Organization Source iam

mmv1/products/securitycenterv2/OrganizationSource.yaml

@@ -0,0 +1,95 @@
+# Copyright 2024 Google Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+--- !ruby/object:Api::Resource
+name: 'organization_Source'
+base_url: organizations/{{organization}}/sources
+self_link: '{{name}}'
+update_verb: :PATCH
+update_mask: true
+description: |
+  A Cloud Security Command Center's (Cloud SCC) finding source. A finding
+  source is an entity or a mechanism that can produce a finding. A source is
+  like a container of findings that come from the same scanner, logger,
+  monitor, etc.
+references: !ruby/object:Api::Resource::ReferenceLinks
+  guides:
+    'Official Documentation': 'https://cloud.google.com/security-command-center/docs'
+  api: ‘https://cloud.google.com/security-command-center/docs/reference/rest/v2/organizations.sources’
+organization_iam_policy: !ruby/object:Api::Resource::IamPolicy
+  method_name_separator: ':'
+  fetch_organization_iam_policy_verb: :POST
+  parent_resource_attribute: 'organization_source'
+  base_url: organizations/{{organization}}/sources/{{source}}
+  import_format:
+    ['organizations/{{organization}}/sources/{{source}}', '{{source}}']
+skip_delete: true
+examples:
+  - !ruby/object:Provider::Terraform::Examples
+    name:
+      'scc_organization_source_basic'
+      # resource can't be destroyed, so checkdestroy fails unnecessarily
+    skip_test: true
+    primary_resource_id: 'custom_source'
+    vars:
+      source_display_name: 'My Source'
+    test_env_vars:
+      org_id: :ORG_ID
+custom_code: !ruby/object:Provider::Terraform::CustomCode
+  custom_import: templates/terraform/custom_import/scc_source_self_link_as_name_set_organization.go.erb
+  post_create: templates/terraform/post_create/set_computed_name.erb
+parameters:
+  - !ruby/object:Api::Type::String
+    name: organization
+    required: true
+    immutable: true
+    url_param_only: true
+    description: |
+      The organization whose Cloud Security Command Center the Source
+      lives in.
+properties:
+  - !ruby/object:Api::Type::String
+    name: name
+    output: true
+    description: |
+      The resource name of this source, in the format
+      `organizations/{{organization}}/sources/{{source}}`.
+  - !ruby/object:Api::Type::String
+    name: description
+    description: |
+      The description of the source (max of 1024 characters).
+    validation: !ruby/object:Provider::Terraform::Validation
+      function: 'validation.StringLenBetween(0, 1024)'
+  - !ruby/object:Api::Type::String
+    name: displayName
+    required: true
+    description: |
+      The source’s display name. A source’s display name must be unique
+      amongst its siblings, for example, two sources with the same parent
+      can't share the same display name. The display name must start and end
+      with a letter or digit, may contain letters, digits, spaces, hyphens,
+      and underscores, and can be no longer than 32 characters.
+    validation: !ruby/object:Provider::Terraform::Validation
+      regex: '[\p{L}\p{N}]({\p{L}\p{N}_- ]{0,30}[\p{L}\p{N}])?'
+  - !ruby/object:Api::Type::String
+    name: canonicalName
+    required: true
+    description: |
+     The canonical name of the finding source. It's either "organizations/{organization_id}/sources/{source_id}",
+     "folders/{folder_id}/sources/{source_id}", or "projects/{project_number}/sources/{source_id}", 
+     depending on the closest CRM ancestor of the resource associated with the finding.
+
+
+
+
+

mmv1/products/securitycenterv2/product.yaml

@@ -0,0 +1,23 @@
+# Copyright 2024 Google Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+--- !ruby/object:Api::Product
+name: SecurityCenterV2
+display_name: Security Command Center (SCC)
+legacy_name: scc_v2
+versions:
+  - !ruby/object:Api::Product::Version
+    name: ga
+    base_url: https://securitycenter.googleapis.com/v2/
+scopes:
+  - https://www.googleapis.com/auth/cloud-platform

mmv1/templates/terraform/examples/scc_v2_organization_source_basic.tf.erb

@@ -0,0 +1,6 @@
+resource "google_scc_organization_source" "<%= ctx[:primary_resource_id] %>" {
+  display_name = "<%= ctx[:vars]['source_display_name'] %>"
+  organization = "<%= ctx[:test_env_vars]['org_id'] %>"
+  description  = "My custom Cloud Security Command Center Finding Source"
+  canonical_name = "<%= ctx[:vars]['source_canonical_name'] %>"
+}

mmv1/third_party/terraform/services/securitycenterv2/resource_scc_v2_organization_source_test.go

@@ -0,0 +1,66 @@
+package securitycenterv2_test
+
+import (
+	"fmt"
+	"testing"
+
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+	"github.com/hashicorp/terraform-provider-google/google/acctest"
+	"github.com/hashicorp/terraform-provider-google/google/envvar"
+)
+
+func TestAccSCCOrganizationSource_complete(t *testing.T) {
+	t.Parallel()
+
+	orgId := envvar.GetTestOrgFromEnv(t)
+	suffix := acctest.RandString(t, 10)
+	canonicalName := fmt.Sprintf("organizations/%s/sources/source-%s", orgId, suffix)
+
+	acctest.VcrTest(t, resource.TestCase{
+		PreCheck: func() {
+			acctest.AccTestPreCheck(t)
+		},
+		ProtoV5ProviderFactories: acctest.ProtoV5ProviderFactories(t),
+		Steps: []resource.TestStep{
+			{
+				Config: testAccSCCOrganizationSourceCompleteExample(orgId, suffix, "My description", canonicalName),
+				Check: resource.ComposeAggregateTestCheckFunc(
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "display_name", fmt.Sprintf("TFSrc %s", suffix)),
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "organization", orgId),
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "description", "My description"),
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "canonical_name", canonicalName),
+				),
+			},
+			{
+				ResourceName:      "google_scc_organization_source.custom_source",
+				ImportState:       true,
+				ImportStateVerify: true,
+			},
+			{
+				Config: testAccSCCOrganizationSourceCompleteExample(orgId, suffix, "", canonicalName),
+				Check: resource.ComposeAggregateTestCheckFunc(
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "display_name", fmt.Sprintf("TFSrc %s", suffix)),
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "organization", orgId),
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "description", ""),
+					resource.TestCheckResourceAttr("google_scc_organization_source.custom_source", "canonical_name", canonicalName),
+				),
+			},
+			{
+				ResourceName:      "google_scc_organization_source.custom_source",
+				ImportState:       true,
+				ImportStateVerify: true,
+			},
+		},
+	})
+}
+
+func testAccSCCOrganizationSourceCompleteExample(orgId, suffix, description, canonicalName string) string {
+	return fmt.Sprintf(`
+resource "google_scc_organization_source" "custom_source" {
+  display_name  = "TFSrc %s"
+  organization  = "%s"
+  description   = "%s"
+  canonical_name = "%s"
+}
+`, suffix, orgId, description, canonicalName)
+}