@azure/arm-security 6.0.0-beta.2 → 6.0.0-beta.3

package/src/models/index.ts

@@ -1488,174 +1488,6 @@ export interface AuthenticationDetailsProperties {
   readonly grantedPermissions?: PermissionProperty[];
 }
 
-/** A vulnerability assessment scan record properties. */
-export interface ScanProperties {
-  /** The scan trigger type. */
-  triggerType?: ScanTriggerType;
-  /** The scan status. */
-  state?: ScanState;
-  /** The server name. */
-  server?: string;
-  /** The database name. */
-  database?: string;
-  /** The SQL version. */
-  sqlVersion?: string;
-  /** The scan start time (UTC). */
-  startTime?: Date;
-  /** Scan results are valid until end time (UTC). */
-  endTime?: Date;
-  /** The number of failed rules with high severity. */
-  highSeverityFailedRulesCount?: number;
-  /** The number of failed rules with medium severity. */
-  mediumSeverityFailedRulesCount?: number;
-  /** The number of failed rules with low severity. */
-  lowSeverityFailedRulesCount?: number;
-  /** The number of total passed rules. */
-  totalPassedRulesCount?: number;
-  /** The number of total failed rules. */
-  totalFailedRulesCount?: number;
-  /** The number of total rules assessed. */
-  totalRulesCount?: number;
-  /** Baseline created for this database, and has one or more rules. */
-  isBaselineApplied?: boolean;
-}
-
-/** A list of vulnerability assessment scan records. */
-export interface Scans {
-  /** List of vulnerability assessment scan records. */
-  value?: Scan[];
-}
-
-/** A vulnerability assessment scan result properties for a single rule. */
-export interface ScanResultProperties {
-  /** The rule Id. */
-  ruleId?: string;
-  /** The rule result status. */
-  status?: RuleStatus;
-  /** Indicated whether the results specified here are trimmed. */
-  isTrimmed?: boolean;
-  /** The results of the query that was run. */
-  queryResults?: string[][];
-  /** Remediation details. */
-  remediation?: Remediation;
-  /** The rule result adjusted with baseline. */
-  baselineAdjustedResult?: BaselineAdjustedResult;
-  /** vulnerability assessment rule metadata details. */
-  ruleMetadata?: VaRule;
-}
-
-/** Remediation details. */
-export interface Remediation {
-  /** Remediation description. */
-  description?: string;
-  /** Remediation script. */
-  scripts?: string[];
-  /** Is remediation automated. */
-  automated?: boolean;
-  /** Optional link to remediate in Azure Portal. */
-  portalLink?: string;
-}
-
-/** The rule result adjusted with baseline. */
-export interface BaselineAdjustedResult {
-  /** Baseline details. */
-  baseline?: Baseline;
-  /** The rule result status. */
-  status?: RuleStatus;
-  /** Results the are not in baseline. */
-  resultsNotInBaseline?: string[][];
-  /** Results the are in baseline. */
-  resultsOnlyInBaseline?: string[][];
-}
-
-/** Baseline details. */
-export interface Baseline {
-  /** Expected results. */
-  expectedResults?: string[][];
-  /** Baseline update time (UTC). */
-  updatedTime?: Date;
-}
-
-/** vulnerability assessment rule metadata details. */
-export interface VaRule {
-  /** The rule Id. */
-  ruleId?: string;
-  /** The rule severity. */
-  severity?: RuleSeverity;
-  /** The rule category. */
-  category?: string;
-  /** The rule type. */
-  ruleType?: RuleType;
-  /** The rule title. */
-  title?: string;
-  /** The rule description. */
-  description?: string;
-  /** The rule rationale. */
-  rationale?: string;
-  /** The rule query details. */
-  queryCheck?: QueryCheck;
-  /** The benchmark references. */
-  benchmarkReferences?: BenchmarkReference[];
-}
-
-/** The rule query details. */
-export interface QueryCheck {
-  /** The rule query. */
-  query?: string;
-  /** Expected result. */
-  expectedResult?: string[][];
-  /** Column names of expected result. */
-  columnNames?: string[];
-}
-
-/** The benchmark references. */
-export interface BenchmarkReference {
-  /** The benchmark name. */
-  benchmark?: string;
-  /** The benchmark reference. */
-  reference?: string;
-}
-
-/** A list of vulnerability assessment scan results. */
-export interface ScanResults {
-  /** List of vulnerability assessment scan results. */
-  value?: ScanResult[];
-}
-
-/** Rule results input. */
-export interface RuleResultsInput {
-  /** Take results from latest scan. */
-  latestScan?: boolean;
-  /**
-   * Expected results to be inserted into the baseline.
-   * Leave this field empty it LatestScan == true.
-   */
-  results?: string[][];
-}
-
-/** Rule results properties. */
-export interface RuleResultsProperties {
-  /** Expected results in the baseline. */
-  results?: string[][];
-}
-
-/** A list of rules results. */
-export interface RulesResults {
-  /** List of rule results. */
-  value?: RuleResults[];
-}
-
-/** Rules results input. */
-export interface RulesResultsInput {
-  /** Take results from latest scan. */
-  latestScan?: boolean;
-  /**
-   * Expected results to be inserted into the baseline.
-   * Leave this field empty it LatestScan == true.
-   */
-  results?: { [propertyName: string]: string[][] };
-}
-
 /** List of security alerts */
 export interface AlertList {
   /** describes security alert properties. */
@@ -1820,10 +1652,10 @@ export interface EnvironmentData {
     | "AzureDevOpsScope";
 }
 
-/** Page of a security governanceRules list */
+/** Page of a governance rules list */
 export interface GovernanceRuleList {
   /**
-   * Collection of governanceRules in this page
+   * Collection of governance rules in this page
    * NOTE: This property will not be serialized. It can only be populated by the server.
    */
   readonly value?: GovernanceRule[];
@@ -1842,30 +1674,54 @@ export interface GovernanceRuleOwnerSource {
   value?: string;
 }
 
-/** The governance email weekly notification configuration. */
+/** The governance email weekly notification configuration */
 export interface GovernanceRuleEmailNotification {
-  /** Defines whether manager email notifications are disabled. */
+  /** Defines whether manager email notifications are disabled */
   disableManagerEmailNotification?: boolean;
-  /** Defines whether owner email notifications are disabled. */
+  /** Defines whether owner email notifications are disabled */
   disableOwnerEmailNotification?: boolean;
 }
 
+/** The governance rule metadata */
+export interface GovernanceRuleMetadata {
+  /**
+   * Governance rule Created by object id (GUID)
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly createdBy?: string;
+  /**
+   * Governance rule creation date
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly createdOn?: Date;
+  /**
+   * Governance rule last updated by object id (GUID)
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly updatedBy?: string;
+  /**
+   * Governance rule last update date
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly updatedOn?: Date;
+}
+
 /** Governance rule execution parameters */
 export interface ExecuteGovernanceRuleParams {
   /** Describe if governance rule should be override */
   override?: boolean;
 }
 
-/** Execute status of Security GovernanceRule over a given scope */
-export interface ExecuteRuleStatus {
+/** Long run operation status of governance rule over a given scope */
+export interface OperationResultAutoGenerated {
   /**
-   * Unique key for the execution of GovernanceRule
+   * The status of the long run operation result of governance rule
    * NOTE: This property will not be serialized. It can only be populated by the server.
    */
-  readonly operationId?: string;
+  readonly status?: OperationResult;
 }
 
