@googleapis/securitycenter 17.4.0 → 17.6.0

package/build/v1.d.ts

@@ -163,6 +163,37 @@ export declare namespace securitycenter_v1 {
          */
         confidence?: number | null;
     }
+    /**
+     * Represents an ADC application associated with the finding.
+     */
+    export interface Schema$AdcApplication {
+        /**
+         * Consumer provided attributes for the AppHub application.
+         */
+        attributes?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributes;
+        /**
+         * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+         */
+        name?: string | null;
+    }
+    /**
+     * Represents an ADC template associated with the finding.
+     */
+    export interface Schema$AdcApplicationTemplateRevision {
+        /**
+         * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+         */
+        name?: string | null;
+    }
+    /**
+     * Represents an ADC shared template associated with the finding.
+     */
+    export interface Schema$AdcSharedTemplateRevision {
+        /**
+         * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+         */
+        name?: string | null;
+    }
     /**
      * Details about resources affected by this finding.
      */
@@ -172,6 +203,27 @@ export declare namespace securitycenter_v1 {
          */
         count?: string | null;
     }
+    /**
+     * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+     */
+    export interface Schema$AgentDataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The agent principal that accessed the data.
+         */
+        principalSubject?: string | null;
+    }
     /**
      * Contains information about the AI model associated with the finding.
      */
@@ -1188,6 +1240,10 @@ export declare namespace securitycenter_v1 {
          * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
          */
         maxRetentionAllowed?: string | null;
+        /**
+         * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+         */
+        minRetentionAllowed?: string | null;
     }
     /**
      * Vertex AI dataset associated with the finding.
@@ -1228,6 +1284,31 @@ export declare namespace securitycenter_v1 {
          */
         percentPagesMatched?: number | null;
     }
+    /**
+     * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+     */
+    export interface Schema$DiscoveredWorkload {
+        /**
+         * The confidence in detection of this workload.
+         */
+        confidence?: string | null;
+        /**
+         * A boolean flag set to true if associated hardware strongly predicts the workload type.
+         */
+        detectedRelevantHardware?: boolean | null;
+        /**
+         * A boolean flag set to true if associated keywords strongly predict the workload type.
+         */
+        detectedRelevantKeywords?: boolean | null;
+        /**
+         * A boolean flag set to true if installed packages strongly predict the workload type.
+         */
+        detectedRelevantPackages?: boolean | null;
+        /**
+         * The type of workload.
+         */
+        workloadType?: string | null;
+    }
     /**
      * Contains information about the disk associated with the finding.
      */
@@ -1432,6 +1513,91 @@ export declare namespace securitycenter_v1 {
          */
         title?: string | null;
     }
+    /**
+     * Details about the externally exposed resource associated with the finding.
+     */
+    export interface Schema$ExternalExposure {
+        /**
+         * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+         */
+        backendBucket?: string | null;
+        /**
+         * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        backendService?: string | null;
+        /**
+         * The name and version of the exposed web application, for example, "Jenkins 2.184".
+         */
+        exposedApplication?: string | null;
+        /**
+         * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+         */
+        exposedEndpoint?: string | null;
+        /**
+         * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+         */
+        exposedService?: string | null;
+        /**
+         * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+         */
+        forwardingRule?: string | null;
+        /**
+         * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+         */
+        hostnameUri?: string | null;
+        /**
+         * The http response returned by the web application.
+         */
+        httpResponse?: Schema$HttpResponse[];
+        /**
+         * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+         */
+        instanceGroup?: string | null;
+        /**
+         * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        internalBackendService?: string | null;
+        /**
+         * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        loadBalancerFirewallPolicy?: string | null;
+        /**
+         * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+         */
+        networkEndpointGroup?: string | null;
+        /**
+         * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+         */
+        networkIngressFirewallPolicy?: string | null;
+        /**
+         * Private IP address of the exposed endpoint.
+         */
+        privateIpAddress?: string | null;
+        /**
+         * Port number associated with private IP address.
