@googleapis/securitycenter 17.5.0 → 17.6.0

package/v1.ts

@@ -259,6 +259,27 @@ export namespace securitycenter_v1 {
      */
     count?: string | null;
   }
+  /**
+   * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+   */
+  export interface Schema$AgentDataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The agent principal that accessed the data.
+     */
+    principalSubject?: string | null;
+  }
   /**
    * Contains information about the AI model associated with the finding.
    */
@@ -1271,6 +1292,10 @@ export namespace securitycenter_v1 {
      * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
+    /**
+     * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+     */
+    minRetentionAllowed?: string | null;
   }
   /**
    * Vertex AI dataset associated with the finding.
@@ -1311,6 +1336,31 @@ export namespace securitycenter_v1 {
      */
     percentPagesMatched?: number | null;
   }
+  /**
+   * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+   */
+  export interface Schema$DiscoveredWorkload {
+    /**
+     * The confidence in detection of this workload.
+     */
+    confidence?: string | null;
+    /**
+     * A boolean flag set to true if associated hardware strongly predicts the workload type.
+     */
+    detectedRelevantHardware?: boolean | null;
+    /**
+     * A boolean flag set to true if associated keywords strongly predict the workload type.
+     */
+    detectedRelevantKeywords?: boolean | null;
+    /**
+     * A boolean flag set to true if installed packages strongly predict the workload type.
+     */
+    detectedRelevantPackages?: boolean | null;
+    /**
+     * The type of workload.
+     */
+    workloadType?: string | null;
+  }
   /**
    * Contains information about the disk associated with the finding.
    */
@@ -1509,6 +1559,91 @@ export namespace securitycenter_v1 {
      */
     title?: string | null;
   }
+  /**
+   * Details about the externally exposed resource associated with the finding.
+   */
+  export interface Schema$ExternalExposure {
+    /**
+     * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+     */
+    backendBucket?: string | null;
+    /**
+     * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    backendService?: string | null;
+    /**
+     * The name and version of the exposed web application, for example, "Jenkins 2.184".
+     */
+    exposedApplication?: string | null;
+    /**
+     * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+     */
+    exposedEndpoint?: string | null;
+    /**
+     * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+     */
+    exposedService?: string | null;
+    /**
+     * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+     */
+    forwardingRule?: string | null;
+    /**
+     * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+     */
+    hostnameUri?: string | null;
+    /**
+     * The http response returned by the web application.
+     */
+    httpResponse?: Schema$HttpResponse[];
+    /**
+     * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+     */
+    instanceGroup?: string | null;
+    /**
+     * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    internalBackendService?: string | null;
+    /**
+     * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    loadBalancerFirewallPolicy?: string | null;
+    /**
+     * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+     */
+    networkEndpointGroup?: string | null;
+    /**
+     * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+     */
+    networkIngressFirewallPolicy?: string | null;
+    /**
+     * Private IP address of the exposed endpoint.
+     */
+    privateIpAddress?: string | null;
+    /**
+     * Port number associated with private IP address.
+     */
+    privatePort?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+     */
+    pscNetworkAttachment?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+     */
+    pscServiceAttachment?: string | null;
+    /**
+     * Public IP address of the exposed endpoint.
+     */
+    publicIpAddress?: string | null;
+    /**
+     * Public port number of the exposed endpoint.
+     */
+    publicPort?: string | null;
+    /**
+     * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    serviceFirewallPolicy?: string | null;
+  }
   /**
    * File information about the related binary/library used by an executable, or the script used by a script interpreter
    */
@@ -1571,6 +1706,10 @@ export namespace securitycenter_v1 {
      * AffectedResources associated with the finding.
      */
     affectedResources?: Schema$AffectedResources;
+    /**
+     * Agent data access events associated with the finding.
+     */
+    agentDataAccessEvents?: Schema$AgentDataAccessEvent[];
     /**
      * The AI model associated with the finding.
      */
@@ -1659,6 +1798,10 @@ export namespace securitycenter_v1 {
      * Contains more details about the finding.
      */
     description?: string | null;
+    /**
+     * DiscoveredWorkload associated with the finding.
+     */
+    discoveredWorkload?: Schema$DiscoveredWorkload;
     /**
      * Disk associated with the finding.
      */
@@ -1671,6 +1814,10 @@ export namespace securitycenter_v1 {
      * Represents exfiltrations associated with the finding.