-/** Page of a security governance assignments list */
+/** Page of a governance assignments list */
 export interface GovernanceAssignmentsList {
   /**
    * Collection of governance assignments in this page
@@ -1887,85 +1743,378 @@ export interface RemediationEta {
   justification: string;
 }
 
-/** The governance email weekly notification configuration. */
-export interface GovernanceEmailNotification {
-  /** Exclude manager from weekly email notification. */
-  disableManagerEmailNotification?: boolean;
-  /** Exclude  owner from weekly email notification. */
-  disableOwnerEmailNotification?: boolean;
+/** The governance email weekly notification configuration. */
+export interface GovernanceEmailNotification {
+  /** Exclude manager from weekly email notification. */
+  disableManagerEmailNotification?: boolean;
+  /** Exclude  owner from weekly email notification. */
+  disableOwnerEmailNotification?: boolean;
+}
+
+/** Describe the additional data of governance assignment - optional */
+export interface GovernanceAssignmentAdditionalData {
+  /** Ticket number associated with this governance assignment */
+  ticketNumber?: number;
+  /** Ticket link associated with this governance assignment - for example: https://snow.com */
+  ticketLink?: string;
+  /** The ticket status associated with this governance assignment - for example: Active */
+  ticketStatus?: string;
+}
+
+/** Page of a security applications list */
+export interface ApplicationsList {
+  /**
+   * Collection of applications in this page
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly value?: Application[];
+  /**
+   * The URI to fetch the next page
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly nextLink?: string;
+}
+
+/** Page of a list of API collections as represented by Defender for APIs. */
+export interface ApiCollectionResponseList {
+  /**
+   * API collections in this page.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly value?: ApiCollectionResponse[];
+  /**
+   * The URI to fetch the next page.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly nextLink?: string;
+}
+
+/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */
+export interface ErrorResponse {
+  /** The error object. */
+  error?: ErrorDetail;
+}
+
+/** The error detail. */
+export interface ErrorDetail {
+  /**
+   * The error code.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly code?: string;
+  /**
+   * The error message.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly message?: string;
+  /**
+   * The error target.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly target?: string;
+  /**
+   * The error details.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly details?: ErrorDetail[];
+  /**
+   * The error additional info.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly additionalInfo?: ErrorAdditionalInfo[];
+}
+
+/** Page of health reports list */
+export interface HealthReportsList {
+  /**
+   * Collection of health reports in this page
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly value?: HealthReport[];
+  /**
+   * The URI to fetch the next page
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly nextLink?: string;
+}
+
+/** The resource details of the health report */
+export interface ResourceDetailsAutoGenerated {
+  /** The status of the health report */
+  source?: Source;
+  /**
+   * The azure id of the resource
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly id?: string;
+  /**
+   * The id of the connector
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly connectorId?: string;
+}
+
+/** The environment details of the resource */
+export interface EnvironmentDetails {
+  /** The native resource id of the resource (in case of Azure - the resource Id, in case of MC - the native resource id) */
+  nativeResourceId?: string;
+  /** The hierarchy id of the connector (in case of Azure - the subscription Id, in case of MC - the hierarchyId id) */
+  environmentHierarchyId?: string;
+  /** The organizational hierarchy id of the connector (in case of Azure - the subscription Id, in case of MC - the organizational hierarchyId id) */
+  organizationalHierarchyId?: string;
+  /** The subscription Id */
+  subscriptionId?: string;
+  /** The tenant Id */
+  tenantId?: string;
+}
+
+/** The classification of the health report */
+export interface HealthDataClassification {
+  /** The component describes the name of the agent/service that scans the issue */
+  component?: string;
+  /** The scenario describes the health scenario issue of the component */
+  scenario?: string;
+  /** The resource scope of the health report */
+  scope?: ScopeName;
+}
+
+/** The status of the health report */
+export interface StatusAutoGenerated {
+  /** The status of the health report */
+  code?: StatusName;
+  /**
+   * The date of when the status of the health report was changed in the last time
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly statusChangeDate?: Date;
+  /**
+   * The date of when the resource of the health report was scanned in the first time
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly firstEvaluationDate?: Date;
+}
+
+/** The issue that caused the resource to by unhealthy */
+export interface Issue {
+  /** The unique issue key */
+  issueKey: string;
+  /** The issue name */
+  issueName?: string;
+  /** The affected security values that MDC offers that will be affected by the issue, for example: recommendations, alerts, etc */
+  securityValues?: string[];
+  /** The issue description */
+  issueDescription?: string;
+  /** Human readable description of what you should do to mitigate this health issue */
+  remediationSteps?: string;
+  /** The remediation script to solve this issue */
+  remediationScript?: string;
+  /** Additional data for the given issue. The additional data depends on the issue type */
+  issueAdditionalData?: { [propertyName: string]: string };
+}
+
+/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */
+export interface ErrorResponseAutoGenerated {
+  /** The error object. */
+  error?: ErrorDetailAutoGenerated;
+}
+
+/** The error detail. */
+export interface ErrorDetailAutoGenerated {
+  /**
+   * The error code.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly code?: string;
+  /**
+   * The error message.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly message?: string;
+  /**
+   * The error target.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly target?: string;
+  /**
+   * The error details.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly details?: ErrorDetailAutoGenerated[];
+  /**
+   * The error additional info.
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly additionalInfo?: ErrorAdditionalInfo[];
+}
+
+/** A vulnerability assessment scan record properties. */
+export interface ScanProperties {
+  /** The scan trigger type. */
+  triggerType?: ScanTriggerType;
+  /** The scan status. */
+  state?: ScanState;
+  /** The server name. */
+  server?: string;
+  /** The database name. */
+  database?: string;
+  /** The SQL version. */
+  sqlVersion?: string;
+  /** The scan start time (UTC). */
+  startTime?: Date;
+  /** Scan results are valid until end time (UTC). */
+  endTime?: Date;
+  /** The number of failed rules with high severity. */
+  highSeverityFailedRulesCount?: number;
+  /** The number of failed rules with medium severity. */
+  mediumSeverityFailedRulesCount?: number;
+  /** The number of failed rules with low severity. */
+  lowSeverityFailedRulesCount?: number;
+  /** The number of total passed rules. */
+  totalPassedRulesCount?: number;
+  /** The number of total failed rules. */
+  totalFailedRulesCount?: number;
+  /** The number of total rules assessed. */
+  totalRulesCount?: number;
+  /** Baseline created for this database, and has one or more rules. */
+  isBaselineApplied?: boolean;
+  /** Last scan time. */
+  lastScanTime?: Date;
+}
+
+/** A list of vulnerability assessment scan records. */
+export interface Scans {
+  /** List of vulnerability assessment scan records. */
+  value?: Scan[];
+}
+
+/** A vulnerability assessment scan result properties for a single rule. */
+export interface ScanResultProperties {
+  /** The rule Id. */
+  ruleId?: string;
+  /** The rule result status. */
+  status?: RuleStatus;
+  /** Indicated whether the results specified here are trimmed. */
+  isTrimmed?: boolean;
+  /** The results of the query that was run. */
+  queryResults?: string[][];
+  /** Remediation details. */
+  remediation?: Remediation;
+  /** The rule result adjusted with baseline. */
+  baselineAdjustedResult?: BaselineAdjustedResult;
+  /** vulnerability assessment rule metadata details. */
+  ruleMetadata?: VaRule;
+}
+
+/** Remediation details. */
+export interface Remediation {
+  /** Remediation description. */
+  description?: string;
+  /** Remediation script. */
+  scripts?: string[];
+  /** Is remediation automated. */
+  automated?: boolean;
+  /** Optional link to remediate in Azure Portal. */
+  portalLink?: string;
+}
+
+/** The rule result adjusted with baseline. */
+export interface BaselineAdjustedResult {
+  /** Baseline details. */
+  baseline?: Baseline;
+  /** The rule result status. */
+  status?: RuleStatus;
+  /** Results the are not in baseline. */
+  resultsNotInBaseline?: string[][];
+  /** Results the are in baseline. */
+  resultsOnlyInBaseline?: string[][];
+}
+
+/** Baseline details. */
+export interface Baseline {
+  /** Expected results. */
+  expectedResults?: string[][];
+  /** Baseline update time (UTC). */
+  updatedTime?: Date;
+}
+
+/** vulnerability assessment rule metadata details. */
+export interface VaRule {
+  /** The rule Id. */
+  ruleId?: string;
+  /** The rule severity. */
+  severity?: RuleSeverity;
+  /** The rule category. */
+  category?: string;
+  /** The rule type. */
+  ruleType?: RuleType;
+  /** The rule title. */
+  title?: string;
+  /** The rule description. */
+  description?: string;
+  /** The rule rationale. */
+  rationale?: string;
+  /** The rule query details. */
+  queryCheck?: QueryCheck;
+  /** The benchmark references. */
+  benchmarkReferences?: BenchmarkReference[];
+}
+
+/** The rule query details. */
+export interface QueryCheck {
+  /** The rule query. */
+  query?: string;
+  /** Expected result. */
+  expectedResult?: string[][];
+  /** Column names of expected result. */
+  columnNames?: string[];
+}
+
+/** The benchmark references. */
+export interface BenchmarkReference {
+  /** The benchmark name. */
+  benchmark?: string;
+  /** The benchmark reference. */
+  reference?: string;
 }
 
