datadog_api_client 2.10.0 → 2.11.0

data/.generator/schemas/v2/openapi.yaml

@@ -173,6 +173,13 @@ components:
       required: true
       schema:
         type: string
+    GCPSTSServiceAccountID:
+      description: Your GCP STS enabled service account's unique ID.
+      in: path
+      name: account_id
+      required: true
+      schema:
+        type: string
     IncidentAttachmentFilterQueryParameter:
       description: Specifies which types of attachments are included in the response.
       explode: false
@@ -377,6 +384,13 @@ components:
       required: true
       schema:
         type: string
+    SchemaVersion:
+      description: The schema version desired in the response.
+      in: query
+      name: schema_version
+      required: false
+      schema:
+        $ref: '#/components/schemas/ServiceDefinitionSchemaVersions'
     SecurityFilterID:
       description: The ID of the security filter.
       in: path
@@ -2899,6 +2913,66 @@ components:
             type: number
           type: array
       type: object
+    DetailedFinding:
+      description: A single finding with with message and resource configuration.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/DetailedFindingAttributes'
+        id:
+          $ref: '#/components/schemas/FindingID'
+        type:
+          $ref: '#/components/schemas/DetailedFindingType'
+      type: object
+    DetailedFindingAttributes:
+      description: The JSON:API attributes of the detailed finding.
+      properties:
+        evaluation:
+          $ref: '#/components/schemas/FindingEvaluation'
+        evaluation_changed_at:
+          $ref: '#/components/schemas/FindingEvaluationChangedAt'
+        message:
+          description: The remediation message for this finding.
+          example: '## Remediation
+
+
+            ### From the console
+
+
+            1. Go to Storage Account
+
+            2. For each Storage Account, navigate to Data Protection
+
+            3. Select Set soft delete enabled and enter the number of days to retain
+            soft deleted data.'
+          type: string
+        mute:
+          $ref: '#/components/schemas/FindingMute'
+        resource:
+          $ref: '#/components/schemas/FindingResource'
+        resource_configuration:
+          description: The resource configuration for this finding.
+          type: object
+        resource_discovery_date:
+          $ref: '#/components/schemas/FindingResourceDiscoveryDate'
+        resource_type:
+          $ref: '#/components/schemas/FindingResourceType'
+        rule:
+          $ref: '#/components/schemas/FindingRule'
+        status:
+          $ref: '#/components/schemas/FindingStatus'
+        tags:
+          $ref: '#/components/schemas/FindingTags'
+      type: object
+    DetailedFindingType:
+      default: detailed_finding
+      description: The JSON:API type for findings that have the message and resource
+        configuration.
+      enum:
+      - detailed_finding
+      example: detailed_finding
+      type: string
+      x-enum-varnames:
+      - DETAILED_FINDING
     Event:
       description: The metadata associated with a request.
       properties:
@@ -3599,6 +3673,164 @@ components:
             $ref: '#/components/schemas/FastlyServiceResponse'
           type: array
       type: object
+    Finding:
+      description: A single finding without message and resource configuration.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/FindingAttributes'
+        id:
+          $ref: '#/components/schemas/FindingID'
+        type:
+          $ref: '#/components/schemas/FindingType'
+      type: object
+    FindingAttributes:
+      description: The JSON:API attributes of the finding.
+      properties:
+        evaluation:
+          $ref: '#/components/schemas/FindingEvaluation'
+        evaluation_changed_at:
+          $ref: '#/components/schemas/FindingEvaluationChangedAt'
+        mute:
+          $ref: '#/components/schemas/FindingMute'
+        resource:
+          $ref: '#/components/schemas/FindingResource'
+        resource_discovery_date:
+          $ref: '#/components/schemas/FindingResourceDiscoveryDate'
+        resource_type:
+          $ref: '#/components/schemas/FindingResourceType'
+        rule:
+          $ref: '#/components/schemas/FindingRule'
+        status:
+          $ref: '#/components/schemas/FindingStatus'
+        tags:
+          $ref: '#/components/schemas/FindingTags'
+      type: object
+    FindingEvaluation:
+      description: The evaluation of the finding.
