2020def create_source (organization_id ):
2121 """Create a new findings source. """
2222 # [START securitycenter_create_source]
23- # [START create_source]
2423 from google .cloud import securitycenter
2524
2625 client = securitycenter .SecurityCenterClient ()
@@ -38,14 +37,12 @@ def create_source(organization_id):
3837 }
3938 )
4039 print ("Created Source: {}" .format (created .name ))
41- # [END create_source]
4240 # [END securitycenter_create_source]
4341
4442
4543def get_source (source_name ):
4644 """Gets an existing source."""
4745 # [START securitycenter_get_source]
48- # [START get_source]
4946 from google .cloud import securitycenter
5047
5148 client = securitycenter .SecurityCenterClient ()
@@ -59,15 +56,13 @@ def get_source(source_name):
5956 source = client .get_source (request = {"name" : source_name })
6057
6158 print ("Source: {}" .format (source ))
62- # [END get_source]
6359 # [END securitycenter_get_source]
6460 return source
6561
6662
6763def update_source (source_name ):
6864 """Updates a source's display name."""
6965 # [START securitycenter_update_source]
70- # [START update_source]
7166 from google .cloud import securitycenter
7267 from google .protobuf import field_mask_pb2
7368
@@ -89,7 +84,6 @@ def update_source(source_name):
8984 }
9085 )
9186 print ("Updated Source: {}" .format (updated ))
92- # [END update_source]
9387 # [END securitycenter_update_source]
9488 return updated
9589
@@ -98,7 +92,6 @@ def add_user_to_source(source_name):
9892 """Gives a user findingsEditor permission to the source."""
999310094 # [START securitycenter_set_source_iam]
101- # [START update_source_iam]
10295 from google .cloud import securitycenter
10396 from google .iam .v1 import policy_pb2
10497
@@ -131,7 +124,6 @@ def add_user_to_source(source_name):
131124
132125 print ("Updated Policy: {}" .format (updated ))
133126
134- # [END update_source_iam]
135127 # [END securitycenter_set_source_iam]
136128 return binding , updated
137129
@@ -140,7 +132,6 @@ def list_source(organization_id):
140132 """Lists finding sources."""
141133 i = - 1
142134 # [START securitycenter_list_sources]
143- # [START list_sources]
144135 from google .cloud import securitycenter
145136
146137 # Create a new client.
@@ -152,15 +143,13 @@ def list_source(organization_id):
152143 # Call the API and print out each existing source.
153144 for i , source in enumerate (client .list_sources (request = {"parent" : org_name })):
154145 print (i , source )
155- # [END list_sources]
156146 # [END securitycenter_list_sources]
157147 return i
158148
159149
160150def create_finding (source_name ):
161151 """Creates a new finding."""
162152 # [START securitycenter_create_finding]
163- # [START create_finding]
164153 from google .cloud import securitycenter
165154 from google .cloud .securitycenter_v1 import CreateFindingRequest , Finding
166155 import datetime
@@ -203,15 +192,13 @@ def create_finding(source_name):
203192 request = request
204193 )
205194 print (created_finding )
206- # [END create_finding]
207195 # [END securitycenter_create_finding]
208196 return created_finding
209197
210198
211199def create_finding_with_source_properties (source_name ):
212200 """Demonstrate creating a new finding with source properties. """
213201 # [START securitycenter_create_finding_with_source_properties]
214- # [START create_finding_with_properties]
215202 import datetime
216203
217204 from google .cloud import securitycenter
@@ -261,13 +248,11 @@ def create_finding_with_source_properties(source_name):
261248 }
262249 )
263250 print (created_finding )
264- # [END create_finding_with_properties]
265251 # [END securitycenter_create_finding_with_source_properties]
266252
267253
268254def update_finding (source_name ):
269255 # [START securitycenter_update_finding_source_properties]
270- # [START update_finding]
271256 import datetime
272257
273258 from google .cloud import securitycenter
@@ -309,14 +294,12 @@ def update_finding(source_name):
309294 updated_finding .source_properties , updated_finding .event_time
310295 )
311296 )
312- # [END update_finding]
313297 # [END securitycenter_update_finding_source_properties]
314298
315299
316300def update_finding_state (source_name ):
317301 """Demonstrate updating only a finding state."""
318302 # [START securitycenter_update_finding_state]
319- # [START update_finding_state]
320303 import datetime
321304
322305 from google .cloud import securitycenter
@@ -340,15 +323,13 @@ def update_finding_state(source_name):
340323 }
341324 )
342325 print (f"New state: { new_finding .state } " )
343- # [END update_finding_state]
344326 # [END securitycenter_update_finding_state]
345327
346328
347329def trouble_shoot (source_name ):
348330 """Demonstrate calling test_iam_permissions to determine if the
349331 service account has the correct permisions."""
