@googleapis/securitycenter 17.4.0 → 17.6.0

package/v1.ts

@@ -219,6 +219,37 @@ export namespace securitycenter_v1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Represents an ADC application associated with the finding.
+   */
+  export interface Schema$AdcApplication {
+    /**
+     * Consumer provided attributes for the AppHub application.
+     */
+    attributes?: Schema$GoogleCloudSecuritycenterV1ResourceApplicationAttributes;
+    /**
+     * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC template associated with the finding.
+   */
+  export interface Schema$AdcApplicationTemplateRevision {
+    /**
+     * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC shared template associated with the finding.
+   */
+  export interface Schema$AdcSharedTemplateRevision {
+    /**
+     * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
   /**
    * Details about resources affected by this finding.
    */
@@ -228,6 +259,27 @@ export namespace securitycenter_v1 {
      */
     count?: string | null;
   }
+  /**
+   * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+   */
+  export interface Schema$AgentDataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The agent principal that accessed the data.
+     */
+    principalSubject?: string | null;
+  }
   /**
    * Contains information about the AI model associated with the finding.
    */
@@ -1240,6 +1292,10 @@ export namespace securitycenter_v1 {
      * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
+    /**
+     * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+     */
+    minRetentionAllowed?: string | null;
   }
   /**
    * Vertex AI dataset associated with the finding.
@@ -1280,6 +1336,31 @@ export namespace securitycenter_v1 {
      */
     percentPagesMatched?: number | null;
   }
+  /**
+   * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+   */
+  export interface Schema$DiscoveredWorkload {
+    /**
+     * The confidence in detection of this workload.
+     */
+    confidence?: string | null;
+    /**
+     * A boolean flag set to true if associated hardware strongly predicts the workload type.
+     */
+    detectedRelevantHardware?: boolean | null;
+    /**
+     * A boolean flag set to true if associated keywords strongly predict the workload type.
+     */
+    detectedRelevantKeywords?: boolean | null;
+    /**
+     * A boolean flag set to true if installed packages strongly predict the workload type.
+     */
+    detectedRelevantPackages?: boolean | null;
+    /**
+     * The type of workload.
+     */
+    workloadType?: string | null;
+  }
   /**
    * Contains information about the disk associated with the finding.
    */
@@ -1478,6 +1559,91 @@ export namespace securitycenter_v1 {
      */
     title?: string | null;
   }
+  /**
+   * Details about the externally exposed resource associated with the finding.
+   */
+  export interface Schema$ExternalExposure {
+    /**
+     * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+     */
+    backendBucket?: string | null;
+    /**
+     * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    backendService?: string | null;
+    /**
+     * The name and version of the exposed web application, for example, "Jenkins 2.184".
+     */
+    exposedApplication?: string | null;
+    /**
+     * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+     */
+    exposedEndpoint?: string | null;
+    /**
+     * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+     */
+    exposedService?: string | null;
+    /**
+     * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+     */
+    forwardingRule?: string | null;
+    /**
+     * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+     */
+    hostnameUri?: string | null;
+    /**
+     * The http response returned by the web application.
+     */
+    httpResponse?: Schema$HttpResponse[];
+    /**
+     * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+     */
+    instanceGroup?: string | null;
+    /**
+     * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    internalBackendService?: string | null;
+    /**
+     * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    loadBalancerFirewallPolicy?: string | null;
+    /**
+     * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+     */
+    networkEndpointGroup?: string | null;
+    /**
+     * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+     */
+    networkIngressFirewallPolicy?: string | null;
+    /**
+     * Private IP address of the exposed endpoint.
+     */
+    privateIpAddress?: string | null;
+    /**
+     * Port number associated with private IP address.
+     */
+    privatePort?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+     */
+    pscNetworkAttachment?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+     */
+    pscServiceAttachment?: string | null;
+    /**
+     * Public IP address of the exposed endpoint.
+     */
+    publicIpAddress?: string | null;
+    /**
+     * Public port number of the exposed endpoint.
+     */
+    publicPort?: string | null;
+    /**
+     * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    serviceFirewallPolicy?: string | null;
+  }
   /**
    * File information about the related binary/library used by an executable, or the script used by a script interpreter
    */
@@ -1540,6 +1706,10 @@ export namespace securitycenter_v1 {
      * AffectedResources associated with the finding.