+         */
+        privatePort?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+         */
+        pscNetworkAttachment?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+         */
+        pscServiceAttachment?: string | null;
+        /**
+         * Public IP address of the exposed endpoint.
+         */
+        publicIpAddress?: string | null;
+        /**
+         * Public port number of the exposed endpoint.
+         */
+        publicPort?: string | null;
+        /**
+         * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        serviceFirewallPolicy?: string | null;
+    }
     /**
      * File information about the related binary/library used by an executable, or the script used by a script interpreter
      */
@@ -1494,6 +1660,10 @@ export declare namespace securitycenter_v1 {
          * AffectedResources associated with the finding.
          */
         affectedResources?: Schema$AffectedResources;
+        /**
+         * Agent data access events associated with the finding.
+         */
+        agentDataAccessEvents?: Schema$AgentDataAccessEvent[];
         /**
          * The AI model associated with the finding.
          */
@@ -1584,6 +1754,10 @@ export declare namespace securitycenter_v1 {
          * Contains more details about the finding.
          */
         description?: string | null;
+        /**
+         * DiscoveredWorkload associated with the finding.
+         */
+        discoveredWorkload?: Schema$DiscoveredWorkload;
         /**
          * Disk associated with the finding.
          */
@@ -1596,6 +1770,10 @@ export declare namespace securitycenter_v1 {
          * Represents exfiltrations associated with the finding.
          */
         exfiltration?: Schema$Exfiltration;
+        /**
+         * External exposure associated with the finding.
+         */
+        externalExposure?: Schema$ExternalExposure;
         /**
          * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
          */
@@ -1702,6 +1880,10 @@ export declare namespace securitycenter_v1 {
          * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
          */
         parentDisplayName?: string | null;
+        /**
+         * PolicyViolationSummary associated with the finding.
+         */
+        policyViolationSummary?: Schema$PolicyViolationSummary;
         /**
          * Represents operating system processes associated with the Finding.
          */
@@ -2252,6 +2434,18 @@ export declare namespace securitycenter_v1 {
      * Information related to the Google Cloud resource.
      */
     export interface Schema$GoogleCloudSecuritycenterV1Resource {
+        /**
+         * The ADC application associated with the finding.
+         */
+        adcApplication?: Schema$AdcApplication;
+        /**
+         * The ADC template associated with the finding.
+         */
+        adcApplicationTemplate?: Schema$AdcApplicationTemplateRevision;
+        /**
+         * The ADC shared template associated with the finding.
+         */
+        adcSharedTemplate?: Schema$AdcSharedTemplateRevision;
         /**
          * The App Hub application this resource belongs to.
          */
@@ -2600,6 +2794,37 @@ export declare namespace securitycenter_v1 {
          */
         confidence?: number | null;
     }
+    /**
+     * Represents an ADC application associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AdcApplication {
+        /**
+         * Consumer provided attributes for the AppHub application.
+         */
+        attributes?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributes;
+        /**
+         * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+         */
+        name?: string | null;
+    }
+    /**
+     * Represents an ADC template associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AdcApplicationTemplateRevision {
+        /**
+         * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+         */
+        name?: string | null;
+    }
+    /**
+     * Represents an ADC shared template associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AdcSharedTemplateRevision {
+        /**
+         * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+         */
+        name?: string | null;
+    }
     /**
      * Details about resources affected by this finding.
      */
@@ -2609,6 +2834,27 @@ export declare namespace securitycenter_v1 {
          */
         count?: string | null;
     }
+    /**
+     * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The agent principal that accessed the data.
+         */
+        principalSubject?: string | null;
+    }
     /**
      * Contains information about the AI model associated with the finding.
      */
@@ -3420,6 +3666,10 @@ export declare namespace securitycenter_v1 {
          * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
          */
         maxRetentionAllowed?: string | null;
+        /**
+         * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+         */
+        minRetentionAllowed?: string | null;
     }
     /**
      * Vertex AI dataset associated with the finding.
@@ -3460,6 +3710,31 @@ export declare namespace securitycenter_v1 {
          */
         percentPagesMatched?: number | null;
     }
+    /**
+     * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload {
+        /**
+         * The confidence in detection of this workload.
