@googleapis/securitycenter 11.0.0 → 12.0.0

package/v1.ts

@@ -219,6 +219,24 @@ export namespace securitycenter_v1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Details about resources affected by this finding.
+   */
+  export interface Schema$AffectedResources {
+    /**
+     * The count of resources affected by the finding.
+     */
+    count?: string | null;
+  }
+  /**
+   * Allowed IP rule.
+   */
+  export interface Schema$Allowed {
+    /**
+     * Optional. Optional list of allowed IP rules.
+     */
+    ipRules?: Schema$IpRule[];
+  }
   /**
    * Represents an application associated with a finding.
    */
@@ -676,6 +694,15 @@ export namespace securitycenter_v1 {
      */
     muteState?: string | null;
   }
+  /**
+   * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+   */
+  export interface Schema$Chokepoint {
+    /**
+     * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Fields related to Google Cloud Armor findings.
    */
@@ -777,43 +804,6 @@ export namespace securitycenter_v1 {
      */
     version?: string | null;
   }
-  /**
-   * Result containing the properties and count of a ComplianceSnapshot request.
-   */
-  export interface Schema$ComplianceSnapshot {
-    /**
-     * The category of Findings matching.
-     */
-    category?: string | null;
-    /**
-     * The cloud provider for the compliance snapshot.
-     */
-    cloudProvider?: string | null;
-    /**
-     * The compliance standard (ie CIS).
-     */
-    complianceStandard?: string | null;
-    /**
-     * The compliance version (ie 1.3) in CIS 1.3.
-     */
-    complianceVersion?: string | null;
-    /**
-     * Total count of findings for the given properties.
-     */
-    count?: string | null;
-    /**
-     * The leaf container resource name that is closest to the snapshot.
-     */
-    leafContainerResource?: string | null;
-    /**
-     * The compliance snapshot name. Format: //sources//complianceSnapshots/
-     */
-    name?: string | null;
-    /**
-     * The snapshot time of the snapshot.
-     */
-    snapshotTime?: string | null;
-  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -1008,6 +998,19 @@ export namespace securitycenter_v1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+   */
+  export interface Schema$Cwe {
+    /**
+     * The CWE identifier, e.g. CWE-94
+     */
+    id?: string | null;
+    /**
+     * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+     */
+    references?: Schema$Reference[];
+  }
   /**
    * Details about a data access attempt made by a principal not authorized under applicable data security policy.
    */
@@ -1100,10 +1103,19 @@ export namespace securitycenter_v1 {
      */
     eventType?: string | null;
     /**
-     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
   }
+  /**
+   * Denied IP rule.
+   */
+  export interface Schema$Denied {
+    /**
+     * Optional. Optional list of denied IP rules.
+     */
+    ipRules?: Schema$IpRule[];
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -1122,7 +1134,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$Disk {
     /**
-     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
      */
     name?: string | null;
   }
@@ -1339,6 +1351,10 @@ export namespace securitycenter_v1 {
      * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
      */
     access?: Schema$Access;
+    /**
+     * AffectedResources associated with the finding.
+     */
+    affectedResources?: Schema$AffectedResources;
     /**
      * Represents an application associated with the finding.
      */
@@ -1359,6 +1375,10 @@ export namespace securitycenter_v1 {
      * The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
      */
     category?: string | null;
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+     */
+    chokepoint?: Schema$Chokepoint;
     /**
      * Fields related to Cloud Armor findings.
      */
@@ -1453,6 +1473,14 @@ export namespace securitycenter_v1 {
      * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
      */
     indicator?: Schema$Indicator;
+    /**
+     * IP rules associated with the finding.
+     */
+    ipRules?: Schema$IpRules;
+    /**
+     * Job associated with the finding.
+     */
+    job?: Schema$Job;
     /**
      * Signature of the kernel rootkit.
      */
@@ -1497,6 +1525,10 @@ export namespace securitycenter_v1 {
      * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. Example: "organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}", "folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}", "projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}".
      */
     name?: string | null;
+    /**
+     * Represents the VPC networks that the resource is attached to.
+     */
+    networks?: Schema$Network[];
     /**
      * Steps to address the finding.
      */
@@ -2304,6 +2336,24 @@ export namespace securitycenter_v1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Details about resources affected by this finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AffectedResources {
+    /**
+     * The count of resources affected by the finding.
+     */
+    count?: string | null;
+  }
+  /**
+   * Allowed IP rule.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Allowed {
+    /**
+     * Optional. Optional list of allowed IP rules.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+  }
   /**
    * Represents an application associated with a finding.
    */
@@ -2607,6 +2657,15 @@ export namespace securitycenter_v1 {
    * The response to a BulkMute request. Contains the LRO information.
    */
   export interface Schema$GoogleCloudSecuritycenterV2BulkMuteFindingsResponse {}
+  /**
+   * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Chokepoint {
+    /**
+     * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Fields related to Google Cloud Armor findings.
    */
@@ -2862,6 +2921,19 @@ export namespace securitycenter_v1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Cwe {
+    /**
+     * The CWE identifier, e.g. CWE-94
+     */
+    id?: string | null;
+    /**
+     * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+     */
+    references?: Schema$GoogleCloudSecuritycenterV2Reference[];
+  }
   /**
    * Details about a data access attempt made by a principal not authorized under applicable data security policy.
    */
@@ -2954,10 +3026,19 @@ export namespace securitycenter_v1 {
      */
     eventType?: string | null;
     /**
-     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
   }
+  /**
+   * Denied IP rule.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Denied {
+    /**
+     * Optional. Optional list of denied IP rules.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -2976,7 +3057,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$GoogleCloudSecuritycenterV2Disk {
     /**
-     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
      */
     name?: string | null;
   }
@@ -3139,6 +3220,10 @@ export namespace securitycenter_v1 {
      * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
      */
     access?: Schema$GoogleCloudSecuritycenterV2Access;
+    /**
+     * AffectedResources associated with the finding.
+     */
+    affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
     /**
      * Represents an application associated with the finding.
      */
@@ -3159,6 +3244,10 @@ export namespace securitycenter_v1 {
      * Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"
      */
     category?: string | null;
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+     */
+    chokepoint?: Schema$GoogleCloudSecuritycenterV2Chokepoint;
     /**
      * Fields related to Cloud Armor findings.
      */
@@ -3255,6 +3344,14 @@ export namespace securitycenter_v1 {
      * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
      */
     indicator?: Schema$GoogleCloudSecuritycenterV2Indicator;
+    /**
+     * IP rules associated with the finding.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRules;
+    /**
+     * Job associated with the finding.
+     */
+    job?: Schema$GoogleCloudSecuritycenterV2Job;
     /**
      * Signature of the kernel rootkit.
      */
@@ -3299,6 +3396,10 @@ export namespace securitycenter_v1 {
      * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. The following list shows some examples: + `organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}` + `organizations/{organization_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}`
      */
     name?: string | null;
+    /**
+     * Represents the VPC networks that the resource is attached to.
+     */
+    networks?: Schema$GoogleCloudSecuritycenterV2Network[];
     /**
      * Steps to address the finding.
      */
@@ -3429,6 +3530,48 @@ export namespace securitycenter_v1 {
      */
     uris?: string[] | null;
   }
+  /**
+   * IP rule information.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IpRule {
+    /**
+     * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+     */
+    portRanges?: Schema$GoogleCloudSecuritycenterV2PortRange[];
+    /**
+     * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+     */
+    protocol?: string | null;
+  }
+  /**
+   * IP rules associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IpRules {
+    /**
+     * Tuple with allowed rules.
+     */
+    allowed?: Schema$GoogleCloudSecuritycenterV2Allowed;
+    /**
+     * Tuple with denied rules.
+     */
+    denied?: Schema$GoogleCloudSecuritycenterV2Denied;
+    /**
+     * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    destinationIpRanges?: string[] | null;
+    /**
+     * The direction that the rule is applicable to, one of ingress or egress.
+     */
+    direction?: string | null;
+    /**
+     * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+     */
+    exposedServices?: string[] | null;
+    /**
+     * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    sourceIpRanges?: string[] | null;
+  }
   /**
    * Security Command Center Issue.
    */
@@ -3692,6 +3835,27 @@ export namespace securitycenter_v1 {
      */
     values?: string[] | null;
   }
+  /**
+   * Describes a job
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Job {
+    /**
+     * Optional. If the job did not complete successfully, this field describes why.
+     */
+    errorCode?: number | null;
+    /**
+     * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+     */
+    location?: string | null;
+    /**
+     * The fully-qualified name for a job. e.g. `projects//jobs/`
+     */
+    name?: string | null;
+    /**
+     * Output only. State of the job, such as `RUNNING` or `PENDING`.
