google-apis-securitycenter_v1 0.12.0 → 0.16.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 212a5f12aa30bc2ab473d3ce00237cdd03ea8857e809f26fdd8d3688a7f4f991
4
- data.tar.gz: a55536a245c7d5eeef6ec714463bb02fed4ec387258983b4192aa7b6452c28bc
3
+ metadata.gz: 9e244c14c7e418d1b0bc02795994e1b96f3f70ea30bb763cadbb50857e43c1ce
4
+ data.tar.gz: a683ea1c2bc8e55b6d8ea0f7001d5565f584b6a6dc4deada1eabdeffcb847b3d
5
5
  SHA512:
6
- metadata.gz: 2d780277522510ea075bd8373afc34d31679eb688455b296d627affec2b9200a36cfe1a687f28bb009844c6cdaf123da9bd1c3885d494238ba6afc43ae4ce161
7
- data.tar.gz: f6b22b1e7905b32f877f8e72c13bf02bf76da01cd3224af80ffa37d51a04d4e0925214a3f6f7d575bbfae21130089f35b6af3e4bd273c23668a532bd79baee87
6
+ metadata.gz: 15e284d06998a8aec1005d7c73c359a78bf4471bcd2f00b3c6c8ef4374701baad81b5d7b0ac90e40b8077d77a06054758c4e026c7932366c9ecba015cb4f7c1c
7
+ data.tar.gz: ee4cc74c1dd5d61b1aadeb9572a08f3c477ab3b423d6f9b706e536dbf74eab466c4aa28d841330d3030dfe1cfdcb364b1454c00948fcbf042c1291106da24543
data/CHANGELOG.md CHANGED
@@ -1,5 +1,21 @@
1
1
  # Release history for google-apis-securitycenter_v1
2
2
 
3
+ ### v0.16.0 (2021-11-16)
4
+
5
+ * Regenerated from discovery document revision 20211112
6
+
7
+ ### v0.15.0 (2021-11-09)
8
+
9
+ * Regenerated from discovery document revision 20211103
10
+
11
+ ### v0.14.0 (2021-10-20)
12
+
13
+ * Regenerated from discovery document revision 20211015
14
+
15
+ ### v0.13.0 (2021-10-12)
16
+
17
+ * Regenerated from discovery document revision 20211007
18
+
3
19
  ### v0.12.0 (2021-10-05)
4
20
 
5
21
  * Regenerated from discovery document revision 20210930
data/OVERVIEW.md CHANGED
@@ -60,8 +60,8 @@ See the class reference docs for information on the methods you can call from a
60
60
 
61
61
  More detailed descriptions of the Google simple REST clients are available in two documents.
62
62
 
63
- * The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/master/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
64
- * The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/master/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
63
+ * The [Usage Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/usage-guide.md) discusses how to make API calls, how to use the provided data structures, and how to work the various features of the client library, including media upload and download, error handling, retries, pagination, and logging.
64
+ * The [Auth Guide](https://github.com/googleapis/google-api-ruby-client/blob/main/docs/auth-guide.md) discusses authentication in the client libraries, including API keys, OAuth 2.0, service accounts, and environment variables.
65
65
 
66
66
  (Note: the above documents are written for the simple REST clients in general, and their examples may not reflect the Securitycenter service in particular.)
67
67
 
@@ -202,7 +202,7 @@ module Google
202
202
  end
203
203
  end
204
204
 
205
- # Associates `members` with a `role`.
205
+ # Associates `members`, or principals, with a `role`.
206
206
  class Binding
207
207
  include Google::Apis::Core::Hashable
208
208
 
@@ -225,7 +225,7 @@ module Google
225
225
  # @return [Google::Apis::SecuritycenterV1::Expr]
226
226
  attr_accessor :condition
227
227
 