-/** Describe the additional data of GovernanceAssignment - optional */
-export interface GovernanceAssignmentAdditionalData {
-  /** Ticket number associated with this GovernanceAssignment */
-  ticketNumber?: number;
-  /** Ticket link associated with this GovernanceAssignment - for example: https://snow.com */
-  ticketLink?: string;
-  /** The ticket status associated with this GovernanceAssignment - for example: Active */
-  ticketStatus?: string;
+/** A list of vulnerability assessment scan results. */
+export interface ScanResults {
+  /** List of vulnerability assessment scan results. */
+  value?: ScanResult[];
 }
 
-/** Page of a security applications list */
-export interface ApplicationsList {
-  /**
-   * Collection of applications in this page
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly value?: Application[];
+/** Rule results input. */
+export interface RuleResultsInput {
+  /** Take results from latest scan. */
+  latestScan?: boolean;
   /**
-   * The URI to fetch the next page
-   * NOTE: This property will not be serialized. It can only be populated by the server.
+   * Expected results to be inserted into the baseline.
+   * Leave this field empty it LatestScan == true.
    */
-  readonly nextLink?: string;
+  results?: string[][];
 }
 
-/** Page of a list of API collections as represented by Defender for APIs. */
-export interface ApiCollectionResponseList {
-  /**
-   * API collections in this page.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly value?: ApiCollectionResponse[];
-  /**
-   * The URI to fetch the next page.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly nextLink?: string;
+/** Rule results properties. */
+export interface RuleResultsProperties {
+  /** Expected results in the baseline. */
+  results?: string[][];
 }
 
-/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */
-export interface ErrorResponse {
-  /** The error object. */
-  error?: ErrorDetail;
+/** A list of rules results. */
+export interface RulesResults {
+  /** List of rule results. */
+  value?: RuleResults[];
 }
 
-/** The error detail. */
-export interface ErrorDetail {
-  /**
-   * The error code.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly code?: string;
-  /**
-   * The error message.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly message?: string;
-  /**
-   * The error target.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly target?: string;
-  /**
-   * The error details.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
-   */
-  readonly details?: ErrorDetail[];
+/** Rules results input. */
+export interface RulesResultsInput {
+  /** Take results from latest scan. */
+  latestScan?: boolean;
   /**
-   * The error additional info.
-   * NOTE: This property will not be serialized. It can only be populated by the server.
+   * Expected results to be inserted into the baseline.
+   * Leave this field empty it LatestScan == true.
    */
-  readonly additionalInfo?: ErrorAdditionalInfo[];
+  results?: { [propertyName: string]: string[][] };
 }
 
 /** CVSS details */
@@ -3192,24 +3341,6 @@ export interface ConnectorSetting extends Resource {
   authenticationDetails?: AuthenticationDetailsPropertiesUnion;
 }
 
-/** A vulnerability assessment scan record. */
-export interface Scan extends Resource {
-  /** A vulnerability assessment scan record properties. */
-  properties?: ScanProperties;
-}
-
-/** A vulnerability assessment scan result for a single rule. */
-export interface ScanResult extends Resource {
-  /** A vulnerability assessment scan result properties for a single rule. */
-  properties?: ScanResultProperties;
-}
-
-/** Rule results. */
-export interface RuleResults extends Resource {
-  /** Rule results properties. */
-  properties?: RuleResultsProperties;
-}
-
 /** Security alert */
 export interface Alert extends Resource {
   /**
@@ -3298,7 +3429,7 @@ export interface Alert extends Resource {
    */
   readonly timeGeneratedUtc?: Date;
   /**
-   * The name of the product which published this alert (Azure Security Center, Azure ATP, Microsoft Defender ATP, O365 ATP, MCAS, and so on).
+   * The name of the product which published this alert (Microsoft Sentinel, Microsoft Defender for Identity, Microsoft Defender for Endpoint, Microsoft Defender for Office, Microsoft Defender for Cloud Apps, and so on).
    * NOTE: This property will not be serialized. It can only be populated by the server.
    */
   readonly productName?: string;
@@ -3377,17 +3508,22 @@ export interface Software extends Resource {
   firstSeenAt?: string;
 }
 
-/** Security GovernanceRule over a given scope */
+/** Governance rule over a given scope */
 export interface GovernanceRule extends Resource {
-  /** display name of the governanceRule */
+  /**
+   * The tenantId (GUID)
+   * NOTE: This property will not be serialized. It can only be populated by the server.
+   */
+  readonly tenantId?: string;
+  /** Display name of the governance rule */
   displayName?: string;
-  /** description of the governanceRule */
+  /** Description of the governance rule */
   description?: string;
   /** Governance rule remediation timeframe - this is the time that will affect on the grace-period duration e.g. 7.00:00:00 - means 7 days */
   remediationTimeframe?: string;
   /** Defines whether there is a grace period on the governance rule */
   isGracePeriod?: boolean;
-  /** The governance rule priority, priority to the lower number. Rules with the same priority on the same subscription will not be allowed */
+  /** The governance rule priority, priority to the lower number. Rules with the same priority on the same scope will not be allowed */
   rulePriority?: number;
   /** Defines whether the rule is active/inactive */
   isDisabled?: boolean;
@@ -3395,15 +3531,21 @@ export interface GovernanceRule extends Resource {
   ruleType?: GovernanceRuleType;
   /** The governance rule source, what the rule affects, e.g. Assessments */
   sourceResourceType?: GovernanceRuleSourceResourceType;
+  /** Excluded scopes, filter out the descendants of the scope (on management scopes) */
+  excludedScopes?: string[];
   /** The governance rule conditionSets - see examples */
   conditionSets?: Record<string, unknown>[];
-  /** The Owner source for the governance rule - e.g. Manually by user@contoso.com - see example */
+  /** Defines whether the rule is management scope rule (master connector as a single scope or management scope) */
+  includeMemberScopes?: boolean;
+  /** The owner source for the governance rule - e.g. Manually by user@contoso.com - see example */
   ownerSource?: GovernanceRuleOwnerSource;
   /** The email notifications settings for the governance rule, states whether to disable notifications for mangers and owners */
   governanceEmailNotification?: GovernanceRuleEmailNotification;
+  /** The governance rule metadata */
+  metadata?: GovernanceRuleMetadata;
 }
 
