gcloud alpha scc assets describe - describe an asset given its resource name or asset id
gcloud alpha scc assets describe [PARENT] (--asset=ASSET | --resource-name=RESOURCE_NAME) [GCLOUD_WIDE_FLAG ...]
(ALPHA) Describe an asset given its resource name or asset id.
Describe an asset under organization 123456, given its full resource name https://cloud.google.com/apis/design/resource_names#full_resource_name e.g. //storage.googleapis.com/my-bucket:
$ gcloud alpha scc assets describe 123456 \ --resource-name="//storage.googleapis.com/my-bucket"
Describe an asset under organization 123456, given its Cloud SCC asset id 5678
$ gcloud alpha scc assets describe 123456 --asset=5678
Describe an asset under project example-project, given its Cloud SCC asset id 5678
$ gcloud alpha scc assets describe \ projects/example-project/assets/5678
Describe an asset under folder 456, given its Cloud SCC asset id 5678
$ gcloud alpha scc assets describe folders/456/assets/5678
- Parent resource - parent organization, folder, or project in the Google Cloud
resource hierarchy to be used for the gcloud scc command. Specify the argument as either [RESOURCE_TYPE/RESOURCE_ID] or [RESOURCE_ID], as shown in the preceding examples. This represents a Cloud resource.
- [PARENT]
ID of the parent or fully qualified identifier for the parent. To set the parent attribute:
provide the argument parent on the command line;
Set the parent property in configuration using gcloud config set scc/parent if it is not specified in command line.
- Exactly one of these must be specified:
- --asset=ASSET
Cloud SCC specific asset. It's derived from the the asset's relative resource name. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. For Example, for the given asset name: "organizations/123/assets/456", 456 represents asset id.
- --resource-name=RESOURCE_NAME
Asset's resource name. Full resource name of the Google Cloud Platform resource this asset represents. This field is immutable after create time. See: https://cloud.google.com/apis/design/resource_names#full_resource_name. For Example: "//cloudresourcemanager.googleapis.com/projects/1234567890123" could be the resource-name for a project.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command uses the securitycenter/v1 API. The full documentation for this API can be found at: https://cloud.google.com/security-command-center
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
$ gcloud scc assets describe
$ gcloud beta scc assets describe