@googleapis/securitycenter 4.0.0 → 4.2.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [4.2.0](https://github.com/googleapis/google-api-nodejs-client/compare/securitycenter-v4.1.0...securitycenter-v4.2.0) (2024-02-07)
+
+
+### Features
+
+* **securitycenter:** update the API ([9d85876](https://github.com/googleapis/google-api-nodejs-client/commit/9d85876587045e8997c96b2887494cf11c4c5a06))
+
+## [4.1.0](https://github.com/googleapis/google-api-nodejs-client/compare/securitycenter-v4.0.0...securitycenter-v4.1.0) (2024-02-02)
+
+
+### Features
+
+* **securitycenter:** update the API ([1f28c20](https://github.com/googleapis/google-api-nodejs-client/commit/1f28c2008eb3bf425d47430fa46b81645f2f8d84))
+
 ## [4.0.0](https://github.com/googleapis/google-api-nodejs-client/compare/securitycenter-v3.1.0...securitycenter-v4.0.0) (2024-01-05)
 
 

package/build/v1.d.ts

@@ -229,7 +229,7 @@ export declare namespace securitycenter_v1 {
      */
     export interface Schema$AttackExposure {
         /**
-         * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/attackExposureResults/456
+         * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
          */
         attackExposureResult?: string | null;
         /**
@@ -445,7 +445,7 @@ export declare namespace securitycenter_v1 {
          */
         members?: string[] | null;
         /**
-         * Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+         * Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).
          */
         role?: string | null;
     }
@@ -643,7 +643,7 @@ export declare namespace securitycenter_v1 {
         errors?: Schema$CustomModuleValidationError[];
     }
     /**
-     * CVE stands for Common Vulnerabilities and Exposures. More information: https://cve.mitre.org
+     * CVE stands for Common Vulnerabilities and Exposures. Information from the [CVE record](https://www.cve.org/ResourcesSupport/Glossary) that describes this vulnerability.
      */
     export interface Schema$Cve {
         /**
@@ -1309,6 +1309,18 @@ export declare namespace securitycenter_v1 {
          * References primary/secondary etc assignees in the external system.
          */
         assignees?: string[] | null;
+        /**
+         * The priority of the finding's corresponding case in the external system.
+         */
+        casePriority?: string | null;
+        /**
+         * The SLA of the finding's corresponding case in the external system.
+         */
+        caseSla?: string | null;
+        /**
+         * The link to the finding's corresponding case in the external system.
+         */
+        caseUri?: string | null;
         /**
          * The time when the case was last updated, as reported by the external system.
          */
@@ -1325,6 +1337,10 @@ export declare namespace securitycenter_v1 {
          * The most recent status of the finding's corresponding case, as reported by the external system.
          */
         status?: string | null;
+        /**
+         * Information about the ticket, if any, that is being used to track the resolution of the issue that is identified by this finding.
+         */
+        ticketInfo?: Schema$TicketInfo;
     }
     /**
      * A mute config is a Cloud SCC resource that contains the configuration to mute create/update events of findings.
@@ -1615,6 +1631,10 @@ export declare namespace securitycenter_v1 {
          * Project or folder to scope this config to. For example, "project/456" would apply this config only to resources in "project/456" scope will be checked with "AND" of other resources.
          */
         scope?: string | null;
+        /**
+         * A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset".
+         */
+        sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
         /**
          * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" E.g. [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
          */
@@ -1670,6 +1690,19 @@ export declare namespace securitycenter_v1 {
          */
         updateTime?: string | null;
     }
+    /**
+     * Resource value mapping for Sensitive Data Protection findings. If any of these mappings have a resource value that is not unspecified, the resource_value field will be ignored when reading this configuration.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping {
+        /**
+         * Resource value mapping for high-sensitivity Sensitive Data Protection findings
+         */
+        highSensitivityMapping?: string | null;
+        /**
+         * Resource value mapping for medium-sensitivity Sensitive Data Protection findings
+         */
+        mediumSensitivityMapping?: string | null;
+    }
     /**
      * Request message for grouping by assets.
      */
@@ -2440,6 +2473,23 @@ export declare namespace securitycenter_v1 {
          */
         version?: number | null;
     }
+    /**
+     * The policy field that violates the deployed posture and its expected and and detected values.
+     */
+    export interface Schema$PolicyDriftDetails {
+        /**
+         * The detected value that violates the deployed posture, for example, `false` or `allowed_values={"projects/22831892”\}`.
+         */
