google-cloud-audit_manager-v1 1.0.1 → 1.1.0

data/proto_docs/google/cloud/auditmanager/v1/auditmanager.rb

@@ -21,349 +21,415 @@ module Google
   module Cloud
     module AuditManager
       module V1
-        # Request message to subscribe the Audit Manager service for given resource.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#enroll_resource EnrollResource}.
         # @!attribute [rw] scope
         #   @return [::String]
-        #     Required. The resource to be enrolled to the audit manager. Scope format
-        #     should be resource_type/resource_identifier Eg:
-        #     projects/\\{project}/locations/\\{location},
-        #     folders/\\{folder}/locations/\\{location}
-        #     organizations/\\{organization}/locations/\\{location}
+        #     Required. Organization, folder, or project to enroll in Audit Manager, in
+        #     one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}`
+        #     * `folders/{folder}/locations/{location}`
+        #     * `organizations/{organization}/locations/{location}`
         # @!attribute [rw] destinations
         #   @return [::Array<::Google::Cloud::AuditManager::V1::EnrollResourceRequest::EligibleDestination>]
-        #     Required. List of destination among which customer can choose to upload
-        #     their reports during the audit process. While enrolling at a
-        #     organization/folder level, customer can choose Cloud storage bucket in any
-        #     project. If the audit is triggered at project level using the service agent
-        #     at organization/folder level, all the destination options associated with
-        #     respective organization/folder level service agent will be available to
-        #     auditing projects.
+        #     Required. Cloud Storage buckets that you can upload your audit reports to
+        #     during the audit process.
+        #
+        #     When you enroll an organization or folder, you can choose a Cloud Storage
+        #     bucket from any project in the organization or folder. If you run an audit
+        #     at the project level using the service agent at the organization or folder
+        #     level, all the buckets that are associated with the service agent are
+        #     available.
         class EnrollResourceRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The destination details where the audit report must be uploaded.
+          # Details about the bucket where you want to upload the audit report.
           # @!attribute [rw] eligible_gcs_bucket
           #   @return [::String]
-          #     The Cloud Storage bucket location where the audit report and evidences
-          #     can be uploaded during the `GenerateAuditReport` API call.
+          #     The location of the Cloud Storage bucket where you want to upload the
+          #     audit report and evidence during the
+          #     {::Google::Cloud::AuditManager::V1::AuditManager::Client#generate_audit_report GenerateAuditReport}
+          #     API call.
           class EligibleDestination
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
           end
         end
 
-        # Message for requesting audit scope report.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#generate_audit_scope_report GenerateAuditScopeReport}.
         # @!attribute [rw] scope
         #   @return [::String]
-        #     Required. Scope for which the AuditScopeReport is required. Must be of
-        #     format resource_type/resource_identifier Eg:
-        #     projects/\\{project}/locations/\\{location},
-        #     folders/\\{folder}/locations/\\{location}
+        #     Required. Project or folder that the audit scope report is generated for,
+        #     in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}`
+        #     * `folders/{folder}/locations/{location}`
+        #     * `organizations/{organization}/locations/{location}`
         # @!attribute [rw] compliance_standard
+        #   @deprecated This field is deprecated and may be removed in the next major version update.
         #   @return [::String]
-        #     Required. Compliance Standard against which the Scope Report must be
-        #     generated. Eg: FEDRAMP_MODERATE
+        #     Optional. Deprecated. The standard (industry or regulatory requirements)
+        #     that the audit scope report is run against.
+        #
+        #     Use the `compliance_framework` field instead.
         # @!attribute [rw] report_format
         #   @return [::Google::Cloud::AuditManager::V1::GenerateAuditScopeReportRequest::AuditScopeReportFormat]
-        #     Required. The format in which the Scope report bytes should be returned.
+        #     Required. Format for the audit scope report.
         # @!attribute [rw] compliance_framework
         #   @return [::String]
-        #     Required. Compliance framework against which the Scope Report must be
-        #     generated.
+        #     Required. Framework (set of controls) that the audit scope report is
+        #     generated against. For example, `NIST_800_53`.
         class GenerateAuditScopeReportRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The options for the audit scope report format.
+          # Format for the audit scope report.
           module AuditScopeReportFormat
-            # Unspecified. Invalid format.
+            # Default value. This value is unused.
             AUDIT_SCOPE_REPORT_FORMAT_UNSPECIFIED = 0
 