      */
     affectedResources?: Schema$AffectedResources;
+    /**
+     * Agent data access events associated with the finding.
+     */
+    agentDataAccessEvents?: Schema$AgentDataAccessEvent[];
     /**
      * The AI model associated with the finding.
      */
@@ -1628,6 +1798,10 @@ export namespace securitycenter_v1 {
      * Contains more details about the finding.
      */
     description?: string | null;
+    /**
+     * DiscoveredWorkload associated with the finding.
+     */
+    discoveredWorkload?: Schema$DiscoveredWorkload;
     /**
      * Disk associated with the finding.
      */
@@ -1640,6 +1814,10 @@ export namespace securitycenter_v1 {
      * Represents exfiltrations associated with the finding.
      */
     exfiltration?: Schema$Exfiltration;
+    /**
+     * External exposure associated with the finding.
+     */
+    externalExposure?: Schema$ExternalExposure;
     /**
      * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
      */
@@ -1746,6 +1924,10 @@ export namespace securitycenter_v1 {
      * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
      */
     parentDisplayName?: string | null;
+    /**
+     * PolicyViolationSummary associated with the finding.
+     */
+    policyViolationSummary?: Schema$PolicyViolationSummary;
     /**
      * Represents operating system processes associated with the Finding.
      */
@@ -2289,6 +2471,18 @@ export namespace securitycenter_v1 {
    * Information related to the Google Cloud resource.
    */
   export interface Schema$GoogleCloudSecuritycenterV1Resource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$AdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$AdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$AdcSharedTemplateRevision;
     /**
      * The App Hub application this resource belongs to.
      */
@@ -2635,6 +2829,37 @@ export namespace securitycenter_v1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Represents an ADC application associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AdcApplication {
+    /**
+     * Consumer provided attributes for the AppHub application.
+     */
+    attributes?: Schema$GoogleCloudSecuritycenterV2ResourceApplicationAttributes;
+    /**
+     * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AdcApplicationTemplateRevision {
+    /**
+     * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC shared template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AdcSharedTemplateRevision {
+    /**
+     * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
   /**
    * Details about resources affected by this finding.
    */
@@ -2644,6 +2869,27 @@ export namespace securitycenter_v1 {
      */
     count?: string | null;
   }
+  /**
+   * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The agent principal that accessed the data.
+     */
+    principalSubject?: string | null;
+  }
   /**
    * Contains information about the AI model associated with the finding.
    */
@@ -3454,6 +3700,10 @@ export namespace securitycenter_v1 {
      * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
+    /**
+     * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+     */
+    minRetentionAllowed?: string | null;
   }
   /**
    * Vertex AI dataset associated with the finding.
@@ -3494,6 +3744,31 @@ export namespace securitycenter_v1 {
      */
     percentPagesMatched?: number | null;
   }
+  /**
+   * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload {
+    /**
+     * The confidence in detection of this workload.
+     */
+    confidence?: string | null;
+    /**
+     * A boolean flag set to true if associated hardware strongly predicts the workload type.
+     */
+    detectedRelevantHardware?: boolean | null;
+    /**
+     * A boolean flag set to true if associated keywords strongly predict the workload type.
+     */
+    detectedRelevantKeywords?: boolean | null;
+    /**
+     * A boolean flag set to true if installed packages strongly predict the workload type.
+     */
+    detectedRelevantPackages?: boolean | null;
+    /**
+     * The type of workload.
+     */
+    workloadType?: string | null;
+  }
   /**
    * Contains information about the disk associated with the finding.
    */
@@ -3572,6 +3847,91 @@ export namespace securitycenter_v1 {
      */
     totalExfiltratedBytes?: string | null;
   }
+  /**
+   * Details about the externally exposed resource associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ExternalExposure {
+    /**
+     * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+     */
+    backendBucket?: string | null;
+    /**
+     * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    backendService?: string | null;
+    /**
+     * The name and version of the exposed web application, for example, "Jenkins 2.184".
