@googleapis/securitycenter 14.1.1 → 15.0.0

package/v1.ts

@@ -694,7 +694,7 @@ export namespace securitycenter_v1 {
     resourceValueConfigs?: Schema$GoogleCloudSecuritycenterV1ResourceValueConfig[];
   }
   /**
-   * The destination big query dataset to export findings to.
+   * The destination BigQuery dataset to export findings to.
    */
   export interface Schema$BigQueryDestination {
     /**
@@ -774,6 +774,27 @@ export namespace securitycenter_v1 {
      */
     threatVector?: string | null;
   }
+  /**
+   * CloudControl associated with the finding.
+   */
+  export interface Schema$CloudControl {
+    /**
+     * Name of the CloudControl associated with the finding.
+     */
+    cloudControlName?: string | null;
+    /**
+     * Policy type of the CloudControl
+     */
+    policyType?: string | null;
+    /**
+     * Type of cloud control.
+     */
+    type?: string | null;
+    /**
+     * Version of the Cloud Control
+     */
+    version?: number | null;
+  }
   /**
    * The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.
    */
@@ -846,6 +867,23 @@ export namespace securitycenter_v1 {
      */
     version?: string | null;
   }
+  /**
+   * Compliance Details associated with the finding.
+   */
+  export interface Schema$ComplianceDetails {
+    /**
+     * CloudControl associated with the finding
+     */
+    cloudControl?: Schema$CloudControl;
+    /**
+     * Cloud Control Deployments associated with the finding. For example, organizations/123/locations/global/cloudControlDeployments/deploymentIdentifier
+     */
+    cloudControlDeploymentNames?: string[] | null;
+    /**
+     * Details of Frameworks associated with the finding
+     */
+    frameworks?: Schema$Framework[];
+  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -914,6 +952,19 @@ export namespace securitycenter_v1 {
      */
     uri?: string | null;
   }
+  /**
+   * Compliance control associated with the finding.
+   */
+  export interface Schema$Control {
+    /**
+     * Name of the Control
+     */
+    controlName?: string | null;
+    /**
+     * Display name of the control. For example, AU-02.
+     */
+    displayName?: string | null;
+  }
   /**
    * Request message to create single resource value config
    */
@@ -1356,7 +1407,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$ExportFindingsMetadata {
     /**
-     * Required. The destination big query dataset to export findings to.
+     * Required. The destination BigQuery dataset to export findings to.
      */
     bigQueryDestination?: Schema$BigQueryDestination;
     /**
@@ -1487,6 +1538,10 @@ export namespace securitycenter_v1 {
      * Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.
      */
     cloudDlpInspection?: Schema$CloudDlpInspection;
+    /**
+     * Details about the compliance implications of the finding.
+     */
+    complianceDetails?: Schema$ComplianceDetails;
     /**
      * Contains compliance information for security standards associated to the finding.
      */
@@ -1699,6 +1754,31 @@ export namespace securitycenter_v1 {
      */
     resourceFolderDisplayName?: string | null;
   }
+  /**
+   * Compliance framework associated with the finding.
+   */
+  export interface Schema$Framework {
+    /**
+     * Category of the framework associated with the finding. E.g. Security Benchmark, or Assured Workloads
+     */
+    category?: string[] | null;
+    /**
+     * The controls associated with the framework.
+     */
+    controls?: Schema$Control[];
+    /**
+     * Display name of the framework. For a standard framework, this will look like e.g. PCI DSS 3.2.1, whereas for a custom framework it can be a user defined string like MyFramework
+     */
+    displayName?: string | null;
+    /**
+     * Name of the framework associated with the finding
+     */
+    name?: string | null;
+    /**
+     * Type of the framework associated with the finding, to specify whether the framework is built-in (pre-defined and immutable) or a custom framework defined by the customer (equivalent to security posture)
+     */
+    type?: string | null;
+  }
   /**
    * Google Cloud metadata associated with the resource. Only applicable if the finding's cloud provider is Google Cloud.
    */
@@ -2736,6 +2816,10 @@ export namespace securitycenter_v1 {
      * Output only. The time at which the BigQuery export was created. This field is set by the server and will be ignored if provided on export on creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to protect this configuration's data, if configured during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
      */
@@ -2828,6 +2912,27 @@ export namespace securitycenter_v1 {
      */
     threatVector?: string | null;
   }
+  /**
+   * CloudControl associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2CloudControl {
+    /**
+     * Name of the CloudControl associated with the finding.
+     */
+    cloudControlName?: string | null;
+    /**
+     * Policy type of the CloudControl
+     */
+    policyType?: string | null;
+    /**
+     * Type of cloud control.