-            # Audit Scope Report creation format is Open Document.
+            # Open Document format.
             AUDIT_SCOPE_REPORT_FORMAT_ODF = 1
           end
         end
 
-        # Message for requesting the Audit Report.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#generate_audit_report GenerateAuditReport}.
         # @!attribute [rw] gcs_uri
         #   @return [::String]
-        #     Destination Cloud storage bucket where report and evidence must be
-        #     uploaded. The Cloud storage bucket provided here must be selected among
-        #     the buckets entered during the enrollment process.
+        #     URL for the Cloud Storage bucket where the report and evidence is
+        #     uploaded. You must select a bucket that was provided during the
+        #     enrollment process.
         # @!attribute [rw] scope
         #   @return [::String]
-        #     Required. Scope for which the AuditScopeReport is required. Must be of
-        #     format resource_type/resource_identifier Eg:
-        #     projects/\\{project}/locations/\\{location},
-        #     folders/\\{folder}/locations/\\{location}
+        #     Required. Organization, folder, or project that the audit applies to, in
+        #     one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}`
+        #     * `folders/{folder}/locations/{location}`
+        #     * `organizations/{organization}/locations/{location}`
         # @!attribute [rw] compliance_standard
+        #   @deprecated This field is deprecated and may be removed in the next major version update.
         #   @return [::String]
-        #     Required. Compliance Standard against which the Scope Report must be
-        #     generated. Eg: FEDRAMP_MODERATE
+        #     Optional. Deprecated. Compliance standard for the audit report.
+        #
+        #     Use the `compliance_framework` field instead.
         # @!attribute [rw] report_format
         #   @return [::Google::Cloud::AuditManager::V1::GenerateAuditReportRequest::AuditReportFormat]
-        #     Required. The format in which the audit report should be created.
+        #     Required. Format for the audit report.
         # @!attribute [rw] compliance_framework
         #   @return [::String]
-        #     Required. Compliance framework against which the Report must be generated.
+        #     Required. The framework that's used for the audit report. For example,
+        #     `NIST_800_53`.
+        # @!attribute [rw] validate_only
+        #   @return [::Boolean]
+        #     Optional. If `true`, only validate the request and don't generate the audit
+        #     report.
         class GenerateAuditReportRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The options for the audit report format.
+          # Format for the audit report.
           module AuditReportFormat
-            # Unspecified. Invalid state.
+            # Default value. This value is unused.
             AUDIT_REPORT_FORMAT_UNSPECIFIED = 0
 
-            # Audit Report creation format is Open Document.
+            # Open Document format.
             AUDIT_REPORT_FORMAT_ODF = 1
           end
         end
 
