为 Pub/Sub 启用发现结果通知

resource "google_pubsub_topic" "scc_v2_organization_notification_config" {   name = "my-topic" }  resource "google_scc_v2_organization_notification_config" "custom_organization_notification_config" {   config_id    = "my-config"   organization = "123456789"   location     = "global"   description  = "My custom Cloud Security Command Center Finding Organization Notification Configuration"   pubsub_topic = google_pubsub_topic.scc_v2_organization_notification_config.id    streaming_config {     filter = "category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\""   } } 

resource "google_folder" "folder" {   parent       = "organizations/123456789"   display_name = "folder-name" }  resource "google_pubsub_topic" "scc_v2_folder_notification_config" {   name = "my-topic" }  resource "google_scc_v2_folder_notification_config" "custom_notification_config" {   config_id    = "my-config"   folder       = google_folder.folder.folder_id   location     = "global"   description  = "My custom Cloud Security Command Center Finding Notification Configuration"   pubsub_topic =  google_pubsub_topic.scc_v2_folder_notification_config.id    streaming_config {     filter = "category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\""   } } 

resource "google_pubsub_topic" "scc_v2_project_notification" {   name = "my-topic" }  resource "google_scc_v2_project_notification_config" "custom_notification_config" {   config_id    = "my-config"   project      = "my-project-name"   location     = "global"   description  = "My custom Cloud Security Command Center Finding Notification Configuration"   pubsub_topic =  google_pubsub_topic.scc_v2_project_notification.id    streaming_config {     filter = "category = \"OPEN_FIREWALL\" AND state = \"ACTIVE\""   } } 

import ( 	"context" 	"fmt" 	"io"  	securitycenter "cloud.google.com/go/securitycenter/apiv2" 	"cloud.google.com/go/securitycenter/apiv2/securitycenterpb" )  func createNotificationConfig(w io.Writer, orgID string, pubsubTopic string, notificationConfigID string) error { 	// orgID := "your-org-id" 	// pubsubTopic := "projects/{your-project}/topics/{your-topic}" 	// notificationConfigID := "your-config-id"  	ctx := context.Background() 	client, err := securitycenter.NewClient(ctx)  	if err != nil { 		return fmt.Errorf("securitycenter.NewClient: %w", err) 	} 	defer client.Close()  	req := &securitycenterpb.CreateNotificationConfigRequest{ 		// Parent must be in one of the following formats: 		//		"organizations/{orgId}/locations/global" 		//		"projects/{projectId}/locations/global" 		//		"folders/{folderId}/locations/global" 		Parent:   fmt.Sprintf("organizations/%s/locations/global", orgID), 		ConfigId: notificationConfigID, 		NotificationConfig: &securitycenterpb.NotificationConfig{ 			Description: "Go sample config", 			PubsubTopic: pubsubTopic, 			NotifyConfig: &securitycenterpb.NotificationConfig_StreamingConfig_{ 				StreamingConfig: &securitycenterpb.NotificationConfig_StreamingConfig{ 					Filter: `state = "ACTIVE"`, 				}, 			}, 		}, 	}  	notificationConfig, err := client.CreateNotificationConfig(ctx, req) 	if err != nil { 		return fmt.Errorf("Failed to create notification config: %w", err) 	} 	fmt.Fprintln(w, "New NotificationConfig created: ", notificationConfig)  	return nil } 

 package vtwo.notifications;  import com.google.cloud.securitycenter.v2.LocationName; import com.google.cloud.securitycenter.v2.NotificationConfig; import com.google.cloud.securitycenter.v2.SecurityCenterClient; import java.io.IOException;  public class CreateNotification {    public static void main(String[] args) throws IOException {     // parentId: must be in one of the following formats:     //    "organizations/{organization_id}"     //    "projects/{project_id}"     //    "folders/{folder_id}"     String parentId = "{parent-id}";     String topicName = "{your-topic}";     String notificationConfigId = "{your-notification-id}";     // Specify the location of the notification config.     String location = "global";      createNotificationConfig(parentId, location, topicName, notificationConfigId);   }    // Crete a notification config.   // Ensure the ServiceAccount has the "pubsub.topics.setIamPolicy" permission on the new topic.   public static NotificationConfig createNotificationConfig(       String parentId, String location, String topicName, String notificationConfigId)       throws IOException {     // Initialize client that will be used to send requests. This client only needs to be created     // once, and can be reused for multiple requests. After completing all of your requests, call     // the "close" method on the client to safely clean up any remaining background resources.     try (SecurityCenterClient client = SecurityCenterClient.create()) {        String pubsubTopic = String.format("projects/%s/topics/%s", parentId, topicName);        NotificationConfig notificationConfig = NotificationConfig.newBuilder()           .setDescription("Java notification config")           .setPubsubTopic(pubsubTopic)           .setStreamingConfig(               NotificationConfig.StreamingConfig.newBuilder().setFilter("state = \"ACTIVE\"")                   .build())           .build();        NotificationConfig response = client.createNotificationConfig(           LocationName.of(parentId, location), notificationConfig, notificationConfigId);        System.out.printf("Notification config was created: %s%n", response);       return response;     }   } }

// npm install '@google-cloud/security-center' const {SecurityCenterClient} = require('@google-cloud/security-center').v2; const uuidv1 = require('uuid').v1;  const client = new SecurityCenterClient(); /*  *  Required. Resource name of the new notification config's parent. Its format  *  is "organizations/[organization_id]/locations/[location_id]",  *  "folders/[folder_id]/locations/[location_id]", or  *  "projects/[project_id]/locations/[location_id]".  */ const parent = `projects/${projectId}/locations/${location}`;  /**  *  Required.  *  Unique identifier provided by the client within the parent scope.  *  It must be between 1 and 128 characters and contain alphanumeric  *  characters, underscores, or hyphens only.  */ const configId = 'notif-config-test-node-create-' + uuidv1();  // pubsubTopic = "projects/{your-project}/topics/{your-topic}"; const pubsubTopic = `projects/${projectId}/topics/${topicName}`;  /**  *  Required. The notification config being created. The name and the service  *  account will be ignored as they are both output only fields on this  *  resource.  */ const notificationConfig = {   description: 'Sample config for node v2',   pubsubTopic: pubsubTopic,   streamingConfig: {filter: 'state = "ACTIVE"'}, };  // Build the request. const createNotificationRequest = {   parent: parent,   configId: configId,   notificationConfig: notificationConfig, };  async function createNotificationConfig() {   const [response] = await client.createNotificationConfig(     createNotificationRequest   );   console.log('Notification configuration creation successful: %j', response); }  await createNotificationConfig();

def create_notification_config(     parent_id, location_id, pubsub_topic, notification_config_id ) -> NotificationConfig:     """     This method is used to create the Notification Config.     Args:         parent_id: must be in one of the following formats:             "organizations/{organization_id}"             "projects/{project_id}"             "folders/{folder_id}"         location_id: "global"         pubsub_topic: "projects/{your-project-id}/topics/{your-topic-id}"         notification_config_id: "your-config-id"       Ensure this ServiceAccount has the "pubsub.topics.setIamPolicy" permission on the new topic.     """     from google.cloud import securitycenter_v2 as securitycenter_v2      client = securitycenter_v2.SecurityCenterClient()     parent_id = parent_id + "/locations/" + location_id     response = client.create_notification_config(         request={             "parent": parent_id,             "config_id": notification_config_id,             "notification_config": {                 "description": "Notification for active findings",                 "pubsub_topic": pubsub_topic,                 "streaming_config": {"filter": 'state = "ACTIVE"'},             },         }     )     print(f"create notification config response:{response}")     return response