+      enum:
+      - pass
+      - fail
+      example: pass
+      type: string
+      x-enum-varnames:
+      - PASS
+      - FAIL
+    FindingEvaluationChangedAt:
+      description: The date on which the evaluation for this finding changed (Unix
+        ms).
+      example: 1678721573794
+      format: int64
+      minimum: 1
+      type: integer
+    FindingID:
+      description: The unique ID for this finding.
+      example: AQAAAYbb1i0gijTHEQAAAABBWWJiMWkwZ0FBQ2FuNzBJVGZXZ3B3QUE
+      type: string
+    FindingMute:
+      additionalProperties: false
+      description: Information about the mute status of this finding.
+      properties:
+        description:
+          description: Additional information about the reason why this finding is
+            muted.
+          example: To be resolved later
+          type: string
+        expiration_date:
+          description: The end of the mute period.
+          example: 1778721573794
+          format: int64
+          type: integer
+        muted:
+          description: Whether this finding is muted.
+          example: true
+          type: boolean
+        reason:
+          $ref: '#/components/schemas/FindingMuteReason'
+        start_date:
+          description: The start of the mute period.
+          example: 1678721573794
+          format: int64
+          type: integer
+        uuid:
+          description: The ID of the user who muted this finding.
+          example: e51c9744-d158-11ec-ad23-da7ad0900002
+          type: string
+      type: object
+    FindingMuteReason:
+      description: The reason why this finding is muted.
+      enum:
+      - ACCEPTED_RISK
+      - PENDING_FIX
+      - FALSE_POSITIVE
+      - OTHER
+      example: ACCEPTED_RISK
+      type: string
+      x-enum-varnames:
+      - ACCEPTED_RISK
+      - PENDING_FIX
+      - FALSE_POSITIVE
+      - OTHER
+    FindingResource:
+      description: The resource name of this finding.
+      example: my_resource_name
+      type: string
+    FindingResourceDiscoveryDate:
+      description: The date on which the resource was discovered (Unix ms).
+      example: 1678721573794
+      format: int64
+      minimum: 1
+      type: integer
+    FindingResourceType:
+      description: The resource type of this finding.
+      example: azure_storage_account
+      type: string
+    FindingRule:
+      additionalProperties: false
+      description: The rule that triggered this finding.
+      properties:
+        id:
+          description: The ID of the rule that triggered this finding.
+          example: dv2-jzf-41i
+          type: string
+        name:
+          description: The name of the rule that triggered this finding.
+          example: Soft delete is enabled for Azure Storage
+          type: string
+      type: object
+    FindingStatus:
+      description: The status of the finding.
+      enum:
+      - critical
+      - high
+      - medium
+      - low
+      - info
+      example: critical
+      type: string
+      x-enum-varnames:
+      - CRITICAL
+      - HIGH
+      - MEDIUM
+      - LOW
+      - INFO
+    FindingTags:
+      description: The tags associated with this finding.
+      example:
+      - cloud_provider:aws
+      - myTag:myValue
+      items:
+        description: The list of tags.
+        type: string
+      type: array
+    FindingType:
+      default: finding
+      description: The JSON:API type for findings.
+      enum:
+      - finding
+      example: finding
+      type: string
+      x-enum-varnames:
+      - FINDING
     FormulaLimit:
       description: Message for specifying limits to the number of values returned
         by a query.
@@ -3704,6 +3936,150 @@ components:
           nullable: true
           type: array
       type: object
+    GCPSTSDelegateAccount:
+      description: Datadog principal service account info.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/GCPSTSDelegateAccountAttributes'
+        id:
+          description: The ID of the delegate service account.
+          example: ddgci-1a19n28hb1a812221893@datadog-gci-sts-us5-prod.iam.gserviceaccount.com
+          type: string
+        type:
+          $ref: '#/components/schemas/GCPSTSDelegateAccountType'
+      type: object
+    GCPSTSDelegateAccountAttributes:
+      description: Your delegate account attributes.
+      properties:
+        delegate_account_email:
+          description: Your organization's Datadog principal email address.