+     */
+    exposedApplication?: string | null;
+    /**
+     * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+     */
+    exposedEndpoint?: string | null;
+    /**
+     * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+     */
+    exposedService?: string | null;
+    /**
+     * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+     */
+    forwardingRule?: string | null;
+    /**
+     * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+     */
+    hostnameUri?: string | null;
+    /**
+     * The http response returned by the web application.
+     */
+    httpResponse?: Schema$GoogleCloudSecuritycenterV2HttpResponse[];
+    /**
+     * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+     */
+    instanceGroup?: string | null;
+    /**
+     * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    internalBackendService?: string | null;
+    /**
+     * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    loadBalancerFirewallPolicy?: string | null;
+    /**
+     * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+     */
+    networkEndpointGroup?: string | null;
+    /**
+     * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+     */
+    networkIngressFirewallPolicy?: string | null;
+    /**
+     * Private IP address of the exposed endpoint.
+     */
+    privateIpAddress?: string | null;
+    /**
+     * Port number associated with private IP address.
+     */
+    privatePort?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+     */
+    pscNetworkAttachment?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+     */
+    pscServiceAttachment?: string | null;
+    /**
+     * Public IP address of the exposed endpoint.
+     */
+    publicIpAddress?: string | null;
+    /**
+     * Public port number of the exposed endpoint.
+     */
+    publicPort?: string | null;
+    /**
+     * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    serviceFirewallPolicy?: string | null;
+  }
   /**
    * Representation of third party SIEM/SOAR fields within SCC.
    */
@@ -3683,6 +4043,10 @@ export namespace securitycenter_v1 {
      * AffectedResources associated with the finding.
      */
     affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
+    /**
+     * Agent data access events associated with the finding.
+     */
+    agentDataAccessEvents?: Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent[];
     /**
      * The AI model associated with the finding.
      */
@@ -3777,6 +4141,10 @@ export namespace securitycenter_v1 {
      * Contains more details about the finding.
      */
     description?: string | null;
+    /**
+     * DiscoveredWorkload associated with the finding.
+     */
+    discoveredWorkload?: Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload;
     /**
      * Disk associated with the finding.
      */
@@ -3789,6 +4157,10 @@ export namespace securitycenter_v1 {
      * Represents exfiltrations associated with the finding.
      */
     exfiltration?: Schema$GoogleCloudSecuritycenterV2Exfiltration;
+    /**
+     * External exposure associated with the finding.
+     */
+    externalExposure?: Schema$GoogleCloudSecuritycenterV2ExternalExposure;
     /**
      * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
      */
@@ -3895,6 +4267,10 @@ export namespace securitycenter_v1 {
      * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
      */
     parentDisplayName?: string | null;
+    /**
+     * PolicyViolationSummary associated with the finding.
+     */
+    policyViolationSummary?: Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary;
     /**
      * Represents operating system processes associated with the Finding.
      */
@@ -4000,6 +4376,19 @@ export namespace securitycenter_v1 {
      */
     groupType?: string | null;
   }
+  /**
+   * The http response returned by the web application.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2HttpResponse {
+    /**
+     * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+     */
+    path?: string | null;
+    /**
+     * The http response code returned by the web application, for example, 200.
+     */
+    statusCode?: string | null;
+  }
   /**
    * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
    */
@@ -4239,6 +4628,18 @@ export namespace securitycenter_v1 {
    * A resource associated with the an issue.
    */
   export interface Schema$GoogleCloudSecuritycenterV2IssueResource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$GoogleCloudSecuritycenterV2IssueResourceAdcSharedTemplateRevision;
     /**
      * The AppHub application associated with the resource, if any. Only populated for the primary resource.
      */
@@ -4272,6 +4673,37 @@ export namespace securitycenter_v1 {
      */
     type?: string | null;
   }
+  /**
+   * Represents an ADC application associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplication {
+    /**
+     * Consumer provided attributes for the AppHub application.
