gcloud beta scc assets describe - describe an asset given its resource name or asset id
gcloud beta scc assets describe [PARENT] (--asset=ASSET | --resource-name=RESOURCE_NAME) [GCLOUD_WIDE_FLAG ...]
(BETA) Describe an asset given its resource name or asset id.
Describe an asset under organization 123456, given its full resource name https://cloud.google.com/apis/design/resource_names#full_resource_name e.g. //storage.googleapis.com/my-bucket:
$ gcloud beta scc assets describe 123456 \ --resource-name="//storage.googleapis.com/my-bucket"
Describe an asset under organization 123456, given its Cloud SCC asset id 5678
$ gcloud beta scc assets describe 123456 --asset=5678
Describe an asset under project example-project, given its Cloud SCC asset id 5678
$ gcloud beta scc assets describe \ projects/example-project/assets/5678
Describe an asset under folder 456, given its Cloud SCC asset id 5678
$ gcloud beta scc assets describe folders/456/assets/5678
- Parent resource - parent organization, folder, or project in the Google Cloud
resource hierarchy to be used for the gcloud scc command. Specify the argument as either [RESOURCE_TYPE/RESOURCE_ID] or [RESOURCE_ID], as shown in the preceding examples. This represents a Cloud resource.
- [PARENT]
ID of the parent or fully qualified identifier for the parent. To set the parent attribute:
provide the argument parent on the command line;
Set the parent property in configuration using gcloud config set scc/parent if it is not specified in command line.
- Exactly one of these must be specified:
- --asset=ASSET
Cloud SCC specific asset. It's derived from the the asset's relative resource name. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. For Example, for the given asset name: "organizations/123/assets/456", 456 represents asset id.
- --resource-name=RESOURCE_NAME
Asset's resource name. Full resource name of the Google Cloud Platform resource this asset represents. This field is immutable after create time. See: https://cloud.google.com/apis/design/resource_names#full_resource_name. For Example: "//cloudresourcemanager.googleapis.com/projects/1234567890123" could be the resource-name for a project.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command uses the securitycenter/v1 API. The full documentation for this API can be found at: https://cloud.google.com/security-command-center
This command is currently in beta and might change without notice. These variants are also available:
$ gcloud scc assets describe
$ gcloud alpha scc assets describe