different dataset to grant access to. type: Unknown - contextPath: GCP.BigQuery.Datasets.access.dataset description: A grant authorizing access to this dataset for all resources of a particular type. type: Unknown - contextPath: GCP.BigQuery.Datasets.access.condition description: The binding condition. type: Unknown - contextPath: GCP.BigQuery.Datasets.creationTime description: The time since the epoch the dataset was created, in milliseconds. type: String - contextPath: GCP.BigQuery.Datasets.lastModifiedTime description: The time since the epoch the dataset was last modified, in milliseconds. type: String - contextPath: GCP.BigQuery.Datasets.location description: The geographic location where the dataset resides. type: String - contextPath: GCP.BigQuery.Datasets.defaultEncryptionConfiguration description: The default encryption configuration for all tables in the dataset. type: String - contextPath: GCP.BigQuery.Datasets.type description: The type of the dataset. type: String - contextPath: GCP.BigQuery.Datasets.linkedDatasetSource description: The source dataset reference when the dataset is of type LINKED. type: Unknown - contextPath: GCP.BigQuery.Datasets.linkedDatasetMetadata description: Metadata about the LinkedDataset. type: Unknown - contextPath: GCP.BigQuery.Datasets.externalDatasetReference description: Reference to a read-only external dataset defined in data catalogs outside of BigQuery. type: Unknown - contextPath: GCP.BigQuery.Datasets.externalCatalogDatasetOptions description: Options defining open source compatible datasets in the BigQuery catalog. Contains metadata of the open source database, schema, or namespace of the current dataset. type: Unknown - contextPath: GCP.BigQuery.Datasets.isCaseInsensitive description: True if the dataset and its table names are case-insensitive. type: String - contextPath: GCP.BigQuery.Datasets.defaultCollation description: The default collation specification of future tables created in the dataset. type: String - contextPath: GCP.BigQuery.Datasets.defaultRoundingMode description: The default rounding mode specification of new tables created within this dataset. type: String - contextPath: GCP.BigQuery.Datasets.maxTimeTravelHours description: The time travel window in hours. type: String - contextPath: GCP.BigQuery.Datasets.resourceTags description: The tags attached to this dataset. type: String - contextPath: GCP.BigQuery.Datasets.storageBillingModel description: The billing model that will be applied to the dataset. type: String - contextPath: GCP.BigQuery.Datasets.catalogSource description: The origin of the dataset. type: String # The command is currently unsupported. # - name: gcp-iam-project-deny-policy-create # description: Creates an IAM deny policy that explicitly blocks specified principals from performing specified permissions on a GCP project. # arguments: # - name: project_id # description: The GCP project ID. # required: true # type: string # - name: policy_id # description: Unique identifier for the deny policy (0-63 chars, starts with lowercase letter). # required: true # type: string # - name: display_name # description: Display name for the deny policy. # required: true # type: string # - name: denied_principals # description: Comma-separated list of principals to deny (e.g., principalSet://goog/public:all, principal://goog/subject/test@example.com). # required: true # type: string # - name: denied_permissions # description: Comma-separated list of permissions to deny (e.g., cloudresourcemanager.googleapis.com/projects.delete). # required: true # type: string # outputs: # - contextPath: GCP.IAM.DenyPolicy.policyId # description: ID of the deny policy. # type: string # - contextPath: GCP.IAM.DenyPolicy.name # description: Full resource name of the created deny policy. # type: string # - contextPath: GCP.IAM.DenyPolicy.displayName # description: Display name of the deny policy. # type: string # - contextPath: GCP.IAM.DenyPolicy.rules # description: List of deny rules included in the policy. # type: unknown # - contextPath: GCP.IAM.DenyPolicy.etag # description: Etag for concurrency control. # type: string - name: gcp-compute-instance-service-account-set description: > Sets the service account for a GCP Compute Engine VM instance. The instance must be stopped before the service account can be changed. Required permissions: compute.instances.setServiceAccount, compute.instances.get. arguments: - name: project_id description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: zone description: The name of the zone for this request. required: true - name: resource_name description: Name of the VM instance. required: true - name: service_account_email description: Email of the service account. required: true - name: scopes description: OAuth scopes to assign (full URLs), e.g., `https://www.googleapis.com/auth/cloud-platform`. Empty list means no scopes. isArray: true required: true outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: The user who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time the operation was requested, in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string - name: gcp-compute-instance-service-account-remove description: > Removes the service account associated with a GCP Compute Engine VM instance. The instance must be stopped before the service account can be changed. Required permissions: compute.instances.setServiceAccount, compute.instances.get. arguments: - name: project_id description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true isArray: false - name: zone description: The name of the zone for this request. required: true isArray: false - name: resource_name description: Name of the VM instance. required: true isArray: false outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: The user who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time that this operation was requested. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string # The command is currently unsupported. # - name: gcp-iam-group-membership-delete # deprecated: false # description: Deletes a group membership from a GSuite group. # arguments: # - name: project_id # description: The GCP project ID. # required: true # isArray: false # - name: group_id # description: ID or email of the group. # required: true # isArray: false # - name: membership_id # description: ID or email of the member to remove. # required: true # isArray: false # outputs: [] # The command is currently unsupported. # - name: gcp-iam-service-account-delete # description: Deletes a GCP IAM service account. # arguments: # - name: project_id # description: The GCP project ID. # required: true # isArray: false # - name: service_account_email # description: Email of the service account to delete. # required: true # isArray: false # outputs: [] - name: gcp-compute-instance-start description: "Starts an instance that was stopped using the instances().stop method. Required permission: compute.instances.start." arguments: - name: project_id description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: zone description: The name of the zone for this request. required: true - name: resource_name description: Name of the instance resource to start. required: true outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: The user who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time that this operation was requested. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string # gcp-compute-network-get - arguments: - description: Name of the network to return. name: network required: true - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true description: Returns the specified network. name: gcp-compute-network-get outputs: - contextPath: GCP.Compute.Networks.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Networks.creationTimestamp description: Creation timestamp in RFC3339 text format. type: string - contextPath: GCP.Compute.Networks.name description: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. type: string - contextPath: GCP.Compute.Networks.description description: An optional description of this resource. type: string - contextPath: GCP.Compute.Networks.gatewayIPv4 description: The gateway address for default routing out of the network. This value is read only and is selected by GCP. type: string - contextPath: GCP.Compute.Networks.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Networks.autoCreateSubnetworks description: When set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode. type: boolean - contextPath: GCP.Compute.Networks.subnetworks description: Server-defined fully-qualified URLs for all subnetworks in this VPC network. type: string - contextPath: GCP.Compute.Networks.peerings description: ' A list of network peerings for the resource.' type: string - contextPath: GCP.Compute.Networks.peerings.name description: Name of this peering. Provided by the client when the peering is created. The name must comply with RFC1035. Specifically, the name must be 1-63 characters long and match regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all the following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. type: string - contextPath: GCP.Compute.Networks.peerings.network description: The URL of the peer network. It can be either full URL or partial URL. The peer network may belong to a different project. If the partial URL does not contain project, it is assumed that the peer network is in the same project as the current network. type: string - contextPath: GCP.Compute.Networks.peerings.state description: State for the peering. type: string - contextPath: GCP.Compute.Networks.peerings.stateDetails description: Details about the current state of the peering. type: string - contextPath: GCP.Compute.Networks.peerings.autoCreateRoutes description: This field will be deprecated soon. Prefer using exchangeSubnetRoutes instead. Indicates whether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network. type: boolean - contextPath: GCP.Compute.Networks.peerings.exchangeSubnetRoutes description: Whether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the peering state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network. type: boolean - contextPath: GCP.Compute.Networks.routingConfig description: The network-level routing configuration for this network. Used by Cloud Router to determine what type of network-wide routing behavior to enforce. type: string - contextPath: GCP.Compute.Networks.routingConfig.routingMode description: The network-wide routing mode to use. If set to REGIONAL, this networks cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this networks cloud routers will advertise routes with all subnets of this network, across regions. type: string - contextPath: GCP.Compute.Networks.kind description: Type of the resource. Always compute#network for networks. type: string # gcp-compute-image-get - arguments: - description: The project ID for this request. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true - description: Name of the image resource to return. name: image required: true description: "Returns a specific image. Required permission: compute.images.get." name: gcp-compute-image-get outputs: - contextPath: GCP.Compute.Images.