-        # Message for getting the enrollment status of a resource.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#get_resource_enrollment_status GetResourceEnrollmentStatus}.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. Format
-        #     folders/\\{folder}/locations/\\{location}/resourceEnrollmentStatuses/\\{resource_enrollment_status},
-        #     projects/\\{project}/locations/\\{location}/resourceEnrollmentStatuses/\\{resource_enrollment_status},
-        #     organizations/\\{organization}/locations/\\{location}/resourceEnrollmentStatuses/\\{resource_enrollment_status}
+        #     Required. Name of the resource enrollment status, in one of the following
+        #     formats:
+        #
+        #     * `folders/{folder}/locations/{location}/resourceEnrollmentStatuses/{resource_enrollment_status}`
+        #     * `projects/{project}/locations/{location}/resourceEnrollmentStatuses/{resource_enrollment_status}`
+        #     * `organizations/{organization}/locations/{location}/resourceEnrollmentStatuses/{resource_enrollment_status}`
         class GetResourceEnrollmentStatusRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Message for listing all the descendent resources under parent with
-        # enrollment.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_resource_enrollment_statuses ListResourceEnrollmentStatuses}.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. The parent scope for which the list of resources with enrollments
-        #     are required.
+        #     Required. Parent organization or folder to list enrollment statuses for,
+        #     in one of the following formats:
+        #
+        #     * `folders/{folder}/locations/{location}`
+        #     * `organizations/{organization}/locations/{location}`
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of resources to return.
+        #     Optional. Maximum number of items to return in a single page. The service
+        #     might return fewer items than this value. If unspecified, the service picks
+        #     an appropriate default. The maximum value is 100; values above 100 are
+        #     reduced to 100.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. The next_page_token value returned from a previous List request,
-        #     if any.
+        #     Optional. A page token, received from a previous call, to retrieve the next
+        #     page of results.
         class ListResourceEnrollmentStatusesRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Response message with all the descendent resources with enrollment.
+        # Response message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_resource_enrollment_statuses ListResourceEnrollmentStatuses}.
         # @!attribute [rw] resource_enrollment_statuses
         #   @return [::Array<::Google::Cloud::AuditManager::V1::ResourceEnrollmentStatus>]
-        #     The resources with their enrollment status.
+        #     Resources with their enrollment status.
         # @!attribute [r] next_page_token
         #   @return [::String]
-        #     Output only. The token to retrieve the next page of results.
+        #     Output only. A token that you can send as the `page_token` in a subsequent
+        #     request to retrieve the next page of results. If this field is empty, there
+        #     are no subsequent pages.
         class ListResourceEnrollmentStatusesResponse
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Message for requesting to list the audit reports.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_audit_reports ListAuditReports}.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. The parent scope for which to list the reports.
+        #     Required. Parent organization, folder, or project to list reports for,
+        #     in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}`
+        #     * `folders/{folder}/locations/{location}`
+        #     * `organizations/{organization}/locations/{location}`
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of resources to return.
+        #     Optional. Maximum number of items to return in a single page. The service
+        #     might return fewer items than this value. If unspecified, the service picks
+        #     an appropriate default. The maximum value is 100; values above 100 are
+        #     reduced to 100.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. The next_page_token value returned from a previous List request,
-        #     if any.
+        #     Optional. A page token, received from a previous call, to retrieve the next
+        #     page of results.
         class ListAuditReportsRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Response message with all the audit reports.
+        # Response message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_audit_reports ListAuditReports}.
         # @!attribute [r] audit_reports
         #   @return [::Array<::Google::Cloud::AuditManager::V1::AuditReport>]
-        #     Output only. The audit reports.
+        #     Output only. Audit reports.
         # @!attribute [r] next_page_token
         #   @return [::String]
-        #     Output only. The token to retrieve the next page of results.
+        #     Output only. A token that you can send as the `page_token` in a subsequent
+        #     request to retrieve the next page of results. If this field is empty, there
+        #     are no subsequent pages.
         class ListAuditReportsResponse
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Message for requesting the overall audit report for an audit report name.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#get_audit_report GetAuditReport}.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Required. Format
-        #     projects/\\{project}/locations/\\{location}/auditReports/\\{audit_report},
-        #     folders/\\{folder}/locations/\\{location}/auditReports/\\{audit_report}
+        #     Required. Name of the audit report, in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}/auditReports/{audit_report}`
+        #     * `folders/{folder}/locations/{location}/auditReports/{audit_report}`