+        detectedValue?: string | null;
+        /**
+         * The value of this field that was configured in a posture, for example, `true` or `allowed_values={"projects/29831892”\}`.
+         */
+        expectedValue?: string | null;
+        /**
+         * The name of the updated field, for example constraint.implementation.policy_rules[0].enforce
+         */
+        field?: string | null;
+    }
     /**
      * A position in the uploaded text version of a module.
      */
@@ -2672,19 +2722,31 @@ export declare namespace securitycenter_v1 {
      */
     export interface Schema$SecurityPosture {
         /**
-         * The name of the policy that has been updated, for example, `projects/{project_id\}/policies/{constraint_name\}`.
+         * The name of the updated policy, for example, `projects/{project_id\}/policies/{constraint_name\}`.
          */
         changedPolicy?: string | null;
         /**
-         * Name of the posture, for example, `organizations/{org_id\}/locations/{location\}/postures/{posture_name\}`.
+         * Name of the posture, for example, `CIS-Posture`.
          */
         name?: string | null;
         /**
-         * The name of the posture deployment, for example, `projects/{project_id\}/posturedeployments/{posture_deployment_id\}`.
+         * The ID of the updated policy, for example, `compute-policy-1`.
+         */
+        policy?: string | null;
+        /**
+         * The details about a change in an updated policy that violates the deployed posture.
+         */
+        policyDriftDetails?: Schema$PolicyDriftDetails[];
+        /**
+         * The name of the updated policyset, for example, `cis-policyset`.
+         */
+        policySet?: string | null;
+        /**
+         * The name of the posture deployment, for example, `organizations/{org_id\}/posturedeployments/{posture_deployment_id\}`.
          */
         postureDeployment?: string | null;
         /**
-         * The project, folder, or organization on which the posture is deployed, for example, `projects/{project_id\}`.
+         * The project, folder, or organization on which the posture is deployed, for example, `projects/{project_number\}`.
          */
         postureDeploymentResource?: string | null;
         /**
@@ -2899,6 +2961,35 @@ export declare namespace securitycenter_v1 {
          */
         permissions?: string[] | null;
     }
+    /**
+     * Information about the ticket, if any, that is being used to track the resolution of the issue that is identified by this finding.
+     */
+    export interface Schema$TicketInfo {
+        /**
+         * The assignee of the ticket in the ticket system.
+         */
+        assignee?: string | null;
+        /**
+         * The description of the ticket in the ticket system.
+         */
+        description?: string | null;
+        /**
+         * The identifier of the ticket in the ticket system.
+         */
+        id?: string | null;
+        /**
+         * The latest status of the ticket, as reported by the ticket system.
+         */
+        status?: string | null;
+        /**
+         * The time when the ticket was last updated, as reported by the ticket system.
+         */
+        updateTime?: string | null;
+        /**
+         * The link to the ticket in the ticket system.
+         */
+        uri?: string | null;
+    }
     /**
      * Request to validate an Event Threat Detection custom module.
      */
@@ -5777,6 +5868,10 @@ export declare namespace securitycenter_v1 {
          * The filter expression that filters the valued resources in the response. Supported fields: * `resource_value` supports = * `resource_type` supports =
          */
         filter?: string;
+        /**
+         * Optional. The fields by which to order the valued resources response. Supported fields: * `exposed_score` * `resource_value` * `resource_type` * `resource` * `display_name` Values should be a comma separated list of fields. For example: `exposed_score,resource_value`. The default sorting order is descending. To specify ascending or descending order for a field, append a " ASC" or a " DESC" suffix, respectively; for example: `exposed_score DESC`.
+         */
+        orderBy?: string;
         /**
          * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
          */
@@ -5870,6 +5965,10 @@ export declare namespace securitycenter_v1 {
          * The filter expression that filters the valued resources in the response. Supported fields: * `resource_value` supports = * `resource_type` supports =
          */
         filter?: string;
+        /**
+         * Optional. The fields by which to order the valued resources response. Supported fields: * `exposed_score` * `resource_value` * `resource_type` * `resource` * `display_name` Values should be a comma separated list of fields. For example: `exposed_score,resource_value`. The default sorting order is descending. To specify ascending or descending order for a field, append a " ASC" or a " DESC" suffix, respectively; for example: `exposed_score DESC`.
+         */
+        orderBy?: string;
         /**
          * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
          */