228
- # Specifies the identities requesting access for a Cloud Platform resource. `
228
+ # Specifies the principals requesting access for a Cloud Platform resource. `
229
229
  # members` can have the following values: * `allUsers`: A special identifier
230
230
  # that represents anyone who is on the internet; with or without a Google
231
231
  # account. * `allAuthenticatedUsers`: A special identifier that represents
@@ -255,8 +255,8 @@ module Google
255
255
  # @return [Array<String>]
256
256
  attr_accessor :members
257
257
 
258
- # Role that is assigned to `members`. For example, `roles/viewer`, `roles/editor`
259
- # , or `roles/owner`.
258
+ # Role that is assigned to the list of `members`, or principals. For example, `
259
+ # roles/viewer`, `roles/editor`, or `roles/owner`.
260
260
  # Corresponds to the JSON property `role`
261
261
  # @return [String]
262
262
  attr_accessor :role
@@ -273,6 +273,42 @@ module Google
273
273
  end
274
274
  end
275
275
 
276
+ # Request message for bulk findings update. Note: 1. If multiple bulk update
277
+ # requests match the same resource, the order in which they get executed is not
278
+ # defined. 2. Once a bulk operation is started, there is no way to stop it.
279
+ class BulkMuteFindingsRequest
280
+ include Google::Apis::Core::Hashable
281
+
282
+ # Expression that identifies findings that should be updated. The expression is
283
+ # a list of zero or more restrictions combined via logical operators `AND` and `
284
+ # OR`. Parentheses are supported, and `OR` has higher precedence than `AND`.
285
+ # Restrictions have the form ` ` and may have a `-` character in front of them
286
+ # to indicate negation. The fields map to those defined in the corresponding
287
+ # resource. The supported operators are: * `=` for all value types. * `>`, `<`, `
288
+ # >=`, `<=` for integer values. * `:`, meaning substring matching, for strings.
289
+ # The supported value types are: * string literals in quotes. * integer literals
290
+ # without quotes. * boolean literals `true` and `false` without quotes.
291
+ # Corresponds to the JSON property `filter`
292
+ # @return [String]
293
+ attr_accessor :filter
294
+
295
+ # This can be a mute configuration name or any identifier for mute/unmute of
296
+ # findings based on the filter.
297
+ # Corresponds to the JSON property `muteAnnotation`
298
+ # @return [String]
299
+ attr_accessor :mute_annotation
300
+
301
+ def initialize(**args)
302
+ update!(**args)
303
+ end
304
+
305
+ # Update properties of this object
306
+ def update!(**args)
307
+ @filter = args[:filter] if args.key?(:filter)
308
+ @mute_annotation = args[:mute_annotation] if args.key?(:mute_annotation)
309
+ end
310
+ end
311
+
276
312
  # CVE stands for Common Vulnerabilities and Exposures. More information: https://
277
313
  # cve.mitre.org
278
314
  class Cve
@@ -492,6 +528,12 @@ module Google
492
528
  # @return [String]
493
529
  attr_accessor :event_time
494
530
 
531
+ # Output only. Third party SIEM/SOAR fields within SCC, contains external system
532
+ # information and external system finding fields.
533
+ # Corresponds to the JSON property `externalSystems`
534
+ # @return [Hash<String,Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1ExternalSystem>]
535
+ attr_accessor :external_systems
536
+
495
537
  # The URI that, if available, points to a web page outside of Security Command
496
538
  # Center where additional information about the finding can be found. This field
497
539
  # is guaranteed to be either empty or a well formed URL.
@@ -512,6 +554,24 @@ module Google
512
554
  # @return [Google::Apis::SecuritycenterV1::Indicator]
513
555
  attr_accessor :indicator
514
556
 