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Images.creationTimestamp description: Creation timestamp in RFC3339 text format. type: string - contextPath: GCP.Compute.Images.name description: Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. type: string - contextPath: GCP.Compute.Images.description description: An optional description of this resource. type: string - contextPath: GCP.Compute.Images.sourceType description: The type of the image used to create this disk. The default and only value is RAW. type: string - contextPath: GCP.Compute.Images.rawDisk description: The parameters of the raw disk image. type: string - contextPath: GCP.Compute.Images.rawDisk.source description: The full Google Cloud Storage URL where the disk image is stored. You must provide either this property or the sourceDisk property but not both. type: string - contextPath: GCP.Compute.Images.rawDisk.sha1Checksum description: An optional SHA1 checksum of the disk image before unpackaging provided by the client when the disk image is created. type: string - contextPath: GCP.Compute.Images.rawDisk.containerType description: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. type: string - contextPath: GCP.Compute.Images.deprecated description: The deprecation status associated with this image. type: string - contextPath: GCP.Compute.Images.deprecated.state description: The deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error. type: string - contextPath: GCP.Compute.Images.deprecated.replacement description: The URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource. type: string - contextPath: GCP.Compute.Images.deprecated.deprecated description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Images.deprecated.obsolete description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Images.deprecated.deleted description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Images.status description: The status of the image. An image can be used to create other resources, such as instances, only after the image has been successfully created and the status is set to READY. Possible values are FAILED, PENDING, or READY. type: string - contextPath: GCP.Compute.Images.archiveSizeBytes description: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes). type: string - contextPath: GCP.Compute.Images.diskSizeGb description: Size of the image when restored onto a persistent disk (in GB). type: string - contextPath: GCP.Compute.Images.sourceDisk description: 'URL of the source disk used to create this image. This can be a full or valid partial URL. You must provide either this property or the rawDisk.source property but not both to create an image. For example, the following are valid values: https://www.googleapis.com/compute/v1/projects/project/zones/zone/disks/disk , projects/project/zones/zone/disks/disk , zones/zone/disks/disk.' type: string - contextPath: GCP.Compute.Images.sourceDiskId description: The ID value of the disk used to create this image. This value may be used to determine whether the image was taken from the current or a previous instance of a given disk name. type: string - contextPath: GCP.Compute.Images.licenses description: Any applicable license URI. type: string - contextPath: GCP.Compute.Images.family description: The name of the image family to which this image belongs. You can create disks by specifying an image family instead of a specific image name. The image family always returns its latest image that is not deprecated. The name of the image family must comply with RFC1035. type: string - contextPath: GCP.Compute.Images.imageEncryptionKey description: Encrypts the image using a customer-supplied encryption key. After you encrypt an image with a customer-supplied key, you must provide the same key if you use the image later (e.g. to create a disk from the image). Customer-supplied encryption keys do not protect access to metadata of the disk. If you do not provide an encryption key when creating the image, then the disk will be encrypted using an automatically generated key and you do not need to provide a key to use the image later. type: string - contextPath: GCP.Compute.Images.imageEncryptionKey.rawKey description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. type: string - contextPath: GCP.Compute.Images.imageEncryptionKey.kmsKeyName description: The name of the encryption key that is stored in Google Cloud KMS. type: string - contextPath: GCP.Compute.Images.imageEncryptionKey.sha256 description: The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource. type: string - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey description: The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. type: string - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey.rawKey description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. type: string - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey.kmsKeyName description: The name of the encryption key that is stored in Google Cloud KMS. type: string - contextPath: GCP.Compute.Images.sourceDiskEncryptionKey.sha256 description: The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource. type: string - contextPath: GCP.Compute.Images.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Images.labels description: Labels to apply to this image. These can be later modified by the setLabels method. type: string - contextPath: GCP.Compute.Images.labelFingerprint description: A fingerprint for the labels being applied to this image, which is essentially a hash of the labels used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels, otherwise the request will fail with error 412 conditionNotMet. type: string - contextPath: GCP.Compute.Images.guestOsFeatures description: A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options. type: string - contextPath: GCP.Compute.Images.guestOsFeatures.type description: The ID of a supported feature. Read Enabling guest operating system features to see a list of available options. type: string - contextPath: GCP.Compute.Images.licenseCodes description: Integer license codes indicating which licenses are attached to this image. type: string - contextPath: GCP.Compute.Images.sourceImage description: URL of the source image used to create this image. This can be a full or valid partial URL. type: string - contextPath: GCP.Compute.Images.sourceImageId description: The ID value of the image used to create this image. This value may be used to determine whether the image was taken from the current or a previous instance of a given image name. type: string - contextPath: GCP.Compute.Images.sourceImageEncryptionKey description: The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. type: string - contextPath: GCP.Compute.Images.sourceImageEncryptionKey.rawKey description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. type: string - contextPath: GCP.Compute.Images.sourceImageEncryptionKey.kmsKeyName description: The name of the encryption key that is stored in Google Cloud KMS. type: string - contextPath: GCP.Compute.Images.sourceImageEncryptionKey.sha256 description: ' The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.' type: string - contextPath: GCP.Compute.Images.sourceSnapshot description: URL of the source snapshot used to create this image. This can be a full or valid partial URL. type: string - contextPath: GCP.Compute.Images.sourceSnapshotId description: ' The ID value of the snapshot used to create this image. This value may be used to determine whether the snapshot was taken from the current or a previous instance of a given snapshot name.' type: string - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey description: The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. type: string - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey.rawKey description: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. type: string - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey.kmsKeyName description: The name of the encryption key that is stored in Google Cloud KMS. type: string - contextPath: GCP.Compute.Images.sourceSnapshotEncryptionKey.sha256 description: The RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource. type: string - contextPath: GCP.Compute.Images.kind description: Type of the resource. Always compute#image for images. type: string # gcp-compute-region-get - arguments: - description: Name of the region resource to return. name: region required: true - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true description: "Returns a specific region resource. Required permission: compute.regions.get." name: gcp-compute-region-get outputs: - contextPath: GCP.Compute.Regions.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Regions.creationTimestamp description: ' Creation timestamp in RFC3339 text format.' type: string - contextPath: GCP.Compute.Regions.name description: Name of the resource. type: string - contextPath: GCP.Compute.Regions.description description: Textual description of the resource. type: string - contextPath: GCP.Compute.Regions.status description: Status of the region, either UP or DOWN. type: string - contextPath: GCP.Compute.Regions.zones description: A list of zones available in this region, in the form of resource URLs. type: string - contextPath: GCP.Compute.Regions.quotas description: Quotas assigned to this region. type: string - contextPath: GCP.Compute.Regions.quotas.metric description: Name of the quota metric. type: string - contextPath: GCP.Compute.Regions.quotas.limit description: Quota limit for this metric. type: string - contextPath: GCP.Compute.Regions.quotas.usage description: ' Current usage of this metric.' type: string - contextPath: GCP.Compute.Regions.quotas.owner description: Owning resource. The resource to which this quota applies. type: string - contextPath: GCP.Compute.Regions.deprecated description: The deprecation status associated with this region. type: string - contextPath: GCP.Compute.Regions.deprecated.state description: The deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error. type: string - contextPath: GCP.Compute.Regions.deprecated.replacement description: The URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource. type: string - contextPath: GCP.Compute.Regions.deprecated.deprecated description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Regions.deprecated.obsolete description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Regions.deprecated.deleted description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Regions.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Regions.kind description: Type of the resource. Always compute#region for regions. type: string # gcp-compute-instance-group-get - arguments: - description: The name of the instance group. name: instance_group required: true - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true - description: The name of the zone where the instance group is located. name: zone required: true description: "Returns a specific instance group. Required permission: compute.instanceGroups.get." name: gcp-compute-instance-group-get outputs: - contextPath: GCP.Compute.InstanceGroups.