- NAME
-
- gcloud compliance-manager frameworks create - create a framework
- SYNOPSIS
-
-
gcloud compliance-manager frameworks create(FRAMEWORK:--location=LOCATION--organization=ORGANIZATION) [--category=[CATEGORY, …]] [--cloud-control-details=[majorRevisionId=MAJORREVISIONID], [name=NAME], [parameters=PARAMETERS]] [--description=DESCRIPTION] [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
- Create a framework for a given organization and location.
- EXAMPLES
- To create a framework
my-framework-idin organizationmy-organization-idand locationglobal, run:gcloud compliance-manager frameworks create my-framework-id --organization = my-organization-id --location = global --description = "My framework description" --display-name = "My framework display name" --controls = '[{"name":"organizations/my-organization-id/locations/global/cloudControls/my\ -control-1", "majorRevisionId": "1", "parameters": []}]' \ - POSITIONAL ARGUMENTS
-
- Framework resource - Identifier. The name of the framework, in the format
organizations/{organization}/locations/{location}/frameworks/{framework_id}. The only supported location isglobal. The arguments in this group can be used to specify the attributes of this resource.This must be specified.
-
FRAMEWORK - ID of the framework or fully qualified identifier for the framework.
To set the
frameworkattribute:- provide the argument
frameworkon the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
- provide the argument
-
--location=LOCATION - The location id of the framework resource.
To set the
locationattribute:- provide the argument
frameworkon the command line with a fully specified name; - provide the argument
--locationon the command line.
- provide the argument
-
--organization=ORGANIZATION - The organization id of the framework resource.
To set the
organizationattribute:- provide the argument
frameworkon the command line with a fully specified name; - provide the argument
--organizationon the command line.
- provide the argument
-
- Framework resource - Identifier. The name of the framework, in the format
- FLAGS
-
-
--category=[CATEGORY,…] - The category of the framework.
CATEGORYmust be one of:-
assured-workloads - An Assured Workloads framework.
-
custom-framework - A user-created framework.
-
data-security - A data security posture framework.
-
google-best-practices - A Google's best practices framework.
-
industry-defined-standard - An industry-defined framework.
-
-
--cloud-control-details=[majorRevisionId=MAJORREVISIONID],[name=NAME],[parameters=PARAMETERS] - The cloud control details that are directly added without any grouping in the
framework.
-
majorRevisionId - The major version of the cloud control.
-
name - The name of the cloud control, in the format
organizations/{organization}/locations/{location}/cloudControls/{cloud-control}. The only supported location isglobal. -
parameters - Parameters are key-value pairs that let you provide your custom location
requirements, environment requirements, or other settings that are relevant to
the cloud control. An example parameter is
{"name": "location","value": "us-west-1"}.-
name - The name or key of the parameter.
-
Shorthand Example:--cloud-control-details = majorRevisionId = int,name = string,parameters =[{ name = string }] --cloud-control-details = majorRevisionId = int,name = string,parameters =[{ name = string }]
JSON Example:--cloud-control-details = '[{"majorRevisionId": int, "name": "string", "parameters": [{"name": "string"}]}]'
File Example:--cloud-control-details = path_to_file. ( yaml | json )
-
-
--description=DESCRIPTION - The description of the framework. The maximum length is 2000 characters.
-
--display-name=DISPLAY_NAME - The friendly name of the framework. The maximum length is 200 characters.
-
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$ gcloud helpfor details. - API REFERENCE
- This command uses the
cloudsecuritycompliance/v1API. The full documentation for this API can be found at: https://cloud.google.com/security-command-center#compliance-management
gcloud compliance-manager frameworks create
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-05-27 UTC.