+     */
+    type?: string | null;
+    /**
+     * Version of the Cloud Control
+     */
+    version?: number | null;
+  }
   /**
    * The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.
    */
@@ -2900,6 +3005,23 @@ export namespace securitycenter_v1 {
      */
     version?: string | null;
   }
+  /**
+   * Compliance Details associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ComplianceDetails {
+    /**
+     * CloudControl associated with the finding
+     */
+    cloudControl?: Schema$GoogleCloudSecuritycenterV2CloudControl;
+    /**
+     * Cloud Control Deployments associated with the finding. For example, organizations/123/locations/global/cloudControlDeployments/deploymentIdentifier
+     */
+    cloudControlDeploymentNames?: string[] | null;
+    /**
+     * Details of Frameworks associated with the finding
+     */
+    frameworks?: Schema$GoogleCloudSecuritycenterV2Framework[];
+  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -2968,6 +3090,19 @@ export namespace securitycenter_v1 {
      */
     uri?: string | null;
   }
+  /**
+   * Compliance control associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Control {
+    /**
+     * Name of the Control
+     */
+    controlName?: string | null;
+    /**
+     * Display name of the control. For example, AU-02.
+     */
+    displayName?: string | null;
+  }
   /**
    * CVE stands for Common Vulnerabilities and Exposures. Information from the [CVE record](https://www.cve.org/ResourcesSupport/Glossary) that describes this vulnerability.
    */
@@ -3427,6 +3562,10 @@ export namespace securitycenter_v1 {
      * Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.
      */
     cloudDlpInspection?: Schema$GoogleCloudSecuritycenterV2CloudDlpInspection;
+    /**
+     * Details about the compliance implications of the finding.
+     */
+    complianceDetails?: Schema$GoogleCloudSecuritycenterV2ComplianceDetails;
     /**
      * Contains compliance information for security standards associated to the finding.
      */
@@ -3449,6 +3588,10 @@ export namespace securitycenter_v1 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Output only. The name of the Cloud KMS key used to encrypt this finding, if any.
+     */
+    cryptoKeyName?: string | null;
     /**
      * Data access events associated with the finding.
      */
@@ -3641,6 +3784,31 @@ export namespace securitycenter_v1 {
      */
     resourceFolderDisplayName?: string | null;
   }
+  /**
+   * Compliance framework associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Framework {
+    /**
+     * Category of the framework associated with the finding. E.g. Security Benchmark, or Assured Workloads
+     */
+    category?: string[] | null;
+    /**
+     * The controls associated with the framework.
+     */
+    controls?: Schema$GoogleCloudSecuritycenterV2Control[];
+    /**
+     * Display name of the framework. For a standard framework, this will look like e.g. PCI DSS 3.2.1, whereas for a custom framework it can be a user defined string like MyFramework
+     */
+    displayName?: string | null;
+    /**
+     * Name of the framework associated with the finding
+     */
+    name?: string | null;
+    /**
+     * Type of the framework associated with the finding, to specify whether the framework is built-in (pre-defined and immutable) or a custom framework defined by the customer (equivalent to security posture)
+     */
+    type?: string | null;
+  }
   /**
    * Represents a geographical location for a given access.
    */
@@ -4178,6 +4346,10 @@ export namespace securitycenter_v1 {
      * Output only. The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to encrypt this configuration data, if CMEK was enabled during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * A description of the mute config.
      */
@@ -4529,7 +4701,7 @@ export namespace securitycenter_v1 {
      */
     displayName?: string | null;
     /**
-     * The GCP metadata associated with the finding.
+     * The Google Cloud metadata associated with the finding.