-/** Security GovernanceAssignment over a given scope */
+/** Governance assignment over a given scope */
 export interface GovernanceAssignment extends Resource {
   /** The Owner for the governance assignment - e.g. user@contoso.com - see example */
   owner?: string;
@@ -3439,6 +3581,40 @@ export interface ApiCollectionResponse extends Resource {
   additionalData?: { [propertyName: string]: string };
 }
 
+/** The health report resource */
+export interface HealthReport extends Resource {
+  /** The resource details of the health report */
+  resourceDetails?: ResourceDetailsAutoGenerated;
+  /** The environment details of the resource */
+  environmentDetails?: EnvironmentDetails;
+  /** The classification of the health report */
+  healthDataClassification?: HealthDataClassification;
+  /** The status of the health report */
+  status?: StatusAutoGenerated;
+  /** The affected defenders plans by unhealthy report */
+  affectedDefendersPlans?: string[];
+  /** A collection of the issues in the report */
+  issues?: Issue[];
+}
+
+/** A vulnerability assessment scan record. */
+export interface Scan extends Resource {
+  /** A vulnerability assessment scan record properties. */
+  properties?: ScanProperties;
+}
+
+/** A vulnerability assessment scan result for a single rule. */
+export interface ScanResult extends Resource {
+  /** A vulnerability assessment scan result properties for a single rule. */
+  properties?: ScanResultProperties;
+}
+
+/** Rule results. */
+export interface RuleResults extends Resource {
+  /** Rule results properties. */
+  properties?: RuleResultsProperties;
+}
+
 /** Security assessment metadata */
 export interface SecurityAssessmentMetadata extends Resource {
   /** User friendly display name of the assessment */
@@ -4331,26 +4507,20 @@ export interface ProcessNotAllowed extends AllowlistCustomAlertRule {
   ruleType: "ProcessNotAllowed";
 }
 
-/** Defines headers for GovernanceRules_ruleIdExecuteSingleSubscription operation. */
-export interface GovernanceRulesRuleIdExecuteSingleSubscriptionHeaders {
-  /** Location URL for the execution status */
-  location?: string;
-}
-
-/** Defines headers for GovernanceRules_ruleIdExecuteSingleSecurityConnector operation. */
-export interface GovernanceRulesRuleIdExecuteSingleSecurityConnectorHeaders {
-  /** Location URL for the execution status */
+/** Defines headers for GovernanceRules_delete operation. */
+export interface GovernanceRulesDeleteHeaders {
+  /** Location URL for the deletion status */
   location?: string;
 }
 
-/** Defines headers for SubscriptionGovernanceRulesExecuteStatus_get operation. */
-export interface SubscriptionGovernanceRulesExecuteStatusGetHeaders {
+/** Defines headers for GovernanceRules_execute operation. */
+export interface GovernanceRulesExecuteHeaders {
   /** Location URL for the execution status */
   location?: string;
 }
 
-/** Defines headers for SecurityConnectorGovernanceRulesExecuteStatus_get operation. */
-export interface SecurityConnectorGovernanceRulesExecuteStatusGetHeaders {
+/** Defines headers for GovernanceRules_operationResults operation. */
+export interface GovernanceRulesOperationResultsHeaders {
   /** Location URL for the execution status */
   location?: string;
 }
@@ -4462,7 +4632,7 @@ export type PricingTier = string;
 
 /** Known values of {@link ValueType} that the service accepts. */
 export enum KnownValueType {
-  /** An IP range in CIDR format (e.g. '192.168.0.1/8'). */
+  /** An IP range in CIDR format (e.g. '192.168.0.1\/8'). */
   IpCidr = "IpCidr",
   /** Any string value. */
   String = "String"
@@ -4548,13 +4718,13 @@ export enum KnownRecommendationType {
   IoTIpfilterPermissiveRule = "IoT_IPFilter_PermissiveRule",
   /** A listening endpoint was found on the device. */
   IoTOpenPorts = "IoT_OpenPorts",
-  /** An Allowed firewall policy was found (INPUT/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to/from the device. */
+  /** An Allowed firewall policy was found (INPUT\/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to\/from the device. */
   IoTPermissiveFirewallPolicy = "IoT_PermissiveFirewallPolicy",
   /** A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. */
   IoTPermissiveInputFirewallRules = "IoT_PermissiveInputFirewallRules",
   /** A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. */
   IoTPermissiveOutputFirewallRules = "IoT_PermissiveOutputFirewallRules",
-  /** Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine). */
+  /** Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send\/receive data to host machine). */
   IoTPrivilegedDockerOptions = "IoT_PrivilegedDockerOptions",
   /** Same authentication credentials to the IoT Hub used by multiple devices. This could indicate an illegitimate device impersonating a legitimate device. It also exposes the risk of device impersonation by an attacker. */
   IoTSharedCredentials = "IoT_SharedCredentials",
@@ -6021,199 +6191,85 @@ export enum KnownHybridComputeProvisioningState {
   Expired = "Expired"
 }
 
