The SecurityCenterSettingsService is a sub-api of
securitycenter.googleapis.com. The service provides methods to manage
Security Center Settings, and Component Settings for GCP organizations,
folders, projects, and clusters.
CalculateEffectiveSettings looks up all of the Security Center
Settings resources in the GCP resource hierarchy, and calculates the
effective settings on that resource by applying the following rules:
Settings provided closer to the target resource take precedence over
those further away (e.g. folder will override organization level
settings).
Product defaults can be overridden at org, folder, project, and cluster
levels.
Detectors will be filtered out if they belong to a billing tier the
customer
has not configured.
Retrieves the organizations service account, if it exists, otherwise it
creates the organization service account. This API is idempotent and
will only create a service account once. On subsequent calls it will
return the previously created service account. SHA, SCC and CTD Infra
Automation will use this SA. This SA will not have any permissions when
created. The UI will provision this via IAM or the user will using
their own internal process. This API only creates SAs on the organization.
Folders are not supported and projects will use per-project SAs associated
with APIs enabled on a project. This API will be called by the UX
onboarding workflow.
Reset the organization, folder or project's component settings and return
the settings to the default. Settings are present at the
organization, folder and project levels. Using Reset for a folder or
project will remove the override that was set and result in the
organization-level settings being used.
Reset the organization, folder or project's settings and return
the settings of just that resource to the default.
Settings are present at the organization, folder, project, and cluster
levels. Using Reset on a sub-organization level will remove that resource's
override and result in the parent's settings being used (eg: if Reset on a
cluster, project settings will be used).
Using Reset on organization will remove the override that was set and
result in default settings being used.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-01-27 UTC."],[],[]]