      */
     gcpMetadata?: Schema$GcpMetadata;
     /**
@@ -13997,6 +14169,7 @@ export namespace securitycenter_v1 {
      *       //   "cloudArmor": {},
      *       //   "cloudDlpDataProfile": {},
      *       //   "cloudDlpInspection": {},
+     *       //   "complianceDetails": {},
      *       //   "compliances": [],
      *       //   "connections": [],
      *       //   "contacts": {},
@@ -14065,6 +14238,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -14268,6 +14442,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -14475,6 +14650,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -26500,6 +26676,7 @@ export namespace securitycenter_v1 {
      *       //   "cloudArmor": {},
      *       //   "cloudDlpDataProfile": {},
      *       //   "cloudDlpInspection": {},
+     *       //   "complianceDetails": {},
      *       //   "compliances": [],
      *       //   "connections": [],
      *       //   "contacts": {},
@@ -26568,6 +26745,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -27081,6 +27259,7 @@ export namespace securitycenter_v1 {
      *       //   "cloudArmor": {},
      *       //   "cloudDlpDataProfile": {},
      *       //   "cloudDlpInspection": {},
+     *       //   "complianceDetails": {},
      *       //   "compliances": [],
      *       //   "connections": [],
      *       //   "contacts": {},
@@ -27149,6 +27328,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -27352,6 +27532,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -27559,6 +27740,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -35784,6 +35966,7 @@ export namespace securitycenter_v1 {
      *       //   "cloudArmor": {},
      *       //   "cloudDlpDataProfile": {},
      *       //   "cloudDlpInspection": {},
+     *       //   "complianceDetails": {},
      *       //   "compliances": [],
      *       //   "connections": [],
      *       //   "contacts": {},
@@ -35852,6 +36035,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -36055,6 +36239,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},
@@ -36262,6 +36447,7 @@ export namespace securitycenter_v1 {
      *   //   "cloudArmor": {},
      *   //   "cloudDlpDataProfile": {},
      *   //   "cloudDlpInspection": {},
+     *   //   "complianceDetails": {},
      *   //   "compliances": [],
      *   //   "connections": [],
      *   //   "contacts": {},

package/v1beta1.ts

@@ -576,7 +576,7 @@ export namespace securitycenter_v1beta1 {
     storagePool?: string | null;
   }
   /**
-   * The destination big query dataset to export findings to.
+   * The destination BigQuery dataset to export findings to.
    */
   export interface Schema$BigQueryDestination {
     /**
@@ -643,6 +643,27 @@ export namespace securitycenter_v1beta1 {
      */
     threatVector?: string | null;
   }
+  /**
+   * CloudControl associated with the finding.
+   */
+  export interface Schema$CloudControl {
+    /**
+     * Name of the CloudControl associated with the finding.
+     */
+    cloudControlName?: string | null;
+    /**
+     * Policy type of the CloudControl
+     */
+    policyType?: string | null;
+    /**
+     * Type of cloud control.
+     */
+    type?: string | null;
+    /**
+     * Version of the Cloud Control
+     */
+    version?: number | null;
+  }
   /**
    * The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.
    */
@@ -715,6 +736,23 @@ export namespace securitycenter_v1beta1 {
      */
     version?: string | null;
   }
+  /**
+   * Compliance Details associated with the finding.
+   */
+  export interface Schema$ComplianceDetails {
+    /**
+     * CloudControl associated with the finding
+     */
+    cloudControl?: Schema$CloudControl;
+    /**
+     * Cloud Control Deployments associated with the finding. For example, organizations/123/locations/global/cloudControlDeployments/deploymentIdentifier
+     */
+    cloudControlDeploymentNames?: string[] | null;
+    /**
+     * Details of Frameworks associated with the finding
+     */
+    frameworks?: Schema$Framework[];
+  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -783,6 +821,19 @@ export namespace securitycenter_v1beta1 {
      */
     uri?: string | null;
   }
+  /**
+   * Compliance control associated with the finding.
+   */
+  export interface Schema$Control {
+    /**
+     * Name of the Control
+     */
+    controlName?: string | null;
+    /**
+     * Display name of the control. For example, AU-02.
+     */
+    displayName?: string | null;
+  }
   /**
    * CVE stands for Common Vulnerabilities and Exposures. Information from the [CVE record](https://www.cve.org/ResourcesSupport/Glossary) that describes this vulnerability.
    */
@@ -1104,7 +1155,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$ExportFindingsMetadata {
     /**
-     * Required. The destination big query dataset to export findings to.
+     * Required. The destination BigQuery dataset to export findings to.
      */
     bigQueryDestination?: Schema$BigQueryDestination;
     /**
@@ -1235,6 +1286,10 @@ export namespace securitycenter_v1beta1 {
      * Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.
      */
     cloudDlpInspection?: Schema$CloudDlpInspection;
+    /**
+     * Details about the compliance implications of the finding.
+     */
+    complianceDetails?: Schema$ComplianceDetails;
     /**
      * Contains compliance information for security standards associated to the finding.
      */
@@ -1447,6 +1502,31 @@ export namespace securitycenter_v1beta1 {
      */
     resourceFolderDisplayName?: string | null;
   }
+  /**
+   * Compliance framework associated with the finding.
+   */
+  export interface Schema$Framework {
+    /**
+     * Category of the framework associated with the finding. E.g. Security Benchmark, or Assured Workloads
+     */
+    category?: string[] | null;
+    /**
+     * The controls associated with the framework.