+          example: ddgci-1a19n28hb1a812221893@datadog-gci-sts-us5-prod.iam.gserviceaccount.com
+          type: string
+      type: object
+    GCPSTSDelegateAccountResponse:
+      description: Your delegate service account response data.
+      properties:
+        data:
+          $ref: '#/components/schemas/GCPSTSDelegateAccount'
+      type: object
+    GCPSTSDelegateAccountType:
+      default: gcp_sts_delegate
+      description: The type of account.
+      enum:
+      - gcp_sts_delegate
+      example: gcp_sts_delegate
+      type: string
+      x-enum-varnames:
+      - GCP_STS_DELEGATE
+    GCPSTSServiceAccount:
+      description: Info on your service account.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/GCPSTSServiceAccountAttributes'
+        id:
+          description: Your service account's unique ID.
+          example: d291291f-12c2-22g4-j290-123456678897
+          type: string
+        meta:
+          $ref: '#/components/schemas/GCPServiceAccountMeta'
+        type:
+          $ref: '#/components/schemas/GCPServiceAccountType'
+      type: object
+    GCPSTSServiceAccountAttributes:
+      description: Attributes associated with your service account.
+      properties:
+        automute:
+          description: Silence monitors for expected GCE instance shutdowns.
+          type: boolean
+        client_email:
+          description: Your service account email address.
+          example: datadog-service-account@test-project.iam.gserviceaccount.com
+          type: string
+        host_filters:
+          description: Your Host Filters.
+          items:
+            description: Host Filters
+            type: string
+          type: array
+        is_cspm_enabled:
+          description: When enabled, Datadog performs configuration checks across
+            your Google Cloud environment by continuously scanning every resource.
+          type: boolean
+      type: object
+    GCPSTSServiceAccountCreateRequest:
+      description: Data on your newly generated service account.
+      properties:
+        data:
+          $ref: '#/components/schemas/GCPSTSServiceAccountData'
+      type: object
+    GCPSTSServiceAccountData:
+      description: Additional metadata on your generated service account.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/GCPSTSServiceAccountAttributes'
+        type:
+          $ref: '#/components/schemas/GCPServiceAccountType'
+      type: object
+    GCPSTSServiceAccountResponse:
+      description: The account creation response.
+      properties:
+        data:
+          $ref: '#/components/schemas/GCPSTSServiceAccount'
+      type: object
+    GCPSTSServiceAccountUpdateRequest:
+      description: Service account info.
+      properties:
+        data:
+          $ref: '#/components/schemas/GCPSTSServiceAccountUpdateRequestData'
+      type: object
+    GCPSTSServiceAccountUpdateRequestData:
+      description: Data on your service account.
+      properties:
+        attributes:
+          $ref: '#/components/schemas/GCPSTSServiceAccountAttributes'
+        id:
+          description: Your service account's unique ID.
+          example: d291291f-12c2-22g4-j290-123456678897
+          type: string
+        type:
+          $ref: '#/components/schemas/GCPServiceAccountType'
+      type: object
+    GCPSTSServiceAccountsResponse:
+      description: Object containing all your STS enabled accounts.
+      properties:
+        data:
+          description: Array of GCP STS enabled service accounts.
+          items:
+            $ref: '#/components/schemas/GCPSTSServiceAccount'
+          type: array
+      type: object
+    GCPServiceAccountMeta:
+      description: Additional information related to your service account.
+      properties:
+        accessible_projects:
+          description: The current list of projects accessible from your service account.
+          items:
+            description: List of GCP projects.
+            type: string
+          type: array
+      type: object
+    GCPServiceAccountType:
+      default: gcp_service_account
+      description: The type of account.
+      enum:
+      - gcp_service_account
+      example: gcp_service_account
+      type: string
+      x-enum-varnames:
+      - GCP_SERVICE_ACCOUNT
+    GetFindingResponse:
+      description: The expected response schema when getting a finding.