-/**
- * Defines values for HybridComputeProvisioningState. \
- * {@link KnownHybridComputeProvisioningState} can be used interchangeably with HybridComputeProvisioningState,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **Valid**: Valid service principal details. \
- * **Invalid**: Invalid service principal details. \
- * **Expired**: the service principal details are expired
- */
-export type HybridComputeProvisioningState = string;
-
-/** Known values of {@link AuthenticationProvisioningState} that the service accepts. */
-export enum KnownAuthenticationProvisioningState {
-  /** Valid connector */
-  Valid = "Valid",
-  /** Invalid connector */
-  Invalid = "Invalid",
-  /** the connection has expired */
-  Expired = "Expired",
-  /** Incorrect policy of the connector */
-  IncorrectPolicy = "IncorrectPolicy"
-}
-
-/**
- * Defines values for AuthenticationProvisioningState. \
- * {@link KnownAuthenticationProvisioningState} can be used interchangeably with AuthenticationProvisioningState,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **Valid**: Valid connector \
- * **Invalid**: Invalid connector \
- * **Expired**: the connection has expired \
- * **IncorrectPolicy**: Incorrect policy of the connector
- */
-export type AuthenticationProvisioningState = string;
-
-/** Known values of {@link PermissionProperty} that the service accepts. */
-export enum KnownPermissionProperty {
-  /** This permission provides read only access to AWS Security Hub resources. */
-  AWSAWSSecurityHubReadOnlyAccess = "AWS::AWSSecurityHubReadOnlyAccess",
-  /** This permission grants access to read security configuration metadata. */
-  AWSSecurityAudit = "AWS::SecurityAudit",
-  /** The permission provides for EC2 Automation service to execute activities defined within Automation documents. */
-  AWSAmazonSSMAutomationRole = "AWS::AmazonSSMAutomationRole",
-  /** This permission provides read only access to GCP Security Command Center. */
-  GCPSecurityCenterAdminViewer = "GCP::Security Center Admin Viewer"
-}
-
-/**
- * Defines values for PermissionProperty. \
- * {@link KnownPermissionProperty} can be used interchangeably with PermissionProperty,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **AWS::AWSSecurityHubReadOnlyAccess**: This permission provides read only access to AWS Security Hub resources. \
- * **AWS::SecurityAudit**: This permission grants access to read security configuration metadata. \
- * **AWS::AmazonSSMAutomationRole**: The permission provides for EC2 Automation service to execute activities defined within Automation documents. \
- * **GCP::Security Center Admin Viewer**: This permission provides read only access to GCP Security Command Center.
- */
-export type PermissionProperty = string;
-
-/** Known values of {@link AuthenticationType} that the service accepts. */
-export enum KnownAuthenticationType {
-  /** AWS cloud account connector user credentials authentication */
-  AwsCreds = "awsCreds",
-  /** AWS account connector assume role authentication */
-  AwsAssumeRole = "awsAssumeRole",
-  /** GCP account connector service to service authentication */
-  GcpCredentials = "gcpCredentials"
-}
-
-/**
- * Defines values for AuthenticationType. \
- * {@link KnownAuthenticationType} can be used interchangeably with AuthenticationType,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **awsCreds**: AWS cloud account connector user credentials authentication \
- * **awsAssumeRole**: AWS account connector assume role authentication \
- * **gcpCredentials**: GCP account connector service to service authentication
- */
-export type AuthenticationType = string;
-
-/** Known values of {@link ScanTriggerType} that the service accepts. */
-export enum KnownScanTriggerType {
-  /** OnDemand */
-  OnDemand = "OnDemand",
-  /** Recurring */
-  Recurring = "Recurring"
-}
-
-/**
- * Defines values for ScanTriggerType. \
- * {@link KnownScanTriggerType} can be used interchangeably with ScanTriggerType,
- *  this enum contains the known values that the service supports.
- * ### Known values supported by the service
- * **OnDemand**: OnDemand \
- * **Recurring**: Recurring
- */
-export type ScanTriggerType = string;
-
-/** Known values of {@link ScanState} that the service accepts. */
-export enum KnownScanState {
-  /** Failed */
-  Failed = "Failed",
-  /** FailedToRun */
-  FailedToRun = "FailedToRun",
-  /** InProgress */
-  InProgress = "InProgress",
-  /** Passed */
-  Passed = "Passed"
-}
-
-/**
- * Defines values for ScanState. \
- * {@link KnownScanState} can be used interchangeably with ScanState,
+/**
+ * Defines values for HybridComputeProvisioningState. \
+ * {@link KnownHybridComputeProvisioningState} can be used interchangeably with HybridComputeProvisioningState,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **Failed**: Failed \
- * **FailedToRun**: FailedToRun \
- * **InProgress**: InProgress \
- * **Passed**: Passed
+ * **Valid**: Valid service principal details. \
+ * **Invalid**: Invalid service principal details. \
+ * **Expired**: the service principal details are expired
  */
-export type ScanState = string;
+export type HybridComputeProvisioningState = string;
 
-/** Known values of {@link RuleStatus} that the service accepts. */
-export enum KnownRuleStatus {
-  /** NonFinding */
-  NonFinding = "NonFinding",
-  /** Finding */
-  Finding = "Finding",
-  /** InternalError */
-  InternalError = "InternalError"
+/** Known values of {@link AuthenticationProvisioningState} that the service accepts. */
+export enum KnownAuthenticationProvisioningState {
+  /** Valid connector */
+  Valid = "Valid",
+  /** Invalid connector */
+  Invalid = "Invalid",
+  /** the connection has expired */
+  Expired = "Expired",
+  /** Incorrect policy of the connector */
+  IncorrectPolicy = "IncorrectPolicy"
 }
 
 /**
- * Defines values for RuleStatus. \
- * {@link KnownRuleStatus} can be used interchangeably with RuleStatus,
+ * Defines values for AuthenticationProvisioningState. \
+ * {@link KnownAuthenticationProvisioningState} can be used interchangeably with AuthenticationProvisioningState,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **NonFinding**: NonFinding \
- * **Finding**: Finding \
- * **InternalError**: InternalError
+ * **Valid**: Valid connector \
+ * **Invalid**: Invalid connector \
+ * **Expired**: the connection has expired \
+ * **IncorrectPolicy**: Incorrect policy of the connector
  */
-export type RuleStatus = string;
+export type AuthenticationProvisioningState = string;
 
-/** Known values of {@link RuleSeverity} that the service accepts. */
-export enum KnownRuleSeverity {
-  /** High */
-  High = "High",
-  /** Medium */
-  Medium = "Medium",
-  /** Low */
-  Low = "Low",
-  /** Informational */
-  Informational = "Informational",
-  /** Obsolete */
-  Obsolete = "Obsolete"
+/** Known values of {@link PermissionProperty} that the service accepts. */
+export enum KnownPermissionProperty {
+  /** This permission provides read only access to AWS Security Hub resources. */
+  AWSAWSSecurityHubReadOnlyAccess = "AWS::AWSSecurityHubReadOnlyAccess",
+  /** This permission grants access to read security configuration metadata. */
+  AWSSecurityAudit = "AWS::SecurityAudit",
+  /** The permission provides for EC2 Automation service to execute activities defined within Automation documents. */
+  AWSAmazonSSMAutomationRole = "AWS::AmazonSSMAutomationRole",
+  /** This permission provides read only access to GCP Security Command Center. */
+  GCPSecurityCenterAdminViewer = "GCP::Security Center Admin Viewer"
 }
 
 /**
- * Defines values for RuleSeverity. \
- * {@link KnownRuleSeverity} can be used interchangeably with RuleSeverity,
+ * Defines values for PermissionProperty. \
+ * {@link KnownPermissionProperty} can be used interchangeably with PermissionProperty,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **High**: High \
- * **Medium**: Medium \
- * **Low**: Low \
- * **Informational**: Informational \
- * **Obsolete**: Obsolete
+ * **AWS::AWSSecurityHubReadOnlyAccess**: This permission provides read only access to AWS Security Hub resources. \
+ * **AWS::SecurityAudit**: This permission grants access to read security configuration metadata. \
+ * **AWS::AmazonSSMAutomationRole**: The permission provides for EC2 Automation service to execute activities defined within Automation documents. \
+ * **GCP::Security Center Admin Viewer**: This permission provides read only access to GCP Security Command Center.
  */
-export type RuleSeverity = string;
+export type PermissionProperty = string;
 
