@googleapis/securitycenter 17.5.0 → 17.6.0

package/build/v1beta2.d.ts

@@ -203,6 +203,27 @@ export declare namespace securitycenter_v1beta2 {
          */
         count?: string | null;
     }
+    /**
+     * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+     */
+    export interface Schema$AgentDataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The agent principal that accessed the data.
+         */
+        principalSubject?: string | null;
+    }
     /**
      * Contains information about the AI model associated with the finding.
      */
@@ -998,6 +1019,10 @@ export declare namespace securitycenter_v1beta2 {
          * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
          */
         maxRetentionAllowed?: string | null;
+        /**
+         * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+         */
+        minRetentionAllowed?: string | null;
     }
     /**
      * Vertex AI dataset associated with the finding.
@@ -1055,6 +1080,31 @@ export declare namespace securitycenter_v1beta2 {
          */
         percentPagesMatched?: number | null;
     }
+    /**
+     * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+     */
+    export interface Schema$DiscoveredWorkload {
+        /**
+         * The confidence in detection of this workload.
+         */
+        confidence?: string | null;
+        /**
+         * A boolean flag set to true if associated hardware strongly predicts the workload type.
+         */
+        detectedRelevantHardware?: boolean | null;
+        /**
+         * A boolean flag set to true if associated keywords strongly predict the workload type.
+         */
+        detectedRelevantKeywords?: boolean | null;
+        /**
+         * A boolean flag set to true if installed packages strongly predict the workload type.
+         */
+        detectedRelevantPackages?: boolean | null;
+        /**
+         * The type of workload.
+         */
+        workloadType?: string | null;
+    }
     /**
      * Contains information about the disk associated with the finding.
      */
@@ -1195,6 +1245,91 @@ export declare namespace securitycenter_v1beta2 {
          */
         title?: string | null;
     }
+    /**
+     * Details about the externally exposed resource associated with the finding.
+     */
+    export interface Schema$ExternalExposure {
+        /**
+         * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+         */
+        backendBucket?: string | null;
+        /**
+         * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        backendService?: string | null;
+        /**
+         * The name and version of the exposed web application, for example, "Jenkins 2.184".
+         */
+        exposedApplication?: string | null;
+        /**
+         * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+         */
+        exposedEndpoint?: string | null;
+        /**
+         * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+         */
+        exposedService?: string | null;
+        /**
+         * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+         */
+        forwardingRule?: string | null;
+        /**
+         * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+         */
+        hostnameUri?: string | null;
+        /**
+         * The http response returned by the web application.
+         */
+        httpResponse?: Schema$HttpResponse[];
+        /**
+         * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+         */
+        instanceGroup?: string | null;
+        /**
+         * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        internalBackendService?: string | null;
+        /**
+         * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        loadBalancerFirewallPolicy?: string | null;
+        /**
+         * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+         */
+        networkEndpointGroup?: string | null;
+        /**
+         * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+         */
+        networkIngressFirewallPolicy?: string | null;
+        /**
+         * Private IP address of the exposed endpoint.
+         */
+        privateIpAddress?: string | null;
+        /**
+         * Port number associated with private IP address.
+         */
+        privatePort?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+         */
+        pscNetworkAttachment?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+         */
+        pscServiceAttachment?: string | null;
+        /**
+         * Public IP address of the exposed endpoint.
+         */
+        publicIpAddress?: string | null;
+        /**
+         * Public port number of the exposed endpoint.
+         */
+        publicPort?: string | null;
+        /**
+         * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        serviceFirewallPolicy?: string | null;
+    }
     /**
      * File information about the related binary/library used by an executable, or the script used by a script interpreter
      */
@@ -1257,6 +1392,10 @@ export declare namespace securitycenter_v1beta2 {
          * AffectedResources associated with the finding.
          */
         affectedResources?: Schema$AffectedResources;
+        /**
+         * Agent data access events associated with the finding.
+         */
+        agentDataAccessEvents?: Schema$AgentDataAccessEvent[];
         /**
          * The AI model associated with the finding.