+      properties:
+        data:
+          $ref: '#/components/schemas/DetailedFinding'
+      required:
+      - data
+      type: object
     GetTeamMembershipsSort:
       description: Specifies the order of returned team memberships
       enum:
@@ -4272,6 +4648,11 @@ components:
     IncidentCreateAttributes:
       description: The incident's attributes for a create request.
       properties:
+        customer_impact_scope:
+          description: Required if `customer_impacted:"true"`. A summary of the impact
+            customers experienced during the incident.
+          example: Example customer impact scope
+          type: string
         customer_impacted:
           description: A flag indicating whether the incident caused customer impact.
           example: false
@@ -5769,6 +6150,49 @@ components:
             $ref: '#/components/schemas/ApplicationKeyResponseIncludedItem'
           type: array
       type: object
+    ListFindingsData:
+      description: Array of findings.
+      items:
+        $ref: '#/components/schemas/Finding'
+      type: array
+    ListFindingsMeta:
+      additionalProperties: false
+      description: Metadata for pagination.
+      properties:
+        page:
+          $ref: '#/components/schemas/ListFindingsPage'
+        snapshot_timestamp:
+          description: The point in time corresponding to the listed findings.
+          example: 1678721573794
+          format: int64
+          minimum: 1
+          type: integer
+      type: object
+    ListFindingsPage:
+      additionalProperties: false
+      description: Pagination and findings count information.
+      properties:
+        cursor:
+          description: The cursor used to paginate requests.
+          example: eyJhZnRlciI6IkFRQUFBWWJiaEJXQS1OY1dqUUFBQUFCQldXSmlhRUpYUVVGQlJFSktkbTlDTUdaWFRVbDNRVUUiLCJ2YWx1ZXMiOlsiY3JpdGljYWwiXX0=
+          type: string
+        total_filtered_count:
+          description: The total count of findings after the filter has been applied.
+          example: 213
+          format: int64
+          type: integer
+      type: object
+    ListFindingsResponse:
+      description: The expected response schema when listing findings.
+      properties:
+        data:
+          $ref: '#/components/schemas/ListFindingsData'
+        meta:
+          $ref: '#/components/schemas/ListFindingsMeta'
+      required:
+      - data
+      - meta
+      type: object
     ListTeamsInclude:
       description: Included related resources optionally requested.
       enum:
@@ -10812,12 +11236,14 @@ components:
       - none
       - false_positive
       - testing_or_maintenance
+      - investigated_case_opened
       - other
       type: string
       x-enum-varnames:
       - NONE
       - FALSE_POSITIVE
       - TESTING_OR_MAINTENANCE
+      - INVESTIGATED_CASE_OPENED
       - OTHER
     SecurityMonitoringSignalAssigneeUpdateAttributes:
       description: Attributes describing the new assignee of a security signal.
@@ -12226,6 +12652,17 @@ components:
       - $ref: '#/components/schemas/ServiceDefinitionV2'
       - $ref: '#/components/schemas/ServiceDefinitionV2Dot1'
       type: object
+    ServiceDefinitionSchemaVersions:
+      description: Schema versions
+      enum:
+      - v1
+      - v2
+      - v2.1
+      type: string
+      x-enum-varnames:
+      - V1
+      - V2
+      - V2_1
     ServiceDefinitionV1:
       deprecated: true
       description: Deprecated - Service definition V1 for providing additional service
@@ -13230,18 +13667,12 @@ components:
         handle:
           description: The team's identifier
           example: example-team
-          maxLength: 64
+          maxLength: 195
           type: string
-        link_count:
-          description: The number of links belonging to the team
-          format: int32
-          maximum: 2147483647
-          readOnly: true
-          type: integer
         name:
           description: The name of the team
           example: Example Team
-          maxLength: 64
+          maxLength: 200
           type: string
       required:
       - handle
@@ -13535,12 +13966,6 @@ components:
           example: example-team
           maxLength: 64
           type: string
-        link_count:
-          description: The number of links belonging to the team
-          format: int32
-          maximum: 2147483647
-          readOnly: true
-          type: integer
         name:
           description: The name of the team
           example: Example Team
@@ -14287,6 +14712,9 @@ components:
         authorizationCode:
           authorizationUrl: /oauth2/v1/authorize
           scopes:
+            apm_service_catalog_read: View service catalog and service definitions.