-/** Known values of {@link RuleType} that the service accepts. */
-export enum KnownRuleType {
-  /** Binary */
-  Binary = "Binary",
-  /** BaselineExpected */
-  BaselineExpected = "BaselineExpected",
-  /** PositiveList */
-  PositiveList = "PositiveList",
-  /** NegativeList */
-  NegativeList = "NegativeList"
+/** Known values of {@link AuthenticationType} that the service accepts. */
+export enum KnownAuthenticationType {
+  /** AWS cloud account connector user credentials authentication */
+  AwsCreds = "awsCreds",
+  /** AWS account connector assume role authentication */
+  AwsAssumeRole = "awsAssumeRole",
+  /** GCP account connector service to service authentication */
+  GcpCredentials = "gcpCredentials"
 }
 
 /**
- * Defines values for RuleType. \
- * {@link KnownRuleType} can be used interchangeably with RuleType,
+ * Defines values for AuthenticationType. \
+ * {@link KnownAuthenticationType} can be used interchangeably with AuthenticationType,
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
- * **Binary**: Binary \
- * **BaselineExpected**: BaselineExpected \
- * **PositiveList**: PositiveList \
- * **NegativeList**: NegativeList
+ * **awsCreds**: AWS cloud account connector user credentials authentication \
+ * **awsAssumeRole**: AWS account connector assume role authentication \
+ * **gcpCredentials**: GCP account connector service to service authentication
  */
-export type RuleType = string;
+export type AuthenticationType = string;
 
 /** Known values of {@link AlertSeverity} that the service accepts. */
 export enum KnownAlertSeverity {
@@ -6243,7 +6299,7 @@ export type AlertSeverity = string;
 export enum KnownIntent {
   /** Unknown */
   Unknown = "Unknown",
-  /** PreAttack could be either an attempt to access a certain resource regardless of a malicious intent, or a failed attempt to gain access to a target system to gather information prior to exploitation. This step is usually detected as an attempt, originating from outside the network, to scan the target system and find a way in.  Further details on the PreAttack stage can be read in [MITRE Pre-Att&ck matrix](https://attack.mitre.org/matrices/pre/). */
+  /** PreAttack could be either an attempt to access a certain resource regardless of a malicious intent, or a failed attempt to gain access to a target system to gather information prior to exploitation. This step is usually detected as an attempt, originating from outside the network, to scan the target system and find a way in.  Further details on the PreAttack stage can be read in [MITRE Pre-Att&ck matrix](https:\//attack.mitre.org\/matrices\/pre\/). */
   PreAttack = "PreAttack",
   /** InitialAccess is the stage where an attacker manages to get foothold on the attacked resource. */
   InitialAccess = "InitialAccess",
@@ -6590,6 +6646,27 @@ export enum KnownGovernanceRuleOwnerSourceType {
  */
 export type GovernanceRuleOwnerSourceType = string;
 
+/** Known values of {@link OperationResult} that the service accepts. */
+export enum KnownOperationResult {
+  /** The operation succeeded */
+  Succeeded = "Succeeded",
+  /** The operation failed */
+  Failed = "Failed",
+  /** The operation canceled */
+  Canceled = "Canceled"
+}
+
+/**
+ * Defines values for OperationResult. \
+ * {@link KnownOperationResult} can be used interchangeably with OperationResult,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Succeeded**: The operation succeeded \
+ * **Failed**: The operation failed \
+ * **Canceled**: The operation canceled
+ */
+export type OperationResult = string;
+
 /** Known values of {@link ApplicationSourceResourceType} that the service accepts. */
 export enum KnownApplicationSourceResourceType {
   /** The source of the application is assessments */
@@ -6605,6 +6682,165 @@ export enum KnownApplicationSourceResourceType {
  */
 export type ApplicationSourceResourceType = string;
 
+/** Known values of {@link ScopeName} that the service accepts. */
+export enum KnownScopeName {
+  /** Connectors */
+  Connectors = "Connectors",
+  /** Clusters */
+  Clusters = "Clusters",
+  /** VirtualMachines */
+  VirtualMachines = "VirtualMachines",
+  /** Unknown */
+  Unknown = "Unknown"
+}
+
+/**
+ * Defines values for ScopeName. \
+ * {@link KnownScopeName} can be used interchangeably with ScopeName,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Connectors** \
+ * **Clusters** \
+ * **VirtualMachines** \
+ * **Unknown**
+ */
+export type ScopeName = string;
+
+/** Known values of {@link StatusName} that the service accepts. */
+export enum KnownStatusName {
+  /** Healthy */
+  Healthy = "Healthy",
+  /** NotHealthy */
+  NotHealthy = "NotHealthy",
+  /** NotApplicable */
+  NotApplicable = "NotApplicable"
+}
+
+/**
+ * Defines values for StatusName. \
+ * {@link KnownStatusName} can be used interchangeably with StatusName,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Healthy** \
+ * **NotHealthy** \
+ * **NotApplicable**
+ */
+export type StatusName = string;
+
+/** Known values of {@link ScanTriggerType} that the service accepts. */
+export enum KnownScanTriggerType {
+  /** OnDemand */
+  OnDemand = "OnDemand",
+  /** Recurring */
+  Recurring = "Recurring"
+}
+
+/**
+ * Defines values for ScanTriggerType. \
+ * {@link KnownScanTriggerType} can be used interchangeably with ScanTriggerType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **OnDemand**: OnDemand \
+ * **Recurring**: Recurring
+ */
+export type ScanTriggerType = string;
+
+/** Known values of {@link ScanState} that the service accepts. */
+export enum KnownScanState {
+  /** Failed */
+  Failed = "Failed",
+  /** FailedToRun */
+  FailedToRun = "FailedToRun",
+  /** InProgress */
+  InProgress = "InProgress",
+  /** Passed */
+  Passed = "Passed"
+}
+
+/**
+ * Defines values for ScanState. \
+ * {@link KnownScanState} can be used interchangeably with ScanState,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Failed**: Failed \
+ * **FailedToRun**: FailedToRun \
+ * **InProgress**: InProgress \
+ * **Passed**: Passed
+ */
+export type ScanState = string;
+
+/** Known values of {@link RuleStatus} that the service accepts. */
+export enum KnownRuleStatus {
+  /** NonFinding */
+  NonFinding = "NonFinding",
+  /** Finding */
+  Finding = "Finding",
+  /** InternalError */
+  InternalError = "InternalError"
+}
+
+/**
+ * Defines values for RuleStatus. \
+ * {@link KnownRuleStatus} can be used interchangeably with RuleStatus,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **NonFinding**: NonFinding \
+ * **Finding**: Finding \
+ * **InternalError**: InternalError
+ */
+export type RuleStatus = string;
+
+/** Known values of {@link RuleSeverity} that the service accepts. */
+export enum KnownRuleSeverity {
+  /** High */
+  High = "High",
+  /** Medium */
+  Medium = "Medium",
+  /** Low */
+  Low = "Low",
+  /** Informational */
+  Informational = "Informational",
+  /** Obsolete */
+  Obsolete = "Obsolete"
+}
+
+/**
+ * Defines values for RuleSeverity. \
+ * {@link KnownRuleSeverity} can be used interchangeably with RuleSeverity,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **High**: High \
+ * **Medium**: Medium \
+ * **Low**: Low \
+ * **Informational**: Informational \
+ * **Obsolete**: Obsolete
+ */
+export type RuleSeverity = string;
+
+/** Known values of {@link RuleType} that the service accepts. */
+export enum KnownRuleType {
+  /** Binary */
+  Binary = "Binary",
+  /** BaselineExpected */
+  BaselineExpected = "BaselineExpected",
+  /** PositiveList */
+  PositiveList = "PositiveList",
+  /** NegativeList */
+  NegativeList = "NegativeList"
+}
+
+/**
+ * Defines values for RuleType. \
+ * {@link KnownRuleType} can be used interchangeably with RuleType,
+ *  this enum contains the known values that the service supports.
+ * ### Known values supported by the service
+ * **Binary**: Binary \
+ * **BaselineExpected**: BaselineExpected \
+ * **PositiveList**: PositiveList \
+ * **NegativeList**: NegativeList
+ */
+export type RuleType = string;
+
 /** Known values of {@link AadConnectivityState} that the service accepts. */
 export enum KnownAadConnectivityState {
   /** Discovered */
@@ -7018,20 +7254,14 @@ export interface IotSecuritySolutionDeleteOptionalParams
 
