b/489016956 b/482974687 b/486115090 b/482976229 CloudIdentity

content/response_integrations/google/cloud_identity/.python-version

@@ -0,0 +1 @@
+3.11

content/response_integrations/google/cloud_identity/__init__.py

@@ -0,0 +1,13 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.

content/response_integrations/google/cloud_identity/actions/AddEntityToDetectorURLList.py

@@ -0,0 +1,106 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+from core.action_param_mappers import as_csv, non_empty, required
+from core.action_wrapper import ActionContext, ActionResult, ActionRunner
+from core.consts import INTEGRATION_NAME, INTEGRATION_PARAM_MAPPERS
+from core.manager_providers import build_api_manager
+from TIPCommon.base.action import EntityTypesEnum
+
+if TYPE_CHECKING:
+    from core.api_manager import GoogleCloudIdentityApiManager
+
+
+SCRIPT_NAME = "AddEntityToDetectorURLList"
+SCRIPT_DISPLAY_NAME = "Add Entity To Detector URL List"
+
+
+def prepare_runner() -> ActionRunner:
+    """Prepare action runner.
+
+    Returns:
+        The action runner.
+
+    """
+    param_mappers = {
+        "Detector Policy ID": [required(), non_empty()],
+        "URL": [as_csv()],
+        "Domain": [as_csv()],
+    }
+
+    return ActionRunner(
+        main,
+        integration_name=INTEGRATION_NAME,
+        action_name=f"{INTEGRATION_NAME} - {SCRIPT_NAME}",
+        print_params=True,
+        supported_entities=[EntityTypesEnum.URL, EntityTypesEnum.DOMAIN],
+        enable_default_error_handling=True,
+        error_message_format=f"Error executing action “{SCRIPT_DISPLAY_NAME}”. "
+        f"Reason: {{error}}",
+        action_param_mappers=param_mappers,
+        integration_param_mappers=INTEGRATION_PARAM_MAPPERS,
+        injectables={"api_manager": build_api_manager},
+    )
+
+
+def main(
+    context: ActionContext,
+    result: ActionResult,
+    api_manager: GoogleCloudIdentityApiManager,
+) -> None:
+    """Add entity to detector URL list.
+
+    Args:
+        context: The action context.
+        result: The action result.
+        api_manager: The API manager.
+
+    """
+    logger = context.get_logger()
+    api_manager.test_connectivity()
+
+    policy_id: str = context.action_parameters.get("Detector Policy ID")
+    urls_param: list[str] = context.action_parameters.get("URL", [])
+    domains_param: list[str] = context.action_parameters.get("Domain", [])
+
+    all_urls_to_block: list[str] = []
+    all_urls_to_block.extend(urls_param)
+    all_urls_to_block.extend(domains_param)
+    all_urls_to_block.extend(e.identifier for e in context.get_entities())
+
+    if not all_urls_to_block:
+        result.value = True
+        result.output_message = "No entities, domains or url provided to block"
+        return
+
+    logger.info("Successfully identified URLs to block.")
+
+    updated_policy = api_manager.update_url_list_detector_policy(
+        policy_id=policy_id, urls=all_urls_to_block
+    )
+    result.json_result = updated_policy.to_dict()
+
+    result.value = True
+    urls_str = ", ".join(all_urls_to_block)
+    result.output_message = (
+        f"Successfully blocked the following URLs using Cloud Identity: {urls_str}"
+    )
+
+
+if __name__ == "__main__":
+    prepare_runner().run()

content/response_integrations/google/cloud_identity/actions/AddEntityToDetectorURLList.yaml

@@ -0,0 +1,25 @@
+name: Add Entity To Detector URL List
+description: 'Use the "Add Entity To Detector URL List" action to block specific URLs or domains by adding
+    them to the Cloud Identity Policy detection list. Supported entities: URL, Domain.'
+integration_identifier: CloudIdentity
+parameters:
+-   name: Detector Policy ID
+    default_value: ''
+    type: string
+    description: The unique identifier of the detector policy to update.
+    is_mandatory: true
+-   name: URL
+    default_value: ''
+    type: string
+    description: A comma-separated list of URLs to add to the detector list.
+    is_mandatory: false
+-   name: Domain
+    default_value: ''
+    type: string
+    description: A comma-separated list of domains to add to the detector list.
+    is_mandatory: false
+dynamic_results_metadata:
+-   result_example_path: resources/add_entity_to_detector_url_list_JsonResult_example.json
+    result_name: JsonResult
+    show_result: true
+creator: admin