+            apm_service_catalog_write: Add, modify, and delete service catalog definitions
+              when those definitions are maintained by Datadog.
             dashboards_read: View dashboards.
             dashboards_write: Create and change dashboards.
             events_read: Read Events data.
@@ -16559,6 +16987,154 @@ paths:
       x-unstable: '**Note**: This endpoint is in public beta.
 
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/integration/gcp/accounts:
+    get:
+      description: List all GCP STS-enabled service accounts configured in your Datadog
+        account.
+      operationId: ListGCPSTSAccounts
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GCPSTSServiceAccountsResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: List all GCP STS-enabled service accounts
+      tags:
+      - GCP Integration
+    post:
+      description: Create a new entry within Datadog for your STS enabled service
+        account.
+      operationId: CreateGCPSTSAccount
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/GCPSTSServiceAccountCreateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GCPSTSServiceAccountResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '401':
+          $ref: '#/components/responses/UnauthorizedResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Create a new entry for your service account
+      tags:
+      - GCP Integration
+      x-codegen-request-body-name: body
+  /api/v2/integration/gcp/accounts/{account_id}:
+    delete:
+      description: Delete an STS enabled GCP account from within Datadog.
+      operationId: DeleteGCPSTSAccount
+      parameters:
+      - $ref: '#/components/parameters/GCPSTSServiceAccountID'
+      responses:
+        '204':
+          description: No Content
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Delete an STS enabled GCP Account
+      tags:
+      - GCP Integration
+    patch:
+      description: Update an STS enabled service account.
+      operationId: UpdateGCPSTSAccount
+      parameters:
+      - $ref: '#/components/parameters/GCPSTSServiceAccountID'
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/GCPSTSServiceAccountUpdateRequest'
+        required: true
+      responses:
+        '201':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GCPSTSServiceAccountResponse'
+          description: OK
+        '400':
+          $ref: '#/components/responses/BadRequestResponse'
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Update STS Service Account
+      tags:
+      - GCP Integration
+      x-codegen-request-body-name: body
+  /api/v2/integration/gcp/sts_delegate:
+    get:
+      description: List your Datadog-GCP STS delegate account configured in your Datadog
+        account.
+      operationId: GetGCPSTSDelegate
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GCPSTSDelegateAccountResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: List delegate account
+      tags:
+      - GCP Integration
+      x-codegen-request-body-name: body
+    post:
+      description: Create a Datadog GCP principal.
+      operationId: MakeGCPSTSDelegate
+      requestBody:
+        content:
+          application/json:
+            schema:
+              example: {}
+              type: object
+        description: Create a delegate service account within Datadog.
+        required: false
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GCPSTSDelegateAccountResponse'
+          description: OK
+        '403':
+          $ref: '#/components/responses/NotAuthorizedResponse'
+        '409':
+          $ref: '#/components/responses/ConflictResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      summary: Create a Datadog GCP principal
+      tags:
+      - GCP Integration
+      x-codegen-request-body-name: body
   /api/v2/integration/opsgenie/services:
     get:
       description: Get a list of all services from the Datadog Opsgenie integration.
@@ -17426,8 +18002,8 @@ paths:
         Add the `Content-Encoding: gzip` header to the request when sending compressed
         logs.
 
-        Log events can be submitted up to 18 hours in the past and 2 hours in the
-        future.
+        Log events can be submitted with a timestamp that is up to 18 hours in the
+        past.
