public final class Access extends GeneratedMessageV3 implements AccessOrBuilder
Represents an access event.
Protobuf type google.cloud.securitycenter.v1.Access
Static Fields
CALLER_IP_FIELD_NUMBER
public static final int CALLER_IP_FIELD_NUMBER
Field Value
CALLER_IP_GEO_FIELD_NUMBER
public static final int CALLER_IP_GEO_FIELD_NUMBER
Field Value
METHOD_NAME_FIELD_NUMBER
public static final int METHOD_NAME_FIELD_NUMBER
Field Value
PRINCIPAL_EMAIL_FIELD_NUMBER
public static final int PRINCIPAL_EMAIL_FIELD_NUMBER
Field Value
PRINCIPAL_SUBJECT_FIELD_NUMBER
public static final int PRINCIPAL_SUBJECT_FIELD_NUMBER
Field Value
SERVICE_ACCOUNT_DELEGATION_INFO_FIELD_NUMBER
public static final int SERVICE_ACCOUNT_DELEGATION_INFO_FIELD_NUMBER
Field Value
SERVICE_ACCOUNT_KEY_NAME_FIELD_NUMBER
public static final int SERVICE_ACCOUNT_KEY_NAME_FIELD_NUMBER
Field Value
SERVICE_NAME_FIELD_NUMBER
public static final int SERVICE_NAME_FIELD_NUMBER
Field Value
USER_AGENT_FAMILY_FIELD_NUMBER
public static final int USER_AGENT_FAMILY_FIELD_NUMBER
Field Value
USER_NAME_FIELD_NUMBER
public static final int USER_NAME_FIELD_NUMBER
Field Value
Static Methods
getDefaultInstance()
public static Access getDefaultInstance()
Returns
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
Returns
newBuilder()
public static Access.Builder newBuilder()
Returns
newBuilder(Access prototype)
public static Access.Builder newBuilder(Access prototype)
Parameter
| Name | Description |
prototype | Access
|
Returns
public static Access parseDelimitedFrom(InputStream input)
Parameter
Returns
Exceptions
public static Access parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(byte[] data)
public static Access parseFrom(byte[] data)
Parameter
| Name | Description |
data | byte[]
|
Returns
Exceptions
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static Access parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteString data)
public static Access parseFrom(ByteString data)
Parameter
Returns
Exceptions
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static Access parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
public static Access parseFrom(CodedInputStream input)
Parameter
Returns
Exceptions
public static Access parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
public static Access parseFrom(InputStream input)
Parameter
Returns
Exceptions
public static Access parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parseFrom(ByteBuffer data)
public static Access parseFrom(ByteBuffer data)
Parameter
Returns
Exceptions
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static Access parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
Parameters
Returns
Exceptions
parser()
public static Parser<Access> parser()
Returns
Methods
equals(Object obj)
public boolean equals(Object obj)
Parameter
Returns
Overrides
getCallerIp()
public String getCallerIp()
Caller's IP address, such as "1.1.1.1".
string caller_ip = 2;
| Type | Description |
String | The callerIp.
|
getCallerIpBytes()
public ByteString getCallerIpBytes()
Caller's IP address, such as "1.1.1.1".
string caller_ip = 2;
getCallerIpGeo()
public Geolocation getCallerIpGeo()
The caller IP's geolocation, which identifies where the call came from.
.google.cloud.securitycenter.v1.Geolocation caller_ip_geo = 3;
getCallerIpGeoOrBuilder()
public GeolocationOrBuilder getCallerIpGeoOrBuilder()
The caller IP's geolocation, which identifies where the call came from.
.google.cloud.securitycenter.v1.Geolocation caller_ip_geo = 3;
getDefaultInstanceForType()
public Access getDefaultInstanceForType()
Returns
getMethodName()
public String getMethodName()
The method that the service account called, e.g. "SetIamPolicy".
string method_name = 6;
| Type | Description |
String | The methodName.
|
getMethodNameBytes()
public ByteString getMethodNameBytes()
The method that the service account called, e.g. "SetIamPolicy".
string method_name = 6;
| Type | Description |
ByteString | The bytes for methodName.
|
getParserForType()
public Parser<Access> getParserForType()
Returns
Overrides
getPrincipalEmail()
public String getPrincipalEmail()
Associated email, such as "foo@google.com".
The email address of the authenticated user (or service account on behalf
of third party principal) making the request. For third party identity
callers, the principal_subject field is populated instead of this field.
For privacy reasons, the principal email address is sometimes redacted.
For more information, see Caller identities in audit
logs.
string principal_email = 1;
| Type | Description |
String | The principalEmail.
|
getPrincipalEmailBytes()
public ByteString getPrincipalEmailBytes()
Associated email, such as "foo@google.com".
The email address of the authenticated user (or service account on behalf
of third party principal) making the request. For third party identity
callers, the principal_subject field is populated instead of this field.
For privacy reasons, the principal email address is sometimes redacted.
For more information, see Caller identities in audit
logs.
string principal_email = 1;
| Type | Description |
ByteString | The bytes for principalEmail.
|
getPrincipalSubject()
public String getPrincipalSubject()
A string representing the principal_subject associated with the identity.
As compared to principal_email, supports principals that aren't
associated with email addresses, such as third party principals. For most
identities, the format will be principal://iam.googleapis.com/{identity
pool name}/subjects/{subject} except for some GKE identities
(GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy
format serviceAccount:{identity pool name}[{subject}]
string principal_subject = 7;
| Type | Description |
String | The principalSubject.
|
getPrincipalSubjectBytes()
public ByteString getPrincipalSubjectBytes()
A string representing the principal_subject associated with the identity.