350332 # [START securitycenter_test_iam]
351- # [START test_iam_permissions]
352333 from google .cloud import securitycenter
353334
354335 # Create a client.
@@ -373,11 +354,9 @@ def trouble_shoot(source_name):
373354 len (permission_response .permissions ) > 0
374355 )
375356 )
376- # [END test_iam_permissions]
377357 # [END securitycenter_test_iam]
378358 assert len (permission_response .permissions ) > 0
379359 # [START securitycenter_test_iam]
380- # [START test_iam_permissions]
381360 # Check for permissions necessary to call set_finding_state.
382361 permission_response = client .test_iam_permissions (
383362 request = {
@@ -388,15 +367,13 @@ def trouble_shoot(source_name):
388367 print (
389368 "Permision to update state? {}" .format (len (permission_response .permissions ) > 0 )
390369 )
391- # [END test_iam_permissions]
392370 # [END securitycenter_test_iam]
393371 return permission_response
394372 assert len (permission_response .permissions ) > 0
395373
396374
397375def list_all_findings (organization_id ):
398376 # [START securitycenter_list_all_findings]
399- # [START list_all_findings]
400377 from google .cloud import securitycenter
401378
402379 # Create a client.
@@ -415,14 +392,12 @@ def list_all_findings(organization_id):
415392 i , finding_result .finding .name , finding_result .finding .resource_name
416393 )
417394 )
418- # [END list_all_findings]
419395 # [END securitycenter_list_all_findings]
420396 return i
421397
422398
423399def list_filtered_findings (source_name ):
424400 # [START securitycenter_list_filtered_findings]
425- # [START list_filtered_findings]
426401 from google .cloud import securitycenter
427402
428403 # Create a new client.
@@ -447,14 +422,12 @@ def list_filtered_findings(source_name):
447422 i , finding_result .finding .name , finding_result .finding .resource_name
448423 )
449424 )
450- # [END list_filtered_findings]
451425 # [END securitycenter_list_filtered_findings]
452426 return i
453427
454428
455429def list_findings_at_time (source_name ):
456430 # [START securitycenter_list_findings_at_time]
457- # [START list_findings_at_a_time]
458431 from google .cloud import securitycenter
459432 from datetime import timedelta , datetime
460433
@@ -470,11 +443,9 @@ def list_findings_at_time(source_name):
470443 # You an also use a wild-card "-" for all sources:
471444 # source_name = "organizations/111122222444/sources/-"
472445 five_days_ago = str (datetime .now () - timedelta (days = 5 ))
473- # [END list_findings_at_a_time]
474446 # [END securitycenter_list_findings_at_time]
475447 i = - 1
476448 # [START securitycenter_list_findings_at_time]
477- # [START list_findings_at_a_time]
478449
479450 finding_result_iterator = client .list_findings (
480451 request = {"parent" : source_name , "filter" : five_days_ago }
@@ -485,15 +456,13 @@ def list_findings_at_time(source_name):
485456 i , finding_result .finding .name , finding_result .finding .resource_name
486457 )
487458 )
488- # [END list_findings_at_a_time]
489459 # [END securitycenter_list_findings_at_time]
490460 return i
491461
492462
493463def get_iam_policy (source_name ):
494464 """Gives a user findingsEditor permission to the source."""
495465 # [START securitycenter_get_source_iam]
496- # [START get_source_iam]
497466 from google .cloud import securitycenter
498467
499468 client = securitycenter .SecurityCenterClient ()
@@ -507,15 +476,13 @@ def get_iam_policy(source_name):
507476 # Get the old policy so we can do an incremental update.
508477 policy = client .get_iam_policy (request = {"resource" : source_name })
509478 print ("Policy: {}" .format (policy ))
510- # [END get_source_iam]
511479 # [END securitycenter_get_source_iam]
512480
513481
514482def group_all_findings (organization_id ):
515483 """Demonstrates grouping all findings across an organization."""
516484 i = 0
517485 # [START securitycenter_group_all_findings]
518- # [START group_all_findings]
519486 from google .cloud import securitycenter
520487
521488 # Create a client.
@@ -532,7 +499,6 @@ def group_all_findings(organization_id):
532499 )
533500 for i , group_result in enumerate (group_result_iterator ):
534501 print ((i + 1 ), group_result )
535- # [END group_all_findings]
536502 # [END securitycenter_group_all_findings]
537503 return i
538504
0 commit comments