+        #     * `organizations/{organization}/locations/{location}/auditReports/{audit_report}`
         class GetAuditReportRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Message for requesting all the controls for a compliance standard.
+        # Request message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_controls ListControls}.
         # @!attribute [rw] parent
         #   @return [::String]
-        #     Required. Format
-        #     projects/\\{project}/locations/\\{location}/standards/\\{standard},
-        #     folders/\\{folder}/locations/\\{location}/standards/\\{standard}
+        #     Required. Standard to list controls for, in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}/standards/{standard}`
+        #     * `folders/{folder}/locations/{location}/standards/{standard}`
+        #     * `organizations/{organization}/locations/{location}/standards/{standard}`
         # @!attribute [rw] page_size
         #   @return [::Integer]
-        #     Optional. The maximum number of resources to return.
+        #     Optional. Maximum number of items to return in a single page. The service
+        #     might return fewer items than this value. If unspecified, the service picks
+        #     an appropriate default. The maximum value is 100; values above 100 are
+        #     reduced to 100.
         # @!attribute [rw] page_token
         #   @return [::String]
-        #     Optional. The next_page_token value returned from a previous List request,
-        #     if any.
+        #     Optional. A page token, received from a previous call, to retrieve the next
+        #     page of results.
         class ListControlsRequest
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # Response message with all the controls for a compliance standard.
+        # Response message for
+        # {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_controls ListControls}.
         # @!attribute [r] controls
         #   @return [::Array<::Google::Cloud::AuditManager::V1::Control>]
-        #     Output only. The controls for the compliance standard.
+        #     Output only. Controls for a given regulatory standard.
         # @!attribute [r] next_page_token
         #   @return [::String]
-        #     Output only. The token to retrieve the next page of results.
+        #     Output only. A token that you can send as the `page_token` in a subsequent
+        #     request to retrieve the next page of results. If this field is empty, there
+        #     are no subsequent pages.
         class ListControlsResponse
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The `ReportGenerationProgress` is part of
-        # {::Google::Longrunning::Operation google.longrunning.Operation} returned to the
-        # client for every `GetOperation` request.
+        # Details about the current status of the report-generation process.
         # @!attribute [r] state
         #   @return [::Google::Cloud::AuditManager::V1::OperationState]
-        #     Output only. The current state of execution for report generation.
+        #     Output only. Current state of execution for report generation.
         # @!attribute [r] failure_reason
         #   @return [::String]
-        #     Output only. States the reason of failure during the audit report
-        #     generation process. This field is set only if the state attribute is
-        #     OPERATION_STATE_FAILED.
+        #     Output only. Reason for failure during the audit report generation process.
+        #     This field is set only if the `OperationState` attribute is
+        #     `OPERATION_STATE_FAILED`.
         # @!attribute [rw] evaluation_percent_complete
         #   @return [::Float]
-        #     Shows the progress of the CESS service evaluation process. The progress is
-        #     defined in terms of percentage complete and is being fetched from the CESS
-        #     service.
+        #     Progress of the evaluation process. The progress is
+        #     defined in terms of percentage complete.
         # @!attribute [rw] report_generation_percent_complete
         #   @return [::Float]
-        #     Shows the report generation progress of the CESS Result Processor Service.
-        #     The // progress is defined in terms of percentage complete and is being
-        #     fetched from the CESS service. If report_generation_in_progress is non zero
-        #     then evaluation_percent_complete will be 100%.
+        #     Report generation progress, defined in terms of percentage complete.
+        #     Until evaluation is complete, this value is always `0`.
         # @!attribute [rw] report_uploading_percent_complete
         #   @return [::Float]
-        #     Shows the report uploading progress of the CESS Result Processor Service.
-        #     The progress is defined in terms of percentage complete and is being
-        #     fetched from the CESS service. If report_uploading_in_progress is non zero
-        #     then evaluation_percent_complete and report_generation_percent_complete
-        #     will be 100%.
+        #     Report uploading progress, defined in terms of percentage complete.
+        #     Until evaluation and report generation are complete, this value is always
+        #     `0`.
         # @!attribute [r] destination_gcs_bucket
         #   @return [::String]
-        #     Output only. The Cloud Storage bucket where the audit report will be
-        #     uploaded once the evaluation process is completed.
+        #     Output only. Cloud Storage bucket where the audit report is uploaded to
+        #     after the evaluation process is completed.
         # @!attribute [r] audit_report
         #   @return [::String]
-        #     Output only. The name of the audit report.
+        #     Output only. Name of the audit report.
         class ReportGenerationProgress
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The enrollment resource.
+        # Organization, folder, or project to enroll for audit reports.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Identifier. The name of this Enrollment, in the format of scope given in
-        #     request.