557
+ # Indicates the mute state of a finding (either unspecified, muted, unmuted or
558
+ # undefined).
559
+ # Corresponds to the JSON property `mute`
560
+ # @return [String]
561
+ attr_accessor :mute
562
+
563
+ # First known as mute_annotation. Records additional information about the mute
564
+ # operation e.g. mute config that muted the finding, user who muted the finding,
565
+ # etc.
566
+ # Corresponds to the JSON property `muteInitiator`
567
+ # @return [String]
568
+ attr_accessor :mute_initiator
569
+
570
+ # Output only. The most recent time this finding was muted or unmuted.
571
+ # Corresponds to the JSON property `muteUpdateTime`
572
+ # @return [String]
573
+ attr_accessor :mute_update_time
574
+
515
575
  # The relative resource name of this finding. See: https://cloud.google.com/apis/
516
576
  # design/resource_names#relative_resource_name Example: "organizations/`
517
577
  # organization_id`/sources/`source_id`/findings/`finding_id`"
@@ -578,9 +638,13 @@ module Google
578
638
  @category = args[:category] if args.key?(:category)
579
639
  @create_time = args[:create_time] if args.key?(:create_time)
580
640
  @event_time = args[:event_time] if args.key?(:event_time)
641
+ @external_systems = args[:external_systems] if args.key?(:external_systems)
581
642
  @external_uri = args[:external_uri] if args.key?(:external_uri)
582
643
  @finding_class = args[:finding_class] if args.key?(:finding_class)
583
644
  @indicator = args[:indicator] if args.key?(:indicator)
645
+ @mute = args[:mute] if args.key?(:mute)
646
+ @mute_initiator = args[:mute_initiator] if args.key?(:mute_initiator)
647
+ @mute_update_time = args[:mute_update_time] if args.key?(:mute_update_time)
584
648
  @name = args[:name] if args.key?(:name)
585
649
  @parent = args[:parent] if args.key?(:parent)
586
650
  @resource_name = args[:resource_name] if args.key?(:resource_name)
@@ -641,13 +705,16 @@ module Google
641
705
  class GetPolicyOptions
642
706
  include Google::Apis::Core::Hashable
643
707
 
644
- # Optional. The policy format version to be returned. Valid values are 0, 1, and
645
- # 3. Requests specifying an invalid value will be rejected. Requests for
646
- # policies with any conditional bindings must specify version 3. Policies
647
- # without any conditional bindings may specify any valid value or leave the
648
- # field unset. To learn which resources support conditions in their IAM policies,
649
- # see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
650
- # resource-policies).
708
+ # Optional. The maximum policy version that will be used to format the policy.
709
+ # Valid values are 0, 1, and 3. Requests specifying an invalid value will be
710
+ # rejected. Requests for policies with any conditional role bindings must
711
+ # specify version 3. Policies with no conditional role bindings may specify any
712
+ # valid value or leave the field unset. The policy in the response might use the
713
+ # policy version that you specified, or it might use a lower policy version. For
714
+ # example, if you specify version 3, but the policy has no conditional role
715
+ # bindings, the response uses version 1. To learn which resources support
716
+ # conditions in their IAM policies, see the [IAM documentation](https://cloud.
717
+ # google.com/iam/help/conditions/resource-policies).
651
718
  # Corresponds to the JSON property `requestedPolicyVersion`
652
719
  # @return [Fixnum]
653
720
  attr_accessor :requested_policy_version
@@ -662,6 +729,126 @@ module Google
662
729
  end
663
730
  end
664
731
 
732
+ # Representation of third party SIEM/SOAR fields within SCC.
733
+ class GoogleCloudSecuritycenterV1ExternalSystem
734
+ include Google::Apis::Core::Hashable
735
+
736
+ # References primary/secondary etc assignees in the external system.
737
+ # Corresponds to the JSON property `assignees`
738
+ # @return [Array<String>]
739
+ attr_accessor :assignees
740
+
741
+ # The most recent time when the corresponding finding's ticket/tracker was
742
+ # updated in the external system.
743
+ # Corresponds to the JSON property `externalSystemUpdateTime`
744
+ # @return [String]
745
+ attr_accessor :external_system_update_time
746
+
747
+ # Identifier that's used to track the given finding in the external system.
748
+ # Corresponds to the JSON property `externalUid`
749
+ # @return [String]
750
+ attr_accessor :external_uid
751
+
752
+ # External System Name e.g. jira, demisto, etc. e.g.: organizations/1234/sources/
753
+ # 5678/findings/123456/externalSystems/jira folders/1234/sources/5678/findings/
754
+ # 123456/externalSystems/jira projects/1234/sources/5678/findings/123456/
755
+ # externalSystems/jira
756
+ # Corresponds to the JSON property `name`
757
+ # @return [String]
758
+ attr_accessor :name
759
+
760
+ # Most recent status of the corresponding finding's ticket/tracker in the
761
+ # external system.
762
+ # Corresponds to the JSON property `status`
763
+ # @return [String]
764
+ attr_accessor :status
765
+
766
+ def initialize(**args)
767
+ update!(**args)
768
+ end
769
+
770
+ # Update properties of this object
771
+ def update!(**args)
772
+ @assignees = args[:assignees] if args.key?(:assignees)
773
+ @external_system_update_time = args[:external_system_update_time] if args.key?(:external_system_update_time)
774
+ @external_uid = args[:external_uid] if args.key?(:external_uid)
775
+ @name = args[:name] if args.key?(:name)
776
+ @status = args[:status] if args.key?(:status)
777
+ end
778
+ end
779
+
780
+ # A mute config is a Cloud SCC resource that contains the configuration to mute
781
+ # create/update events of findings.
782
+ class GoogleCloudSecuritycenterV1MuteConfig
783
+ include Google::Apis::Core::Hashable
784
+
785
+ # Output only. The time at which the mute config was created. This field is set
786
+ # by the server and will be ignored if provided on config creation.
787
+ # Corresponds to the JSON property `createTime`
788
+ # @return [String]
789
+ attr_accessor :create_time
790
+
791
+ # A description of the mute config.
792
+ # Corresponds to the JSON property `description`
793
+ # @return [String]
794
+ attr_accessor :description
795
+
796
+ # The human readable name to be displayed for the mute config.
797
+ # Corresponds to the JSON property `displayName`
798
+ # @return [String]
799
+ attr_accessor :display_name
800
+
801
+ # Required. An expression that defines the filter to apply across create/update
802
+ # events of findings. While creating a filter string, be mindful of the scope in
803
+ # which the mute configuration is being created. E.g., If a filter contains
804
+ # project = X but is created under the project = Y scope, it might not match any
805
+ # findings. The following field and operator combinations are supported: *
806
+ # severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.
807
+ # project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.
808
+ # folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.
809
+ # parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `
810
+ # :` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
811
+ # Corresponds to the JSON property `filter`
812
+ # @return [String]
813
+ attr_accessor :filter
814
+
815
+ # Output only. Email address of the user who last edited the mute config. This
816
+ # field is set by the server and will be ignored if provided on config creation
817
+ # or update.
818
+ # Corresponds to the JSON property `mostRecentEditor`
819
+ # @return [String]
820
+ attr_accessor :most_recent_editor
821
+
822
+ # This field will be ignored if provided on config creation. Format "
823
+ # organizations/`organization`/muteConfigs/`mute_config`" "folders/`folder`/
824
+ # muteConfigs/`mute_config`" "projects/`project`/muteConfigs/`mute_config`"
825
+ # Corresponds to the JSON property `name`
826
+ # @return [String]
827
+ attr_accessor :name
828
+
829
+ # Output only. The most recent time at which the mute config was updated. This
830
+ # field is set by the server and will be ignored if provided on config creation
831
+ # or update.
832
+ # Corresponds to the JSON property `updateTime`
833
+ # @return [String]
834
+ attr_accessor :update_time
835
+
836
+ def initialize(**args)
837
+ update!(**args)
838
+ end
839
+
840
+ # Update properties of this object
841
+ def update!(**args)
842
+ @create_time = args[:create_time] if args.key?(:create_time)
843
+ @description = args[:description] if args.key?(:description)
844
+ @display_name = args[:display_name] if args.key?(:display_name)
845
+ @filter = args[:filter] if args.key?(:filter)
846
+ @most_recent_editor = args[:most_recent_editor] if args.key?(:most_recent_editor)
847
+ @name = args[:name] if args.key?(:name)
848
+ @update_time = args[:update_time] if args.key?(:update_time)
849
+ end
850
+ end
851
+
665
852
  # Cloud SCC's Notification
666
853
  class GoogleCloudSecuritycenterV1NotificationMessage
667
854
  include Google::Apis::Core::Hashable
@@ -701,6 +888,11 @@ module Google
701
888
  class GoogleCloudSecuritycenterV1Resource
702
889
  include Google::Apis::Core::Hashable
703
890
 
891
+ # The human readable name of the resource.
892
+ # Corresponds to the JSON property `displayName`
893
+ # @return [String]
894
+ attr_accessor :display_name
895
+
704
896
  # Output only. Contains a Folder message for each folder in the assets ancestry.
705
897
  # The first folder is the deepest nested folder, and the last folder is the
706
898
  # folder directly under the Organization.
@@ -745,6 +937,7 @@ module Google
745
937
 
746
938
  # Update properties of this object
747
939
  def update!(**args)
940
+ @display_name = args[:display_name] if args.key?(:display_name)
748
941
  @folders = args[:folders] if args.key?(:folders)
749
942
  @name = args[:name] if args.key?(:name)
750
943
  @parent = args[:parent] if args.key?(:parent)
@@ -1613,6 +1806,32 @@ module Google
1613
1806
  end
1614
1807
  end
1615
1808
 
1809
+ # Response message for listing mute configs.
1810
+ class ListMuteConfigsResponse
1811
+ include Google::Apis::Core::Hashable
1812
+
1813
+ # The mute configs from the specified parent.
1814
+ # Corresponds to the JSON property `muteConfigs`
1815
+ # @return [Array<Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig>]
1816
+ attr_accessor :mute_configs
1817
+
1818
+ # A token, which can be sent as `page_token` to retrieve the next page. If this
1819
+ # field is omitted, there are no subsequent pages.
1820
+ # Corresponds to the JSON property `nextPageToken`
1821
+ # @return [String]
1822
+ attr_accessor :next_page_token
1823
+
1824
+ def initialize(**args)
1825
+ update!(**args)
1826
+ end
1827
+
1828
+ # Update properties of this object
1829
+ def update!(**args)
1830
+ @mute_configs = args[:mute_configs] if args.key?(:mute_configs)
1831
+ @next_page_token = args[:next_page_token] if args.key?(:next_page_token)
1832
+ end
1833
+ end
1834
+
1616
1835
  # Response message for listing notification configs.
1617
1836
  class ListNotificationConfigsResponse
1618
1837
  include Google::Apis::Core::Hashable
@@ -1841,31 +2060,31 @@ module Google
1841
2060
 
1842
2061
  # An Identity and Access Management (IAM) policy, which specifies access
1843
2062
  # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
1844
- # A `binding` binds one or more `members` to a single `role`. Members can be
1845
- # user accounts, service accounts, Google groups, and domains (such as G Suite).
1846
- # A `role` is a named list of permissions; each `role` can be an IAM predefined
1847
- # role or a user-created custom role. For some types of Google Cloud resources,
1848
- # a `binding` can also specify a `condition`, which is a logical expression that
1849
- # allows access to a resource only if the expression evaluates to `true`. A
1850
- # condition can add constraints based on attributes of the request, the resource,
1851
- # or both. To learn which resources support conditions in their IAM policies,
1852
- # see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
1853
- # resource-policies). **JSON example:** ` "bindings": [ ` "role": "roles/
1854
- # resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "
1855
- # group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@
1856
- # appspot.gserviceaccount.com" ] `, ` "role": "roles/resourcemanager.
1857
- # organizationViewer", "members": [ "user:eve@example.com" ], "condition": ` "
1858
- # title": "expirable access", "description": "Does not grant access after Sep
1859
- # 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", `
1860
- # ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:** bindings: -
1861
- # members: - user:mike@example.com - group:admins@example.com - domain:google.
1862
- # com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/
1863
- # resourcemanager.organizationAdmin - members: - user:eve@example.com role:
1864
- # roles/resourcemanager.organizationViewer condition: title: expirable access
1865
- # description: Does not grant access after Sep 2020 expression: request.time <
1866
- # timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For a
1867
- # description of IAM and its features, see the [IAM documentation](https://cloud.
1868
- # google.com/iam/docs/).
2063
+ # A `binding` binds one or more `members`, or principals, to a single `role`.
2064
+ # Principals can be user accounts, service accounts, Google groups, and domains (
2065
+ # such as G Suite). A `role` is a named list of permissions; each `role` can be
2066
+ # an IAM predefined role or a user-created custom role. For some types of Google
2067
+ # Cloud resources, a `binding` can also specify a `condition`, which is a
2068
+ # logical expression that allows access to a resource only if the expression
2069
+ # evaluates to `true`. A condition can add constraints based on attributes of
2070
+ # the request, the resource, or both. To learn which resources support
2071
+ # conditions in their IAM policies, see the [IAM documentation](https://cloud.
2072
+ # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
2073
+ # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
2074
+ # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
2075
+ # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
2076
+ # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
2077
+ # ], "condition": ` "title": "expirable access", "description": "Does not grant
2078
+ # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
2079
+ # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
2080
+ # bindings: - members: - user:mike@example.com - group:admins@example.com -
2081
+ # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
2082
+ # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
2083
+ # com role: roles/resourcemanager.organizationViewer condition: title: expirable
2084
+ # access description: Does not grant access after Sep 2020 expression: request.
2085
+ # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
2086
+ # a description of IAM and its features, see the [IAM documentation](https://
2087
+ # cloud.google.com/iam/docs/).
1869
2088
  class Policy
1870
2089
  include Google::Apis::Core::Hashable
1871
2090
 
@@ -1874,14 +2093,14 @@ module Google
1874
2093
  # @return [Array<Google::Apis::SecuritycenterV1::AuditConfig>]
1875
2094
  attr_accessor :audit_configs
1876
2095
 
1877
- # Associates a list of `members` to a `role`. Optionally, may specify a `
1878
- # condition` that determines how and when the `bindings` are applied. Each of
1879
- # the `bindings` must contain at least one member. The `bindings` in a `Policy`
1880
- # can refer to up to 1,500 members; up to 250 of these members can be Google
1881
- # groups. Each occurrence of a member counts towards these limits. For example,
1882
- # if the `bindings` grant 50 different roles to `user:alice@example.com`, and
1883
- # not to any other member, then you can add another 1,450 members to the `
1884
- # bindings` in the `Policy`.
2096
+ # Associates a list of `members`, or principals, with a `role`. Optionally, may
2097
+ # specify a `condition` that determines how and when the `bindings` are applied.
2098
+ # Each of the `bindings` must contain at least one principal. The `bindings` in
2099
+ # a `Policy` can refer to up to 1,500 principals; up to 250 of these principals
2100
+ # can be Google groups. Each occurrence of a principal counts towards these
2101
+ # limits. For example, if the `bindings` grant 50 different roles to `user:alice@
2102
+ # example.com`, and not to any other principal, then you can add another 1,450
2103
+ # principals to the `bindings` in the `Policy`.
1885
2104
  # Corresponds to the JSON property `bindings`
1886
2105
  # @return [Array<Google::Apis::SecuritycenterV1::Binding>]
1887
2106
  attr_accessor :bindings
@@ -1965,6 +2184,11 @@ module Google
1965
2184
  class Resource
1966
2185
  include Google::Apis::Core::Hashable
1967
2186
 
