@googleapis/securitycenter 11.0.0 → 12.0.0

package/build/v1beta1.d.ts

@@ -162,6 +162,24 @@ export declare namespace securitycenter_v1beta1 {
          */
         confidence?: number | null;
     }
+    /**
+     * Details about resources affected by this finding.
+     */
+    export interface Schema$AffectedResources {
+        /**
+         * The count of resources affected by the finding.
+         */
+        count?: string | null;
+    }
+    /**
+     * Allowed IP rule.
+     */
+    export interface Schema$Allowed {
+        /**
+         * Optional. Optional list of allowed IP rules.
+         */
+        ipRules?: Schema$IpRule[];
+    }
     /**
      * Represents an application associated with a finding.
      */
@@ -495,6 +513,15 @@ export declare namespace securitycenter_v1beta1 {
      */
     export interface Schema$CancelOperationRequest {
     }
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+     */
+    export interface Schema$Chokepoint {
+        /**
+         * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+         */
+        relatedFindings?: string[] | null;
+    }
     /**
      * Fields related to Google Cloud Armor findings.
      */
@@ -596,43 +623,6 @@ export declare namespace securitycenter_v1beta1 {
          */
         version?: string | null;
     }
-    /**
-     * Result containing the properties and count of a ComplianceSnapshot request.
-     */
-    export interface Schema$ComplianceSnapshot {
-        /**
-         * The category of Findings matching.
-         */
-        category?: string | null;
-        /**
-         * The cloud provider for the compliance snapshot.
-         */
-        cloudProvider?: string | null;
-        /**
-         * The compliance standard (ie CIS).
-         */
-        complianceStandard?: string | null;
-        /**
-         * The compliance version (ie 1.3) in CIS 1.3.
-         */
-        complianceVersion?: string | null;
-        /**
-         * Total count of findings for the given properties.
-         */
-        count?: string | null;
-        /**
-         * The leaf container resource name that is closest to the snapshot.
-         */
-        leafContainerResource?: string | null;
-        /**
-         * The compliance snapshot name. Format: //sources//complianceSnapshots/
-         */
-        name?: string | null;
-        /**
-         * The snapshot time of the snapshot.
-         */
-        snapshotTime?: string | null;
-    }
     /**
      * Contains information about the IP connection associated with the finding.
      */
@@ -787,6 +777,19 @@ export declare namespace securitycenter_v1beta1 {
          */
         userInteraction?: string | null;
     }
+    /**
+     * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+     */
+    export interface Schema$Cwe {
+        /**
+         * The CWE identifier, e.g. CWE-94
+         */
+        id?: string | null;
+        /**
+         * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+         */
+        references?: Schema$Reference[];
+    }
     /**
      * Details about a data access attempt made by a principal not authorized under applicable data security policy.
      */
@@ -879,10 +882,19 @@ export declare namespace securitycenter_v1beta1 {
          */
         eventType?: string | null;
         /**
-         * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+         * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
          */
         maxRetentionAllowed?: string | null;
     }
+    /**
+     * Denied IP rule.
+     */
+    export interface Schema$Denied {
+        /**
+         * Optional. Optional list of denied IP rules.
+         */
+        ipRules?: Schema$IpRule[];
+    }
     /**
      * Memory hash detection contributing to the binary family match.
      */
@@ -901,7 +913,7 @@ export declare namespace securitycenter_v1beta1 {
      */
     export interface Schema$Disk {
         /**
-         * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+         * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
          */
         name?: string | null;
     }
@@ -1041,6 +1053,10 @@ export declare namespace securitycenter_v1beta1 {
          * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
          */
         access?: Schema$Access;
+        /**
+         * AffectedResources associated with the finding.
+         */
+        affectedResources?: Schema$AffectedResources;
         /**
          * Represents an application associated with the finding.
          */
@@ -1061,6 +1077,10 @@ export declare namespace securitycenter_v1beta1 {
          * The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
          */
         category?: string | null;
+        /**
+         * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+         */
+        chokepoint?: Schema$Chokepoint;
         /**
          * Fields related to Cloud Armor findings.
          */
@@ -1157,6 +1177,14 @@ export declare namespace securitycenter_v1beta1 {
          * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
          */
         indicator?: Schema$Indicator;
+        /**
+         * IP rules associated with the finding.
+         */
+        ipRules?: Schema$IpRules;
+        /**
+         * Job associated with the finding.
+         */
+        job?: Schema$Job;
         /**
          * Signature of the kernel rootkit.
          */
@@ -1201,6 +1229,10 @@ export declare namespace securitycenter_v1beta1 {
          * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. Example: "organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}", "folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}", "projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}".
          */
         name?: string | null;
+        /**
+         * Represents the VPC networks that the resource is attached to.
+         */
+        networks?: Schema$Network[];
         /**
          * Steps to address the finding.
          */
@@ -2079,6 +2111,24 @@ export declare namespace securitycenter_v1beta1 {
          */
         confidence?: number | null;
     }
+    /**
+     * Details about resources affected by this finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AffectedResources {
+        /**
+         * The count of resources affected by the finding.