+        #     Identifier. Name of the enrollment, in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}/enrollments/{enrollment}`
+        #     * `folders/{folder}/locations/{location}/enrollments/{enrollment}`
+        #     * `organizations/{organization}/locations/{location}/enrollments/{enrollment}`
         # @!attribute [r] destination_details
         #   @return [::Array<::Google::Cloud::AuditManager::V1::DestinationDetails>]
-        #     Output only. The locations where the generated reports can be uploaded.
+        #     Output only. Cloud Storage buckets where you want to upload the audit
+        #     reports.
         class Enrollment
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The audit scope report.
+        # Audit scope report.
         # @!attribute [rw] scope_report_contents
         #   @return [::String]
-        #     The audit scope report content in byte format.
+        #     Audit scope report content in byte format.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Identifier. The name of this Audit Report, in the format of scope given in
-        #     request.
+        #     Identifier. Name for the audit scope report, in one of the following
+        #     formats:
+        #
+        #     * `projects/{project}/locations/{location}/auditScopeReports/{audit_scope_report}`
+        #     * `folders/{folder}/locations/{location}/auditScopeReports/{audit_scope_report}`
+        #     * `organizations/{organization}/locations/{location}/auditScopeReports/{audit_scope_report}`
         class AuditScopeReport
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The metadata of the long-running operation.
+        # Metadata for the long-running operation.
         # @!attribute [r] create_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Output only. The time the operation was created.
+        #     Output only. Time that the operation was created.
         # @!attribute [r] end_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Output only. The time the operation finished running.
+        #     Output only. Time that the operation finished running.
         # @!attribute [r] target
         #   @return [::String]
-        #     Output only. Server-defined resource path for the target of the operation.
+        #     Output only. A server-defined resource path for the target of the
+        #     operation.
         # @!attribute [r] verb
         #   @return [::String]
-        #     Output only. Name of the verb executed by the operation.
+        #     Output only. The name of the verb that was executed by the operation.
         # @!attribute [r] status_message
         #   @return [::String]
-        #     Output only. Human-readable status of the operation, if any.
+        #     Output only. A human-readable status of the operation, if any.
         # @!attribute [r] requested_cancellation
         #   @return [::Boolean]
-        #     Output only. Identifies whether the user has requested cancellation
-        #     of the operation. Operations that have been cancelled successfully
-        #     have [Operation.error][] value with a
-        #     {::Google::Rpc::Status#code google.rpc.Status.code} of 1, corresponding to
-        #     `Code.CANCELLED`.
+        #     Output only. Whether you requested that the operation be cancelled.
+        #     Operations that were cancelled successfully have an
+        #     {::Google::Longrunning::Operation#error Operation.error}
+        #     value with a status code
+        #     [Code.CANCELLED][google.rpc.Status.code.CANCELLED].
         # @!attribute [r] api_version
         #   @return [::String]
-        #     Output only. API version used to start the operation.
+        #     Output only. The API version used to start the operation. For example,
+        #     `v1`.
         class OperationMetadata
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # A resource with its enrollment status.
+        # An organization, folder, or project with its enrollment status.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Identifier. The name of this resource.
+        #     Identifier. Name of the resource enrollment status, in one of the following
+        #     formats:
+        #
+        #     * `folders/{folder}/locations/{location}/resourceEnrollmentStatuses/{resource_enrollment_status}`
+        #     * `projects/{project}/locations/{location}/resourceEnrollmentStatuses/{resource_enrollment_status}`
+        #     * `organizations/{organization}/locations/{location}/resourceEnrollmentStatuses/{resource_enrollment_status}`
         # @!attribute [r] enrollment
         #   @return [::Google::Cloud::AuditManager::V1::Enrollment]
-        #     Output only. Enrollment which contains enrolled destination details for a
-        #     resource
+        #     Output only. Enrolled destination details for the organization, folder, or
+        #     project.
         # @!attribute [r] enrolled
         #   @deprecated This field is deprecated and may be removed in the next major version update.
         #   @return [::Boolean]
-        #     Output only. Is resource enrolled.
+        #     Output only. Deprecated. Whether the organization, folder, or project is
+        #     enrolled. Use `enrollment_state` instead.
         # @!attribute [r] display_name
         #   @return [::String]
-        #     Output only. Display name of the project/folder/organization.
+        #     Output only. Display name for the organization, folder, or project.
         # @!attribute [r] enrollment_state
         #   @return [::Google::Cloud::AuditManager::V1::ResourceEnrollmentStatus::ResourceEnrollmentState]
-        #     Output only. Enrollment state of the resource.
+        #     Output only. Enrollment state of the organization, folder, or project.
         class ResourceEnrollmentStatus
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The different enrollment states of a resource.
+          # Different enrollment states of the resource and its parent.
           module ResourceEnrollmentState
-            # Unspecified. Invalid state.
+            # Default value. This value is unused.
             RESOURCE_ENROLLMENT_STATE_UNSPECIFIED = 0
 