 /** Optional parameters. */
 export interface IotSecuritySolutionListBySubscriptionNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** Filter the IoT Security solution with OData syntax. Supports filtering by iotHubs. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listBySubscriptionNext operation. */
 export type IotSecuritySolutionListBySubscriptionNextResponse = IoTSecuritySolutionsList;
 
 /** Optional parameters. */
 export interface IotSecuritySolutionListByResourceGroupNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** Filter the IoT Security solution with OData syntax. Supports filtering by iotHubs. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listByResourceGroupNext operation. */
 export type IotSecuritySolutionListByResourceGroupNextResponse = IoTSecuritySolutionsList;
@@ -7073,10 +7303,7 @@ export interface IotSecuritySolutionsAnalyticsAggregatedAlertDismissOptionalPara
 
 /** Optional parameters. */
 export interface IotSecuritySolutionsAnalyticsAggregatedAlertListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** Number of results to retrieve. */
-  top?: number;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type IotSecuritySolutionsAnalyticsAggregatedAlertListNextResponse = IoTSecurityAggregatedAlertList;
@@ -7100,10 +7327,7 @@ export type IotSecuritySolutionsAnalyticsRecommendationListResponse = IoTSecurit
 
 /** Optional parameters. */
 export interface IotSecuritySolutionsAnalyticsRecommendationListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** Number of results to retrieve. */
-  top?: number;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type IotSecuritySolutionsAnalyticsRecommendationListNextResponse = IoTSecurityAggregatedRecommendationList;
@@ -7196,30 +7420,21 @@ export interface TasksUpdateResourceGroupLevelTaskStateOptionalParams
 
 /** Optional parameters. */
 export interface TasksListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData filter. Optional. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type TasksListNextResponse = SecurityTaskList;
 
 /** Optional parameters. */
 export interface TasksListByHomeRegionNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData filter. Optional. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listByHomeRegionNext operation. */
 export type TasksListByHomeRegionNextResponse = SecurityTaskList;
 
 /** Optional parameters. */
 export interface TasksListByResourceGroupNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData filter. Optional. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listByResourceGroupNext operation. */
 export type TasksListByResourceGroupNextResponse = SecurityTaskList;
@@ -7391,10 +7606,7 @@ export type RegulatoryComplianceStandardsGetResponse = RegulatoryComplianceStand
 
 /** Optional parameters. */
 export interface RegulatoryComplianceStandardsListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData filter. Optional. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type RegulatoryComplianceStandardsListNextResponse = RegulatoryComplianceStandardList;
@@ -7418,10 +7630,7 @@ export type RegulatoryComplianceControlsGetResponse = RegulatoryComplianceContro
 
 /** Optional parameters. */
 export interface RegulatoryComplianceControlsListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData filter. Optional. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type RegulatoryComplianceControlsListNextResponse = RegulatoryComplianceControlList;
@@ -7445,10 +7654,7 @@ export type RegulatoryComplianceAssessmentsGetResponse = RegulatoryComplianceAss
 
 /** Optional parameters. */
 export interface RegulatoryComplianceAssessmentsListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData filter. Optional. */
-  filter?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type RegulatoryComplianceAssessmentsListNextResponse = RegulatoryComplianceAssessmentList;
@@ -7571,10 +7777,7 @@ export interface AlertsSuppressionRulesDeleteOptionalParams
 
 /** Optional parameters. */
 export interface AlertsSuppressionRulesListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** Type of the alert to get rules for */
-  alertType?: string;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type AlertsSuppressionRulesListNextResponse = AlertsSuppressionRulesList;
@@ -8035,20 +8238,14 @@ export type SecureScoreControlsListResponse = SecureScoreControlList;
 
 /** Optional parameters. */
 export interface SecureScoreControlsListBySecureScoreNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData expand. Optional. */
-  expand?: ExpandControlsEnum;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listBySecureScoreNext operation. */
 export type SecureScoreControlsListBySecureScoreNextResponse = SecureScoreControlList;
 
 /** Optional parameters. */
 export interface SecureScoreControlsListNextOptionalParams
-  extends coreClient.OperationOptions {
-  /** OData expand. Optional. */
-  expand?: ExpandControlsEnum;
-}
+  extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
 export type SecureScoreControlsListNextResponse = SecureScoreControlList;
@@ -8134,72 +8331,6 @@ export interface ConnectorsListNextOptionalParams
 /** Contains response data for the listNext operation. */
 export type ConnectorsListNextResponse = ConnectorSettingList;
 
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentScansGetOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the get operation. */
-export type SqlVulnerabilityAssessmentScansGetResponse = Scan;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentScansListOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the list operation. */
-export type SqlVulnerabilityAssessmentScansListResponse = Scans;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentScanResultsGetOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the get operation. */
-export type SqlVulnerabilityAssessmentScanResultsGetResponse = ScanResult;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentScanResultsListOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the list operation. */
-export type SqlVulnerabilityAssessmentScanResultsListResponse = ScanResults;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentBaselineRulesCreateOrUpdateOptionalParams
-  extends coreClient.OperationOptions {
-  /** The baseline results for this rule. */
-  body?: RuleResultsInput;
-}
-
-/** Contains response data for the createOrUpdate operation. */
-export type SqlVulnerabilityAssessmentBaselineRulesCreateOrUpdateResponse = RuleResults;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentBaselineRulesGetOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the get operation. */
-export type SqlVulnerabilityAssessmentBaselineRulesGetResponse = RuleResults;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentBaselineRulesDeleteOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentBaselineRulesListOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the list operation. */
-export type SqlVulnerabilityAssessmentBaselineRulesListResponse = RulesResults;
-
-/** Optional parameters. */
-export interface SqlVulnerabilityAssessmentBaselineRulesAddOptionalParams
-  extends coreClient.OperationOptions {
-  /** The baseline rules. */
-  body?: RulesResultsInput;
-}
-
-/** Contains response data for the add operation. */
-export type SqlVulnerabilityAssessmentBaselineRulesAddResponse = RulesResults;
-
 /** Optional parameters. */
 export interface AlertsListOptionalParams extends coreClient.OperationOptions {}
 
@@ -8473,18 +8604,11 @@ export interface SecurityConnectorsListByResourceGroupNextOptionalParams
 export type SecurityConnectorsListByResourceGroupNextResponse = SecurityConnectorsList;
 
 /** Optional parameters. */
-export interface GovernanceRuleListOptionalParams
+export interface GovernanceRulesListOptionalParams
   extends coreClient.OperationOptions {}
 