+         */
+        confidence?: string | null;
+        /**
+         * A boolean flag set to true if associated hardware strongly predicts the workload type.
+         */
+        detectedRelevantHardware?: boolean | null;
+        /**
+         * A boolean flag set to true if associated keywords strongly predict the workload type.
+         */
+        detectedRelevantKeywords?: boolean | null;
+        /**
+         * A boolean flag set to true if installed packages strongly predict the workload type.
+         */
+        detectedRelevantPackages?: boolean | null;
+        /**
+         * The type of workload.
+         */
+        workloadType?: string | null;
+    }
     /**
      * Contains information about the disk associated with the finding.
      */
@@ -3538,6 +3813,91 @@ export declare namespace securitycenter_v1 {
          */
         totalExfiltratedBytes?: string | null;
     }
+    /**
+     * Details about the externally exposed resource associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ExternalExposure {
+        /**
+         * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+         */
+        backendBucket?: string | null;
+        /**
+         * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        backendService?: string | null;
+        /**
+         * The name and version of the exposed web application, for example, "Jenkins 2.184".
+         */
+        exposedApplication?: string | null;
+        /**
+         * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+         */
+        exposedEndpoint?: string | null;
+        /**
+         * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+         */
+        exposedService?: string | null;
+        /**
+         * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+         */
+        forwardingRule?: string | null;
+        /**
+         * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+         */
+        hostnameUri?: string | null;
+        /**
+         * The http response returned by the web application.
+         */
+        httpResponse?: Schema$GoogleCloudSecuritycenterV2HttpResponse[];
+        /**
+         * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+         */
+        instanceGroup?: string | null;
+        /**
+         * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        internalBackendService?: string | null;
+        /**
+         * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        loadBalancerFirewallPolicy?: string | null;
+        /**
+         * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+         */
+        networkEndpointGroup?: string | null;
+        /**
+         * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+         */
+        networkIngressFirewallPolicy?: string | null;
+        /**
+         * Private IP address of the exposed endpoint.
+         */
+        privateIpAddress?: string | null;
+        /**
+         * Port number associated with private IP address.
+         */
+        privatePort?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+         */
+        pscNetworkAttachment?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+         */
+        pscServiceAttachment?: string | null;
+        /**
+         * Public IP address of the exposed endpoint.
+         */
+        publicIpAddress?: string | null;
+        /**
+         * Public port number of the exposed endpoint.
+         */
+        publicPort?: string | null;
+        /**
+         * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        serviceFirewallPolicy?: string | null;
+    }
     /**
      * Representation of third party SIEM/SOAR fields within SCC.
      */
@@ -3649,6 +4009,10 @@ export declare namespace securitycenter_v1 {
          * AffectedResources associated with the finding.
          */
         affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
+        /**
+         * Agent data access events associated with the finding.
+         */
+        agentDataAccessEvents?: Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent[];
         /**
          * The AI model associated with the finding.
          */
@@ -3743,6 +4107,10 @@ export declare namespace securitycenter_v1 {
          * Contains more details about the finding.
          */
         description?: string | null;
+        /**
+         * DiscoveredWorkload associated with the finding.
+         */
+        discoveredWorkload?: Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload;
         /**
          * Disk associated with the finding.
          */
@@ -3755,6 +4123,10 @@ export declare namespace securitycenter_v1 {
          * Represents exfiltrations associated with the finding.
          */
         exfiltration?: Schema$GoogleCloudSecuritycenterV2Exfiltration;
+        /**
+         * External exposure associated with the finding.
+         */
+        externalExposure?: Schema$GoogleCloudSecuritycenterV2ExternalExposure;
         /**
          * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
          */
@@ -3861,6 +4233,10 @@ export declare namespace securitycenter_v1 {
          * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
          */
         parentDisplayName?: string | null;
+        /**
+         * PolicyViolationSummary associated with the finding.
+         */
+        policyViolationSummary?: Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary;
         /**
          * Represents operating system processes associated with the Finding.