+     */
+    controls?: Schema$Control[];
+    /**
+     * Display name of the framework. For a standard framework, this will look like e.g. PCI DSS 3.2.1, whereas for a custom framework it can be a user defined string like MyFramework
+     */
+    displayName?: string | null;
+    /**
+     * Name of the framework associated with the finding
+     */
+    name?: string | null;
+    /**
+     * Type of the framework associated with the finding, to specify whether the framework is built-in (pre-defined and immutable) or a custom framework defined by the customer (equivalent to security posture)
+     */
+    type?: string | null;
+  }
   /**
    * Google Cloud metadata associated with the resource. Only applicable if the finding's cloud provider is Google Cloud.
    */
@@ -2542,6 +2622,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the BigQuery export was created. This field is set by the server and will be ignored if provided on export on creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to protect this configuration's data, if configured during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
      */
@@ -2634,6 +2718,27 @@ export namespace securitycenter_v1beta1 {
      */
     threatVector?: string | null;
   }
+  /**
+   * CloudControl associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2CloudControl {
+    /**
+     * Name of the CloudControl associated with the finding.
+     */
+    cloudControlName?: string | null;
+    /**
+     * Policy type of the CloudControl
+     */
+    policyType?: string | null;
+    /**
+     * Type of cloud control.
+     */
+    type?: string | null;
+    /**
+     * Version of the Cloud Control
+     */
+    version?: number | null;
+  }
   /**
    * The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.
    */
@@ -2706,6 +2811,23 @@ export namespace securitycenter_v1beta1 {
      */
     version?: string | null;
   }
+  /**
+   * Compliance Details associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ComplianceDetails {
+    /**
+     * CloudControl associated with the finding
+     */
+    cloudControl?: Schema$GoogleCloudSecuritycenterV2CloudControl;
+    /**
+     * Cloud Control Deployments associated with the finding. For example, organizations/123/locations/global/cloudControlDeployments/deploymentIdentifier
+     */
+    cloudControlDeploymentNames?: string[] | null;
+    /**
+     * Details of Frameworks associated with the finding
+     */
+    frameworks?: Schema$GoogleCloudSecuritycenterV2Framework[];
+  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -2774,6 +2896,19 @@ export namespace securitycenter_v1beta1 {
      */
     uri?: string | null;
   }
+  /**
+   * Compliance control associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Control {
+    /**
+     * Name of the Control
+     */
+    controlName?: string | null;
+    /**
+     * Display name of the control. For example, AU-02.
+     */
+    displayName?: string | null;
+  }
   /**
    * CVE stands for Common Vulnerabilities and Exposures. Information from the [CVE record](https://www.cve.org/ResourcesSupport/Glossary) that describes this vulnerability.
    */
@@ -3233,6 +3368,10 @@ export namespace securitycenter_v1beta1 {
      * Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding.
      */
     cloudDlpInspection?: Schema$GoogleCloudSecuritycenterV2CloudDlpInspection;
+    /**
+     * Details about the compliance implications of the finding.
+     */
+    complianceDetails?: Schema$GoogleCloudSecuritycenterV2ComplianceDetails;
     /**
      * Contains compliance information for security standards associated to the finding.
      */
@@ -3255,6 +3394,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Output only. The name of the Cloud KMS key used to encrypt this finding, if any.
+     */
+    cryptoKeyName?: string | null;
     /**
      * Data access events associated with the finding.
      */
@@ -3447,6 +3590,31 @@ export namespace securitycenter_v1beta1 {
      */
     resourceFolderDisplayName?: string | null;
   }
+  /**
+   * Compliance framework associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Framework {
+    /**
+     * Category of the framework associated with the finding. E.g. Security Benchmark, or Assured Workloads
+     */
+    category?: string[] | null;
+    /**
+     * The controls associated with the framework.
+     */
+    controls?: Schema$GoogleCloudSecuritycenterV2Control[];
+    /**
+     * Display name of the framework. For a standard framework, this will look like e.g. PCI DSS 3.2.1, whereas for a custom framework it can be a user defined string like MyFramework
+     */
+    displayName?: string | null;
+    /**
+     * Name of the framework associated with the finding
+     */
+    name?: string | null;
+    /**
+     * Type of the framework associated with the finding, to specify whether the framework is built-in (pre-defined and immutable) or a custom framework defined by the customer (equivalent to security posture)
+     */
+    type?: string | null;
+  }
   /**
    * Represents a geographical location for a given access.
    */
@@ -3984,6 +4152,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to encrypt this configuration data, if CMEK was enabled during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * A description of the mute config.
      */
@@ -4335,7 +4507,7 @@ export namespace securitycenter_v1beta1 {
      */
     displayName?: string | null;
     /**
-     * The GCP metadata associated with the finding.
+     * The Google Cloud metadata associated with the finding.
      */
     gcpMetadata?: Schema$GcpMetadata;
     /**