Skip to content

Commit b99ca5b

Browse files
committed
Create GCP_IAM.json
1 parent 732bd31 commit b99ca5b

File tree

1 file changed

+313
-0
lines changed
  • .script/tests/KqlvalidationsTests/CustomFunctions

1 file changed

+313
-0
lines changed
Lines changed: 313 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,313 @@
1+
{
2+
"Name": "GCP_IAM",
3+
"Properties": [
4+
{
5+
"Name": "TimeGenerated",
6+
"Type": "DateTime"
7+
},
8+
{
9+
"Name": "PayloadStatusCode",
10+
"Type": "Double"
11+
},
12+
{
13+
"Name": "PayloadStatusMessage",
14+
"Type": "String"
15+
},
16+
{
17+
"Name": "PayloadRequestKeyTypes",
18+
"Type": "String"
19+
},
20+
{
21+
"Name": "PayloadServicedataPermissiondeltaRemovedpermissions",
22+
"Type": "String"
23+
},
24+
{
25+
"Name": "PayloadRequestUpdateMaskPaths",
26+
"Type": "String"
27+
},
28+
{
29+
"Name": "ResourceLabelsTopicId",
30+
"Type": "String"
31+
},
32+
{
33+
"Name": "PayloadServicedataPolicydeltaBindingdeltas",
34+
"Type": "String"
35+
},
36+
{
37+
"Name": "PayloadRequestPolicyAuditconfigs",
38+
"Type": "String"
39+
},
40+
{
41+
"Name": "PayloadRequestPolicyEtag",
42+
"Type": "String"
43+
},
44+
{
45+
"Name": "PayloadRequestPolicyBindings",
46+
"Type": "String"
47+
},
48+
{
49+
"Name": "PayloadRequestResource",
50+
"Type": "String"
51+
},
52+
{
53+
"Name": "PayloadResponseBindings",
54+
"Type": "String"
55+
},
56+
{
57+
"Name": "PayloadResponseAuditconfigs",
58+
"Type": "String"
59+
},
60+
{
61+
"Name": "PayloadRequestPageSize",
62+
"Type": "Double"
63+
},
64+
{
65+
"Name": "PayloadRequestRemoveDeletedServiceAccounts",
66+
"Type": "Boolean"
67+
},
68+
{
69+
"Name": "PayloadRequestView",
70+
"Type": "Double"
71+
},
72+
{
73+
"Name": "PayloadRequestParent",
74+
"Type": "String"
75+
},
76+
{
77+
"Name": "PayloadRequestShowDeleted",
78+
"Type": "Boolean"
79+
},
80+
{
81+
"Name": "ResourceLabelsRoleName",
82+
"Type": "String"
83+
},
84+
{
85+
"Name": "PayloadServicedataType",
86+
"Type": "String"
87+
},
88+
{
89+
"Name": "PayloadServicedataPermissiondeltaAddedpermissions",
90+
"Type": "String"
91+
},
92+
{
93+
"Name": "PayloadRequestRoleIncludedPermissions",
94+
"Type": "String"
95+
},
96+
{
97+
"Name": "PayloadRequestRoleTitle",
98+
"Type": "String"
99+
},
100+
{
101+
"Name": "PayloadRequestRoleDescription",
102+
"Type": "String"
103+
},
104+
{
105+
"Name": "PayloadRequestRoleId",
106+
"Type": "String"
107+
},
108+
{
109+
"Name": "PayloadResponseGroupName",
110+
"Type": "String"
111+
},
112+
{
113+
"Name": "PayloadResponseIncludedPermissions",
114+
"Type": "String"
115+
},
116+
{
117+
"Name": "PayloadResponseTitle",
118+
"Type": "String"
119+
},
120+
{
121+
"Name": "PayloadResponseGroupTitle",
122+
"Type": "String"
123+
},
124+
{
125+
"Name": "LogName",
126+
"Type": "String"
127+
},
128+
{
129+
"Name": "InsertId",
130+
"Type": "String"
131+
},
132+
{
133+
"Name": "EventSeverity",
134+
"Type": "String"
135+
},
136+
{
137+
"Name": "EventEndTime",
138+
"Type": "DateTime"
139+
},
140+
{
141+
"Name": "ResourceType",
142+
"Type": "String"
143+
},
144+
{
145+
"Name": "ResourceLabelsEmailId",
146+
"Type": "String"
147+
},
148+
{
149+
"Name": "ResourceLabelsProjectId",
150+
"Type": "String"
151+
},
152+
{
153+