content/response_integrations/google/cloud_identity/actions/CreatePolicy.py

@@ -0,0 +1,97 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+from core.action_param_mappers import (
+    as_dataclass_from_dict,
+    as_dict_from_yaml,
+    non_empty,
+    required,
+)
+from core.action_wrapper import ActionContext, ActionResult, ActionRunner
+from core.consts import INTEGRATION_DISPLAY_NAME, INTEGRATION_NAME, INTEGRATION_PARAM_MAPPERS
+from core.datamodels import Policy
+from core.manager_providers import build_api_manager
+
+if TYPE_CHECKING:
+    from core.api_manager import GoogleCloudIdentityApiManager
+
+
+SCRIPT_NAME = "CreatePolicy"
+SCRIPT_DISPLAY_NAME = "Create Policy"
+
+
+def prepare_runner() -> ActionRunner:
+    """Prepare action runner.
+
+    Returns:
+        The action runner.
+
+    """
+    param_mappers = {
+        "Policy Entry": [
+            required(),
+            non_empty(),
+            as_dict_from_yaml(),
+            as_dataclass_from_dict(Policy),
+        ],
+    }
+
+    return ActionRunner(
+        main,
+        integration_name=INTEGRATION_NAME,
+        action_name=f"{INTEGRATION_NAME} - {SCRIPT_NAME}",
+        print_params=True,
+        supported_entities=[],
+        enable_default_error_handling=True,
+        error_message_format=f"Error executing action “{SCRIPT_DISPLAY_NAME}”. "
+        f"Reason: {{error}}",
+        action_param_mappers=param_mappers,
+        integration_param_mappers=INTEGRATION_PARAM_MAPPERS,
+        injectables={"api_manager": build_api_manager},
+    )
+
+
+def main(
+    context: ActionContext,
+    result: ActionResult,
+    api_manager: GoogleCloudIdentityApiManager,
+) -> None:
+    """Create a new policy.
+
+    Args:
+        context: The action context.
+        result: The action result.
+        api_manager: The API manager.
+
+    """
+    logger = context.get_logger()
+    api_manager.test_connectivity()
+    logger.info("Getting policy entry parameters...")
+    policy_entry: Policy = context.action_parameters.get("Policy Entry")
+    logger.info("Creating policy entry...")
+    created_policy = api_manager.create_policy(policy_entry)
+    logger.info("Policy entry created successfully...")
+    result.value = True
+    result.json_result = created_policy.to_dict()
+    result.output_message = (
+        f"Successfully added a new policy in {INTEGRATION_DISPLAY_NAME}."
+    )
+
+
+if __name__ == "__main__":
+    prepare_runner().run()

content/response_integrations/google/cloud_identity/actions/CreatePolicy.yaml

@@ -0,0 +1,24 @@
+name: Create Policy
+description: Use the “Create Policy” action to create a new policy entry within Cloud
+    Identity.
+integration_identifier: CloudIdentity
+parameters:
+-   name: Policy Entry
+    default_value: "{\n    \"type\": \"ADMIN\",\n    \"customer\": \"customers/<CUSTOMER_ID>\"\
+        ,\n    \"policyQuery\": {\n        \"query\": \"entity.org_units.exists(org_unit,\
+        \ org_unit.org_unit_id == orgUnitId('<ORG_UNIT_ID>'))\",\n        \"orgUnit\"\
+        : \"orgUnits/<ORG_UNIT_ID>\"\n    },\n    \"setting\": {\n        \"type\"\
+        : \"settings/rule.dlp\",\n        \"value\": {\n            \"display_name\"\
+        : \"test_create_rule\",\n            \"triggers\": [\n                \"google.workspace.chrome.file.v1.download\"\
+        \n            ],\n            \"state\": \"ACTIVE\",\n            \"action\"\
+        : {\n                \"chromeAction\": {\n                    \"warnUser\"\
+        : {}\n                }\n            }\n        }\n    }\n}"
+    type: string
+    description: The JSON object representing the configuration of the policy entry
+        to add.
+    is_mandatory: true
+dynamic_results_metadata:
+-   result_example_path: resources/create_policy_JsonResult_example.json
+    result_name: JsonResult
+    show_result: true
+creator: admin