Skip to content

Cloud discovery - #228

Draft
alec-w wants to merge 3 commits into
mainfrom
aw/add-cloud-discovery
Draft

Cloud discovery#228
alec-w wants to merge 3 commits into
mainfrom
aw/add-cloud-discovery

Conversation

@alec-w

@alec-w alec-w commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

No description provided.

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

@github-actions

github-actions Bot commented Jul 29, 2026

Copy link
Copy Markdown

The latest Buf updates on your PR. Results from workflow buf-ci / buf (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed✅ passed✅ passed✅ passedJul 31, 2026, 8:03 AM

@alec-w alec-w self-assigned this Jul 29, 2026
@alec-w alec-w added this to the now milestone Jul 29, 2026
@alec-w alec-w changed the title Add cloud discovery Cloud discovery Jul 29, 2026
@alec-w alec-w mentioned this pull request Jul 30, 2026
// Time of last resource update.
google.protobuf.Timestamp last_updated_at = 7 [(google.api.field_behavior) = OUTPUT_ONLY];
// When true, discovery is suspended for this account and existing discovered resources are hidden from findings.
bool suppressed = 8 [(google.api.field_behavior) = OPTIONAL];

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

discovery_suppressed? or discovery_enabled to match the org?

// Whether the first role in role_chain is assumed via SPIFFE JWT-based
// AssumeRoleWithWebIdentity (true, the default) or via ambient credentials
// such as EKS Pod Identity (false).
bool assume_through_oidc = 9 [(google.api.field_behavior) = OPTIONAL];

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

group with other auth fields?

// when false, the first role is assumed via plain AssumeRole using ambient
// credentials (e.g. EKS Pod Identity). Each subsequent role is always assumed
// using the credentials from the prior step.
repeated proto.cloud_provider.v1alpha1.AWSAssumeRoleConfig role_chain = 7 [(google.api.field_behavior) = REQUIRED];

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a common message to factor out here including audience, role_chain and assume_through_oidc?

bool assume_through_oidc = 9 [(google.api.field_behavior) = OPTIONAL];
}

// AWSAgentCoreDiscoveryConfig contains configuration for Amazon Bedrock AgentCore Runtime discovery.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same fields as AWSLambdaDiscoveryConfig? Could they diverge?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants