@googleapis/securitycenter 11.0.0 → 12.0.0

package/v1beta1.ts

@@ -215,6 +215,24 @@ export namespace securitycenter_v1beta1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Details about resources affected by this finding.
+   */
+  export interface Schema$AffectedResources {
+    /**
+     * The count of resources affected by the finding.
+     */
+    count?: string | null;
+  }
+  /**
+   * Allowed IP rule.
+   */
+  export interface Schema$Allowed {
+    /**
+     * Optional. Optional list of allowed IP rules.
+     */
+    ipRules?: Schema$IpRule[];
+  }
   /**
    * Represents an application associated with a finding.
    */
@@ -545,6 +563,15 @@ export namespace securitycenter_v1beta1 {
    * The request message for Operations.CancelOperation.
    */
   export interface Schema$CancelOperationRequest {}
+  /**
+   * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+   */
+  export interface Schema$Chokepoint {
+    /**
+     * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Fields related to Google Cloud Armor findings.
    */
@@ -646,43 +673,6 @@ export namespace securitycenter_v1beta1 {
      */
     version?: string | null;
   }
-  /**
-   * Result containing the properties and count of a ComplianceSnapshot request.
-   */
-  export interface Schema$ComplianceSnapshot {
-    /**
-     * The category of Findings matching.
-     */
-    category?: string | null;
-    /**
-     * The cloud provider for the compliance snapshot.
-     */
-    cloudProvider?: string | null;
-    /**
-     * The compliance standard (ie CIS).
-     */
-    complianceStandard?: string | null;
-    /**
-     * The compliance version (ie 1.3) in CIS 1.3.
-     */
-    complianceVersion?: string | null;
-    /**
-     * Total count of findings for the given properties.
-     */
-    count?: string | null;
-    /**
-     * The leaf container resource name that is closest to the snapshot.
-     */
-    leafContainerResource?: string | null;
-    /**
-     * The compliance snapshot name. Format: //sources//complianceSnapshots/
-     */
-    name?: string | null;
-    /**
-     * The snapshot time of the snapshot.
-     */
-    snapshotTime?: string | null;
-  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -837,6 +827,19 @@ export namespace securitycenter_v1beta1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+   */
+  export interface Schema$Cwe {
+    /**
+     * The CWE identifier, e.g. CWE-94
+     */
+    id?: string | null;
+    /**
+     * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+     */
+    references?: Schema$Reference[];
+  }
   /**
    * Details about a data access attempt made by a principal not authorized under applicable data security policy.
    */
@@ -929,10 +932,19 @@ export namespace securitycenter_v1beta1 {
      */
     eventType?: string | null;
     /**
-     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
   }
+  /**
+   * Denied IP rule.
+   */
+  export interface Schema$Denied {
+    /**
+     * Optional. Optional list of denied IP rules.
+     */
+    ipRules?: Schema$IpRule[];
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -951,7 +963,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$Disk {
     /**
-     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
      */
     name?: string | null;
   }
@@ -1090,6 +1102,10 @@ export namespace securitycenter_v1beta1 {
      * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
      */
     access?: Schema$Access;
+    /**
+     * AffectedResources associated with the finding.
+     */
+    affectedResources?: Schema$AffectedResources;
     /**
      * Represents an application associated with the finding.
      */
@@ -1110,6 +1126,10 @@ export namespace securitycenter_v1beta1 {
      * The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
      */
     category?: string | null;
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+     */
+    chokepoint?: Schema$Chokepoint;
     /**
      * Fields related to Cloud Armor findings.
      */
@@ -1204,6 +1224,14 @@ export namespace securitycenter_v1beta1 {
      * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
      */
     indicator?: Schema$Indicator;
+    /**
+     * IP rules associated with the finding.
+     */
+    ipRules?: Schema$IpRules;
+    /**
+     * Job associated with the finding.
+     */
+    job?: Schema$Job;
     /**
      * Signature of the kernel rootkit.
      */
@@ -1248,6 +1276,10 @@ export namespace securitycenter_v1beta1 {
      * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. Example: "organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}", "folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}", "projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}".
      */
     name?: string | null;
+    /**
+     * Represents the VPC networks that the resource is attached to.
+     */
+    networks?: Schema$Network[];
     /**
      * Steps to address the finding.
      */
@@ -2113,6 +2145,24 @@ export namespace securitycenter_v1beta1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Details about resources affected by this finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AffectedResources {
+    /**
+     * The count of resources affected by the finding.
+     */
+    count?: string | null;
+  }
+  /**
+   * Allowed IP rule.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Allowed {
+    /**
+     * Optional. Optional list of allowed IP rules.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+  }
   /**
    * Represents an application associated with a finding.
    */
@@ -2416,6 +2466,15 @@ export namespace securitycenter_v1beta1 {
    * The response to a BulkMute request. Contains the LRO information.
    */
   export interface Schema$GoogleCloudSecuritycenterV2BulkMuteFindingsResponse {}
+  /**
+   * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Chokepoint {
+    /**
+     * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Fields related to Google Cloud Armor findings.
    */
@@ -2671,6 +2730,19 @@ export namespace securitycenter_v1beta1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Cwe {
+    /**
+     * The CWE identifier, e.g. CWE-94
+     */
+    id?: string | null;
+    /**
+     * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+     */
+    references?: Schema$GoogleCloudSecuritycenterV2Reference[];
+  }
   /**
    * Details about a data access attempt made by a principal not authorized under applicable data security policy.
    */
@@ -2763,10 +2835,19 @@ export namespace securitycenter_v1beta1 {
      */
     eventType?: string | null;
     /**
-     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
   }
+  /**
+   * Denied IP rule.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Denied {
+    /**
+     * Optional. Optional list of denied IP rules.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -2785,7 +2866,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$GoogleCloudSecuritycenterV2Disk {
     /**
-     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
      */
     name?: string | null;
   }
@@ -2948,6 +3029,10 @@ export namespace securitycenter_v1beta1 {
      * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
      */
     access?: Schema$GoogleCloudSecuritycenterV2Access;
+    /**
+     * AffectedResources associated with the finding.
+     */
+    affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
     /**
      * Represents an application associated with the finding.
      */
@@ -2968,6 +3053,10 @@ export namespace securitycenter_v1beta1 {
      * Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"
      */
     category?: string | null;
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+     */
+    chokepoint?: Schema$GoogleCloudSecuritycenterV2Chokepoint;
     /**
      * Fields related to Cloud Armor findings.
      */
@@ -3064,6 +3153,14 @@ export namespace securitycenter_v1beta1 {
      * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
      */
     indicator?: Schema$GoogleCloudSecuritycenterV2Indicator;
+    /**
+     * IP rules associated with the finding.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRules;
+    /**
+     * Job associated with the finding.
+     */
+    job?: Schema$GoogleCloudSecuritycenterV2Job;
     /**
      * Signature of the kernel rootkit.
      */
@@ -3108,6 +3205,10 @@ export namespace securitycenter_v1beta1 {
      * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. The following list shows some examples: + `organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}` + `organizations/{organization_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}`
      */
     name?: string | null;
+    /**
+     * Represents the VPC networks that the resource is attached to.
+     */
+    networks?: Schema$GoogleCloudSecuritycenterV2Network[];
     /**
      * Steps to address the finding.
      */
@@ -3238,6 +3339,48 @@ export namespace securitycenter_v1beta1 {
      */
     uris?: string[] | null;
   }
+  /**
+   * IP rule information.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IpRule {
+    /**
+     * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+     */
+    portRanges?: Schema$GoogleCloudSecuritycenterV2PortRange[];
+    /**
+     * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+     */
+    protocol?: string | null;
+  }
+  /**
+   * IP rules associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IpRules {
+    /**
+     * Tuple with allowed rules.
+     */
+    allowed?: Schema$GoogleCloudSecuritycenterV2Allowed;
+    /**
+     * Tuple with denied rules.
+     */
+    denied?: Schema$GoogleCloudSecuritycenterV2Denied;
+    /**
+     * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    destinationIpRanges?: string[] | null;
+    /**
+     * The direction that the rule is applicable to, one of ingress or egress.
+     */
+    direction?: string | null;
+    /**
+     * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+     */
+    exposedServices?: string[] | null;
+    /**
+     * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    sourceIpRanges?: string[] | null;
+  }
   /**
    * Security Command Center Issue.
    */
@@ -3501,6 +3644,27 @@ export namespace securitycenter_v1beta1 {
      */
     values?: string[] | null;
   }
+  /**
+   * Describes a job
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Job {
+    /**
+     * Optional. If the job did not complete successfully, this field describes why.
+     */
+    errorCode?: number | null;
+    /**
+     * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+     */
+    location?: string | null;
+    /**
+     * The fully-qualified name for a job. e.g. `projects//jobs/`
+     */
+    name?: string | null;
+    /**
+     * Output only. State of the job, such as `RUNNING` or `PENDING`.
+     */
+    state?: string | null;
+  }
   /**
    * Kernel mode rootkit signatures.