"Name": "ResourceLabelsUniqueId",
154+
"Type": "String"
155+
},
156+
{
157+
"Name": "PayloadType",
158+
"Type": "String"
159+
},
160+
{
161+
"Name": "PayloadAuthenticationinfoPrincipalemail",
162+
"Type": "String"
163+
},
164+
{
165+
"Name": "PayloadAuthenticationinfoPrincipalsubject",
166+
"Type": "String"
167+
},
168+
{
169+
"Name": "SrcIpAddr",
170+
"Type": "String"
171+
},
172+
{
173+
"Name": "HttpUserAgentOriginal",
174+
"Type": "String"
175+
},
176+
{
177+
"Name": "PayloadRequestmetadataRequestattributesTime",
178+
"Type": "String"
179+
},
180+
{
181+
"Name": "PayloadServicename",
182+
"Type": "String"
183+
},
184+
{
185+
"Name": "PayloadMethodname",
186+
"Type": "String"
187+
},
188+
{
189+
"Name": "PayloadAuthorizationinfo",
190+
"Type": "String"
191+
},
192+
{
193+
"Name": "PayloadResourcename",
194+
"Type": "String"
195+
},
196+
{
197+
"Name": "PayloadRequestType",
198+
"Type": "String"
199+
},
200+
{
201+
"Name": "PayloadRequestName",
202+
"Type": "String"
203+
},
204+
{
205+
"Name": "PayloadRequestAccountId",
206+
"Type": "String"
207+
},
208+
{
209+
"Name": "PayloadRequestServiceAccountDescription",
210+
"Type": "String"
211+
},
212+
{
213+
"Name": "PayloadRequestServiceAccountDisplayName",
214+
"Type": "String"
215+
},
216+
{
217+
"Name": "PayloadResponseOauth2ClientId",
218+
"Type": "String"
219+
},
220+
{
221+
"Name": "PayloadResponseName",
222+
"Type": "String"
223+
},
224+
{
225+
"Name": "PayloadResponseEtag",
226+
"Type": "String"
227+
},
228+
{
229+
"Name": "PayloadResponseUniqueId",
230+
"Type": "String"
231+
},
232+
{
233+
"Name": "PayloadResponseDescription",
234+
"Type": "String"
235+
},
236+
{
237+
"Name": "PayloadResponseProjectId",
238+
"Type": "String"
239+
},
240+
{
241+
"Name": "PayloadResponseDisplayName",
242+
"Type": "String"
243+
},
244+
{
245+
"Name": "PayloadResponseType",
246+
"Type": "String"
247+
},
248+
{
249+
"Name": "PayloadResponseEmail",
250+
"Type": "String"
251+
},
252+
{
253+
"Name": "PayloadRequestPrivateKeyType",
254+
"Type": "Double"
255+
},
256+
{
257+
"Name": "PayloadResponseValidBeforeTimeSeconds",
258+
"Type": "Double"
259+
},
260+
{
261+
"Name": "PayloadResponseValidAfterTimeSeconds",
262+
"Type": "Double"
263+
},
264+
{
265+
"Name": "PayloadResponseKeyType",
266+
"Type": "Double"
267+
},
268+
{
269+
"Name": "PayloadResponseKeyOrigin",
270+
"Type": "Double"
271+
},
272+
{
273+
"Name": "PayloadResponsePrivateKeyType",
274+
"Type": "Double"
275+
},
276+
{
277+
"Name": "PayloadResponseKeyAlgorithm",
278+
"Type": "Double"
279+
},
280+
{
281+
"Name": "ResourceLabelsService",
282+
"Type": "String"
283+
},
284+
{
285+
"Name": "ResourceLabelsVersion",
286+
"Type": "String"
287+
},
288+
{
289+
"Name": "ResourceLabelsLocation",
290+
"Type": "String"
291+
},
292+
{
293+
"Name": "ResourceLabelsMethod",
294+
"Type": "String"
295+
},
296+
{
297+
"Name": "PayloadRequestFullResourceName",
298+
"Type": "String"
299+
},
300+
{
301+
"Name": "PayloadRequestOptionsRequestedPolicyVersion",
302+
"Type": "Double"
303+
},
304+
{
305+
"Name": "PayloadRequestSkipVisibilityCheck",
306+
"Type": "Boolean"
307+
},
308+
{
309+
"Name": "PayloadRequestPageToken",
310+
"Type": "String"
311+
}
312+
]
313+
}

0 commit comments

Comments
 (0)