As compared to principal_email, supports principals that aren't
associated with email addresses, such as third party principals. For most
identities, the format will be principal://iam.googleapis.com/{identity
pool name}/subjects/{subject} except for some GKE identities
(GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy
format serviceAccount:{identity pool name}[{subject}]
string principal_subject = 7;
| Type | Description |
ByteString | The bytes for principalSubject.
|
getSerializedSize()
public int getSerializedSize()
Returns
Overrides
getServiceAccountDelegationInfo(int index)
public ServiceAccountDelegationInfo getServiceAccountDelegationInfo(int index)
Identity delegation history of an authenticated service account that makes
the request. It contains information on the real authorities that try to
access GCP resources by delegating on a service account. When multiple
authorities are present, they are guaranteed to be sorted based on the
original ordering of the identity delegation events.
repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
getServiceAccountDelegationInfoCount()
public int getServiceAccountDelegationInfoCount()
Identity delegation history of an authenticated service account that makes
the request. It contains information on the real authorities that try to
access GCP resources by delegating on a service account. When multiple
authorities are present, they are guaranteed to be sorted based on the
original ordering of the identity delegation events.
repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
getServiceAccountDelegationInfoList()
public List<ServiceAccountDelegationInfo> getServiceAccountDelegationInfoList()
Identity delegation history of an authenticated service account that makes
the request. It contains information on the real authorities that try to
access GCP resources by delegating on a service account. When multiple
authorities are present, they are guaranteed to be sorted based on the
original ordering of the identity delegation events.
repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
getServiceAccountDelegationInfoOrBuilder(int index)
public ServiceAccountDelegationInfoOrBuilder getServiceAccountDelegationInfoOrBuilder(int index)
Identity delegation history of an authenticated service account that makes
the request. It contains information on the real authorities that try to
access GCP resources by delegating on a service account. When multiple
authorities are present, they are guaranteed to be sorted based on the
original ordering of the identity delegation events.
repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
getServiceAccountDelegationInfoOrBuilderList()
public List<? extends ServiceAccountDelegationInfoOrBuilder> getServiceAccountDelegationInfoOrBuilderList()
Identity delegation history of an authenticated service account that makes
the request. It contains information on the real authorities that try to
access GCP resources by delegating on a service account. When multiple
authorities are present, they are guaranteed to be sorted based on the
original ordering of the identity delegation events.
repeated .google.cloud.securitycenter.v1.ServiceAccountDelegationInfo service_account_delegation_info = 9;
| Type | Description |
List<? extends com.google.cloud.securitycenter.v1.ServiceAccountDelegationInfoOrBuilder> | |
getServiceAccountKeyName()
public String getServiceAccountKeyName()
The name of the service account key used to create or exchange
credentials for authenticating the service account making the request.
This is a scheme-less URI full resource name. For example:
"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}"
string service_account_key_name = 8;
| Type | Description |
String | The serviceAccountKeyName.
|
getServiceAccountKeyNameBytes()
public ByteString getServiceAccountKeyNameBytes()
The name of the service account key used to create or exchange
credentials for authenticating the service account making the request.
This is a scheme-less URI full resource name. For example:
"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}"
string service_account_key_name = 8;
| Type | Description |
ByteString | The bytes for serviceAccountKeyName.
|
getServiceName()
public String getServiceName()
This is the API service that the service account made a call to, e.g.
"iam.googleapis.com"
string service_name = 5;
| Type | Description |
String | The serviceName.
|
getServiceNameBytes()
public ByteString getServiceNameBytes()
This is the API service that the service account made a call to, e.g.
"iam.googleapis.com"
string service_name = 5;
| Type | Description |
ByteString | The bytes for serviceName.
|
getUnknownFields()
public final UnknownFieldSet getUnknownFields()
Returns
Overrides
getUserAgentFamily()
public String getUserAgentFamily()
What kind of user agent is associated, for example operating system shells,
embedded or stand-alone applications, etc.
string user_agent_family = 4;
| Type | Description |
String | The userAgentFamily.
|
getUserAgentFamilyBytes()
public ByteString getUserAgentFamilyBytes()
What kind of user agent is associated, for example operating system shells,
embedded or stand-alone applications, etc.
string user_agent_family = 4;
| Type | Description |
ByteString | The bytes for userAgentFamily.
|
getUserName()
public String getUserName()
A string that represents the username of a user, user account, or other
entity involved in the access event. What the entity is and what its role
in the access event is depends on the finding that this field appears in.
The entity is likely not an IAM principal, but could be a user that is
logged into an operating system, if the finding is VM-related, or a user
that is logged into some type of application that is involved in the
access event.
string user_name = 11;
| Type | Description |
String | The userName.
|
getUserNameBytes()
public ByteString getUserNameBytes()
A string that represents the username of a user, user account, or other
entity involved in the access event. What the entity is and what its role
in the access event is depends on the finding that this field appears in.
The entity is likely not an IAM principal, but could be a user that is
logged into an operating system, if the finding is VM-related, or a user
that is logged into some type of application that is involved in the
access event.
string user_name = 11;
hasCallerIpGeo()
public boolean hasCallerIpGeo()
The caller IP's geolocation, which identifies where the call came from.
.google.cloud.securitycenter.v1.Geolocation caller_ip_geo = 3;
| Type | Description |
boolean | Whether the callerIpGeo field is set.
|
hashCode()
Returns
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Overrides
isInitialized()
public final boolean isInitialized()
Returns
Overrides
newBuilderForType()
public Access.Builder newBuilderForType()
Returns
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected Access.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Parameter
Returns
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Parameter
Returns
Overrides
toBuilder()
public Access.Builder toBuilder()
Returns
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Parameter
Overrides
Exceptions