          */
@@ -3968,6 +4344,19 @@ export declare namespace securitycenter_v1 {
          */
         groupType?: string | null;
     }
+    /**
+     * The http response returned by the web application.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2HttpResponse {
+        /**
+         * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+         */
+        path?: string | null;
+        /**
+         * The http response code returned by the web application, for example, 200.
+         */
+        statusCode?: string | null;
+    }
     /**
      * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
      */
@@ -4207,6 +4596,18 @@ export declare namespace securitycenter_v1 {
      * A resource associated with the an issue.
      */
     export interface Schema$GoogleCloudSecuritycenterV2IssueResource {
+        /**
+         * The ADC application associated with the finding.
+         */
+        adcApplication?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplication;
+        /**
+         * The ADC template associated with the finding.
+         */
+        adcApplicationTemplate?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplicationTemplateRevision;
+        /**
+         * The ADC shared template associated with the finding.
+         */
+        adcSharedTemplate?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcSharedTemplateRevision;
         /**
          * The AppHub application associated with the resource, if any. Only populated for the primary resource.
          */
@@ -4240,6 +4641,37 @@ export declare namespace securitycenter_v1 {
          */
         type?: string | null;
     }
+    /**
+     * Represents an ADC application associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplication {
+        /**
+         * Consumer provided attributes for the AppHub application.
+         */
+        attributes?: Schema$GoogleCloudSecuritycenterV2IssueResourceApplicationAttributes;
+        /**
+         * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+         */
+        name?: string | null;
+    }
+    /**
+     * Represents an ADC template associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplicationTemplateRevision {
+        /**
+         * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+         */
+        name?: string | null;
+    }
+    /**
+     * Represents an ADC shared template associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcSharedTemplateRevision {
+        /**
+         * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+         */
+        name?: string | null;
+    }
     /**
      * The AppHub application associated with the resource, if any.
      */
@@ -4790,6 +5222,27 @@ export declare namespace securitycenter_v1 {
          */
         field?: string | null;
     }
+    /**
+     * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary {
+        /**
+         * Total number of child resources that conform to the policy.
+         */
+        conformantResourcesCount?: string | null;
+        /**
+         * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+         */
+        evaluationErrorsCount?: string | null;
+        /**
+         * Total count of child resources which were not in scope for evaluation.
+         */
+        outOfScopeResourcesCount?: string | null;
+        /**
+         * Count of child resources in violation of the policy.
+         */
+        policyViolationsCount?: string | null;
+    }
     /**
      * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
      */
@@ -4907,6 +5360,18 @@ export declare namespace securitycenter_v1 {
      * Information related to the Google Cloud resource.
      */
     export interface Schema$GoogleCloudSecuritycenterV2Resource {
+        /**
+         * The ADC application associated with the finding.
+         */
+        adcApplication?: Schema$GoogleCloudSecuritycenterV2AdcApplication;
+        /**
+         * The ADC template associated with the finding.
+         */
+        adcApplicationTemplate?: Schema$GoogleCloudSecuritycenterV2AdcApplicationTemplateRevision;
+        /**
+         * The ADC shared template associated with the finding.
+         */
+        adcSharedTemplate?: Schema$GoogleCloudSecuritycenterV2AdcSharedTemplateRevision;
         /**
          * The App Hub application this resource belongs to.
          */
@@ -5547,6 +6012,19 @@ export declare namespace securitycenter_v1 {
             [key: string]: any;
         } | null;
     }
+    /**
+     * The http response returned by the web application.
+     */
+    export interface Schema$HttpResponse {
+        /**
+         * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+         */
+        path?: string | null;
+        /**
+         * The http response code returned by the web application, for example, 200.
+         */
+        statusCode?: string | null;
+    }
     /**
      * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
      */
@@ -6359,6 +6837,27 @@ export declare namespace securitycenter_v1 {
          */
         field?: string | null;
     }
+    /**
+     * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+     */
+    export interface Schema$PolicyViolationSummary {
+        /**
+         * Total number of child resources that conform to the policy.