          */
@@ -1347,6 +1486,10 @@ export declare namespace securitycenter_v1beta2 {
          * Contains more details about the finding.
          */
         description?: string | null;
+        /**
+         * DiscoveredWorkload associated with the finding.
+         */
+        discoveredWorkload?: Schema$DiscoveredWorkload;
         /**
          * Disk associated with the finding.
          */
@@ -1359,6 +1502,10 @@ export declare namespace securitycenter_v1beta2 {
          * Represents exfiltrations associated with the finding.
          */
         exfiltration?: Schema$Exfiltration;
+        /**
+         * External exposure associated with the finding.
+         */
+        externalExposure?: Schema$ExternalExposure;
         /**
          * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
          */
@@ -1465,6 +1612,10 @@ export declare namespace securitycenter_v1beta2 {
          * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
          */
         parentDisplayName?: string | null;
+        /**
+         * PolicyViolationSummary associated with the finding.
+         */
+        policyViolationSummary?: Schema$PolicyViolationSummary;
         /**
          * Represents operating system processes associated with the Finding.
          */
@@ -2397,6 +2548,27 @@ export declare namespace securitycenter_v1beta2 {
          */
         count?: string | null;
     }
+    /**
+     * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The agent principal that accessed the data.
+         */
+        principalSubject?: string | null;
+    }
     /**
      * Contains information about the AI model associated with the finding.
      */
@@ -3208,6 +3380,10 @@ export declare namespace securitycenter_v1beta2 {
          * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
          */
         maxRetentionAllowed?: string | null;
+        /**
+         * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+         */
+        minRetentionAllowed?: string | null;
     }
     /**
      * Vertex AI dataset associated with the finding.
@@ -3248,6 +3424,31 @@ export declare namespace securitycenter_v1beta2 {
          */
         percentPagesMatched?: number | null;
     }
+    /**
+     * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload {
+        /**
+         * The confidence in detection of this workload.
+         */
+        confidence?: string | null;
+        /**
+         * A boolean flag set to true if associated hardware strongly predicts the workload type.
+         */
+        detectedRelevantHardware?: boolean | null;
+        /**
+         * A boolean flag set to true if associated keywords strongly predict the workload type.
+         */
+        detectedRelevantKeywords?: boolean | null;
+        /**
+         * A boolean flag set to true if installed packages strongly predict the workload type.
+         */
+        detectedRelevantPackages?: boolean | null;
+        /**
+         * The type of workload.
+         */
+        workloadType?: string | null;
+    }
     /**
      * Contains information about the disk associated with the finding.
      */
@@ -3326,6 +3527,91 @@ export declare namespace securitycenter_v1beta2 {
          */
         totalExfiltratedBytes?: string | null;
     }
+    /**
+     * Details about the externally exposed resource associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ExternalExposure {
+        /**
+         * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+         */
+        backendBucket?: string | null;
+        /**
+         * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        backendService?: string | null;
+        /**
+         * The name and version of the exposed web application, for example, "Jenkins 2.184".
+         */
+        exposedApplication?: string | null;
+        /**
+         * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+         */
+        exposedEndpoint?: string | null;
+        /**
+         * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+         */
+        exposedService?: string | null;
+        /**
+         * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+         */
+        forwardingRule?: string | null;
+        /**
+         * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+         */
+        hostnameUri?: string | null;
+        /**
+         * The http response returned by the web application.
+         */
+        httpResponse?: Schema$GoogleCloudSecuritycenterV2HttpResponse[];
+        /**
+         * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+         */
+        instanceGroup?: string | null;
+        /**
+         * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+         */
+        internalBackendService?: string | null;
+        /**
+         * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        loadBalancerFirewallPolicy?: string | null;
+        /**
+         * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+         */
+        networkEndpointGroup?: string | null;
+        /**
+         * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+         */
+        networkIngressFirewallPolicy?: string | null;
+        /**
+         * Private IP address of the exposed endpoint.
+         */
+        privateIpAddress?: string | null;
+        /**
+         * Port number associated with private IP address.