 
 
         The status codes answered by the HTTP API are:
@@ -18467,7 +19043,7 @@ paths:
               schema:
                 $ref: '#/components/schemas/APIErrorResponse'
           description: Too Many Requests
-      summary: Configure tags for multiple metrics
+      summary: Delete tags for multiple metrics
       tags:
       - Metrics
       x-codegen-request-body-name: body
@@ -19182,6 +19758,202 @@ paths:
       summary: List permissions
       tags:
       - Roles
+  /api/v2/posture_management/findings:
+    get:
+      description: "Get a list of CSPM findings.\n\n### Filtering\n\nFilters can be
+        applied by appending query parameters to the URL.\n\n  - Using a single filter:
+        `?filter[attribute_key]=attribute_value`\n  - Chaining filters: `?filter[attribute_key]=attribute_value&filter[attribute_key]=attribute_value...`\n
+        \ - Filtering on tags: `?filter[tags]=tag_key:tag_value&filter[tags]=tag_key_2:tag_value_2`\n\nHere,
+        `attribute_key` can be any of the filter keys described further below.\n\nQuery
+        parameters of type `integer` support comparison operators (`>`, `>=`, `<`,
+        `<=`). This is particularly useful when filtering by `evaluation_changed_at`
+        or `resource_discovery_timestamp`. For example: `?filter[evaluation_changed_at]=>20123123121`.\n\nYou
+        can also use the negation operator on strings. For example, use `filter[resource_type]=-aws*`
+        to filter for any non-AWS resources.\n\nThe operator must come after the equal
+        sign. For example, to filter with the `>=` operator, add the operator after
+        the equal sign: `filter[evaluation_changed_at]=>=1678809373257`.\n\n### Response\n\nThe
+        response includes an array of finding objects, pagination metadata, and a
+        count of items that match the query.\n\nEach finding object contains the following:\n\n-
+        The finding ID that can be used in a `GetFinding` request to retrieve the
+        full finding details.\n- Core attributes, including status, evaluation, high-level
+        resource details, muted state, and rule details.\n- `evaluation_changed_at`
+        and `resource_discovery_date` time stamps.\n- An array of associated tags.\n"
+      operationId: ListFindings
+      parameters:
+      - description: Limit the number of findings returned. Must be <= 1000.
+        example: 50
+        in: query
+        name: page[limit]
+        required: false
+        schema:
+          default: 100
+          format: int64
+          maximum: 1000
+          minimum: 1
+          type: integer
+      - description: Return findings for a given snapshot of time (Unix ms).
+        example: 1678721573794
+        in: query
+        name: snapshot_timestamp
+        required: false
+        schema:
+          format: int64
+          minimum: 1
+          type: integer
+      - description: Return the next page of findings pointed to by the cursor.
+        example: eyJhZnRlciI6IkFRQUFBWWJiaEJXQS1OY1dqUUFBQUFCQldXSmlhRUpYUVVGQlJFSktkbTlDTUdaWFRVbDNRVUUiLCJ2YWx1ZXMiOlsiY3JpdGljYWwiXX0=
+        in: query
+        name: page[cursor]
+        required: false
+        schema:
+          type: string
+      - description: Return findings that have these associated tags (repeatable).
+        example: filter[tags]=cloud_provider:aws&filter[tags]=aws_account:999999999999
+        in: query
+        name: filter[tags]
+        required: false
+        schema:
+          type: string
+      - description: Return findings that have changed from pass to fail or vice versa
+          on a specified date (Unix ms) or date range (using comparison operators).
+        example: '>=1678721573794'
+        in: query
+        name: filter[evaluation_changed_at]
+        required: false
+        schema:
+          type: string
+      - description: Set to `true` to return findings that are muted. Set to `false`
+          to return unmuted findings.
+        in: query
+        name: filter[muted]
+        required: false
+        schema:
+          type: boolean
+      - description: Return findings for the specified rule ID.
+        in: query
+        name: filter[rule_id]
+        required: false
+        schema:
+          type: string
+      - description: Return findings for the specified rule.
+        in: query
+        name: filter[rule_name]
+        required: false
+        schema:
+          type: string
+      - description: Return only findings for the specified resource type.
+        in: query
+        name: filter[resource_type]
+        required: false
+        schema:
+          type: string
+      - description: Return findings that were found on a specified date (Unix ms)
+          or date range (using comparison operators).
+        example: '>=1678721573794'
+        in: query
+        name: filter[discovery_timestamp]
+        required: false
+        schema:
+          type: string
+      - description: Return only `pass` or `fail` findings.