+     */
+    state?: string | null;
+  }
   /**
    * Kernel mode rootkit signatures.
    */
@@ -3885,6 +4049,15 @@ export namespace securitycenter_v1 {
      */
     staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
   }
+  /**
+   * Contains information about a VPC network associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Network {
+    /**
+     * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+     */
+    name?: string | null;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -3975,7 +4148,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$GoogleCloudSecuritycenterV2OrgPolicy {
     /**
-     * The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
+     * Identifier. The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
      */
     name?: string | null;
   }
@@ -4038,6 +4211,19 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2PortRange {
+    /**
+     * Maximum port value.
+     */
+    max?: string | null;
+    /**
+     * Minimum port value.
+     */
+    min?: string | null;
+  }
   /**
    * Represents an operating system process.
    */
@@ -4469,6 +4655,10 @@ export namespace securitycenter_v1 {
      * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
     cve?: Schema$GoogleCloudSecuritycenterV2Cve;
+    /**
+     * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+     */
+    cwes?: Schema$GoogleCloudSecuritycenterV2Cwe[];
     /**
      * The fixed package is relevant to the finding.
      */
@@ -4477,6 +4667,14 @@ export namespace securitycenter_v1 {
      * The offending package is relevant to the finding.
      */
     offendingPackage?: Schema$GoogleCloudSecuritycenterV2Package;
+    /**
+     * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+     */
+    providerRiskScore?: string | null;
+    /**
+     * Represents whether the vulnerability is reachable (detected via static analysis)
+     */
+    reachable?: boolean | null;
     /**
      * The security bulletin is relevant to this finding.
      */
@@ -4664,6 +4862,69 @@ export namespace securitycenter_v1 {
      */
     uris?: string[] | null;
   }
+  /**
+   * IP rule information.
+   */
+  export interface Schema$IpRule {
+    /**
+     * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+     */
+    portRanges?: Schema$PortRange[];
+    /**
+     * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+     */
+    protocol?: string | null;
+  }
+  /**
+   * IP rules associated with the finding.
+   */
+  export interface Schema$IpRules {
+    /**
+     * Tuple with allowed rules.
+     */
+    allowed?: Schema$Allowed;
+    /**
+     * Tuple with denied rules.
+     */
+    denied?: Schema$Denied;
+    /**
+     * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    destinationIpRanges?: string[] | null;
+    /**
+     * The direction that the rule is applicable to, one of ingress or egress.
+     */
+    direction?: string | null;
+    /**
+     * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+     */
+    exposedServices?: string[] | null;
+    /**
+     * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    sourceIpRanges?: string[] | null;
+  }
+  /**
+   * Describes a job
+   */
+  export interface Schema$Job {
+    /**
+     * Optional. If the job did not complete successfully, this field describes why.
+     */
+    errorCode?: number | null;
+    /**
+     * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+     */
+    location?: string | null;
+    /**
+     * The fully-qualified name for a job. e.g. `projects//jobs/`
+     */
+    name?: string | null;
+    /**
+     * Output only. State of the job, such as `RUNNING` or `PENDING`.
+     */
+    state?: string | null;
+  }
   /**
    * Kernel mode rootkit signatures.
    */
@@ -5078,6 +5339,15 @@ export namespace securitycenter_v1 {
      */
     staticMute?: Schema$StaticMute;
   }
+  /**
+   * Contains information about a VPC network associated with the finding.
+   */
+  export interface Schema$Network {
+    /**
+     * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+     */
+    name?: string | null;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -5319,6 +5589,19 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+   */
+  export interface Schema$PortRange {
+    /**
+     * Maximum port value.
+     */
+    max?: string | null;
+    /**
+     * Minimum port value.
+     */
+    min?: string | null;
+  }
   /**
    * A position in the uploaded text version of a module.
    */
@@ -6001,6 +6284,10 @@ export namespace securitycenter_v1 {
      * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
     cve?: Schema$Cve;
+    /**
+     * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+     */
+    cwes?: Schema$Cwe[];
     /**
      * The fixed package is relevant to the finding.
      */
@@ -6009,6 +6296,14 @@ export namespace securitycenter_v1 {
      * The offending package is relevant to the finding.
      */
     offendingPackage?: Schema$Package;
+    /**
+     * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+     */
+    providerRiskScore?: string | null;
+    /**
+     * Represents whether the vulnerability is reachable (detected via static analysis)
+     */
+    reachable?: boolean | null;
     /**
      * The security bulletin is relevant to this finding.
      */