2187
+ # The human readable name of the resource.
2188
+ # Corresponds to the JSON property `displayName`
2189
+ # @return [String]
2190
+ attr_accessor :display_name
2191
+
1968
2192
  # Contains a Folder message for each folder in the assets ancestry. The first
1969
2193
  # folder is the deepest nested folder, and the last folder is the folder
1970
2194
  # directly under the Organization.
@@ -1998,18 +2222,25 @@ module Google
1998
2222
  # @return [String]
1999
2223
  attr_accessor :project_name
2000
2224
 
2225
+ # The full resource type of the resource.
2226
+ # Corresponds to the JSON property `type`
2227
+ # @return [String]
2228
+ attr_accessor :type
2229
+
2001
2230
  def initialize(**args)
2002
2231
  update!(**args)
2003
2232
  end
2004
2233
 
2005
2234
  # Update properties of this object
2006
2235
  def update!(**args)
2236
+ @display_name = args[:display_name] if args.key?(:display_name)
2007
2237
  @folders = args[:folders] if args.key?(:folders)
2008
2238
  @name = args[:name] if args.key?(:name)
2009
2239
  @parent_display_name = args[:parent_display_name] if args.key?(:parent_display_name)
2010
2240
  @parent_name = args[:parent_name] if args.key?(:parent_name)
2011
2241
  @project_display_name = args[:project_display_name] if args.key?(:project_display_name)
2012
2242
  @project_name = args[:project_name] if args.key?(:project_name)
2243
+ @type = args[:type] if args.key?(:type)
2013
2244
  end
2014
2245
  end
2015
2246
 
