google-cloud-network_security-v1 0.a → 0.1.0

data/proto_docs/google/cloud/networksecurity/v1/backend_authentication_config.rb

@@ -0,0 +1,217 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # BackendAuthenticationConfig message groups the TrustConfig together with
+        # other settings that control how the load balancer authenticates, and
+        # expresses its identity to, the backend:
+        #
+        # * `trustConfig` is the attached TrustConfig.
+        #
+        # * `wellKnownRoots` indicates whether the load balance should trust backend
+        # server certificates that are issued by public certificate authorities, in
+        # addition to certificates trusted by the TrustConfig.
+        #
+        # * `clientCertificate` is a client certificate that the load balancer uses to
+        # express its identity to the backend, if the connection to the backend uses
+        # mTLS.
+        #
+        # You can attach the BackendAuthenticationConfig to the load balancer's
+        # BackendService directly determining how that BackendService negotiates TLS.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the BackendAuthenticationConfig resource. It matches the
+        #     pattern
+        #     `projects/*/locations/{location}/backendAuthenticationConfigs/{backend_authentication_config}`
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Optional. Free-text description of the resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Set of label tags associated with the resource.
+        # @!attribute [rw] client_certificate
+        #   @return [::String]
+        #     Optional. A reference to a certificatemanager.googleapis.com.Certificate
+        #     resource. This is a relative resource path following the form
+        #     "projects/\\{project}/locations/\\{location}/certificates/\\{certificate}".
+        #
+        #     Used by a BackendService to negotiate mTLS when the backend connection uses
+        #     TLS and the backend requests a client certificate. Must have a CLIENT_AUTH
+        #     scope.
+        # @!attribute [rw] trust_config
+        #   @return [::String]
+        #     Optional. A reference to a TrustConfig resource from the
+        #     certificatemanager.googleapis.com namespace. This is a relative resource
+        #     path following the form
+        #     "projects/\\{project}/locations/\\{location}/trustConfigs/\\{trust_config}".
+        #
+        #     A BackendService uses the chain of trust represented by this TrustConfig,
+        #     if specified, to validate the server certificates presented by the backend.
+        #     Required unless wellKnownRoots is set to PUBLIC_ROOTS.
+        # @!attribute [rw] well_known_roots
+        #   @return [::Google::Cloud::NetworkSecurity::V1::BackendAuthenticationConfig::WellKnownRoots]
+        #     Well known roots to use for server certificate validation.
+        # @!attribute [r] etag
+        #   @return [::String]
+        #     Output only. Etag of the resource.
+        class BackendAuthenticationConfig
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Enum to specify the well known roots to use for server certificate
+          # validation.
+          module WellKnownRoots
+            # Equivalent to NONE.
+            WELL_KNOWN_ROOTS_UNSPECIFIED = 0
+
+            # The BackendService will only validate server certificates against roots
+            # specified in TrustConfig.
+            NONE = 1
+
+            # The BackendService uses a set of well-known public roots, in addition to
+            # any roots specified in the trustConfig field, when validating the server
+            # certificates presented by the backend. Validation with these roots is
+            # only considered when the TlsSettings.sni field in the BackendService is
+            # set.
+            #
+            # The well-known roots are a set of root CAs managed by Google. CAs in this
+            # set can be added or removed without notice.
+            PUBLIC_ROOTS = 2
+          end
+        end
+
+        # Request used by the ListBackendAuthenticationConfigs method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the
+        #     BackendAuthenticationConfigs should be listed, specified in the format
+        #     `projects/*/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of BackendAuthenticationConfigs to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListBackendAuthenticationConfigsResponse`
+        #     Indicates that this is a continuation of a prior
+        #     `ListBackendAuthenticationConfigs` call, and that the system
+        #     should return the next page of data.
+        class ListBackendAuthenticationConfigsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListBackendAuthenticationConfigs method.
+        # @!attribute [rw] backend_authentication_configs
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::BackendAuthenticationConfig>]
+        #     List of BackendAuthenticationConfig resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Locations that could not be reached.
+        class ListBackendAuthenticationConfigsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetBackendAuthenticationConfig method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the BackendAuthenticationConfig to get. Must be in the
+        #     format `projects/*/locations/{location}/backendAuthenticationConfigs/*`.
+        class GetBackendAuthenticationConfigRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CreateBackendAuthenticationConfig method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the BackendAuthenticationConfig. Must be
+        #     in the format `projects/*/locations/{location}`.
+        # @!attribute [rw] backend_authentication_config_id
+        #   @return [::String]
+        #     Required. Short name of the BackendAuthenticationConfig resource to be
+        #     created. This value should be 1-63 characters long, containing only
+        #     letters, numbers, hyphens, and underscores, and should not start with a
+        #     number. E.g. "backend-auth-config".
+        # @!attribute [rw] backend_authentication_config
+        #   @return [::Google::Cloud::NetworkSecurity::V1::BackendAuthenticationConfig]
+        #     Required. BackendAuthenticationConfig resource to be created.
+        class CreateBackendAuthenticationConfigRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by UpdateBackendAuthenticationConfig method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     BackendAuthenticationConfig resource by the update.  The fields
+        #     specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the
+        #     mask. If the user does not provide a mask then all fields will be
+        #     overwritten.
+        # @!attribute [rw] backend_authentication_config
+        #   @return [::Google::Cloud::NetworkSecurity::V1::BackendAuthenticationConfig]
+        #     Required. Updated BackendAuthenticationConfig resource.
+        class UpdateBackendAuthenticationConfigRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteBackendAuthenticationConfig method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the BackendAuthenticationConfig to delete. Must be in
+        #     the format
+        #     `projects/*/locations/{location}/backendAuthenticationConfigs/*`.
+        # @!attribute [rw] etag
+        #   @return [::String]
+        #     Optional. Etag of the resource.
+        #     If this is provided, it must match the server's etag.
+        class DeleteBackendAuthenticationConfigRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/client_tls_policy.rb

