gcloud compliance-manager frameworks create Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud compliance-manager frameworks create - create a framework
- SYNOPSIS
gcloud compliance-manager frameworks create(FRAMEWORK:--location=LOCATION--organization=ORGANIZATION)[--category=[CATEGORY,…]][--cloud-control-details=[majorRevisionId=MAJORREVISIONID],[name=NAME],[parameters=PARAMETERS]][--description=DESCRIPTION][--display-name=DISPLAY_NAME][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
- Create a framework for a given organization and location.
- EXAMPLES
- To create a framework
my-framework-idin organizationmy-organization-idand locationglobal, run:gcloudcompliance-managerframeworkscreatemy-framework-id--organization=my-organization-id--location=global--description="My framework description"--display-name="My framework display name"--controls='[{"name":"organizations/my-organization-id/locations/global/cloudControls/my\-control-1", "majorRevisionId": "1", "parameters": []}]'\ - POSITIONAL ARGUMENTS
- Framework resource - Identifier. The name of the framework, in the format
organizations/{organization}/locations/{location}/frameworks/{framework_id}.The only supported location isglobal. The arguments in this groupcan be used to specify the attributes of this resource.This must be specified.
FRAMEWORK- ID of the framework or fully qualified identifier for the framework.
To set the
frameworkattribute:- provide the argument
frameworkon the command line.
This positional argument must be specified if any of the other arguments in thisgroup are specified.
- provide the argument
--location=LOCATION- The location id of the framework resource.
To set the
locationattribute:- provide the argument
frameworkon the command line with a fullyspecified name; - provide the argument
--locationon the command line.
- provide the argument
--organization=ORGANIZATION- The organization id of the framework resource.
To set the
organizationattribute:- provide the argument
frameworkon the command line with a fullyspecified name; - provide the argument
--organizationon the command line.
- provide the argument
- Framework resource - Identifier. The name of the framework, in the format
- FLAGS
--category=[CATEGORY,…]- The category of the framework.
CATEGORYmust be one of:assured-workloads- An Assured Workloads framework.
custom-framework- A user-created framework.
data-security- A data security posture framework.
google-best-practices- A Google's best practices framework.
industry-defined-standard- An industry-defined framework.
--cloud-control-details=[majorRevisionId=MAJORREVISIONID],[name=NAME],[parameters=PARAMETERS]- The cloud control details that are directly added without any grouping in theframework.
majorRevisionId- The major version of the cloud control.
name- The name of the cloud control, in the format
organizations/{organization}/locations/{location}/cloudControls/{cloud-control}.The only supported location isglobal. parameters- Parameters are key-value pairs that let you provide your custom locationrequirements, environment requirements, or other settings that are relevant tothe cloud control. An example parameter is
{"name": "location","value":"us-west-1"}.name- The name or key of the parameter.
Shorthand Example:--cloud-control-details=majorRevisionId=int,name=string,parameters=[{name=string}]--cloud-control-details=majorRevisionId=int,name=string,parameters=[{name=string}]
JSON Example:--cloud-control-details='[{"majorRevisionId": int, "name": "string", "parameters": [{"name": "string"}]}]'
File Example:--cloud-control-details=path_to_file.(yaml|json)
--description=DESCRIPTION- The description of the framework. The maximum length is 2000 characters.
--display-name=DISPLAY_NAME- The friendly name of the framework. The maximum length is 200 characters.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - API REFERENCE
- This command uses the
cloudsecuritycompliance/v1API. The fulldocumentation for this API can be found at:https://cloud.google.com/security-command-center#compliance-management
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-11-18 UTC.