      */
     exfiltration?: Schema$Exfiltration;
+    /**
+     * External exposure associated with the finding.
+     */
+    externalExposure?: Schema$ExternalExposure;
     /**
      * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
      */
@@ -1777,6 +1924,10 @@ export namespace securitycenter_v1 {
      * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
      */
     parentDisplayName?: string | null;
+    /**
+     * PolicyViolationSummary associated with the finding.
+     */
+    policyViolationSummary?: Schema$PolicyViolationSummary;
     /**
      * Represents operating system processes associated with the Finding.
      */
@@ -2718,6 +2869,27 @@ export namespace securitycenter_v1 {
      */
     count?: string | null;
   }
+  /**
+   * Details about a data access attempt made by an agent principal not authorized under applicable data security policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The agent principal that accessed the data.
+     */
+    principalSubject?: string | null;
+  }
   /**
    * Contains information about the AI model associated with the finding.
    */
@@ -3528,6 +3700,10 @@ export namespace securitycenter_v1 {
      * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
      */
     maxRetentionAllowed?: string | null;
+    /**
+     * Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION.
+     */
+    minRetentionAllowed?: string | null;
   }
   /**
    * Vertex AI dataset associated with the finding.
@@ -3568,6 +3744,31 @@ export namespace securitycenter_v1 {
      */
     percentPagesMatched?: number | null;
   }
+  /**
+   * Represents discovered, customer managed workload that is not registered with the respective GCP service.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload {
+    /**
+     * The confidence in detection of this workload.
+     */
+    confidence?: string | null;
+    /**
+     * A boolean flag set to true if associated hardware strongly predicts the workload type.
+     */
+    detectedRelevantHardware?: boolean | null;
+    /**
+     * A boolean flag set to true if associated keywords strongly predict the workload type.
+     */
+    detectedRelevantKeywords?: boolean | null;
+    /**
+     * A boolean flag set to true if installed packages strongly predict the workload type.
+     */
+    detectedRelevantPackages?: boolean | null;
+    /**
+     * The type of workload.
+     */
+    workloadType?: string | null;
+  }
   /**
    * Contains information about the disk associated with the finding.
    */
@@ -3646,6 +3847,91 @@ export namespace securitycenter_v1 {
      */
     totalExfiltratedBytes?: string | null;
   }
+  /**
+   * Details about the externally exposed resource associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ExternalExposure {
+    /**
+     * The full resource name of the load balancer backend bucket, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendBuckets/{name\}"
+     */
+    backendBucket?: string | null;
+    /**
+     * The full resource name of load balancer backend service, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    backendService?: string | null;
+    /**
+     * The name and version of the exposed web application, for example, "Jenkins 2.184".
+     */
+    exposedApplication?: string | null;
+    /**
+     * The resource which is running the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/zones/{zone\}/instances/{instance\}.”
+     */
+    exposedEndpoint?: string | null;
+    /**
+     * The name and version of the service, for example, "Jupyter Notebook 6.14.0".
+     */
+    exposedService?: string | null;
+    /**
+     * The full resource name of the forwarding rule, for example, "//compute.googleapis.com/projects/{project-id\}/global/forwardingRules/{forwarding-rule-name\}".
+     */
+    forwardingRule?: string | null;
+    /**
+     * Hostname of the exposed application, for example, "https://test-app.a.run.app/"
+     */
+    hostnameUri?: string | null;
+    /**
+     * The http response returned by the web application.
+     */
+    httpResponse?: Schema$GoogleCloudSecuritycenterV2HttpResponse[];
+    /**
+     * The full resource name of the instance group, for example, "//compute.googleapis.com/projects/{project-id\}/global/instanceGroups/{name\}".
+     */
+    instanceGroup?: string | null;
+    /**
+     * The full resource name of load balancer backend service in the internal project having resource exposed via PSC, for example, "//compute.googleapis.com/projects/{project-id\}/global/backendServices/{name\}".
+     */
+    internalBackendService?: string | null;
+    /**
+     * The full resource name of the load balancer firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    loadBalancerFirewallPolicy?: string | null;
+    /**
+     * The full resource name of the network endpoint group, for example, "//compute.googleapis.com/projects/{project-id\}/global/networkEndpointGroups/{name\}".
+     */
+    networkEndpointGroup?: string | null;
+    /**
+     * The full resource name of the network ingress firewall policy, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{name\}".
+     */
+    networkIngressFirewallPolicy?: string | null;
+    /**
+     * Private IP address of the exposed endpoint.
+     */
+    privateIpAddress?: string | null;
+    /**
+     * Port number associated with private IP address.
+     */
+    privatePort?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) network attachment that network interface controller is attached to, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/networkAttachments/{name\}"
+     */
+    pscNetworkAttachment?: string | null;
+    /**
+     * The full resource name of the PSC (Private Service Connect) service attachment that the load balancer network endpoint group targets, for example, "//compute.googleapis.com/projects/{project-id\}/regions/{region\}/serviceAttachments/{name\}"
+     */
+    pscServiceAttachment?: string | null;
+    /**
+     * Public IP address of the exposed endpoint.
+     */
+    publicIpAddress?: string | null;
+    /**
+     * Public port number of the exposed endpoint.
+     */
+    publicPort?: string | null;
+    /**
+     * The full resource name of the firewall policy of the exposed service, for example, "//compute.googleapis.com/projects/{project-id\}/global/firewallPolicies/{policy-name\}".
+     */
+    serviceFirewallPolicy?: string | null;
+  }
   /**
    * Representation of third party SIEM/SOAR fields within SCC.
    */
@@ -3757,6 +4043,10 @@ export namespace securitycenter_v1 {
      * AffectedResources associated with the finding.
      */
     affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
+    /**
+     * Agent data access events associated with the finding.
+     */
+    agentDataAccessEvents?: Schema$GoogleCloudSecuritycenterV2AgentDataAccessEvent[];
     /**
      * The AI model associated with the finding.
      */
@@ -3851,6 +4141,10 @@ export namespace securitycenter_v1 {
      * Contains more details about the finding.
      */
     description?: string | null;
+    /**
+     * DiscoveredWorkload associated with the finding.
+     */
+    discoveredWorkload?: Schema$GoogleCloudSecuritycenterV2DiscoveredWorkload;
     /**
      * Disk associated with the finding.
      */
@@ -3863,6 +4157,10 @@ export namespace securitycenter_v1 {
      * Represents exfiltrations associated with the finding.
      */
     exfiltration?: Schema$GoogleCloudSecuritycenterV2Exfiltration;
+    /**
+     * External exposure associated with the finding.
+     */
+    externalExposure?: Schema$GoogleCloudSecuritycenterV2ExternalExposure;
     /**
      * Output only. Third party SIEM/SOAR fields within SCC, contains external system information and external system finding fields.
      */
@@ -3969,6 +4267,10 @@ export namespace securitycenter_v1 {
      * Output only. The human readable display name of the finding source such as "Event Threat Detection" or "Security Health Analytics".
      */
     parentDisplayName?: string | null;
+    /**
+     * PolicyViolationSummary associated with the finding.
+     */
+    policyViolationSummary?: Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary;
     /**
      * Represents operating system processes associated with the Finding.
      */
@@ -4074,6 +4376,19 @@ export namespace securitycenter_v1 {
      */
     groupType?: string | null;
   }
+  /**
+   * The http response returned by the web application.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2HttpResponse {
+    /**
+     * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+     */
+    path?: string | null;
+    /**
+     * The http response code returned by the web application, for example, 200.
+     */
+    statusCode?: string | null;
+  }
   /**
    * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
    */
@@ -4939,6 +5254,27 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2PolicyViolationSummary {
+    /**
+     * Total number of child resources that conform to the policy.
+     */
+    conformantResourcesCount?: string | null;
+    /**
+     * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+     */
+    evaluationErrorsCount?: string | null;
+    /**
+     * Total count of child resources which were not in scope for evaluation.
+     */
+    outOfScopeResourcesCount?: string | null;
+    /**
+     * Count of child resources in violation of the policy.
+     */
+    policyViolationsCount?: string | null;
+  }
   /**
    * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
    */
@@ -5702,6 +6038,19 @@ export namespace securitycenter_v1 {
      */
     properties?: {[key: string]: any} | null;
   }
+  /**
+   * The http response returned by the web application.
+   */
+  export interface Schema$HttpResponse {
+    /**
+     * The http path for which response code was returned by web application, for example, "https://test-app.a.run.app/test".
+     */
+    path?: string | null;
+    /**
+     * The http response code returned by the web application, for example, 200.