@@ -0,0 +1,162 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # ClientTlsPolicy is a resource that specifies how a client should authenticate
+        # connections to backends of a service. This resource itself does not affect
+        # configuration unless it is attached to a backend service resource.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the ClientTlsPolicy resource. It matches the pattern
+        #     `projects/{project}/locations/{location}/clientTlsPolicies/{client_tls_policy}`
+        # @!attribute [rw] description
+        #   @return [::String]
+        #     Optional. Free-text description of the resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was created.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The timestamp when the resource was updated.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Set of label tags associated with the resource.
+        # @!attribute [rw] sni
+        #   @return [::String]
+        #     Optional. Server Name Indication string to present to the server during TLS
+        #     handshake. E.g: "secure.example.com".
+        # @!attribute [rw] client_certificate
+        #   @return [::Google::Cloud::NetworkSecurity::V1::CertificateProvider]
+        #     Optional. Defines a mechanism to provision client identity (public and
+        #     private keys) for peer to peer authentication. The presence of this
+        #     dictates mTLS.
+        # @!attribute [rw] server_validation_ca
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::ValidationCA>]
+        #     Optional. Defines the mechanism to obtain the Certificate Authority
+        #     certificate to validate the server certificate. If empty, client does not
+        #     validate the server certificate.
+        class ClientTlsPolicy
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+        end
+
+        # Request used by the ListClientTlsPolicies method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The project and location from which the ClientTlsPolicies should
+        #     be listed, specified in the format `projects/*/locations/{location}`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Maximum number of ClientTlsPolicies to return per call.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     The value returned by the last `ListClientTlsPoliciesResponse`
+        #     Indicates that this is a continuation of a prior
+        #     `ListClientTlsPolicies` call, and that the system
+        #     should return the next page of data.
+        class ListClientTlsPoliciesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Response returned by the ListClientTlsPolicies method.
+        # @!attribute [rw] client_tls_policies
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::ClientTlsPolicy>]
+        #     List of ClientTlsPolicy resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     If there might be more results than those appearing in this response, then
+        #     `next_page_token` is included. To get the next set of results, call this
+        #     method again using the value of `next_page_token` as `page_token`.
+        class ListClientTlsPoliciesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the GetClientTlsPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the ClientTlsPolicy to get. Must be in the format
+        #     `projects/*/locations/{location}/clientTlsPolicies/*`.
+        class GetClientTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the CreateClientTlsPolicy method.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent resource of the ClientTlsPolicy. Must be in
+        #     the format `projects/*/locations/{location}`.
+        # @!attribute [rw] client_tls_policy_id
+        #   @return [::String]
+        #     Required. Short name of the ClientTlsPolicy resource to be created. This
+        #     value should be 1-63 characters long, containing only letters, numbers,
+        #     hyphens, and underscores, and should not start with a number. E.g.
+        #     "client_mtls_policy".
+        # @!attribute [rw] client_tls_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::ClientTlsPolicy]
+        #     Required. ClientTlsPolicy resource to be created.
+        class CreateClientTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by UpdateClientTlsPolicy method.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Field mask is used to specify the fields to be overwritten in the
+        #     ClientTlsPolicy resource by the update.  The fields
+        #     specified in the update_mask are relative to the resource, not
+        #     the full request. A field will be overwritten if it is in the
+        #     mask. If the user does not provide a mask then all fields will be
+        #     overwritten.
+        # @!attribute [rw] client_tls_policy
+        #   @return [::Google::Cloud::NetworkSecurity::V1::ClientTlsPolicy]
+        #     Required. Updated ClientTlsPolicy resource.
+        class UpdateClientTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # Request used by the DeleteClientTlsPolicy method.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. A name of the ClientTlsPolicy to delete. Must be in
+        #     the format `projects/*/locations/{location}/clientTlsPolicies/*`.
+        class DeleteClientTlsPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/common.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # Represents the metadata of the long-running operation.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time the operation was created.
+        # @!attribute [r] end_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time the operation finished running.
+        # @!attribute [r] target
+        #   @return [::String]
+        #     Output only. Server-defined resource path for the target of the operation.
+        # @!attribute [r] verb
+        #   @return [::String]
+        #     Output only. Name of the verb executed by the operation.
+        # @!attribute [r] status_message
+        #   @return [::String]
+        #     Output only. Human-readable status of the operation, if any.
+        # @!attribute [r] requested_cancellation
+        #   @return [::Boolean]
+        #     Output only. Identifies whether the user has requested cancellation
+        #     of the operation. Operations that have successfully been cancelled
+        #     have [Operation.error][] value with a
+        #     {::Google::Rpc::Status#code google.rpc.Status.code} of 1, corresponding to
+        #     `Code.CANCELLED`.
+        # @!attribute [r] api_version
+        #   @return [::String]
+        #     Output only. API version used to start the operation.
+        class OperationMetadata
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end

