- NAME
-
- gcloud scc postures extract - extract a Cloud Security Command Center posture from a workload
- SYNOPSIS
-
-
gcloud scc postures extract(POSTURE:--location=LOCATION--organization=ORGANIZATION)--workload=WORKLOAD[--async] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Extract a Cloud Security Command Center (SCC) posture from a workload. First
argument is the parent and name of the posture to be created. The workload from
where the organization policies need to be extracted is provided via
'--workload' flag.
Extracted posture is returned as the response of the command. LRO operation ID is printed as the standard output.
- EXAMPLES
- Extract a posture named
posture-foo-1within parentorganizations/123/locations/global(i.e. a posture in organization123, locationglobal, with idposture-foo-1) from workloadprojects/456:gcloud scc postures extract organizations/123/locations/global/postures/posture-foo-1 --workload = projects/456 - POSITIONAL ARGUMENTS
-
- Posture resource - The name of the posture to be created. For example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
This must be specified.
-
POSTURE - ID of the posture or fully qualified identifier for the posture.
To set the
postureattribute:- provide the argument
postureon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--location=LOCATION - ID of the location where the resource exists (for example, global).
To set the
locationattribute:- provide the argument
postureon the command line with a fully specified name; - provide the argument
--locationon the command line.
- provide the argument
-
--organization=ORGANIZATION - ID of the organization which is the parent of the resource.
To set the
organizationattribute:- provide the argument
postureon the command line with a fully specified name; - provide the argument
--organizationon the command line.
- provide the argument
-
- Posture resource - The name of the posture to be created. For example
organizations/<organizationID>/locations/<location>/postures/<postureID>.
The arguments in this group can be used to specify the attributes of this
resource.
- REQUIRED FLAGS
-
-
--workload=WORKLOAD - Workload from where policies has to be extracted into a posture. It can be in
one of the following formats:
projects/projectNumber,folders/folderNumber,organizations/organizationNumber.
-
- OPTIONAL FLAGS
-
-
--async - Return immediately, without waiting for the operation in progress to complete.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
- This command uses the
securityposture/v1API. The full documentation for this API can be found at: https://cloud.google.com/security-command-center - NOTES
- This variant is also available:
gcloud alpha scc postures extract
gcloud scc postures extract
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