-            # Not enrolled.
+            # The resource isn't enrolled.
             NOT_ENROLLED = 1
 
-            # Resource is not enrolled but the parent is enrolled.
+            # The resource isn't enrolled but the parent is enrolled.
             INHERITED = 2
 
-            # Enrolled.
+            # The resource is enrolled.
             ENROLLED = 3
           end
         end
@@ -371,73 +437,89 @@ module Google
         # An audit report.
         # @!attribute [rw] name
         #   @return [::String]
-        #     Identifier. The name of this Audit Report, in the format of scope given in
-        #     request.
+        #     Identifier. Name of the audit report, in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}/auditReports/{audit_report}`
+        #     * `folders/{folder}/locations/{location}/auditReports/{audit_report}`
+        #     * `organizations/{organization}/locations/{location}/auditReports/{audit_report}`
         # @!attribute [r] report_summary
         #   @return [::Google::Cloud::AuditManager::V1::ReportSummary]
-        #     Output only. Report summary with compliance, violation counts etc.
+        #     Output only. Report summary that includes information about compliance and
+        #     violation counts.
         # @!attribute [r] operation_id
         #   @return [::String]
-        #     Output only. ClientOperationId
+        #     Output only. Client operation ID for the audit report.
         # @!attribute [r] destination_details
         #   @return [::Google::Cloud::AuditManager::V1::DestinationDetails]
-        #     Output only. The location where the generated report will be uploaded.
+        #     Output only. Cloud Storage bucket where the audit report is uploaded to.
         # @!attribute [r] compliance_standard
+        #   @deprecated This field is deprecated and may be removed in the next major version update.
         #   @return [::String]
-        #     Output only. Compliance Standard.
+        #     Output only. Deprecated. Compliance standard to be audited against.
+        #
+        #     Use the `compliance_framework` field instead.
         # @!attribute [r] scope
         #   @return [::String]
-        #     Output only. The parent scope on which the report was generated.
+        #     Output only. Organization, folder, or project that the report is generated
+        #     for, in one of the following formats:
+        #
+        #     * `projects/{project}/locations/{location}`
+        #     * `folders/{folder}/locations/{location}`
+        #     * `organizations/{organization}/locations/{location}`
         # @!attribute [r] create_time
         #   @return [::Google::Protobuf::Timestamp]
         #     Output only. Creation time of the audit report.
         # @!attribute [r] control_details
         #   @return [::Array<::Google::Cloud::AuditManager::V1::ControlDetails>]
-        #     Output only. The overall status of controls
+        #     Output only. Overall status of the controls.
         # @!attribute [r] report_generation_state
         #   @return [::Google::Cloud::AuditManager::V1::AuditReport::ReportGenerationState]
-        #     Output only. The state of Audit Report Generation.
+        #     Output only. State of audit report generation.
         # @!attribute [r] compliance_framework
         #   @return [::String]
-        #     Output only. Compliance Framework of Audit Report
+        #     Output only. Compliance framework to use for the audit report. For example,
+        #     `CIS_GCP_FOUNDATIONS_V1_2_0`.
         # @!attribute [r] scope_id
         #   @return [::String]
-        #     Output only. The ID/ Number for the scope on which the audit report was
-        #     generated.
+        #     Output only. Project number, folder ID, or organization ID that the audit
+        #     report was generated for.
         class AuditReport
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The different states of the Audit Manager report generation.
+          # Different states of report generation.
           module ReportGenerationState
-            # Unspecified. Invalid state.
+            # Default value. This value is unused.
             REPORT_GENERATION_STATE_UNSPECIFIED = 0
 
-            # Audit report generation process is in progress, ie. operation state is
-            # neither OPERATION_STATE_DONE nor OPERATION_STATE_FAILED.
+            # The process is in progress. The operation can have any state
+            # except for `OPERATION_STATE_DONE` or `OPERATION_STATE_FAILED`.
             IN_PROGRESS = 1
 
-            # Audit report generation process is completed. Operation state is
-            # OPERATION_STATE_DONE.
+            # The process is completed. The operation state is
+            # `OPERATION_STATE_DONE`.
             COMPLETED = 2
 
-            # Audit report generation process has failed. Operation state is
-            # OPERATION_STATE_FAILED.
+            # The process has failed. The operation state is
+            # `OPERATION_STATE_FAILED`.
             FAILED = 3
 
-            # Audit report generation process has completed. But report summary is
-            # unknown. This is valid for older reports.
+            # The process completed, but the report summary's status is unknown. This
+            # state isn't used for new reports.
             SUMMARY_UNKNOWN = 4
           end
         end
 
-        # The regulatory family of the control.
+        # Regulatory family of the control.
         # @!attribute [rw] family_id
         #   @return [::String]
-        #     The ID of the regulatory control family.
+        #     ID of the regulatory control family. To find the list of supported
+        #     control families, use the
+        #     {::Google::Cloud::AuditManager::V1::AuditManager::Client#list_controls ListControls}
+        #     method and review the `control_family` field in the response.
         # @!attribute [rw] display_name
         #   @return [::String]
-        #     The display name of the regulatory control family.
+        #     Display name of the regulatory control family.
         class ControlFamily
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -446,118 +528,118 @@ module Google
         # A control.
         # @!attribute [r] id
         #   @return [::String]
-        #     Output only. The control identifier used to fetch the findings. This is
-        #     same as the control report name.
+        #     Output only. Control identifier that's used to fetch the findings. The
+        #     identifier is the same as the control report name.
         # @!attribute [r] display_name
         #   @return [::String]
         #     Output only. Display name of the control.
         # @!attribute [r] family
         #   @return [::Google::Cloud::AuditManager::V1::Control::Family]
-        #     Output only. Group where the control belongs. E.g. Access Control.
+        #     Output only. Category that the control belongs to.
         # @!attribute [r] control_family
         #   @return [::Google::Cloud::AuditManager::V1::ControlFamily]
-        #     Output only. Regulatory Family of the control E.g. Access Control
+        #     Output only. Regulatory family of the control.
         # @!attribute [r] description
         #   @return [::String]
-        #     Output only. Regulatory control ask of the control
+        #     Output only. Description of the control.
         # @!attribute [r] responsibility_type
         #   @return [::String]
-        #     Output only. The type of responsibility for implementing this control. It
-        #     can be google, customer or shared.
+        #     Output only. Who is responsible for implementing this control. Set to one
+        #     of the following values: `GOOGLE`, `CUSTOMER`, or `SHARED`.
         # @!attribute [r] google_responsibility_description
         #   @return [::String]
-        #     Output only. Description of the google responsibility for implementing this
-        #     control.
+        #     Output only. A description of Google's responsibility for this control.
         # @!attribute [r] google_responsibility_implementation
         #   @return [::String]
-        #     Output only. Implementation of the google responsibility for implementing
+        #     Output only. A description of how Google implements its responsibility for
         #     this control.
         # @!attribute [r] customer_responsibility_description
         #   @return [::String]
-        #     Output only. Description of the customer responsibility for implementing
-        #     this control.
+        #     Output only. A description of your responsibility for this control.
         # @!attribute [r] customer_responsibility_implementation
         #   @return [::String]
-        #     Output only. Implementation of the customer responsibility for implementing
+        #     Output only. A description of how you can implement your responsibility for
         #     this control.
         class Control
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
 
-          # The family of the control. For example, Access Control.
+          # Category of the control.
           module Family
-            # Unspecified. Invalid state.
+            # Default value. This value is unused.
             FAMILY_UNSPECIFIED = 0
 
-            # Access Control
+            # Access control.
             AC = 1
 
-            # Awareness and Training
+            # Awareness and training.
             AT = 2
 
-            # Audit and Accountability
+            # Audit and accountability.
             AU = 3
 
-            # Certification, Accreditation and Security Assessments
+            # Certification, accreditation and security assessments.
             CA = 4
 
-            # Configuration Management
+            # Configuration management and change control.
             CM = 5
 
-            # Contingency Planning
+            # Contingency planning and disaster recovery.
             CP = 6
 
-            # Identification and Authentication
+            # Identification and authentication.
             IA = 7
 
-            # Incident Response
+            # Incident response.
             IR = 8
 
-            # Maintenance
+            # Maintenance.
             MA = 9
 
-            # Media Protection
+            # Media protection.
             MP = 10
 
-            # Physical and Environmental Protection
+            # Physical and environmental protection.
             PE = 11
 
-            # Security Planning
+            # Security planning.
             PL = 12
 
-            # Personnel Security
+            # Personnel security.
             PS = 13
 
-            # Risk Assessment
+            # Risk assessment.
             RA = 14
 
-            # System Services and Acquisition
+            # System services and acquisition.
             SA = 15
 
-            # System and Communications Protection
+            # System and communications protection.
             SC = 16
 
-            # System and Information Integrity
+            # System and information integrity.
             SI = 17
 
-            # Supply Chain Risk Management
+            # Supply chain risk management.
             SR = 18
           end
         end
 