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.InstanceGroups.creationTimestamp description: The creation timestamp for this instance group in RFC3339 text format. type: string - contextPath: GCP.Compute.InstanceGroups.name description: The name of the instance group. The name must be 1-63 characters long, and comply with RFC1035. type: string - contextPath: GCP.Compute.InstanceGroups.description description: An optional description of this resource. type: string - contextPath: GCP.Compute.InstanceGroups.namedPorts description: Assigns a name to a port number. type: string - contextPath: GCP.Compute.InstanceGroups.namedPorts.name description: The name for this named port. The name must be 1-63 characters long, and comply with RFC1035. type: string - contextPath: GCP.Compute.InstanceGroups.namedPorts.port description: The port number, which can be a value between 1 and 65535. type: string - contextPath: GCP.Compute.InstanceGroups.network description: The URL of the network to which all instances in the instance group belong. type: string - contextPath: GCP.Compute.InstanceGroups.fingerprint description: The fingerprint of the named ports. The system uses this fingerprint to detect conflicts when multiple users change the named ports concurrently. type: string - contextPath: GCP.Compute.InstanceGroups.zone description: The URL of the zone where the instance group is located (for zonal resources). type: string - contextPath: GCP.Compute.InstanceGroups.selfLink description: The URL for this instance group. The server generates this URL. type: string - contextPath: GCP.Compute.InstanceGroups.size description: The total number of instances in the instance group. type: string - contextPath: GCP.Compute.InstanceGroups.region description: The URL of the region where the instance group is located (for regional resources). type: string - contextPath: GCP.Compute.InstanceGroups.subnetwork description: The URL of the subnetwork to which all instances in the instance group belong. type: string - contextPath: GCP.Compute.InstanceGroups.kind description: ' The resource type, which is always compute#instance_group for instance groups.' type: string # gcp-compute-zone-get - arguments: - description: Name of the zone resource to return. name: zone required: true - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true description: "Returns a specific zone resource. Required permission: compute.zones.get." name: gcp-compute-zone-get outputs: - contextPath: GCP.Compute.Zones.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Zones.creationTimestamp description: ' Creation timestamp in RFC3339 text format.' type: string - contextPath: GCP.Compute.Zones.name description: Name of the resource. type: string - contextPath: GCP.Compute.Zones.description description: Textual description of the resource. type: string - contextPath: GCP.Compute.Zones.status description: Status of the zone, either UP or DOWN. type: string - contextPath: GCP.Compute.Zones.deprecated description: The deprecation status associated with this zone. type: string - contextPath: GCP.Compute.Zones.deprecated.state description: The deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error. type: string - contextPath: GCP.Compute.Zones.deprecated.replacement description: The URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource. type: string - contextPath: GCP.Compute.Zones.deprecated.deprecated description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Zones.deprecated.obsolete description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Zones.deprecated.deleted description: An optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it. type: string - contextPath: GCP.Compute.Zones.region description: Full URL reference to the region which hosts the zone. type: string - contextPath: GCP.Compute.Zones.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Zones.availableCpuPlatforms description: Available cpu/platform selections for the zone. Do not use field = 7 or field = 11. Next available field = 14. type: string - contextPath: GCP.Compute.Zones.kind description: Type of the resource. Always compute#zone for zones. type: string # gcp-compute-networks-list - arguments: - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true - defaultValue: '50' description: 'The maximum number of results per page that should be returned. If the number of available results is larger than limit, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests. Acceptable values are 0 to 50, inclusive.' name: limit - description: A filter expression that filters resources listed in the response. The expression must specify the field name, a comparison operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The comparison operator must be either =, !=, >, or <. For example, if you are filtering Compute Engine instances, you can exclude instances named example-instance by specifying name != example-instance. name: filters - description: Sorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using order_by="creationTimestamp desc". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first. name: order_by - description: Specifies a page token to use. Set page_token to the nextPageToken returned by a previous list request to get the next page of results. name: page_token description: "Retrieves a list of networks available for the specified project. Required permission: compute.networks.list." name: gcp-compute-networks-list outputs: - contextPath: GCP.Compute.Networks.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Networks.creationTimestamp description: Creation timestamp in RFC3339 text format. type: string - contextPath: GCP.Compute.Networks.name description: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. type: string - contextPath: GCP.Compute.Networks.description description: An optional description of this resource. type: string - contextPath: GCP.Compute.Networks.gatewayIPv4 description: The gateway address for default routing out of the network. This value is read only and is selected by GCP. type: string - contextPath: GCP.Compute.Networks.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Networks.autoCreateSubnetworks description: When set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode. type: boolean - contextPath: GCP.Compute.Networks.subnetworks description: Server-defined fully-qualified URLs for all subnetworks in this VPC network. type: string - contextPath: GCP.Compute.Networks.peerings description: ' A list of network peerings for the resource.' type: string - contextPath: GCP.Compute.Networks.peerings.name description: Name of this peering. Provided by the client when the peering is created. The name must comply with RFC1035. Specifically, the name must be 1-63 characters long and match regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all the following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. type: string - contextPath: GCP.Compute.Networks.peerings.network description: The URL of the peer network. It can be either full URL or partial URL. The peer network may belong to a different project. If the partial URL does not contain project, it is assumed that the peer network is in the same project as the current network. type: string - contextPath: GCP.Compute.Networks.peerings.state description: State for the peering. type: string - contextPath: GCP.Compute.Networks.peerings.stateDetails description: Details about the current state of the peering. type: string - contextPath: GCP.Compute.Networks.peerings.autoCreateRoutes description: This field will be deprecated soon. Prefer using exchangeSubnetRoutes instead. Indicates whether full mesh connectivity is created and managed automatically. When set to true, Google Compute Engine automatically creates and manages the routes between two networks while the state is ACTIVE. If set to false, the user must manually create routes to direct packets to the peer network. type: boolean - contextPath: GCP.Compute.Networks.peerings.exchangeSubnetRoutes description: Whether full mesh connectivity is created and managed automatically. When set to true, Google Compute Engine automatically creates and manages the routes between two networks while the peering state is ACTIVE. If set to false, the user must manually create routes to send packets to the peer network. type: boolean - contextPath: GCP.Compute.Networks.routingConfig description: The network-level routing configuration for this network. Used by Cloud Router to determine what type of network-wide routing behavior to enforce. type: string - contextPath: GCP.Compute.Networks.routingConfig.routingMode description: Specifies the network-wide routing mode. If set to REGIONAL, the network’s cloud routers advertise routes only for subnets in the same region as the router. If set to GLOBAL, cloud routers advertise routes for all subnets in the network across all regions. type: string - contextPath: GCP.Compute.Networks.kind description: Type of the resource. Always compute#network for networks. type: string # gcp-compute-network-insert - arguments: - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true - description: Name of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. name: name required: true - description: An optional description of this resource. name: description - auto: PREDEFINED description: When set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode. An auto mode VPC network starts with one subnet per region. Each subnet has a predetermined range as described in Auto mode VPC network IP ranges. name: auto_create_sub_networks predefined: - 'true' - 'false' - auto: PREDEFINED description: The network-wide routing mode to use. If set to REGIONAL, this network's cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this network's cloud routers will advertise routes with all subnets of this network, across regions. name: routing_config_routing_mode predefined: - REGIONAL - GLOBAL description: "Creates a network in the specified project using the data included in the request. Required permission: compute.networks.create." name: gcp-compute-network-insert outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk that the snapshot was created from. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: User who requested the operation for example EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time that this operation was requested. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.error.errors description: The array of errors encountered while processing this operation. type: string - contextPath: GCP.Compute.Operations.error.errors description: The error type identifier for this error. type: string - contextPath: GCP.Compute.Operations.error.errors description: Indicates the field in the request that caused the error. This property is optional. type: string - contextPath: GCP.Compute.Operations.error.errors description: An optional, human-readable error message. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings.code description: A warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response. type: string - contextPath: GCP.Compute.Operations.warnings.message description: A human-readable description of the warning code. type: string - contextPath: GCP.Compute.Operations.warnings.data description: 'Metadata about this warning in key: value format.' type: string - contextPath: GCP.Compute.Operations.warnings.data description: A key that provides more detail on the warning being returned. For example, for warnings where there are no results in a list request for a particular zone, this key might be scope and the key value might be the zone name. Other examples might be a key indicating a deprecated resource and a suggested replacement, or a warning about invalid network settings (for example, if an instance attempts to perform IP forwarding but is not enabled for IP forwarding). type: string - contextPath: GCP.Compute.Operations.warnings.data description: A warning data value corresponding to the key. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string - name: gcp-compute-instance-stop description: "Stops and cleanly shuts down a running instance, allowing you to restart the instance at a later time. Stopped instances do not incur VM usage charges while they are stopped. However, resources that the VM is using such as persistent disks and static IP addresses will continue to be charged until they are deleted. Required permission: compute.instances.stop." arguments: - name: project_id description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: zone description: The name of the zone for this request. required: true - name: resource_name description: Name of the instance resource to stop. required: true outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete, and so on. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: The user who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time that this operation was requested. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that this operation was started by the server. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that this operation was completed. This value is in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.warnings description: If warning messages are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string - arguments: - name: project_id required: false required:platform: true description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - description: The name of the zone for this request. name: zone required: true - description: A filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance. name: filters - defaultValue: '50' description: 'The maximum number of results per page that should be returned. Acceptable values are 0 to 500, inclusive.' name: limit - description: Sorts list results in a specific order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using order_by="creationTimestamp desc". name: order_by - description: Specifies a page token. Set page_token to the nextPageToken returned by a previous list request to get the next page of results. name: page_token description: "Retrieves the list of instances in the specified zone. Required permission: compute.instances.list." name: gcp-compute-instances-list outputs: - contextPath: GCP.Compute.Instances.kind description: Type of the resource.Always compute#instance for instances. type: String - contextPath: GCP.Compute.Instances.id description: The unique identifier of the resource. type: String - contextPath: GCP.Compute.Instances.creationTimestamp description: Creation timestamp in RFC3339 text format. type: String - contextPath: GCP.Compute.Instances.name description: The name of the resource, provided by the client when the resource is first created. type: String - contextPath: GCP.Compute.Instances.description description: An optional description for this resource. type: String - contextPath: GCP.Compute.Instances.tags description: Tags to apply to this instance. type: String - contextPath: GCP.Compute.Instances.machineType description: 'Full or partial URL of the machine type resource to use for this instance, in the format: zones/zone/machineTypes/machine-type.' type: String - contextPath: GCP.Compute.Instances.status description: The status of the instance. type: String - contextPath: GCP.Compute.Instances.statusMessage description: An optional, human-readable explanation of the status. type: String - contextPath: GCP.Compute.Instances.zone description: URL of the zone where the instance resides. type: String - contextPath: GCP.Compute.Instances.canIpForward description: Allows this instance to send and receive packets with non-matching destination or source IPs. type: String - contextPath: GCP.Compute.Instances.networkInterfaces description: An array of network configurations for the instance. type: Object - contextPath: GCP.Compute.Instances.disks description: Array of disks associated with the instance. type: Object - contextPath: GCP.Compute.Instances.metadata description: The metadata key/value pairs assigned to the instance. type: Object - contextPath: GCP.Compute.Instances.serviceAccounts description: A list of service accounts, with their specified scopes, authorized for the instance. type: Object - contextPath: GCP.Compute.Instances.selfLink description: Server-defined URL for the resource. type: String - contextPath: GCP.Compute.Instances.scheduling description: Sets the scheduling options for the instance. type: Object - contextPath: GCP.Compute.Instances.cpuPlatform description: The CPU platform used by the instance. type: String - contextPath: GCP.Compute.Instances.labels description: Labels to apply to the instance. type: String - contextPath: GCP.Compute.Instances.labelFingerprint description: A fingerprint for this request, which is essentially a hash of the label's contents and used for optimistic locking. type: String - contextPath: GCP.Compute.Instances.instanceEncryptionKey description: Encrypts suspended data for an instance with a customer-managed encryption key. type: Object - contextPath: GCP.Compute.Instances.minCpuPlatform description: Specifies a minimum CPU platform for the VM instance. type: String - contextPath: GCP.Compute.Instances.guestAccelerators description: A list of the type and count of accelerator cards attached to the instance. type: Object - contextPath: GCP.Compute.Instances.startRestricted description: Indicates whether a VM has been restricted from starting because Compute Engine detected suspicious activity. type: Boolean - contextPath: GCP.Compute.Instances.deletionProtection description: Whether the resource should be protected against deletion. type: Boolean - contextPath: GCP.Compute.Instances.resourcePolicies description: Resource policies applied to this instance. type: String - contextPath: GCP.Compute.Instances.sourceMachineImage description: Source machine image. type: String - contextPath: GCP.Compute.Instances.reservationAffinity description: Specifies the reservations that the instance can consume from. type: Object - contextPath: GCP.Compute.Instances.hostname description: Specifies the hostname of the instance. type: String - contextPath: GCP.Compute.Instances.displayDevice description: Enables display device for the instance. type: Object - contextPath: GCP.Compute.Instances.shieldedInstanceConfig description: Shielded VM configuration for the instance. type: Object - contextPath: GCP.Compute.Instances.sourceMachineImageEncryptionKey description: The source machine image encryption key used when creating an instance from a machine image. type: Object - contextPath: GCP.Compute.Instances.confidentialInstanceConfig description: Confidential computing configuration for the instance. type: Object - contextPath: GCP.Compute.Instances.fingerprint description: Specifies a fingerprint for this resource, which is essentially a hash of the instance's contents and used for optimistic locking. type: String - contextPath: GCP.Compute.Instances.privateIpv6GoogleAccess description: The private IPv6 Google access type for the VM. type: String - contextPath: GCP.Compute.Instances.advancedMachineFeatures description: Controls for advanced machine-related behavior features. type: Object - contextPath: GCP.Compute.Instances.lastStartTimestamp description: Last start timestamp in RFC3339 text format. type: String - contextPath: GCP.Compute.Instances.lastStopTimestamp description: Last stop timestamp in RFC3339 text format. type: String - contextPath: GCP.Compute.Instances.lastSuspendedTimestamp description: Last suspended timestamp in RFC3339 text format. type: String - contextPath: GCP.Compute.Instances.satisfiesPzs description: Indicates whether the instance satisfies physical zone separation requirements. type: String - contextPath: GCP.Compute.Instances.satisfiesPzi description: Indicates whether the instance satisfies physical zone isolation requirements. type: String - contextPath: GCP.Compute.Instances.resourceStatus description: The resource status. type: Object - contextPath: GCP.Compute.Instances.networkPerformanceConfig description: Network performance configuration. type: Object - contextPath: GCP.Compute.Instances.keyRevocationActionType description: KeyRevocationActionType of the instance. type: String - contextPath: GCP.Compute.InstancesNextPageToken description: The token used to retrieve the next page of results for list requests. type: String - contextPath: GCP.Compute.InstancesSelfLink description: Server-defined URL for the resource. type: String - contextPath: GCP.Compute.InstancesWarning description: Informational warning message. type: Object - arguments: - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true - description: The name of the zone for this request. name: zone required: true - description: Name of the instance resource to return. name: instance required: true description: "Returns a specific instance resource. To get a list of available instances, make a list() request. Required permission: compute.instances.get." name: gcp-compute-instance-get outputs: - contextPath: GCP.Compute.Instances.id description: The unique identifier for the resource, defined by the server. type: string - contextPath: GCP.Compute.Instances.creationTimestamp description: Creation timestamp in RFC3339 text format. type: string - contextPath: GCP.Compute.Instances.name description: The name of the resource, provided by the client when first creating it. The name must be 1–63 characters long and comply with RFC1035. It must match the regular expression [a-z]([-a-z0-9]*[a-z0-9])?, meaning the first character must be a lowercase letter, and all following characters can be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. type: string - contextPath: GCP.Compute.Instances.description description: An optional description of this resource. Provide this property when you create the resource. type: string - contextPath: GCP.Compute.Instances.tags description: Tags to apply to this instance. Tags identify valid sources or targets for network firewalls and are specified by the client during instance creation. Tags can later be modified using the setTags method. Each tag must comply with RFC1035. Multiple tags can be specified via the tags.items field. type: string - contextPath: GCP.Compute.Instances.tags.items description: An array of tags. Each tag must be 1-63 characters long, and comply with RFC1035. type: string - contextPath: GCP.Compute.Instances.tags.fingerprint description: Specifies a fingerprint for this request, which is essentially a hash of the tags contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update tags. You must always provide an up-to-date fingerprint hash in order to update or change tags. type: string - contextPath: GCP.Compute.Instances.machineType description: 'Full or partial URL of the machine type resource to use for this instance, in the format: zones/zone/machineTypes/machine-type. This is provided by the client when the instance is created.' type: string - contextPath: GCP.Compute.Instances.status description: 'The status of the instance. One of the following values: PROVISIONING, STAGING, RUNNING, STOPPING, STOPPED, SUSPENDING, SUSPENDED, and TERMINATED.' type: string - contextPath: GCP.Compute.Instances.statusMessage description: An optional, human-readable explanation of the status. type: string - contextPath: GCP.Compute.Instances.zone description: URL of the zone where the instance resides. This field must be specified in the HTTP request URL and cannot be set in the request body. type: string - contextPath: GCP.Compute.Instances.canIpForward description: Allows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes. type: boolean - contextPath: GCP.Compute.Instances.networkInterfaces description: An array of network configurations for this instance. These specify how interfaces are configured to interact with other network services, such as connecting to the internet. Multiple interfaces are supported per instance. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.network description: URL of the network resource for this instance. When creating an instance, if neither the network nor the subnetwork is specified, the default network global/networks/default is used; if the network is not specified but the subnetwork is specified, the network is inferred. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.subnetwork description: The URL of the Subnetwork resource for this instance. For legacy networks, do not provide this property. For auto subnet networks, specifying the subnetwork is optional. For custom subnet networks, this field must be specified. If provided, the subnetwork can be a full or partial URL. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.networkIP description: An IPv4 internal network address to assign to the instance for this network interface. If not specified by the user, an unused internal IP is assigned by the system. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.name description: ' The name of the network interface, generated by the server. For network devices, these are eth0, eth1, etc.' type: string - contextPath: GCP.Compute.Instances.networkInterfaces.accessConfigs description: An array of configurations for this interface. Currently, only one access config, ONE_TO_ONE_NAT, is supported. If there are no accessConfigs specified, then the instance will have no external internet access. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.aliasIpRanges description: An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.fingerprint description: Fingerprint hash of the contents stored in this network interface. This field is ignored when inserting an instance or adding a network interface. To update the network interface, an up-to-date fingerprint must be provided; otherwise, the request fails with error 412 conditionNotMet. type: string - contextPath: GCP.Compute.Instances.networkInterfaces.kind description: Type of the resource. Always compute#networkInterface for network interfaces. type: string - contextPath: GCP.Compute.Instances.disks description: Array of disks associated with this instance. Persistent disks must be created before you can assign them. type: string - contextPath: GCP.Compute.Instances.disks.type description: Specifies the type of the disk, either SCRATCH or PERSISTENT. If not specified, the default is PERSISTENT. type: string - contextPath: GCP.Compute.Instances.disks.mode description: The mode in which to attach this disk, either READ_WRITE or READ_ONLY. If not specified, the default is to attach the disk in READ_WRITE mode. type: string - contextPath: GCP.Compute.Instances.disks.source description: Specifies a valid partial or full URL to an existing Persistent Disk resource. When creating a new instance, one of initializeParams.sourceImage or disks.source is required except for local SSD. type: string - contextPath: GCP.Compute.Instances.disks.deviceName description: Specifies a unique device name of your choice that is reflected into the /dev/disk/by-id/google-* tree of a Linux operating system running within the instance. This name can be used to reference the device for mounting, resizing, and other operations from within the instance. type: string - contextPath: GCP.Compute.Instances.disks.index description: A zero-based index for this disk, where 0 is reserved for the boot disk. Each attached disk on an instance has a unique index number. type: number - contextPath: GCP.Compute.Instances.disks.boot description: Indicates that this is a boot disk. The VM uses the first partition of the disk as its root filesystem. type: boolean - contextPath: GCP.Compute.Instances.disks.initializeParams description: Specifies parameters for a new disk to be created with the instance. Use initialization parameters to create boot disks or local SSDs attached to the instance. type: string - contextPath: GCP.Compute.Instances.disks.autoDelete description: Specifies whether the disk is auto-deleted when the instance is deleted (not when the disk is detached). type: boolean - contextPath: GCP.Compute.Instances.disks.licenses description: ' Any valid publicly visible licenses.' type: string - contextPath: GCP.Compute.Instances.disks.interface description: Specifies the disk interface for attaching this disk, either SCSI or NVME. The default is SCSI. Persistent disks must use SCSI; attaching a persistent disk with any other interface will fail. Local SSDs can use either NVME or SCSI. For performance characteristics of SCSI versus NVMe, see Local SSD performance. type: string - contextPath: GCP.Compute.Instances.disks.guestOsFeatures description: A list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options. type: string - contextPath: GCP.Compute.Instances.disks.diskEncryptionKey description: Encrypts or decrypts a disk using a customer-supplied encryption key. type: Object - contextPath: GCP.Compute.Instances.disks.kind description: Type of the resource. Always compute#attachedDisk for attached disks. type: string - contextPath: GCP.Compute.Instances.metadata description: The metadata key/value pairs assigned to the instance. This includes custom metadata and predefined keys. type: string - contextPath: GCP.Compute.Instances.metadata.fingerprint description: Specifies a fingerprint for this request, which is a hash of the metadata contents used for optimistic locking. The fingerprint is generated by Compute Engine and changes after every metadata update. You must provide an up-to-date fingerprint to modify metadata; otherwise, the request fails with error 412 conditionNotMet. type: string - contextPath: GCP.Compute.Instances.metadata.items description: Array of key/value pairs. The total size of all keys and values must be less than 512 KB. type: string - contextPath: GCP.Compute.Instances.metadata.kind description: Type of the resource. Always compute#metadata for metadata. type: string - contextPath: GCP.Compute.Instances.serviceAccounts description: A list of service accounts, with their specified scopes, authorized for the instance. Only one service account per VM instance is supported. type: string - contextPath: GCP.Compute.Instances.serviceAccounts.email description: Email address of the service account. type: string - contextPath: GCP.Compute.Instances.serviceAccounts.scopes description: The list of scopes to be made available for this service account. type: string - contextPath: GCP.Compute.Instances.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Instances.scheduling description: Sets the scheduling options for the instance. type: string - contextPath: GCP.Compute.Instances.scheduling.onHostMaintenance description: Defines the maintenance behavior for this instance. For standard instances, the default behavior is MIGRATE. For preemptible instances, the default and only possible behavior is TERMINATE. For more information, see Setting Instance Scheduling Options. type: string - contextPath: GCP.Compute.Instances.scheduling.automaticRestart description: Specifies whether the instance should be automatically restarted if it is terminated by Compute Engine (not terminated by a user). You can only set the automatic restart option for standard instances. Preemptible instances cannot be automatically restarted. type: boolean - contextPath: GCP.Compute.Instances.scheduling.preemptible description: Defines whether the instance is preemptible. This can only be set during instance creation, it cannot be set or changed after the instance has been created. type: boolean - contextPath: GCP.Compute.Instances.scheduling.nodeAffinities description: A set of node affinity and anti-affinity. type: string - contextPath: GCP.Compute.Instances.cpuPlatform description: The CPU platform used by the instance. type: string - contextPath: GCP.Compute.Instances.labels description: Labels to apply to the instance. These can be later modified by the setLabels method. type: string - contextPath: GCP.Compute.Instances.labels.key description: The label key. type: string - contextPath: GCP.Compute.Instances.labels.value description: The label value. type: string - contextPath: GCP.Compute.Instances.labelFingerprint description: A fingerprint for this request, which is essentially a hash of the labels contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels. type: string - contextPath: GCP.Compute.Instances.minCpuPlatform description: 'Specifies a minimum CPU platform for the VM instance. Applicable values are the friendly names of CPU platforms, such as minCpuPlatform: "Intel Haswell" or minCpuPlatform: "Intel Sandy Bridge".' type: string - contextPath: GCP.Compute.Instances.guestAccelerators description: A list of the type and count of accelerator cards attached to the instance. type: string - contextPath: GCP.Compute.Instances.guestAccelerators.acceleratorType description: 'Full or partial URL of the accelerator type resource to attach to this instance. For example: projects/my-project/zones/us-central1-c/acceleratorTypes/nvidia-tesla-p100. When creating an instance template, specify only the accelerator name.' type: string - contextPath: GCP.Compute.Instances.guestAccelerators.acceleratorCount description: The number of the guest accelerator cards exposed to the instance. type: string - contextPath: GCP.Compute.Instances.startRestricted description: Indicates whether a VM has been restricted from starting because Compute Engine detected suspicious activity. type: boolean - contextPath: GCP.Compute.Instances.deletionProtection description: Whether the resource should be protected against deletion. type: boolean - contextPath: GCP.Compute.Instances.hostname description: Hostname. type: string - contextPath: GCP.Compute.Instances.kind description: 'Type of the resource. Always compute#instance for instances.' type: string - arguments: - description: Name of the instance resource to return. name: instance required: true - description: The GCP project ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: project_id required: false required:platform: true - description: The name of the zone for this request. name: zone required: true - description: 'An object containing a list of "key": value pairs, without spaces. Example: key=abc,value=123;key=ABC,value=321.' name: labels required: true - description: Fingerprint of the previous set of labels for this resource, used to prevent conflicts. Provide the latest fingerprint value when making a request to add or change labels. name: label_fingerprint required: true - description: Whether to add the new labels to the existing ones or override the previous labels with the news. True - add, False - override. name: add_labels defaultValue: 'false' auto: PREDEFINED predefined: - 'true' - 'false' description: "Sets labels on an instance. Required permission: compute.instances.setLabels." name: gcp-compute-instance-labels-set outputs: - contextPath: GCP.Compute.Operations.id description: The unique identifier for the resource. This identifier is defined by the server. type: string - contextPath: GCP.Compute.Operations.name description: Name of the resource. type: string - contextPath: GCP.Compute.Operations.zone description: The URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.clientOperationId description: The value of requestId if you provided it in the request. Not present otherwise. type: string - contextPath: GCP.Compute.Operations.operationType description: The type of operation, such as insert, update, or delete. type: string - contextPath: GCP.Compute.Operations.targetLink description: The URL of the resource that the operation