data/proto_docs/google/cloud/networksecurity/v1/dns_threat_detector.rb

@@ -0,0 +1,159 @@
+# frozen_string_literal: true
+
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Auto-generated by gapic-generator-ruby. DO NOT EDIT!
+
+
+module Google
+  module Cloud
+    module NetworkSecurity
+      module V1
+        # A DNS threat detector sends DNS query logs to a _provider_ that then
+        # analyzes the logs to identify threat events in the DNS queries.
+        # By default, all VPC networks in your projects are included. You can exclude
+        # specific networks by supplying `excluded_networks`.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Immutable. Identifier. Name of the DnsThreatDetector resource.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Create time stamp.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. Update time stamp.
+        # @!attribute [rw] labels
+        #   @return [::Google::Protobuf::Map{::String => ::String}]
+        #     Optional. Any labels associated with the DnsThreatDetector, listed as key
+        #     value pairs.
+        # @!attribute [rw] excluded_networks
+        #   @return [::Array<::String>]
+        #     Optional. A list of network resource names which aren't monitored by this
+        #     DnsThreatDetector.
+        #
+        #     Example:
+        #     `projects/PROJECT_ID/global/networks/NETWORK_NAME`.
+        # @!attribute [rw] provider
+        #   @return [::Google::Cloud::NetworkSecurity::V1::DnsThreatDetector::Provider]
+        #     Required. The provider used for DNS threat analysis.
+        class DnsThreatDetector
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+
+          # @!attribute [rw] key
+          #   @return [::String]
+          # @!attribute [rw] value
+          #   @return [::String]
+          class LabelsEntry
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+
+          # Name of the provider used for DNS threat analysis.
+          module Provider
+            # An unspecified provider.
+            PROVIDER_UNSPECIFIED = 0
+
+            # The Infoblox DNS threat detector provider.
+            INFOBLOX = 1
+          end
+        end
+
+        # The message for requesting a list of DnsThreatDetectors in the project.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The parent value for `ListDnsThreatDetectorsRequest`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. The requested page size. The server may return fewer items than
+        #     requested. If unspecified, the server picks an appropriate default.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. A page token received from a previous
+        #     `ListDnsThreatDetectorsRequest` call. Provide this to retrieve the
+        #     subsequent page.
+        class ListDnsThreatDetectorsRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The response message to requesting a list of DnsThreatDetectors.
+        # @!attribute [rw] dns_threat_detectors
+        #   @return [::Array<::Google::Cloud::NetworkSecurity::V1::DnsThreatDetector>]
+        #     The list of DnsThreatDetector resources.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     A token, which can be sent as `page_token`, to retrieve the next page.
+        # @!attribute [rw] unreachable
+        #   @return [::Array<::String>]
+        #     Unordered list. Unreachable `DnsThreatDetector` resources.
+        class ListDnsThreatDetectorsResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The message sent to get a DnsThreatDetector.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the DnsThreatDetector resource.
+        class GetDnsThreatDetectorRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The message to create a DnsThreatDetector.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. The value for the parent of the DnsThreatDetector resource.
+        # @!attribute [rw] dns_threat_detector_id
+        #   @return [::String]
+        #     Optional. The ID of the requesting DnsThreatDetector object.
+        #     If this field is not supplied, the service generates an identifier.
+        # @!attribute [rw] dns_threat_detector
+        #   @return [::Google::Cloud::NetworkSecurity::V1::DnsThreatDetector]
+        #     Required. The `DnsThreatDetector` resource to create.
+        class CreateDnsThreatDetectorRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The message for updating a DnsThreatDetector.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. The field mask is used to specify the fields to be overwritten in
+        #     the DnsThreatDetector resource by the update. The fields specified in the
+        #     update_mask are relative to the resource, not the full request. A field
+        #     will be overwritten if it is in the mask. If the mask is not provided then
+        #     all fields present in the request will be overwritten.
+        # @!attribute [rw] dns_threat_detector
+        #   @return [::Google::Cloud::NetworkSecurity::V1::DnsThreatDetector]
+        #     Required. The DnsThreatDetector resource being updated.
+        class UpdateDnsThreatDetectorRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
+        # The message for deleting a DnsThreatDetector.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Name of the DnsThreatDetector resource.
+        class DeleteDnsThreatDetectorRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+      end
+    end
+  end
+end