+         */
+        privatePort?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+         */
+        pscNetworkAttachment?: string | null;
+        /**
+         * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+         */
+        pscServiceAttachment?: string | null;
+        /**
+         * Public IP address of the exposed endpoint.
+         */
+        publicIpAddress?: string | null;
+        /**
+         * Public port number of the exposed endpoint.
+         */
+        publicPort?: string | null;
+        /**
+         * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+         */
+        serviceFirewallPolicy?: string | null;
+    }
     /**
      * Representation of third party SIEM/SOAR fields within SCC.
      */
@@ -3437,6 +3723,10 @@ export declare namespace securitycenter_v1beta2 {
          * AffectedResources associated with the finding.
          */
         affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
+        /**
+         * Agent data access events associated with the finding.
+         */
+        agentDataAccessEvents?: Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent[];
         /**
          * The AI model associated with the finding.
          */
@@ -3531,6 +3821,10 @@ export declare namespace securitycenter_v1beta2 {
          * Contains more details about the finding.
          */
         description?: string | null;
+        /**
+         * DiscoveredWorkload associated with the finding.
+         */
+        discoveredWorkload?: Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload;
         /**
          * Disk associated with the finding.
          */
@@ -3543,6 +3837,10 @@ export declare namespace securitycenter_v1beta2 {
          * Represents exfiltrations associated with the finding.
          */
         exfiltration?: Schema$GoogleCloudSecuritycenterV2Exfiltration;
+        /**
+         * External exposure associated with the finding.
+         */
+        externalExposure?: Schema$GoogleCloudSecuritycenterV2ExternalExposure;
         /**
          * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
          */
@@ -3649,6 +3947,10 @@ export declare namespace securitycenter_v1beta2 {
          * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
          */
         parentDisplayName?: string | null;
+        /**
+         * PolicyViolationSummary associated with the finding.
+         */
+        policyViolationSummary?: Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary;
         /**
          * Represents operating system processes associated with the Finding.
          */
@@ -3756,6 +4058,19 @@ export declare namespace securitycenter_v1beta2 {
          */
         groupType?: string | null;
     }
+    /**
+     * The http response returned by the web application.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2HttpResponse {
+        /**
+         * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+         */
+        path?: string | null;
+        /**
+         * The http response code returned by the web application, for example, 200.
+         */
+        statusCode?: string | null;
+    }
     /**
      * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
      */
@@ -4621,6 +4936,27 @@ export declare namespace securitycenter_v1beta2 {
          */
         field?: string | null;
     }
+    /**
+     * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary {
+        /**
+         * Total number of child resources that conform to the policy.
+         */
+        conformantResourcesCount?: string | null;
+        /**
+         * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+         */
+        evaluationErrorsCount?: string | null;
+        /**
+         * Total count of child resources which were not in scope for evaluation.
+         */
+        outOfScopeResourcesCount?: string | null;
+        /**
+         * Count of child resources in violation of the policy.
+         */
+        policyViolationsCount?: string | null;
+    }
     /**
      * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
      */
@@ -5275,6 +5611,19 @@ export declare namespace securitycenter_v1beta2 {
          */
         groupType?: string | null;
     }
+    /**
+     * The http response returned by the web application.
+     */
+    export interface Schema$HttpResponse {
+        /**
+         * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+         */
+        path?: string | null;
+        /**
+         * The http response code returned by the web application, for example, 200.
+         */
+        statusCode?: string | null;
+    }
     /**
      * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
      */
@@ -5707,6 +6056,27 @@ export declare namespace securitycenter_v1beta2 {
          */
         field?: string | null;
     }
+    /**
+     * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+     */
+    export interface Schema$PolicyViolationSummary {
+        /**
+         * Total number of child resources that conform to the policy.
+         */
+        conformantResourcesCount?: string | null;
+        /**
+         * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+         */
+        evaluationErrorsCount?: string | null;
+        /**
+         * Total count of child resources which were not in scope for evaluation.
+         */
+        outOfScopeResourcesCount?: string | null;
+        /**
+         * Count of child resources in violation of the policy.
+         */
+        policyViolationsCount?: string | null;
+    }
     /**
      * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
      */