+         */
+        conformantResourcesCount?: string | null;
+        /**
+         * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+         */
+        evaluationErrorsCount?: string | null;
+        /**
+         * Total count of child resources which were not in scope for evaluation.
+         */
+        outOfScopeResourcesCount?: string | null;
+        /**
+         * Count of child resources in violation of the policy.
+         */
+        policyViolationsCount?: string | null;
+    }
     /**
      * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
      */
@@ -6489,6 +6988,18 @@ export declare namespace securitycenter_v1 {
      * Information related to the Google Cloud resource that is associated with this finding.
      */
     export interface Schema$Resource {
+        /**
+         * The ADC application associated with the finding.
+         */
+        adcApplication?: Schema$AdcApplication;
+        /**
+         * The ADC template associated with the finding.
+         */
+        adcApplicationTemplate?: Schema$AdcApplicationTemplateRevision;
+        /**
+         * The ADC shared template associated with the finding.
+         */
+        adcSharedTemplate?: Schema$AdcSharedTemplateRevision;
         /**
          * The App Hub application this resource belongs to.
          */
@@ -10899,6 +11410,7 @@ export declare namespace securitycenter_v1 {
          *       // {
          *       //   "access": {},
          *       //   "affectedResources": {},
+         *       //   "agentDataAccessEvents": [],
          *       //   "aiModel": {},
          *       //   "application": {},
          *       //   "artifactGuardPolicies": {},
@@ -10921,9 +11433,11 @@ export declare namespace securitycenter_v1 {
          *       //   "dataRetentionDeletionEvents": [],
          *       //   "database": {},
          *       //   "description": "my_description",
+         *       //   "discoveredWorkload": {},
          *       //   "disk": {},
          *       //   "eventTime": "my_eventTime",
          *       //   "exfiltration": {},
+         *       //   "externalExposure": {},
          *       //   "externalSystems": {},
          *       //   "externalUri": "my_externalUri",
          *       //   "files": [],
@@ -10950,6 +11464,7 @@ export declare namespace securitycenter_v1 {
          *       //   "orgPolicies": [],
          *       //   "parent": "my_parent",
          *       //   "parentDisplayName": "my_parentDisplayName",
+         *       //   "policyViolationSummary": {},
          *       //   "processes": [],
          *       //   "resourceName": "my_resourceName",
          *       //   "secret": {},
@@ -10970,6 +11485,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -10992,9 +11508,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -11021,6 +11539,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -11101,6 +11620,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -11123,9 +11643,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -11152,6 +11674,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -11233,6 +11756,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -11255,9 +11779,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -11284,6 +11810,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -17273,6 +17800,7 @@ export declare namespace securitycenter_v1 {
          *       // {
          *       //   "access": {},
          *       //   "affectedResources": {},
+         *       //   "agentDataAccessEvents": [],
          *       //   "aiModel": {},
          *       //   "application": {},
          *       //   "artifactGuardPolicies": {},
@@ -17295,9 +17823,11 @@ export declare namespace securitycenter_v1 {
          *       //   "dataRetentionDeletionEvents": [],
          *       //   "database": {},
          *       //   "description": "my_description",
+         *       //   "discoveredWorkload": {},
          *       //   "disk": {},
          *       //   "eventTime": "my_eventTime",
          *       //   "exfiltration": {},
+         *       //   "externalExposure": {},
          *       //   "externalSystems": {},
          *       //   "externalUri": "my_externalUri",
          *       //   "files": [],
@@ -17324,6 +17854,7 @@ export declare namespace securitycenter_v1 {
          *       //   "orgPolicies": [],
          *       //   "parent": "my_parent",
          *       //   "parentDisplayName": "my_parentDisplayName",
+         *       //   "policyViolationSummary": {},
          *       //   "processes": [],
          *       //   "resourceName": "my_resourceName",
          *       //   "secret": {},
@@ -17344,6 +17875,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -17366,9 +17898,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -17395,6 +17929,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -17622,6 +18157,7 @@ export declare namespace securitycenter_v1 {
