@googleapis/securitycenter 14.2.0 → 15.0.0

package/v1.ts

@@ -694,7 +694,7 @@ export namespace securitycenter_v1 {
     resourceValueConfigs?: Schema$GoogleCloudSecuritycenterV1ResourceValueConfig[];
   }
   /**
-   * The destination big query dataset to export findings to.
+   * The destination BigQuery dataset to export findings to.
    */
   export interface Schema$BigQueryDestination {
     /**
@@ -1407,7 +1407,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$ExportFindingsMetadata {
     /**
-     * Required. The destination big query dataset to export findings to.
+     * Required. The destination BigQuery dataset to export findings to.
      */
     bigQueryDestination?: Schema$BigQueryDestination;
     /**
@@ -2816,6 +2816,10 @@ export namespace securitycenter_v1 {
      * Output only. The time at which the BigQuery export was created. This field is set by the server and will be ignored if provided on export on creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to protect this configuration's data, if configured during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
      */
@@ -3584,6 +3588,10 @@ export namespace securitycenter_v1 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Output only. The name of the Cloud KMS key used to encrypt this finding, if any.
+     */
+    cryptoKeyName?: string | null;
     /**
      * Data access events associated with the finding.
      */
@@ -4338,6 +4346,10 @@ export namespace securitycenter_v1 {
      * Output only. The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to encrypt this configuration data, if CMEK was enabled during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * A description of the mute config.
      */

package/v1beta1.ts

@@ -576,7 +576,7 @@ export namespace securitycenter_v1beta1 {
     storagePool?: string | null;
   }
   /**
-   * The destination big query dataset to export findings to.
+   * The destination BigQuery dataset to export findings to.
    */
   export interface Schema$BigQueryDestination {
     /**
@@ -1155,7 +1155,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$ExportFindingsMetadata {
     /**
-     * Required. The destination big query dataset to export findings to.
+     * Required. The destination BigQuery dataset to export findings to.
      */
     bigQueryDestination?: Schema$BigQueryDestination;
     /**
@@ -2622,6 +2622,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the BigQuery export was created. This field is set by the server and will be ignored if provided on export on creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to protect this configuration's data, if configured during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
      */
@@ -3390,6 +3394,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Output only. The name of the Cloud KMS key used to encrypt this finding, if any.
+     */
+    cryptoKeyName?: string | null;
     /**
      * Data access events associated with the finding.
      */
@@ -4144,6 +4152,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to encrypt this configuration data, if CMEK was enabled during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * A description of the mute config.
      */

package/v1beta2.ts

@@ -512,7 +512,7 @@ export namespace securitycenter_v1beta2 {
     storagePool?: string | null;
   }
   /**
-   * The destination big query dataset to export findings to.
+   * The destination BigQuery dataset to export findings to.
    */
   export interface Schema$BigQueryDestination {
     /**
@@ -1142,7 +1142,7 @@ export namespace securitycenter_v1beta2 {
    */
   export interface Schema$ExportFindingsMetadata {
     /**
-     * Required. The destination big query dataset to export findings to.
+     * Required. The destination BigQuery dataset to export findings to.
      */
     bigQueryDestination?: Schema$BigQueryDestination;
     /**
@@ -2533,6 +2533,10 @@ export namespace securitycenter_v1beta2 {
      * Output only. The time at which the BigQuery export was created. This field is set by the server and will be ignored if provided on export on creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to protect this configuration's data, if configured during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
      */
@@ -3301,6 +3305,10 @@ export namespace securitycenter_v1beta2 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Output only. The name of the Cloud KMS key used to encrypt this finding, if any.
+     */
+    cryptoKeyName?: string | null;
     /**
      * Data access events associated with the finding.
      */
@@ -4055,6 +4063,10 @@ export namespace securitycenter_v1beta2 {
      * Output only. The time at which the mute config was created. This field is set by the server and will be ignored if provided on config creation.
      */
     createTime?: string | null;
+    /**
+     * Output only. The resource name of the Cloud KMS `CryptoKey` used to encrypt this configuration data, if CMEK was enabled during Security Command Center activation.
+     */
+    cryptoKeyName?: string | null;
     /**
      * A description of the mute config.
      */
@@ -5393,6 +5405,10 @@ export namespace securitycenter_v1beta2 {
    * Resource capturing the settings for Security Center.
    */
   export interface Schema$SecurityCenterSettings {
+    /**
+     * The KMS key name used for CMEK encryption. Format: projects/{project\}/locations/{location\}/keyRings/{key_ring\}/cryptoKeys/{key_name\}
+     */
+    cryptoKeyName?: string | null;
     /**
      * The resource name of the project to send logs to. This project must be part of the organization this resource resides in. The format is `projects/{project_id\}`. An empty value disables logging. This value is only referenced by services that support log sink. Please refer to the documentation for an updated list of compatible services. This may only be specified for organization level onboarding.
      */
@@ -6248,6 +6264,7 @@ export namespace securitycenter_v1beta2 {
      *
      *   // Example response
      *   // {
+     *   //   "cryptoKeyName": "my_cryptoKeyName",
      *   //   "logSinkProject": "my_logSinkProject",
      *   //   "name": "my_name",
      *   //   "onboardingTime": "my_onboardingTime",
@@ -9452,6 +9469,7 @@ export namespace securitycenter_v1beta2 {
      *
      *   // Example response
      *   // {
+     *   //   "cryptoKeyName": "my_cryptoKeyName",
      *   //   "logSinkProject": "my_logSinkProject",
      *   //   "name": "my_name",
      *   //   "onboardingTime": "my_onboardingTime",
@@ -12811,6 +12829,7 @@ export namespace securitycenter_v1beta2 {
      *
      *   // Example response
      *   // {
+     *   //   "cryptoKeyName": "my_cryptoKeyName",
      *   //   "logSinkProject": "my_logSinkProject",
      *   //   "name": "my_name",
      *   //   "onboardingTime": "my_onboardingTime",