modifies. For snapshot-creation operations, this points to the persistent disk from which the snapshot was created. type: string - contextPath: GCP.Compute.Operations.targetId description: The unique target ID, which identifies a specific incarnation of the target resource. type: string - contextPath: GCP.Compute.Operations.status description: 'The status of the operation, which can be one of the following: PENDING, RUNNING or DONE.' type: string - contextPath: GCP.Compute.Operations.statusMessage description: An optional textual description of the current status of the operation. type: string - contextPath: GCP.Compute.Operations.user description: User who requested the operation, for example, EMAILADDRESS. type: string - contextPath: GCP.Compute.Operations.progress description: An optional progress indicator ranging from 0 to 100. It does not need to be linear or support any specific granularity of operations. This indicator should not be used to estimate completion time. The value should monotonically increase as the operation progresses. type: number - contextPath: GCP.Compute.Operations.insertTime description: The time the operation was requested, in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.startTime description: The time that the operation was started by the server, in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.endTime description: The time that the operation was completed, in RFC3339 text format. type: string - contextPath: GCP.Compute.Operations.error description: If errors are generated during processing of the operation, this field will be populated. type: string - contextPath: GCP.Compute.Operations.httpErrorStatusCode description: If the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found. type: number - contextPath: GCP.Compute.Operations.httpErrorMessage description: If the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND. type: string - contextPath: GCP.Compute.Operations.selfLink description: Server-defined URL for the resource. type: string - contextPath: GCP.Compute.Operations.region description: The URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body. type: string - contextPath: GCP.Compute.Operations.description description: A textual description of the operation, which is set when the operation is created. type: string - contextPath: GCP.Compute.Operations.kind description: Type of the resource. Always compute#operation for Operation resources. type: string # The command is currently unsupported. # - name: gcp-admin-user-update # description: Updates user account fields in GSuite, such as names, org unit, or status. # arguments: # - name: project_id # description: The GCP project ID. # required: true # - name: user_key # description: Identifies the user in the API request. The value can be the user's primary email address, alias email address, or unique user ID. # required: true # - name: update_fields # description: JSON payload of fields to update. # required: true # outputs: # - contextPath: GCP.GSuite.User.id # description: The unique ID for the user. # type: String # - contextPath: GCP.GSuite.User.primaryEmail # description: The user's primary email address. # type: String # - contextPath: GCP.GSuite.User.firstName # description: The user's first name. # type: String # - contextPath: GCP.GSuite.User.lastName # description: The user's last name. # type: String # - contextPath: GCP.GSuite.User.customerId # description: The unique ID for the customer's G Suite account. # type: String # - contextPath: GCP.GSuite.User.gender # description: Gender. # type: String # - contextPath: GCP.GSuite.User.suspended # description: Indicates if the user is suspended. # type: Boolean # - contextPath: GCP.GSuite.User.notesValue # description: Contents of notes. # type: String # - contextPath: GCP.GSuite.User.notesContentType # description: Content type of notes. # type: String # - contextPath: GCP.GSuite.User.isAdmin # description: Indicates a user with super administrator privileges. # type: Boolean # - contextPath: GCP.GSuite.User.creationTime # description: The time the user's account was created. # type: Date # - contextPath: GCP.GSuite.User.phones.value # description: A human-readable phone number. It may be in any telephone number format. # type: String # - contextPath: GCP.GSuite.User.phones.type # description: The type of phone number. # type: String # - contextPath: GCP.GSuite.User.phones.primary # description: Indicates if this is the user's primary phone number. # type: Boolean # - contextPath: GCP.GSuite.User.phones.customType # description: If the value of type is custom, this property contains the custom type. # type: String # - contextPath: GCP.GSuite.User.addresses.type # description: The address type. # type: String # - contextPath: GCP.GSuite.User.addresses.customType # description: If the address type is custom, this property contains the custom value. # type: String # - contextPath: GCP.GSuite.User.addresses.sourceIsStructured # description: Indicates if the user-supplied address was formatted. Formatted addresses are not currently supported. # type: Boolean # - contextPath: GCP.GSuite.User.addresses.formatted # description: A full and unstructured postal address. This is not synced with the structured address fields. # type: String # - contextPath: GCP.GSuite.User.addresses.poBox # description: The post office box, if present. # type: String # - contextPath: GCP.GSuite.User.addresses.locality # description: The town or city of the address. # type: String # - contextPath: GCP.GSuite.User.addresses.countryCode # description: The country code. Uses the ISO 3166-1 standard. # type: String # - contextPath: GCP.GSuite.User.addresses.country # description: Country. # type: String # - contextPath: GCP.GSuite.User.addresses.postalCode # description: The ZIP or postal code. # type: String # - contextPath: GCP.GSuite.User.addresses.region # description: The abbreviated province or state. # type: String # - contextPath: GCP.GSuite.User.addresses.streetAddress # description: The street address. # type: String # - contextPath: GCP.GSuite.User.addresses.extendedAddress # description: For extended addresses, such as an address that includes a sub-region. # type: String # - contextPath: GCP.GSuite.User.addresses.primary # description: If this is the user's primary address. # type: Boolean # - contextPath: GCP.GSuite.User.emails.address # description: The user's secondary email. # type: String # - contextPath: GCP.GSuite.User.emails.type # description: The secondary email type. # type: String # - contextPath: GCP.GSuite.User.emails.customType # description: If the value of type is custom, this property contains the custom type string. # type: String # - contextPath: GCP.GSuite.User.emails.primary # description: Indicates if this is the user's primary email. Only one entry can be marked as primary. # type: Boolean # - contextPath: GCP.GSuite.User.ipWhitelisted # description: If true, the user's IP address is added to allow list. # type: Boolean # - contextPath: GCP.GSuite.User.recoveryEmail # description: Recovery email of the user. # type: String # - contextPath: GCP.GSuite.User.isDelegatedAdmin # description: Indicates if the user is a delegated administrator. # type: Boolean # - contextPath: GCP.GSuite.User.recoveryPhone # description: Recovery phone of the user. # type: String # - contextPath: GCP.GSuite.User.orgUnitPath # description: The full path of the parent organization associated with the user. If the parent organization is the top-level, it is represented as a forward slash (/). # type: String # - contextPath: GCP.GSuite.User.isMailboxSetup # description: Indicates if the user's Google mailbox is created. # type: Boolean # - contextPath: GCP.GSuite.User.kind # description: The type of the API resource. # type: Boolean # - contextPath: GCP.GSuite.User.etag # description: ETag of the resource. # type: Boolean # - contextPath: GCP.GSuite.User.hashFunction # description: Stores the hash format of the password property. # type: String # - contextPath: GCP.GSuite.User.archived # description: Indicates if the user is archived. # type: Boolean # - contextPath: GCP.GSuite.User.fullName # description: The user's full name formed by concatenating the first and last name values. # type: String # - contextPath: GCP.GSuite.User.lastLoginTime # description: The last time the user logged into the user's account. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example, 2010-04-05T17:30:04+01:00. # type: Date # - contextPath: GCP.GSuite.User.deletionTime # description: The time the user's account was deleted. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example 2010-04-05T17:30:04+01:00. # type: Date # - contextPath: GCP.GSuite.User.agreedToTerms # description: This property is true if the user has completed an initial login and accepted the Terms of Service agreement. # type: Boolean # - contextPath: GCP.GSuite.User.suspensionReason # description: Has the reason a user account is suspended either by the administrator or by Google at the time of suspension. The property is returned only if the suspended property is true. # type: String # - contextPath: GCP.GSuite.User.changePasswordAtNextLogin # description: Indicates if the user is forced to change their password at next login. This setting doesn't apply when the user signs in via a third-party identity provider. # type: Boolean # - contextPath: GCP.GSuite.User.ims.type # description: Type of the user's Instant Messenger (IM) account. # type: Boolean # - contextPath: GCP.GSuite.User.ims.customType # description: If the IM type is custom, this property holds the custom type string. # type: String # - contextPath: GCP.GSuite.User.ims.protocol # description: An IM protocol identifies the IM network. The value can be a custom network or the standard network. # type: String # - contextPath: GCP.GSuite.User.ims.customProtocol # description: If the protocol value is custom_protocol, this property holds the custom protocol's string. # type: String # - contextPath: GCP.GSuite.User.ims.im # description: The user's IM network ID. # type: String # - contextPath: GCP.GSuite.User.ims.primary # description: If this is the user's primary IM. Only one entry in the IM list can have a value of true. # type: Boolean # - contextPath: GCP.GSuite.User.externalIds.value # description: The value of the external ID. # type: String # - contextPath: GCP.GSuite.User.externalIds.type # description: The type of the external ID. # type: String # - contextPath: GCP.GSuite.User.externalIds.customType # description: If the external ID type is custom, this property holds the custom type. # type: String # - contextPath: GCP.GSuite.User.relations.value # description: The name of the person the user is related to. # type: String # - contextPath: GCP.GSuite.User.relations.type # description: The type of relation. # type: String # - contextPath: GCP.GSuite.User.relations.customType # description: If the value of type is custom, this property contains the custom type. # type: String # - contextPath: GCP.GSuite.User.organizations.name # description: The name of the organization. # type: String # - contextPath: GCP.GSuite.User.organizations.title # description: The user's title within the organization, for example 'member' or 'engineer'. # type: String # - contextPath: GCP.GSuite.User.organizations.primary # description: Indicates if this is the user's primary organization. A user may only have one primary organization. # type: Boolean # - contextPath: GCP.GSuite.User.organizations.type # description: The type of organization. # type: String # - contextPath: GCP.GSuite.User.organizations.customType # description: If the value of type is custom, this property contains the custom type. # type: String # - contextPath: GCP.GSuite.User.organizations.department # description: Specifies the department within the organization, such as 'sales' or 'engineering'. # type: String # - contextPath: GCP.GSuite.User.organizations.symbol # description: Text string symbol of the organization. For example, the text symbol for Google is GOOG. # type: String # - contextPath: GCP.GSuite.User.organizations.location # description: The physical location of the organization. This does not need to be a fully qualified address. # type: String # - contextPath: GCP.GSuite.User.organizations.description # description: The description of the organization. # type: String # - contextPath: GCP.GSuite.User.organizations.domain # description: The domain the organization belongs to. # type: String # - contextPath: GCP.GSuite.User.organizations.costCenter # description: The cost center of the user's organization. # type: String # - contextPath: GCP.GSuite.User.organizations.fullTimeEquivalent # description: The full-time equivalent millipercent within the organization (100000 = 100%). # type: String # - contextPath: GCP.GSuite.User.languages.languageCode # description: Language Code. Should be used for storing Google III LanguageCode string representation for language. Illegal values cause SchemaException. # type: String # - contextPath: GCP.GSuite.User.languages.customLanguage # description: Other language. A user can provide their own language name if there is no corresponding Google III language code. If this is set, LanguageCode can't be set. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.username # description: The username of the account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.uid # description: The POSIX compliant user ID. # type: Number # - contextPath: GCP.GSuite.User.posixAccounts.gid # description: The default group ID. # type: Number # - contextPath: GCP.GSuite.User.posixAccounts.homeDirectory # description: The path to the home directory for this account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.shell # description: The path to the login shell for this account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.gecos # description: The GECOS (user information) for this account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.systemId # description: System identifier for which account Username or Uid apply to. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.primary # description: If this is user's primary account within the SystemId. # type: Boolean # - contextPath: GCP.GSuite.User.posixAccounts.accountId # description: A POSIX account field identifier. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.operatingSystemType # description: The operating system type for this account. # type: String # - contextPath: GCP.GSuite.User.sshPublicKeys.key # description: An SSH public key. # type: String # - contextPath: GCP.GSuite.User.sshPublicKeys.expirationTimeUsec # description: An expiration time in microseconds since epoch. # type: String # - contextPath: GCP.GSuite.User.sshPublicKeys.fingerprint # description: A SHA-256 fingerprint of the SSH public key. # type: String # - contextPath: GCP.GSuite.User.aliases # description: List of the user's alias email addresses. # type: Unknown # - contextPath: GCP.GSuite.User.nonEditableAliases # description: List of the user's non-editable alias email addresses. These are typically outside the account's primary domain or sub-domain. # type: Unknown # - contextPath: GCP.GSuite.User.websites.value # description: The URL of the website. # type: String # - contextPath: GCP.GSuite.User.websites.primary # description: If this is user's primary website or not. # type: Boolean # - contextPath: GCP.GSuite.User.websites.type # description: The type or purpose of the website. For example, a website could be labeled as home or blog. Alternatively, an entry can have a custom type. # type: String # - contextPath: GCP.GSuite.User.websites.customType # description: The custom type. Only used if the type is custom. # type: String # - contextPath: GCP.GSuite.User.locations.type # description: The location type. # type: String # - contextPath: GCP.GSuite.User.locations.customType # description: If the location type is custom, this property contains the custom value. # type: String # - contextPath: GCP.GSuite.User.locations.area # description: Textual location. This is most useful for display purposes to concisely describe the location. For example, "Mountain View, CA", "Near Seattle". # type: String # - contextPath: GCP.GSuite.User.locations.buildingId # description: Building identifier. # type: String # - contextPath: GCP.GSuite.User.locations.floorName # description: Floor name/number. # type: String # - contextPath: GCP.GSuite.User.locations.floorSection # description: Floor section. More specific location within the floor. For example, if a floor is divided into sections "A", "B", and "C", this field would identify one of those values. # type: String # - contextPath: GCP.GSuite.User.locations.deskCode # description: Most specific textual code of individual desk location. # type: String # - contextPath: GCP.GSuite.User.keywords.type # description: Each entry can have a type which indicates standard type of that entry. For example, keyword could be of type occupation or outlook. In addition to the standard type, an entry can have a custom type and can give it any name. Such types should have the CUSTOM value as type and also have a customType value. # type: String # - contextPath: GCP.GSuite.User.keywords.customType # description: Custom Type. # type: String # - contextPath: GCP.GSuite.User.keywords.value # description: Keyword. # type: String # - contextPath: GCP.GSuite.User.isEnrolledIn2Sv # description: Is enrolled in 2-step verification. # type: Boolean # - contextPath: GCP.GSuite.User.isEnforcedIn2Sv # description: Is 2-step verification enforced. # type: Boolean # - contextPath: GCP.GSuite.User.includeInGlobalAddressList # description: Indicates if the user's profile is visible in the G Suite global address list when the contact sharing feature is enabled for the domain. # type: Boolean # - contextPath: GCP.GSuite.User.thumbnailPhotoUrl # description: Photo Url of the user. # type: String # - contextPath: GCP.GSuite.User.thumbnailPhotoEtag # description: ETag of the user's photo. # type: String # - contextPath: GCP.GSuite.User.customSchemas # description: Custom fields of the user. # type: Unknown ## The command is currently unsupported. # - name: gcp-admin-user-password-reset # description: Resets the password for a GSuite user account. # arguments: # - name: project_id # description: The GCP project ID. # required: true # - name: user_key # description: Identifies the user in the API request. The value can be the user's primary email address, alias email address, or unique user ID. # required: true # - name: new_password # description: New password to set. # required: true # outputs: # - contextPath: GCP.GSuite.User.id # description: The unique ID for the user. # type: String # - contextPath: GCP.GSuite.User.primaryEmail # description: The user's primary email address. # type: String # - contextPath: GCP.GSuite.User.firstName # description: The user's first name. # type: String # - contextPath: GCP.GSuite.User.lastName # description: The user's last name. # type: String # - contextPath: GCP.GSuite.User.customerId # description: The unique ID for the customer's G Suite account. # type: String # - contextPath: GCP.GSuite.User.gender # description: The user's gender. # type: String # - contextPath: GCP.GSuite.User.suspended # description: Indicates if the user is suspended. # type: Boolean # - contextPath: GCP.GSuite.User.notesValue # description: Content of the notes. # type: String # - contextPath: GCP.GSuite.User.notesContentType # description: Content type of the notes. # type: String # - contextPath: GCP.GSuite.User.isAdmin # description: Indicates a user with super administrator privileges. # type: Boolean # - contextPath: GCP.GSuite.User.creationTime # description: The time the user's account was created. # type: Date # - contextPath: GCP.GSuite.User.phones.value # description: A human-readable phone number. It may be in any telephone number format. # type: String # - contextPath: GCP.GSuite.User.phones.type # description: The type of phone number. # type: String # - contextPath: GCP.GSuite.User.phones.primary # description: Indicates if this is the user's primary phone number. # type: Boolean # - contextPath: GCP.GSuite.User.phones.customType # description: If the value of type is custom, this property contains the custom type string. # type: String # - contextPath: GCP.GSuite.User.addresses.type # description: The address type. # type: String # - contextPath: GCP.GSuite.User.addresses.customType # description: If the value of type is custom, this property contains the custom type string. # type: String # - contextPath: GCP.GSuite.User.addresses.sourceIsStructured # description: Indicates if the user-supplied address was formatted. Formatted addresses are not currently supported. # type: Boolean # - contextPath: GCP.GSuite.User.addresses.formatted # description: A full and unstructured postal address. This is not synced with the structured address fields. # type: String # - contextPath: GCP.GSuite.User.addresses.poBox # description: The post office box, if present. # type: String # - contextPath: GCP.GSuite.User.addresses.locality # description: The town or city of the address. # type: String # - contextPath: GCP.GSuite.User.addresses.countryCode # description: The country code. Uses the ISO 3166-1 standard. # type: String # - contextPath: GCP.GSuite.User.addresses.country # description: Country. # type: String # - contextPath: GCP.GSuite.User.addresses.postalCode # description: The ZIP or postal code. # type: String # - contextPath: GCP.GSuite.User.addresses.region # description: The abbreviated province or state. # type: String # - contextPath: GCP.GSuite.User.addresses.streetAddress # description: The street address. # type: String # - contextPath: GCP.GSuite.User.addresses.extendedAddress # description: For extended addresses, such as an address that includes a sub-region. # type: String # - contextPath: GCP.GSuite.User.addresses.primary # description: If this is the user's primary address. # type: Boolean # - contextPath: GCP.GSuite.User.emails.address # description: The user's secondary email. # type: String # - contextPath: GCP.GSuite.User.emails.type # description: The secondary email type. # type: String # - contextPath: GCP.GSuite.User.emails.customType # description: If the value of type is custom, this property contains the custom type string. # type: String # - contextPath: GCP.GSuite.User.emails.primary # description: Indicates if this is the user's primary email. Only one entry can be marked as primary. # type: Boolean # - contextPath: GCP.GSuite.User.ipWhitelisted # description: If true, the user's IP address is added to the allow list. # type: Boolean # - contextPath: GCP.GSuite.User.recoveryEmail # description: Recovery email of the user. # type: String # - contextPath: GCP.GSuite.User.isDelegatedAdmin # description: Indicates if the user is a delegated administrator. # type: Boolean # - contextPath: GCP.GSuite.User.recoveryPhone # description: Recovery phone of the user. # type: String # - contextPath: GCP.GSuite.User.orgUnitPath # description: The full path of the parent organization associated with the user. If the parent organization is the top-level, it is represented as a forward slash (/). # type: String # - contextPath: GCP.GSuite.User.isMailboxSetup # description: Indicates if the user's Google mailbox is created. # type: Boolean # - contextPath: GCP.GSuite.User.kind # description: The type of the API resource. # type: Boolean # - contextPath: GCP.GSuite.User.etag # description: ETag of the resource. # type: Boolean # - contextPath: GCP.GSuite.User.hashFunction # description: Stores the hash format of the password property. # type: String # - contextPath: GCP.GSuite.User.archived # description: Indicates if the user is archived. # type: Boolean # - contextPath: GCP.GSuite.User.fullName # description: The user's full name formed by concatenating the first and last name values. # type: String # - contextPath: GCP.GSuite.User.lastLoginTime # description: The last time the user logged into the user's account. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example, 2010-04-05T17:30:04+01:00. # type: Date # - contextPath: GCP.GSuite.User.deletionTime # description: The time the user's account was deleted. The value is in ISO 8601 date and time format. The time is the complete date plus hours, minutes, and seconds in the form YYYY-MM-DDThh:mm:ssTZD. For example 2010-04-05T17:30:04+01:00. # type: Date # - contextPath: GCP.GSuite.User.agreedToTerms # description: This property is true if the user has completed an initial login and accepted the Terms of Service agreement. # type: Boolean # - contextPath: GCP.GSuite.User.suspensionReason # description: The reason a user account is suspended either by the administrator or by Google at the time of suspension. The property is returned only if the suspended property is true. # type: String # - contextPath: GCP.GSuite.User.changePasswordAtNextLogin # description: Indicates if the user is forced to change their password at next login. This setting doesn't apply when the user signs in via a third-party identity provider. # type: Boolean # - contextPath: GCP.GSuite.User.ims.type # description: Type of the user's Instant Messenger (IM) account. # type: Boolean # - contextPath: GCP.GSuite.User.ims.customType # description: If the IM type is custom, this property holds the custom type string. # type: String # - contextPath: GCP.GSuite.User.ims.protocol # description: An IM protocol identifies the IM network. The value can be a custom network or the standard network. # type: String # - contextPath: GCP.GSuite.User.ims.customProtocol # description: If the protocol value is custom_protocol, this property holds the custom protocol's string. # type: String # - contextPath: GCP.GSuite.User.ims.im # description: The user's IM network ID. # type: String # - contextPath: GCP.GSuite.User.ims.primary # description: If this is the user's primary IM. Only one entry in the IM list can have a value of true. # type: Boolean # - contextPath: GCP.GSuite.User.externalIds.value # description: The value of the external ID. # type: String # - contextPath: GCP.GSuite.User.externalIds.type # description: The type of the external ID. # type: String # - contextPath: GCP.GSuite.User.externalIds.customType # description: If the external ID type is custom, this property holds the custom type. # type: String # - contextPath: GCP.GSuite.User.relations.value # description: The name of the person the user is related to. # type: String # - contextPath: GCP.GSuite.User.relations.type # description: The type of relationship. # type: String # - contextPath: GCP.GSuite.User.relations.customType # description: If the value of type is custom, this property contains the custom type. # type: String # - contextPath: GCP.GSuite.User.organizations.name # description: The name of the organization. # type: String # - contextPath: GCP.GSuite.User.organizations.title # description: The user's title within the organization, for example 'member' or 'engineer'. # type: String # - contextPath: GCP.GSuite.User.organizations.primary # description: Indicates if this is the user's primary organization. A user may only have one primary organization. # type: Boolean # - contextPath: GCP.GSuite.User.organizations.type # description: The type of organization. # type: String # - contextPath: GCP.GSuite.User.organizations.customType # description: If the value of type is custom, this property contains the custom type. # type: String # - contextPath: GCP.GSuite.User.organizations.department # description: Specifies the department within the organization, such as 'sales' or 'engineering'. # type: String # - contextPath: GCP.GSuite.User.organizations.symbol # description: Text string symbol of the organization. For example, the text symbol for Google is GOOG. # type: String # - contextPath: GCP.GSuite.User.organizations.location # description: The physical location of the organization. This does not need to be a fully qualified address. # type: String # - contextPath: GCP.GSuite.User.organizations.description # description: The description of the organization. # type: String # - contextPath: GCP.GSuite.User.organizations.domain # description: The domain the organization belongs to. # type: String # - contextPath: GCP.GSuite.User.organizations.costCenter # description: The cost center of the user's organization. # type: String # - contextPath: GCP.GSuite.User.organizations.fullTimeEquivalent # description: The full-time equivalent millipercent within the organization (100000 = 100%). # type: String # - contextPath: GCP.GSuite.User.languages.languageCode # description: Language Code. Should be used for storing Google III LanguageCode string representation for language. Illegal values cause SchemaException. # type: String # - contextPath: GCP.GSuite.User.languages.customLanguage # description: Other language. A user can provide their own language name if there is no corresponding Google III language code. If this is set, LanguageCode can't be set. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.username # description: The username of the account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.uid # description: The POSIX compliant user ID. # type: Number # - contextPath: GCP.GSuite.User.posixAccounts.gid # description: The default group ID. # type: Number # - contextPath: GCP.GSuite.User.posixAccounts.homeDirectory # description: The path to the home directory for this account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.shell # description: The path to the login shell for this account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.gecos # description: The GECOS (user information) for this account. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.systemId # description: System identifier for which account Username or UID applies to. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.primary # description: If this is the user's primary account within the SystemId. # type: Boolean # - contextPath: GCP.GSuite.User.posixAccounts.accountId # description: A POSIX account field identifier. # type: String # - contextPath: GCP.GSuite.User.posixAccounts.operatingSystemType # description: The operating system type for this account. # type: String # - contextPath: GCP.GSuite.User.sshPublicKeys.key # description: An SSH public key. # type: String # - contextPath: GCP.GSuite.User.sshPublicKeys.expirationTimeUsec # description: An expiration time in microseconds since epoch. # type: String # - contextPath: GCP.GSuite.User.sshPublicKeys.fingerprint # description: A SHA-256 fingerprint of the SSH public key. # type: String # - contextPath: GCP.GSuite.User.aliases # description: List of the user's alias email addresses. # type: Unknown # - contextPath: GCP.GSuite.User.nonEditableAliases # description: List of the user's non-editable alias email addresses. These are typically outside the account's primary domain or sub-domain. # type: Unknown # - contextPath: GCP.GSuite.User.websites.value # description: The URL of the website. # type: String # - contextPath: GCP.GSuite.User.websites.primary # description: If this is the user's primary website or not. # type: Boolean # - contextPath: GCP.GSuite.User.websites.type # description: The type or purpose of the website. For example, a website could be labeled as home or blog. Alternatively, an entry can have a custom type. # type: String # - contextPath: GCP.GSuite.User.websites.customType # description: The custom type. Only used if the type is custom. # type: String # - contextPath: GCP.GSuite.User.locations.type # description: The location type. # type: String # - contextPath: GCP.GSuite.User.locations.customType # description: If the location type is custom, this property contains the custom value. # type: String # - contextPath: GCP.GSuite.User.locations.area # description: Textual location. This is most useful for display purposes to concisely describe the location. For example, "Mountain View, CA", "Near Seattle". # type: String # - contextPath: GCP.GSuite.User.locations.buildingId # description: Building identifier. # type: String # - contextPath: GCP.GSuite.User.locations.floorName # description: Floor name/number. # type: String # - contextPath: GCP.GSuite.User.locations.floorSection # description: Floor section. More specific location within the floor. For example, if a floor is divided into sections "A", "B", and "C", this field would identify one of those values. # type: String # - contextPath: GCP.GSuite.User.locations.deskCode # description: Most specific textual code of individual desk location. # type: String # - contextPath: GCP.GSuite.User.keywords.type # description: Each entry can have a type which indicates the standard type of that entry. For example, keyword could be of type occupation or outlook. In addition to the standard type, an entry can have a custom type and can give it any name. Such types should have the CUSTOM value as type and also have a customType value. # type: String # - contextPath: GCP.GSuite.User.keywords.customType # description: Custom Type. # type: String # - contextPath: GCP.GSuite.User.keywords.value # description: Keyword. # type: String # - contextPath: GCP.GSuite.User.isEnrolledIn2Sv # description: Is enrolled in 2-step verification. # type: Boolean # - contextPath: GCP.GSuite.User.isEnforcedIn2Sv # description: Is 2-step verification enforced. # type: Boolean # - contextPath: GCP.GSuite.User.includeInGlobalAddressList # description: Indicates if the user's profile is visible in the G Suite global address list when the contact sharing feature is enabled for the domain. # type: Boolean # - contextPath: GCP.GSuite.User.thumbnailPhotoUrl # description: Photo URL of the user. # type: String # - contextPath: GCP.GSuite.User.thumbnailPhotoEtag # description: ETag of the user's photo. # type: String # - contextPath: GCP.GSuite.User.customSchemas # description: Custom fields of the user. # type: Unknown # The command is currently unsupported. # - name: gcp-admin-user-signout # description: Signs a user out of all web and device sessions and reset their sign-in cookies. # execution: true # arguments: # - name: project_id # description: The GCP project ID. # required: true # - name: user_key # description: Identifies the user in the API request. The value can be the user's primary email address, alias email address, or unique user ID. # required: true # outputs: [] isfetch: false runonce: false script: '-' type: python subtype: python3 dockerimage: demisto/googleapi-python3:1.0.0.10182333 source: 'cooc' fromversion: 8.11.0 supportsquickactions: true isCloudProviderIntegration: true tests: - No tests (auto formatted) internal: true