+     */
+    attributes?: Schema$GoogleCloudSecuritycenterV2IssueResourceApplicationAttributes;
+    /**
+     * The resource name of an ADC Application. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applications/{application\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcApplicationTemplateRevision {
+    /**
+     * The resource name of an ADC Application Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an ADC shared template associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAdcSharedTemplateRevision {
+    /**
+     * The resource name of an ADC Shared Template Revision. Format: projects/{project\}/locations/{location\}/spaces/{space\}/applicationTemplates/{application_template\}/revisions/{revision\}
+     */
+    name?: string | null;
+  }
   /**
    * The AppHub application associated with the resource, if any.
    */
@@ -4822,6 +5254,27 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary {
+    /**
+     * Total number of child resources that conform to the policy.
+     */
+    conformantResourcesCount?: string | null;
+    /**
+     * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+     */
+    evaluationErrorsCount?: string | null;
+    /**
+     * Total count of child resources which were not in scope for evaluation.
+     */
+    outOfScopeResourcesCount?: string | null;
+    /**
+     * Count of child resources in violation of the policy.
+     */
+    policyViolationsCount?: string | null;
+  }
   /**
    * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
    */
@@ -4939,6 +5392,18 @@ export namespace securitycenter_v1 {
    * Information related to the Google Cloud resource.
    */
   export interface Schema$GoogleCloudSecuritycenterV2Resource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$GoogleCloudSecuritycenterV2AdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$GoogleCloudSecuritycenterV2AdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$GoogleCloudSecuritycenterV2AdcSharedTemplateRevision;
     /**
      * The App Hub application this resource belongs to.
      */
@@ -5573,6 +6038,19 @@ export namespace securitycenter_v1 {
      */
     properties?: {[key: string]: any} | null;
   }
+  /**
+   * The http response returned by the web application.
+   */
+  export interface Schema$HttpResponse {
+    /**
+     * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+     */
+    path?: string | null;
+    /**
+     * The http response code returned by the web application, for example, 200.
+     */
+    statusCode?: string | null;
+  }
   /**
    * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
    */
@@ -6381,6 +6859,27 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+   */
+  export interface Schema$PolicyViolationSummary {
+    /**
+     * Total number of child resources that conform to the policy.
+     */
+    conformantResourcesCount?: string | null;
+    /**
+     * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+     */
+    evaluationErrorsCount?: string | null;
+    /**
+     * Total count of child resources which were not in scope for evaluation.
+     */
+    outOfScopeResourcesCount?: string | null;
+    /**
+     * Count of child resources in violation of the policy.
+     */
+    policyViolationsCount?: string | null;
+  }
   /**
    * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
    */
@@ -6511,6 +7010,18 @@ export namespace securitycenter_v1 {
    * Information related to the Google Cloud resource that is associated with this finding.
    */
   export interface Schema$Resource {
+    /**
+     * The ADC application associated with the finding.
+     */
+    adcApplication?: Schema$AdcApplication;
+    /**
+     * The ADC template associated with the finding.
+     */
+    adcApplicationTemplate?: Schema$AdcApplicationTemplateRevision;
+    /**
+     * The ADC shared template associated with the finding.
+     */
+    adcSharedTemplate?: Schema$AdcSharedTemplateRevision;
     /**
      * The App Hub application this resource belongs to.
      */
@@ -14589,6 +15100,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -14611,9 +15123,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -14640,6 +15154,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -14660,6 +15175,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -14682,9 +15198,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -14711,6 +15229,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -14866,6 +15385,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -14888,9 +15408,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -14917,6 +15439,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -15076,6 +15599,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -15098,9 +15622,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -15127,6 +15653,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -27037,6 +27564,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -27059,9 +27587,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -27088,6 +27618,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -27108,6 +27639,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -27130,9 +27662,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -27159,6 +27693,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -27624,6 +28159,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -27646,9 +28182,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -27675,6 +28213,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -27695,6 +28234,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -27717,9 +28257,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -27746,6 +28288,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -27901,6 +28444,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -27923,9 +28467,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -27952,6 +28498,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -28111,6 +28658,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -28133,9 +28681,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -28162,6 +28712,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -36289,6 +36840,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -36311,9 +36863,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -36340,6 +36894,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -36360,6 +36915,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -36382,9 +36938,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -36411,6 +36969,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -36566,6 +37125,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -36588,9 +37148,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -36617,6 +37179,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -36776,6 +37339,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -36798,9 +37362,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -36827,6 +37393,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},