@@ -2180,31 +2411,31 @@ module Google
2180
2411
 
2181
2412
  # An Identity and Access Management (IAM) policy, which specifies access
2182
2413
  # controls for Google Cloud resources. A `Policy` is a collection of `bindings`.
2183
- # A `binding` binds one or more `members` to a single `role`. Members can be
2184
- # user accounts, service accounts, Google groups, and domains (such as G Suite).
2185
- # A `role` is a named list of permissions; each `role` can be an IAM predefined
2186
- # role or a user-created custom role. For some types of Google Cloud resources,
2187
- # a `binding` can also specify a `condition`, which is a logical expression that
2188
- # allows access to a resource only if the expression evaluates to `true`. A
2189
- # condition can add constraints based on attributes of the request, the resource,
2190
- # or both. To learn which resources support conditions in their IAM policies,
2191
- # see the [IAM documentation](https://cloud.google.com/iam/help/conditions/
2192
- # resource-policies). **JSON example:** ` "bindings": [ ` "role": "roles/
2193
- # resourcemanager.organizationAdmin", "members": [ "user:mike@example.com", "
2194
- # group:admins@example.com", "domain:google.com", "serviceAccount:my-project-id@
2195
- # appspot.gserviceaccount.com" ] `, ` "role": "roles/resourcemanager.
2196
- # organizationViewer", "members": [ "user:eve@example.com" ], "condition": ` "
2197
- # title": "expirable access", "description": "Does not grant access after Sep
2198
- # 2020", "expression": "request.time < timestamp('2020-10-01T00:00:00.000Z')", `
2199
- # ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:** bindings: -
2200
- # members: - user:mike@example.com - group:admins@example.com - domain:google.
2201
- # com - serviceAccount:my-project-id@appspot.gserviceaccount.com role: roles/
2202
- # resourcemanager.organizationAdmin - members: - user:eve@example.com role:
2203
- # roles/resourcemanager.organizationViewer condition: title: expirable access
2204
- # description: Does not grant access after Sep 2020 expression: request.time <
2205
- # timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For a
2206
- # description of IAM and its features, see the [IAM documentation](https://cloud.
2207
- # google.com/iam/docs/).
2414
+ # A `binding` binds one or more `members`, or principals, to a single `role`.
2415
+ # Principals can be user accounts, service accounts, Google groups, and domains (
2416
+ # such as G Suite). A `role` is a named list of permissions; each `role` can be
2417
+ # an IAM predefined role or a user-created custom role. For some types of Google
2418
+ # Cloud resources, a `binding` can also specify a `condition`, which is a
2419
+ # logical expression that allows access to a resource only if the expression
2420
+ # evaluates to `true`. A condition can add constraints based on attributes of
2421
+ # the request, the resource, or both. To learn which resources support
2422
+ # conditions in their IAM policies, see the [IAM documentation](https://cloud.
2423
+ # google.com/iam/help/conditions/resource-policies). **JSON example:** ` "
2424
+ # bindings": [ ` "role": "roles/resourcemanager.organizationAdmin", "members": [
2425
+ # "user:mike@example.com", "group:admins@example.com", "domain:google.com", "
2426
+ # serviceAccount:my-project-id@appspot.gserviceaccount.com" ] `, ` "role": "
2427
+ # roles/resourcemanager.organizationViewer", "members": [ "user:eve@example.com"
2428
+ # ], "condition": ` "title": "expirable access", "description": "Does not grant
2429
+ # access after Sep 2020", "expression": "request.time < timestamp('2020-10-01T00:
2430
+ # 00:00.000Z')", ` ` ], "etag": "BwWWja0YfJA=", "version": 3 ` **YAML example:**
2431
+ # bindings: - members: - user:mike@example.com - group:admins@example.com -
2432
+ # domain:google.com - serviceAccount:my-project-id@appspot.gserviceaccount.com
2433
+ # role: roles/resourcemanager.organizationAdmin - members: - user:eve@example.
2434
+ # com role: roles/resourcemanager.organizationViewer condition: title: expirable
2435
+ # access description: Does not grant access after Sep 2020 expression: request.
2436
+ # time < timestamp('2020-10-01T00:00:00.000Z') etag: BwWWja0YfJA= version: 3 For
2437
+ # a description of IAM and its features, see the [IAM documentation](https://
2438
+ # cloud.google.com/iam/docs/).
2208
2439
  # Corresponds to the JSON property `policy`
2209
2440
  # @return [Google::Apis::SecuritycenterV1::Policy]
2210
2441
  attr_accessor :policy
@@ -2227,6 +2458,25 @@ module Google
2227
2458
  end
2228
2459
  end
2229
2460
 
2461
+ # Request message for updating a finding's mute status.
2462
+ class SetMuteRequest
2463
+ include Google::Apis::Core::Hashable
2464
+
2465
+ # Required. The desired state of the Mute.
2466
+ # Corresponds to the JSON property `mute`
2467
+ # @return [String]
2468
+ attr_accessor :mute
2469
+
2470
+ def initialize(**args)
2471
+ update!(**args)
2472
+ end
2473
+
2474
+ # Update properties of this object
2475
+ def update!(**args)
2476
+ @mute = args[:mute] if args.key?(:mute)
2477
+ end
2478
+ end
2479
+
2230
2480
  # Security Command Center finding source. A finding source is an entity or a
2231
2481
  # mechanism that can produce a finding. A source is like a container of findings
2232
2482
  # that come from the same scanner, logger, monitor, and other tools.
@@ -16,13 +16,13 @@ module Google
16
16
  module Apis
17
17
  module SecuritycenterV1
18
18
  # Version of the google-apis-securitycenter_v1 gem
19
- GEM_VERSION = "0.12.0"
19
+ GEM_VERSION = "0.16.0"
20
20
 
21
21
  # Version of the code generator used to generate this client
22
22
  GENERATOR_VERSION = "0.4.0"
23
23
 
24
24
  # Revision of the discovery document this client was generated from
25
- REVISION = "20210930"
25
+ REVISION = "20211112"
26
26
  end
27
27
  end
28
28
  end