 /** Contains response data for the list operation. */
-export type GovernanceRuleListResponse = GovernanceRuleList;
-
-/** Optional parameters. */
-export interface GovernanceRuleListNextOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the listNext operation. */
-export type GovernanceRuleListNextResponse = GovernanceRuleList;
+export type GovernanceRulesListResponse = GovernanceRuleList;
 
 /** Optional parameters. */
 export interface GovernanceRulesGetOptionalParams
@@ -8502,26 +8626,17 @@ export type GovernanceRulesCreateOrUpdateResponse = GovernanceRule;
 
 /** Optional parameters. */
 export interface GovernanceRulesDeleteOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Optional parameters. */
-export interface GovernanceRulesRuleIdExecuteSingleSubscriptionOptionalParams
   extends coreClient.OperationOptions {
-  /** GovernanceRule over a subscription scope */
-  executeGovernanceRuleParams?: ExecuteGovernanceRuleParams;
   /** Delay to wait until next poll, in milliseconds. */
   updateIntervalInMs?: number;
   /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
   resumeFrom?: string;
 }
 
-/** Contains response data for the ruleIdExecuteSingleSubscription operation. */
-export type GovernanceRulesRuleIdExecuteSingleSubscriptionResponse = GovernanceRulesRuleIdExecuteSingleSubscriptionHeaders;
-
 /** Optional parameters. */
-export interface GovernanceRulesRuleIdExecuteSingleSecurityConnectorOptionalParams
+export interface GovernanceRulesExecuteOptionalParams
   extends coreClient.OperationOptions {
-  /** GovernanceRule over a subscription scope */
+  /** Execute governance rule over a given scope */
   executeGovernanceRuleParams?: ExecuteGovernanceRuleParams;
   /** Delay to wait until next poll, in milliseconds. */
   updateIntervalInMs?: number;
@@ -8529,64 +8644,22 @@ export interface GovernanceRulesRuleIdExecuteSingleSecurityConnectorOptionalPara
   resumeFrom?: string;
 }
 
-/** Contains response data for the ruleIdExecuteSingleSecurityConnector operation. */
-export type GovernanceRulesRuleIdExecuteSingleSecurityConnectorResponse = GovernanceRulesRuleIdExecuteSingleSecurityConnectorHeaders;
+/** Contains response data for the execute operation. */
+export type GovernanceRulesExecuteResponse = GovernanceRulesExecuteHeaders;
 
 /** Optional parameters. */
-export interface SecurityConnectorGovernanceRuleListOptionalParams
+export interface GovernanceRulesOperationResultsOptionalParams
   extends coreClient.OperationOptions {}
 
-/** Contains response data for the list operation. */
-export type SecurityConnectorGovernanceRuleListResponse = GovernanceRuleList;
+/** Contains response data for the operationResults operation. */
+export type GovernanceRulesOperationResultsResponse = OperationResultAutoGenerated;
 
 /** Optional parameters. */
-export interface SecurityConnectorGovernanceRuleListNextOptionalParams
+export interface GovernanceRulesListNextOptionalParams
   extends coreClient.OperationOptions {}
 
 /** Contains response data for the listNext operation. */
-export type SecurityConnectorGovernanceRuleListNextResponse = GovernanceRuleList;
-
-/** Optional parameters. */
-export interface SecurityConnectorGovernanceRulesGetOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the get operation. */
-export type SecurityConnectorGovernanceRulesGetResponse = GovernanceRule;
-
-/** Optional parameters. */
-export interface SecurityConnectorGovernanceRulesCreateOrUpdateOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Contains response data for the createOrUpdate operation. */
-export type SecurityConnectorGovernanceRulesCreateOrUpdateResponse = GovernanceRule;
-
-/** Optional parameters. */
-export interface SecurityConnectorGovernanceRulesDeleteOptionalParams
-  extends coreClient.OperationOptions {}
-
-/** Optional parameters. */
-export interface SubscriptionGovernanceRulesExecuteStatusGetOptionalParams
-  extends coreClient.OperationOptions {
-  /** Delay to wait until next poll, in milliseconds. */
-  updateIntervalInMs?: number;
-  /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
-  resumeFrom?: string;
-}
-
-/** Contains response data for the get operation. */
-export type SubscriptionGovernanceRulesExecuteStatusGetResponse = ExecuteRuleStatus;
-
-/** Optional parameters. */
-export interface SecurityConnectorGovernanceRulesExecuteStatusGetOptionalParams
-  extends coreClient.OperationOptions {
-  /** Delay to wait until next poll, in milliseconds. */
-  updateIntervalInMs?: number;
-  /** A serialized poller which can be used to resume an existing paused Long-Running-Operation. */
-  resumeFrom?: string;
-}
-
-/** Contains response data for the get operation. */
-export type SecurityConnectorGovernanceRulesExecuteStatusGetResponse = ExecuteRuleStatus;
+export type GovernanceRulesListNextResponse = GovernanceRuleList;
 
 /** Optional parameters. */
 export interface GovernanceAssignmentsListOptionalParams
@@ -8716,6 +8789,93 @@ export type APICollectionOnboardingCreateResponse = ApiCollectionResponse;
 export interface APICollectionOffboardingDeleteOptionalParams
   extends coreClient.OperationOptions {}
 
+/** Optional parameters. */
+export interface HealthReportsListOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the list operation. */
+export type HealthReportsListResponse = HealthReportsList;
+
+/** Optional parameters. */
+export interface HealthReportsListNextOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the listNext operation. */
+export type HealthReportsListNextResponse = HealthReportsList;
+
+/** Optional parameters. */
+export interface HealthReportGetOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the get operation. */
+export type HealthReportGetResponse = HealthReport;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentScansGetOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the get operation. */
+export type SqlVulnerabilityAssessmentScansGetResponse = Scan;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentScansListOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the list operation. */
+export type SqlVulnerabilityAssessmentScansListResponse = Scans;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentScanResultsGetOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the get operation. */
+export type SqlVulnerabilityAssessmentScanResultsGetResponse = ScanResult;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentScanResultsListOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the list operation. */
+export type SqlVulnerabilityAssessmentScanResultsListResponse = ScanResults;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentBaselineRulesCreateOrUpdateOptionalParams
+  extends coreClient.OperationOptions {
+  /** The baseline results for this rule. */
+  body?: RuleResultsInput;
+}
+
+/** Contains response data for the createOrUpdate operation. */
+export type SqlVulnerabilityAssessmentBaselineRulesCreateOrUpdateResponse = RuleResults;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentBaselineRulesGetOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the get operation. */
+export type SqlVulnerabilityAssessmentBaselineRulesGetResponse = RuleResults;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentBaselineRulesDeleteOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentBaselineRulesListOptionalParams
+  extends coreClient.OperationOptions {}
+
+/** Contains response data for the list operation. */
+export type SqlVulnerabilityAssessmentBaselineRulesListResponse = RulesResults;
+
+/** Optional parameters. */
+export interface SqlVulnerabilityAssessmentBaselineRulesAddOptionalParams
+  extends coreClient.OperationOptions {
+  /** The baseline rules. */
+  body?: RulesResultsInput;
+}
+
+/** Contains response data for the add operation. */
+export type SqlVulnerabilityAssessmentBaselineRulesAddResponse = RulesResults;
+
 /** Optional parameters. */
 export interface SecurityCenterOptionalParams
   extends coreClient.ServiceClientOptions {