+        example: pass
+        in: query
+        name: filter[evaluation]
+        required: false
+        schema:
+          $ref: '#/components/schemas/FindingEvaluation'
+      - description: Return only findings with the specified status.
+        example: critical
+        in: query
+        name: filter[status]
+        required: false
+        schema:
+          $ref: '#/components/schemas/FindingStatus'
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ListFindingsResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_findings_read
+      summary: List findings
+      tags:
+      - Security Monitoring
+      x-pagination:
+        cursorParam: page[cursor]
+        cursorPath: meta.page.cursor
+        limitParam: page[limit]
+        resultsPath: data
+      x-unstable: '**Note**: This endpoint is in public beta.
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+  /api/v2/posture_management/findings/{finding_id}:
+    get:
+      description: Returns a single finding with message and resource configuration.
+      operationId: GetFinding
+      parameters:
+      - description: The ID of the finding.
+        in: path
+        name: finding_id
+        required: true
+        schema:
+          type: string
+      - description: Return the finding for a given snapshot of time (Unix ms).
+        example: 1678721573794
+        in: query
+        name: snapshot_timestamp
+        required: false
+        schema:
+          format: int64
+          minimum: 1
+          type: integer
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/GetFindingResponse'
+          description: OK
+        '400':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/APIErrorResponse'
+          description: Bad Request
+        '403':
+          $ref: '#/components/responses/ForbiddenResponse'
+        '404':
+          $ref: '#/components/responses/NotFoundResponse'
+        '429':
+          $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - security_monitoring_findings_read
+      summary: Get a finding
+      tags:
+      - Security Monitoring
+      x-unstable: '**Note**: This endpoint is in public beta.
+
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
   /api/v2/processes:
     get:
       description: Get all processes for your organization.
@@ -21774,6 +22546,7 @@ paths:
       parameters:
       - $ref: '#/components/parameters/PageSize'
       - $ref: '#/components/parameters/PageNumber'
+      - $ref: '#/components/parameters/SchemaVersion'
       responses:
         '200':
           content:
@@ -21785,6 +22558,11 @@ paths:
           $ref: '#/components/responses/ForbiddenResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - apm_service_catalog_read
       summary: Get all service definitions
       tags:
       - Service Definition
@@ -21817,6 +22595,11 @@ paths:
           $ref: '#/components/responses/ConflictResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - apm_service_catalog_write
       summary: Create or update service definition
       tags:
       - Service Definition
@@ -21838,6 +22621,11 @@ paths:
           $ref: '#/components/responses/NotFoundResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - apm_service_catalog_write
       summary: Delete a single service definition
       tags:
       - Service Definition
@@ -21846,6 +22634,7 @@ paths:
       operationId: GetServiceDefinition
       parameters:
       - $ref: '#/components/parameters/ServiceName'
+      - $ref: '#/components/parameters/SchemaVersion'
       responses:
         '200':
           content:
@@ -21863,6 +22652,11 @@ paths:
           $ref: '#/components/responses/ConflictResponse'
         '429':
           $ref: '#/components/responses/TooManyRequestsResponse'
+      security:
+      - apiKeyAuth: []
+        appKeyAuth: []
+      - AuthZ:
+        - apm_service_catalog_read
       summary: Get a single service definition
       tags:
       - Service Definition
@@ -22096,6 +22890,7 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - teams_read
+        - teams_manage
       summary: Create a team
       tags:
       - Teams
@@ -22127,6 +22922,7 @@ paths:
         appKeyAuth: []
       - AuthZ:
         - teams_read
+        - teams_manage
       summary: Remove a team
       tags:
       - Teams
@@ -22677,6 +23473,7 @@ paths:
       x-codegen-request-body-name: body
   /api/v2/teams:
     get:
+      deprecated: true
       description: Get all incident teams for the requesting user's organization.
         If the `include[users]` query parameter is provided, the included attribute
         will contain the users related to these incident teams.
@@ -22711,10 +23508,9 @@ paths:
       summary: Get a list of all incident teams
       tags:
       - Incident Teams
-      x-unstable: '**Note**: This endpoint is in public beta.