-        # The locations where the generated reports are saved.
+        # Cloud Storage bucket where the audit report is uploaded to.
         # @!attribute [rw] gcs_bucket_uri
         #   @return [::String]
-        #     The Cloud Storage bucket where the audit report is/will be uploaded.
+        #     URI for the Cloud Storage bucket, in the format
+        #     `gs://{bucket_name}`.
         class DestinationDetails
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The additional information for an audit operation.
+        # Additional information about the number of checks that were made during an
+        # audit operation.
         # @!attribute [rw] total_count
         #   @return [::Integer]
-        #     Total number of checks.
+        #     Total number of evaluated checks.
         # @!attribute [rw] compliant_count
         #   @return [::Integer]
         #     Number of compliant checks.
@@ -566,80 +648,80 @@ module Google
         #     Number of checks with violations.
         # @!attribute [rw] manual_review_needed_count
         #   @return [::Integer]
-        #     Number of checks with "manual review needed" status.
+        #     Number of checks that require a manual review.
         # @!attribute [rw] error_count
         #   @return [::Integer]
-        #     Number of checks that could not be performed due to errors.
+        #     Number of checks that can't be performed due to errors.
         class ReportSummary
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The evaluation details for a control.
+        # Evaluation details for a control.
         # @!attribute [rw] control
         #   @return [::Google::Cloud::AuditManager::V1::Control]
-        #     The control for which the findings are being reported.
+        #     Control that the findings are being reported for.
         # @!attribute [r] compliance_state
         #   @return [::Google::Cloud::AuditManager::V1::ComplianceState]
         #     Output only. Overall status of the findings for the control.
         # @!attribute [rw] control_report_summary
         #   @return [::Google::Cloud::AuditManager::V1::ReportSummary]
-        #     Report summary with compliance, violation counts etc.
+        #     A control report summary that provides a high-level overview of the
+        #     compliance controls and the assessment status.
         class ControlDetails
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
-        # The different execution states of the Audit Manager service.
+        # Different execution states of the Audit Manager service.
         module OperationState
-          # Unspecified. Invalid state.
+          # Default value. This value is unused.
           OPERATION_STATE_UNSPECIFIED = 0
 
-          # Audit report generation process has not started.
+          # Audit generation process hasn't started.
           OPERATION_STATE_NOT_STARTED = 10
 
-          # Audit Manager is currently evaluating the workloads against specific
-          # standard.
+          # Evaluation process is in progress.
           OPERATION_STATE_EVALUATION_IN_PROGRESS = 20
 
-          # Audit Manager has completed Evaluation for the workload.
+          # Evaluation process is completed.
           OPERATION_STATE_EVALUATION_DONE = 21
 
-          # Audit Manager is creating audit report from the evaluated data.
+          # Report generation process is in progress.
           OPERATION_STATE_EVIDENCE_REPORT_GENERATION_IN_PROGRESS = 30
 
-          # Audit Manager has completed generation of the audit report.
+          # Report generation process is completed.
           OPERATION_STATE_EVIDENCE_REPORT_GENERATION_DONE = 31
 
-          # Audit Manager is uploading the audit report and evidences to the customer
-          # provided destination.
+          # The audit report and evidence are being uploaded to your bucket.
           OPERATION_STATE_EVIDENCE_UPLOAD_IN_PROGRESS = 40
 
-          # Audit report generation process is completed.
+          # The audit report and evidence are uploaded to your bucket.
           OPERATION_STATE_DONE = 50
 
-          # Audit report generation process has failed.
+          # Audit report generation process failed.
           OPERATION_STATE_FAILED = 60
         end
 
-        # The compliance state after evaluation.
+        # Compliance state after evaluation.
         module ComplianceState
-          # Unspecified. Invalid state.
+          # Default value. This value is unused.
           COMPLIANCE_STATE_UNSPECIFIED = 0
 
-          # Compliant.
+          # The resource is compliant.
           COMPLIANT = 1
 
-          # Violation.
+          # The resource isn't compliant.
           VIOLATION = 2
 
-          # MANUAL_REVIEW_NEEDED, requires manual review
+          # You must complete a manual review.
           MANUAL_REVIEW_NEEDED = 3
 
-          # Error while computing status.
+          # An error was encountered during the evaluation or evidence gathering
+          # process.
           ERROR = 4
 
-          # Cannot be audited
+          # The resource can't be audited.
           AUDIT_NOT_SUPPORTED = 5
         end
       end