gcloud scc assets update-marks - update Cloud Security Command Center asset's security marks

gcloud scc assets update-marks(ASSET :--organization=ORGANIZATION)[--security-marks=[KEY=VALUE,…]][--start-time=START_TIME][--update-mask=UPDATE_MASK][GCLOUD_WIDE_FLAG …]

gcloudsccassetsupdate-marks5678--organization=123456--security-marks="key1=val1.1"--update-mask="marks.key1"

Update value of security mark (key1) and delete other marks on asset 5678 underorganization 123456:

gcloudsccassetsupdate-marks5678--organization=123456--security-marks="key1=updatedVal"

Update value of security mark (key1) and delete other marks on asset 5678 underproject example-project:

gcloudsccassetsupdate-marksprojects/example-project/assets/5678--security-marks="key1=updatedVal"

Update value of security mark (key1) and delete other marks on asset 5678 underfolder 456:

gcloudsccassetsupdate-marksfolders/456/assets/5678--security-marks="key1=updatedVal"

Delete all security marks on asset 5678 under organization 123456:

gcloudsccassetsupdate-marks5678--organization=123456--security-marks=""

Asset resource - The asset to be used for the SCC (Security Command Center)command. The arguments in this group can be used to specify the attributes ofthis resource.

This must be specified.

ASSET

ID of the asset or fully qualified identifier for the asset.

To set theasset attribute:

• provide the argumentasset on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--organization=ORGANIZATION

(Optional) If the full resource name isn't provided e.g. organizations/123, thenprovide the organization id which is the suffix of the organization. Example:organizations/123, the id is 123.To set theorganization attribute:

• provide the argumentasset on the command line with a fullyspecified name;
• provide the argument--organization on the command line;
• Set the organization property in configuration usinggcloud config setscc/organization if it is not specified in command line..

--security-marks=[KEY=VALUE,…]

SecurityMarks resource to be passed as the request body. It's a key=value pairseparated by comma (,). For example: --security-marks="key1=val1,key2=val2".

--start-time=START_TIME

Time at which the updated SecurityMarks take effect. See$gcloud topic datetimesfor information on supported time formats.

--update-mask=UPDATE_MASK

Use update-mask if you want to selectively update marks represented by--security-marks flag. For example: --update-mask="marks.key1,marks.key2". Ifyou want to override all the marks for the given asset either skip theupdate-mask flag or provide an empty value (--update-mask '') for it.

Run$gcloud help for details.