-
-        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+      x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
     post:
+      deprecated: true
       description: Creates a new incident team.
       operationId: CreateIncidentTeam
       requestBody:
@@ -22750,11 +23546,10 @@ paths:
       tags:
       - Incident Teams
       x-codegen-request-body-name: body
-      x-unstable: '**Note**: This endpoint is in public beta.
-
-        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+      x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
   /api/v2/teams/{team_id}:
     delete:
+      deprecated: true
       description: Deletes an existing incident team.
       operationId: DeleteIncidentTeam
       parameters:
@@ -22780,10 +23575,9 @@ paths:
       summary: Delete an existing incident team
       tags:
       - Incident Teams
-      x-unstable: '**Note**: This endpoint is in public beta.
-
-        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+      x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
     get:
+      deprecated: true
       description: 'Get details of an incident team. If the `include[users]` query
         parameter is provided,
 
@@ -22817,10 +23611,9 @@ paths:
       summary: Get details of an incident team
       tags:
       - Incident Teams
-      x-unstable: '**Note**: This endpoint is in public beta.
-
-        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+      x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
     patch:
+      deprecated: true
       description: Updates an existing incident team. Only provide the attributes
         which should be updated as this request is a partial update.
       operationId: UpdateIncidentTeam
@@ -22859,9 +23652,7 @@ paths:
       tags:
       - Incident Teams
       x-codegen-request-body-name: body
-      x-unstable: '**Note**: This endpoint is in public beta.
-
-        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).'
+      x-unstable: '**Note**: This endpoint is deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/).'
   /api/v2/usage/application_security:
     get:
       description: 'Get hourly usage for application security .
@@ -23007,7 +23798,7 @@ paths:
       - description: 'Datetime in ISO-8601 format, UTC, precise to month: `[YYYY-MM]`
           for cost beginning this month. Either start_month or start_date should be
           specified, but not both. (start_month cannot go beyond two months in the
-          past)'
+          past). Provide an `end_month` to view month-over-month cost.'
         in: query
         name: start_month
         required: false
@@ -23025,7 +23816,7 @@ paths:
       - description: 'Datetime in ISO-8601 format, UTC, precise to day: `[YYYY-MM-DD]`
           for cost beginning this day. Either start_month or start_date should be
           specified, but not both. (start_date cannot go beyond two months in the
-          past)'
+          past). Provide an `end_date` to view day-over-day cumulative cost.'
         in: query
         name: start_date
         required: false
@@ -23190,6 +23981,14 @@ paths:
         schema:
           default: false
           type: boolean
+      - description: Include breakdown of usage by subcategories where applicable
+          (for product family logs only). Defaults to false.
+        in: query
+        name: filter[include_breakdown]
+        required: false
+        schema:
+          default: false
+          type: boolean
       - description: 'Comma separated list of product family versions to use in the
           format `product_family:version`. For example,
 
@@ -23844,6 +24643,12 @@ tags:
 - description: Configure your Datadog Fastly integration directly through the Datadog
     API.
   name: Fastly Integration
+- description: 'Configure your Datadog-Google Cloud Platform (GCP) integration directly
+
+    through the Datadog API. Read more about the [Datadog-Google Cloud Platform integration](https://docs.datadoghq.com/integrations/google_cloud_platform).'
+  externalDocs:
+    url: https://docs.datadoghq.com/integrations/google_cloud_platform
+  name: GCP Integration
 - description: 'The IP allowlist API is used to manage the IP addresses that
 
     can access the Datadog API and web UI. It does not block
@@ -23858,8 +24663,8 @@ tags:
 - description: Create, update, delete, and retrieve services which can be associated
     with incidents.
   name: Incident Services
-- description: Create, update, delete and retrieve teams which can be associated with
-    incidents.
+- description: The Incident Teams endpoints are deprecated. See the [Teams API endpoints](https://docs.datadoghq.com/api/latest/teams/)
+    to create, update, delete, and retrieve teams which can be associated with incidents.
   name: Incident Teams
 - description: Manage incident response.
   name: Incidents