          *       // {
          *       //   "access": {},
          *       //   "affectedResources": {},
+         *       //   "agentDataAccessEvents": [],
          *       //   "aiModel": {},
          *       //   "application": {},
          *       //   "artifactGuardPolicies": {},
@@ -17644,9 +18180,11 @@ export declare namespace securitycenter_v1 {
          *       //   "dataRetentionDeletionEvents": [],
          *       //   "database": {},
          *       //   "description": "my_description",
+         *       //   "discoveredWorkload": {},
          *       //   "disk": {},
          *       //   "eventTime": "my_eventTime",
          *       //   "exfiltration": {},
+         *       //   "externalExposure": {},
          *       //   "externalSystems": {},
          *       //   "externalUri": "my_externalUri",
          *       //   "files": [],
@@ -17673,6 +18211,7 @@ export declare namespace securitycenter_v1 {
          *       //   "orgPolicies": [],
          *       //   "parent": "my_parent",
          *       //   "parentDisplayName": "my_parentDisplayName",
+         *       //   "policyViolationSummary": {},
          *       //   "processes": [],
          *       //   "resourceName": "my_resourceName",
          *       //   "secret": {},
@@ -17693,6 +18232,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -17715,9 +18255,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -17744,6 +18286,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -17824,6 +18367,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -17846,9 +18390,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -17875,6 +18421,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -17956,6 +18503,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -17978,9 +18526,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -18007,6 +18557,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -22116,6 +22667,7 @@ export declare namespace securitycenter_v1 {
          *       // {
          *       //   "access": {},
          *       //   "affectedResources": {},
+         *       //   "agentDataAccessEvents": [],
          *       //   "aiModel": {},
          *       //   "application": {},
          *       //   "artifactGuardPolicies": {},
@@ -22138,9 +22690,11 @@ export declare namespace securitycenter_v1 {
          *       //   "dataRetentionDeletionEvents": [],
          *       //   "database": {},
          *       //   "description": "my_description",
+         *       //   "discoveredWorkload": {},
          *       //   "disk": {},
          *       //   "eventTime": "my_eventTime",
          *       //   "exfiltration": {},
+         *       //   "externalExposure": {},
          *       //   "externalSystems": {},
          *       //   "externalUri": "my_externalUri",
          *       //   "files": [],
@@ -22167,6 +22721,7 @@ export declare namespace securitycenter_v1 {
          *       //   "orgPolicies": [],
          *       //   "parent": "my_parent",
          *       //   "parentDisplayName": "my_parentDisplayName",
+         *       //   "policyViolationSummary": {},
          *       //   "processes": [],
          *       //   "resourceName": "my_resourceName",
          *       //   "secret": {},
@@ -22187,6 +22742,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -22209,9 +22765,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -22238,6 +22796,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -22318,6 +22877,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -22340,9 +22900,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -22369,6 +22931,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},
@@ -22450,6 +23013,7 @@ export declare namespace securitycenter_v1 {
          *   // {
          *   //   "access": {},
          *   //   "affectedResources": {},
+         *   //   "agentDataAccessEvents": [],
          *   //   "aiModel": {},
          *   //   "application": {},
          *   //   "artifactGuardPolicies": {},
@@ -22472,9 +23036,11 @@ export declare namespace securitycenter_v1 {
          *   //   "dataRetentionDeletionEvents": [],
          *   //   "database": {},
          *   //   "description": "my_description",
+         *   //   "discoveredWorkload": {},
          *   //   "disk": {},
          *   //   "eventTime": "my_eventTime",
          *   //   "exfiltration": {},
+         *   //   "externalExposure": {},
          *   //   "externalSystems": {},
          *   //   "externalUri": "my_externalUri",
          *   //   "files": [],
@@ -22501,6 +23067,7 @@ export declare namespace securitycenter_v1 {
          *   //   "orgPolicies": [],
          *   //   "parent": "my_parent",
          *   //   "parentDisplayName": "my_parentDisplayName",
+         *   //   "policyViolationSummary": {},
          *   //   "processes": [],
          *   //   "resourceName": "my_resourceName",
          *   //   "secret": {},