    */
@@ -3694,6 +3858,15 @@ export namespace securitycenter_v1beta1 {
      */
     staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
   }
+  /**
+   * Contains information about a VPC network associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Network {
+    /**
+     * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+     */
+    name?: string | null;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -3784,7 +3957,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$GoogleCloudSecuritycenterV2OrgPolicy {
     /**
-     * The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
+     * Identifier. The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
      */
     name?: string | null;
   }
@@ -3847,6 +4020,19 @@ export namespace securitycenter_v1beta1 {
      */
     field?: string | null;
   }
+  /**
+   * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2PortRange {
+    /**
+     * Maximum port value.
+     */
+    max?: string | null;
+    /**
+     * Minimum port value.
+     */
+    min?: string | null;
+  }
   /**
    * Represents an operating system process.
    */
@@ -4278,6 +4464,10 @@ export namespace securitycenter_v1beta1 {
      * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
     cve?: Schema$GoogleCloudSecuritycenterV2Cve;
+    /**
+     * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+     */
+    cwes?: Schema$GoogleCloudSecuritycenterV2Cwe[];
     /**
      * The fixed package is relevant to the finding.
      */
@@ -4286,6 +4476,14 @@ export namespace securitycenter_v1beta1 {
      * The offending package is relevant to the finding.
      */
     offendingPackage?: Schema$GoogleCloudSecuritycenterV2Package;
+    /**
+     * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+     */
+    providerRiskScore?: string | null;
+    /**
+     * Represents whether the vulnerability is reachable (detected via static analysis)
+     */
+    reachable?: boolean | null;
     /**
      * The security bulletin is relevant to this finding.
      */
@@ -4452,6 +4650,69 @@ export namespace securitycenter_v1beta1 {
      */
     uris?: string[] | null;
   }
+  /**
+   * IP rule information.
+   */
+  export interface Schema$IpRule {
+    /**
+     * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+     */
+    portRanges?: Schema$PortRange[];
+    /**
+     * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+     */
+    protocol?: string | null;
+  }
+  /**
+   * IP rules associated with the finding.
+   */
+  export interface Schema$IpRules {
+    /**
+     * Tuple with allowed rules.
+     */
+    allowed?: Schema$Allowed;
+    /**
+     * Tuple with denied rules.
+     */
+    denied?: Schema$Denied;
+    /**
+     * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    destinationIpRanges?: string[] | null;
+    /**
+     * The direction that the rule is applicable to, one of ingress or egress.
+     */
+    direction?: string | null;
+    /**
+     * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+     */
+    exposedServices?: string[] | null;
+    /**
+     * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    sourceIpRanges?: string[] | null;
+  }
+  /**
+   * Describes a job
+   */
+  export interface Schema$Job {
+    /**
+     * Optional. If the job did not complete successfully, this field describes why.
+     */
+    errorCode?: number | null;
+    /**
+     * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+     */
+    location?: string | null;
+    /**
+     * The fully-qualified name for a job. e.g. `projects//jobs/`
+     */
+    name?: string | null;
+    /**
+     * Output only. State of the job, such as `RUNNING` or `PENDING`.
+     */
+    state?: string | null;
+  }
   /**
    * Kernel mode rootkit signatures.
    */
@@ -4689,6 +4950,15 @@ export namespace securitycenter_v1beta1 {
      */
     staticMute?: Schema$StaticMute;
   }
+  /**
+   * Contains information about a VPC network associated with the finding.
+   */
+  export interface Schema$Network {
+    /**
+     * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+     */
+    name?: string | null;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -4888,6 +5158,19 @@ export namespace securitycenter_v1beta1 {
      */
     field?: string | null;
   }
+  /**
+   * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+   */
+  export interface Schema$PortRange {
+    /**
+     * Maximum port value.
+     */
+    max?: string | null;
+    /**
+     * Minimum port value.
+     */
+    min?: string | null;
+  }
   /**
    * Represents an operating system process.
    */
@@ -5315,6 +5598,10 @@ export namespace securitycenter_v1beta1 {
      * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
     cve?: Schema$Cve;
+    /**
+     * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+     */
+    cwes?: Schema$Cwe[];
     /**
      * The fixed package is relevant to the finding.
      */
@@ -5323,6 +5610,14 @@ export namespace securitycenter_v1beta1 {
      * The offending package is relevant to the finding.
      */
     offendingPackage?: Schema$Package;
+    /**
+     * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+     */
+    providerRiskScore?: string | null;
+    /**
+     * Represents whether the vulnerability is reachable (detected via static analysis)
+     */
+    reachable?: boolean | null;
     /**
      * The security bulletin is relevant to this finding.
      */