+     */
+    statusCode?: string | null;
+  }
   /**
    * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
    */
@@ -6510,6 +6859,27 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * Metadata summarizing policy violations of child resources of the affected resource. `finding_category` and `resource` determine the exact semantics of the counts. For example, when category=DATA_SECURITY_POSTURE_OBJECT_PUBLIC_ACCESS_VIOLATION and resource='storage.googleapis.com/buckets/my-bucket-name' then this counts the number of Cloud Storage objects in my-bucket-name which violate a Public Access control.
+   */
+  export interface Schema$PolicyViolationSummary {
+    /**
+     * Total number of child resources that conform to the policy.
+     */
+    conformantResourcesCount?: string | null;
+    /**
+     * Number of child resources for which errors during evaluation occurred. The evaluation result for these child resources is effectively "unknown".
+     */
+    evaluationErrorsCount?: string | null;
+    /**
+     * Total count of child resources which were not in scope for evaluation.
+     */
+    outOfScopeResourcesCount?: string | null;
+    /**
+     * Count of child resources in violation of the policy.
+     */
+    policyViolationsCount?: string | null;
+  }
   /**
    * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
    */
@@ -14730,6 +15100,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -14752,9 +15123,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -14781,6 +15154,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -14801,6 +15175,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -14823,9 +15198,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -14852,6 +15229,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -15007,6 +15385,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -15029,9 +15408,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -15058,6 +15439,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -15217,6 +15599,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -15239,9 +15622,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -15268,6 +15653,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -27178,6 +27564,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -27200,9 +27587,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -27229,6 +27618,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -27249,6 +27639,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -27271,9 +27662,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -27300,6 +27693,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -27765,6 +28159,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -27787,9 +28182,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -27816,6 +28213,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -27836,6 +28234,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -27858,9 +28257,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -27887,6 +28288,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -28042,6 +28444,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -28064,9 +28467,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -28093,6 +28498,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -28252,6 +28658,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -28274,9 +28681,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -28303,6 +28712,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -36430,6 +36840,7 @@ export namespace securitycenter_v1 {
      *       // {
      *       //   "access": {},
      *       //   "affectedResources": {},
+     *       //   "agentDataAccessEvents": [],
      *       //   "aiModel": {},
      *       //   "application": {},
      *       //   "artifactGuardPolicies": {},
@@ -36452,9 +36863,11 @@ export namespace securitycenter_v1 {
      *       //   "dataRetentionDeletionEvents": [],
      *       //   "database": {},
      *       //   "description": "my_description",
+     *       //   "discoveredWorkload": {},
      *       //   "disk": {},
      *       //   "eventTime": "my_eventTime",
      *       //   "exfiltration": {},
+     *       //   "externalExposure": {},
      *       //   "externalSystems": {},
      *       //   "externalUri": "my_externalUri",
      *       //   "files": [],
@@ -36481,6 +36894,7 @@ export namespace securitycenter_v1 {
      *       //   "orgPolicies": [],
      *       //   "parent": "my_parent",
      *       //   "parentDisplayName": "my_parentDisplayName",
+     *       //   "policyViolationSummary": {},
      *       //   "processes": [],
      *       //   "resourceName": "my_resourceName",
      *       //   "secret": {},
@@ -36501,6 +36915,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -36523,9 +36938,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -36552,6 +36969,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -36707,6 +37125,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -36729,9 +37148,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -36758,6 +37179,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},
@@ -36917,6 +37339,7 @@ export namespace securitycenter_v1 {
      *   // {
      *   //   "access": {},
      *   //   "affectedResources": {},
+     *   //   "agentDataAccessEvents": [],
      *   //   "aiModel": {},
      *   //   "application": {},
      *   //   "artifactGuardPolicies": {},
@@ -36939,9 +37362,11 @@ export namespace securitycenter_v1 {
      *   //   "dataRetentionDeletionEvents": [],
      *   //   "database": {},
      *   //   "description": "my_description",
+     *   //   "discoveredWorkload": {},
      *   //   "disk": {},
      *   //   "eventTime": "my_eventTime",
      *   //   "exfiltration": {},
+     *   //   "externalExposure": {},
      *   //   "externalSystems": {},
      *   //   "externalUri": "my_externalUri",
      *   //   "files": [],
@@ -36968,6 +37393,7 @@ export namespace securitycenter_v1 {
      *   //   "orgPolicies": [],
      *   //   "parent": "my_parent",
      *   //   "parentDisplayName": "my_parentDisplayName",
+     *   //   "policyViolationSummary": {},
      *   //   "processes": [],
      *   //   "resourceName": "my_resourceName",
      *   //   "secret": {},