+         */
+        count?: string | null;
+    }
+    /**
+     * Allowed IP rule.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Allowed {
+        /**
+         * Optional. Optional list of allowed IP rules.
+         */
+        ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+    }
     /**
      * Represents an application associated with a finding.
      */
@@ -2383,6 +2433,15 @@ export declare namespace securitycenter_v1beta1 {
      */
     export interface Schema$GoogleCloudSecuritycenterV2BulkMuteFindingsResponse {
     }
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Chokepoint {
+        /**
+         * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+         */
+        relatedFindings?: string[] | null;
+    }
     /**
      * Fields related to Google Cloud Armor findings.
      */
@@ -2638,6 +2697,19 @@ export declare namespace securitycenter_v1beta1 {
          */
         userInteraction?: string | null;
     }
+    /**
+     * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Cwe {
+        /**
+         * The CWE identifier, e.g. CWE-94
+         */
+        id?: string | null;
+        /**
+         * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+         */
+        references?: Schema$GoogleCloudSecuritycenterV2Reference[];
+    }
     /**
      * Details about a data access attempt made by a principal not authorized under applicable data security policy.
      */
@@ -2730,10 +2802,19 @@ export declare namespace securitycenter_v1beta1 {
          */
         eventType?: string | null;
         /**
-         * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+         * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
          */
         maxRetentionAllowed?: string | null;
     }
+    /**
+     * Denied IP rule.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Denied {
+        /**
+         * Optional. Optional list of denied IP rules.
+         */
+        ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+    }
     /**
      * Memory hash detection contributing to the binary family match.
      */
@@ -2752,7 +2833,7 @@ export declare namespace securitycenter_v1beta1 {
      */
     export interface Schema$GoogleCloudSecuritycenterV2Disk {
         /**
-         * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+         * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
          */
         name?: string | null;
     }
@@ -2915,6 +2996,10 @@ export declare namespace securitycenter_v1beta1 {
          * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
          */
         access?: Schema$GoogleCloudSecuritycenterV2Access;
+        /**
+         * AffectedResources associated with the finding.
+         */
+        affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
         /**
          * Represents an application associated with the finding.
          */
@@ -2935,6 +3020,10 @@ export declare namespace securitycenter_v1beta1 {
          * Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"
          */
         category?: string | null;
+        /**
+         * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+         */
+        chokepoint?: Schema$GoogleCloudSecuritycenterV2Chokepoint;
         /**
          * Fields related to Cloud Armor findings.
          */
@@ -3031,6 +3120,14 @@ export declare namespace securitycenter_v1beta1 {
          * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
          */
         indicator?: Schema$GoogleCloudSecuritycenterV2Indicator;
+        /**
+         * IP rules associated with the finding.
+         */
+        ipRules?: Schema$GoogleCloudSecuritycenterV2IpRules;
+        /**
+         * Job associated with the finding.
+         */
+        job?: Schema$GoogleCloudSecuritycenterV2Job;
         /**
          * Signature of the kernel rootkit.
          */
@@ -3075,6 +3172,10 @@ export declare namespace securitycenter_v1beta1 {
          * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. The following list shows some examples: + `organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}` + `organizations/{organization_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}`
          */
         name?: string | null;
+        /**
+         * Represents the VPC networks that the resource is attached to.
+         */
+        networks?: Schema$GoogleCloudSecuritycenterV2Network[];
         /**
          * Steps to address the finding.
          */
@@ -3207,6 +3308,48 @@ export declare namespace securitycenter_v1beta1 {
          */
         uris?: string[] | null;
     }
+    /**
+     * IP rule information.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IpRule {
+        /**
+         * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+         */
+        portRanges?: Schema$GoogleCloudSecuritycenterV2PortRange[];
+        /**
+         * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+         */
+        protocol?: string | null;
+    }
+    /**
+     * IP rules associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IpRules {
+        /**
+         * Tuple with allowed rules.
+         */
+        allowed?: Schema$GoogleCloudSecuritycenterV2Allowed;
+        /**
+         * Tuple with denied rules.
+         */
+        denied?: Schema$GoogleCloudSecuritycenterV2Denied;
+        /**
+         * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+         */
+        destinationIpRanges?: string[] | null;
+        /**
+         * The direction that the rule is applicable to, one of ingress or egress.
+         */
+        direction?: string | null;
+        /**
+         * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+         */
+        exposedServices?: string[] | null;
+        /**
+         * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+         */
+        sourceIpRanges?: string[] | null;
+    }
     /**
      * Security Command Center Issue.
      */
@@ -3470,6 +3613,27 @@ export declare namespace securitycenter_v1beta1 {
          */
         values?: string[] | null;
     }
+    /**
+     * Describes a job
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Job {
+        /**
+         * Optional. If the job did not complete successfully, this field describes why.
+         */
+        errorCode?: number | null;
+        /**
+         * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+         */
+        location?: string | null;
+        /**
+         * The fully-qualified name for a job. e.g. `projects//jobs/`
+         */
+        name?: string | null;
+        /**
+         * Output only. State of the job, such as `RUNNING` or `PENDING`.
+         */
+        state?: string | null;
+    }
     /**
      * Kernel mode rootkit signatures.
      */
@@ -3663,6 +3827,15 @@ export declare namespace securitycenter_v1beta1 {
          */
         staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
     }
+    /**
+     * Contains information about a VPC network associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Network {
+        /**
+         * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+         */
+        name?: string | null;
+    }
     /**
      * Kubernetes nodes associated with the finding.
      */
@@ -3753,7 +3926,7 @@ export declare namespace securitycenter_v1beta1 {
      */
     export interface Schema$GoogleCloudSecuritycenterV2OrgPolicy {
         /**
-         * The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
+         * Identifier. The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
          */
         name?: string | null;
     }
@@ -3816,6 +3989,19 @@ export declare namespace securitycenter_v1beta1 {
          */
         field?: string | null;
     }
+    /**
+     * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2PortRange {
+        /**
+         * Maximum port value.
+         */
+        max?: string | null;
+        /**
+         * Minimum port value.
+         */
+        min?: string | null;
+    }
     /**
      * Represents an operating system process.
      */
@@ -4251,6 +4437,10 @@ export declare namespace securitycenter_v1beta1 {
          * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
          */
         cve?: Schema$GoogleCloudSecuritycenterV2Cve;
+        /**
+         * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+         */
+        cwes?: Schema$GoogleCloudSecuritycenterV2Cwe[];
         /**
          * The fixed package is relevant to the finding.
          */
@@ -4259,6 +4449,14 @@ export declare namespace securitycenter_v1beta1 {
          * The offending package is relevant to the finding.
          */
         offendingPackage?: Schema$GoogleCloudSecuritycenterV2Package;
+        /**
+         * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+         */
+        providerRiskScore?: string | null;
+        /**
+         * Represents whether the vulnerability is reachable (detected via static analysis)
+         */
+        reachable?: boolean | null;
         /**
          * The security bulletin is relevant to this finding.
          */
@@ -4427,6 +4625,69 @@ export declare namespace securitycenter_v1beta1 {
          */
         uris?: string[] | null;
     }
+    /**
+     * IP rule information.
+     */
+    export interface Schema$IpRule {
+        /**
+         * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+         */
+        portRanges?: Schema$PortRange[];
+        /**
+         * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+         */
+        protocol?: string | null;
+    }
+    /**
+     * IP rules associated with the finding.
+     */
+    export interface Schema$IpRules {
+        /**
+         * Tuple with allowed rules.
+         */
+        allowed?: Schema$Allowed;
+        /**
+         * Tuple with denied rules.
+         */
+        denied?: Schema$Denied;
+        /**
+         * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+         */
+        destinationIpRanges?: string[] | null;
+        /**
+         * The direction that the rule is applicable to, one of ingress or egress.
+         */
+        direction?: string | null;
+        /**
+         * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+         */
+        exposedServices?: string[] | null;
+        /**
+         * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+         */
+        sourceIpRanges?: string[] | null;
+    }
+    /**
+     * Describes a job
+     */
+    export interface Schema$Job {
+        /**
+         * Optional. If the job did not complete successfully, this field describes why.
+         */
+        errorCode?: number | null;
+        /**
+         * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+         */
+        location?: string | null;
+        /**
+         * The fully-qualified name for a job. e.g. `projects//jobs/`
+         */
+        name?: string | null;
+        /**
+         * Output only. State of the job, such as `RUNNING` or `PENDING`.
+         */
+        state?: string | null;
+    }
     /**
      * Kernel mode rootkit signatures.
      */
@@ -4664,6 +4925,15 @@ export declare namespace securitycenter_v1beta1 {
          */
         staticMute?: Schema$StaticMute;
     }
+    /**
+     * Contains information about a VPC network associated with the finding.
+     */
+    export interface Schema$Network {
+        /**
+         * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+         */
+        name?: string | null;
+    }
     /**
      * Kubernetes nodes associated with the finding.
      */
@@ -4867,6 +5137,19 @@ export declare namespace securitycenter_v1beta1 {
          */
         field?: string | null;
     }
+    /**
+     * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+     */
+    export interface Schema$PortRange {
+        /**
+         * Maximum port value.
+         */
+        max?: string | null;
+        /**
+         * Minimum port value.
+         */
+        min?: string | null;
+    }
     /**
      * Represents an operating system process.
      */
@@ -5299,6 +5582,10 @@ export declare namespace securitycenter_v1beta1 {
          * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
          */
         cve?: Schema$Cve;
+        /**
+         * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+         */
+        cwes?: Schema$Cwe[];
         /**
          * The fixed package is relevant to the finding.
          */
@@ -5307,6 +5594,14 @@ export declare namespace securitycenter_v1beta1 {
          * The offending package is relevant to the finding.
          */
         offendingPackage?: Schema$Package;
+        /**
+         * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+         */
+        providerRiskScore?: string | null;
+        /**
+         * Represents whether the vulnerability is reachable (detected via static analysis)
+         */
+        reachable?: boolean | null;
         /**
          * The security bulletin is relevant to this finding.
          */