@googleapis/securitycenter 6.0.0 → 8.0.0

package/build/v1.d.ts

@@ -155,6 +155,15 @@ export declare namespace securitycenter_v1 {
          */
         version?: string | null;
     }
+    /**
+     * Information about [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/cloud-armor-overview#google-cloud-armor-adaptive-protection).
+     */
+    export interface Schema$AdaptiveProtection {
+        /**
+         * A score of 0 means that there is low confidence that the detected event is an actual attack. A score of 1 means that there is high confidence that the detected event is an attack. See the [Adaptive Protection documentation](https://cloud.google.com/armor/docs/adaptive-protection-overview#configure-alert-tuning) for further explanation.
+         */
+        confidence?: number | null;
+    }
     /**
      * Represents an application associated with a finding.
      */
@@ -224,6 +233,23 @@ export declare namespace securitycenter_v1 {
          */
         projectIds?: string[] | null;
     }
+    /**
+     * Information about DDoS attack volume and classification.
+     */
+    export interface Schema$Attack {
+        /**
+         * Type of attack, for example, 'SYN-flood', 'NTP-udp', or 'CHARGEN-udp'.
+         */
+        classification?: string | null;
+        /**
+         * Total BPS (bytes per second) volume of attack.
+         */
+        volumeBps?: number | null;
+        /**
+         * Total PPS (packets per second) volume of attack.
+         */
+        volumePps?: number | null;
+    }
     /**
      * An attack exposure contains the results of an attack path simulation run.
      */
@@ -369,6 +395,58 @@ export declare namespace securitycenter_v1 {
          */
         logType?: string | null;
     }
+    /**
+     * An AWS account that is a member of an organization.
+     */
+    export interface Schema$AwsAccount {
+        /**
+         * The unique identifier (ID) of the account, containing exactly 12 digits.
+         */
+        id?: string | null;
+        /**
+         * The friendly name of this account.
+         */
+        name?: string | null;
+    }
+    /**
+     * AWS metadata associated with the resource, only applicable if the finding's cloud provider is Amazon Web Services.
+     */
+    export interface Schema$AwsMetadata {
+        /**
+         * The AWS account associated with the resource.
+         */
+        account?: Schema$AwsAccount;
+        /**
+         * The AWS organization associated with the resource.
+         */
+        organization?: Schema$AwsOrganization;
+        /**
+         * A list of AWS organizational units associated with the resource, ordered from lowest level (closest to the account) to highest level.
+         */
+        organizationalUnits?: Schema$AwsOrganizationalUnit[];
+    }
+    /**
+     * An organization is a collection of accounts that are centrally managed together using consolidated billing, organized hierarchically with organizational units (OUs), and controlled with policies.
+     */
+    export interface Schema$AwsOrganization {
+        /**
+         * The unique identifier (ID) for the organization. The regex pattern for an organization ID string requires "o-" followed by from 10 to 32 lowercase letters or digits.
+         */
+        id?: string | null;
+    }
+    /**
+     * An Organizational Unit (OU) is a container of AWS accounts within a root of an organization. Policies that are attached to an OU apply to all accounts contained in that OU and in any child OUs.
+     */
+    export interface Schema$AwsOrganizationalUnit {
+        /**
+         * The unique identifier (ID) associated with this OU. The regex pattern for an organizational unit ID string requires "ou-" followed by from 4 to 32 lowercase letters or digits (the ID of the root that contains the OU). This string is followed by a second "-" dash and from 8 to 32 additional lowercase letters or digits. For example, "ou-ab12-cd34ef56".
+         */
+        id?: string | null;
+        /**
+         * The friendly name of the OU.
+         */
+        name?: string | null;
+    }
     /**
      * Information related to Google Cloud Backup and DR Service findings.
      */
@@ -462,6 +540,35 @@ export declare namespace securitycenter_v1 {
          */
         muteAnnotation?: string | null;
     }
+    /**
+     * Fields related to Google Cloud Armor findings.
+     */
+    export interface Schema$CloudArmor {
+        /**
+         * Information about potential Layer 7 DDoS attacks identified by [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/adaptive-protection-overview).
+         */
+        adaptiveProtection?: Schema$AdaptiveProtection;
+        /**
+         * Information about DDoS attack volume and classification.
+         */
+        attack?: Schema$Attack;
+        /**
+         * Duration of attack from the start until the current moment (updated every 5 minutes).
+         */
+        duration?: string | null;
+        /**
+         * Information about incoming requests evaluated by [Google Cloud Armor security policies](https://cloud.google.com/armor/docs/security-policy-overview).
+         */
+        requests?: Schema$Requests;
+        /**
+         * Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding.
+         */
+        securityPolicy?: Schema$SecurityPolicy;
+        /**
+         * Distinguish between volumetric & protocol DDoS attack and application layer attacks. For example, "L3_4" for Layer 3 and Layer 4 DDoS attacks, or "L_7" for Layer 7 DDoS attacks.
+         */
+        threatVector?: string | null;
+    }
     /**
      * The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.
      */
@@ -542,6 +649,10 @@ export declare namespace securitycenter_v1 {
          * The category of Findings matching.
          */
         category?: string | null;
+        /**
+         * The cloud provider for the compliance snapshot.
+         */
+        cloudProvider?: string | null;
         /**
          * The compliance standard (ie CIS).
          */
@@ -562,10 +673,6 @@ export declare namespace securitycenter_v1 {
          * The compliance snapshot name. Format: //sources//complianceSnapshots/
          */
         name?: string | null;
-        /**
-         * The CRM resource display name that is closest to the snapshot the Findings belong to.
-         */
-        projectDisplayName?: string | null;
         /**
          * The snapshot time of the snapshot.
          */
@@ -1016,6 +1123,10 @@ export declare namespace securitycenter_v1 {
          * The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
          */
         category?: string | null;
+        /**
+         * Fields related to Cloud Armor findings.
+         */
+        cloudArmor?: Schema$CloudArmor;
         /**
          * Cloud DLP data profile that is associated with the finding.
          */
@@ -1132,6 +1243,10 @@ export declare namespace securitycenter_v1 {
          * Steps to address the finding.
          */
         nextSteps?: string | null;
+        /**
+         * Notebook associated with the finding.
+         */
+        notebook?: Schema$Notebook;
         /**
          * Contains information about the org policies associated with the finding.
          */
@@ -1192,6 +1307,35 @@ export declare namespace securitycenter_v1 {
          */
         resourceFolderDisplayName?: string | null;
     }
+    /**
+     * GCP metadata associated with the resource, only applicable if the finding's cloud provider is Google Cloud Platform.
+     */
+    export interface Schema$GcpMetadata {
+        /**
+         * Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization.
+         */
+        folders?: Schema$GoogleCloudSecuritycenterV2Folder[];
+        /**
+         * The name of the organization that the resource belongs to.
+         */
+        organization?: string | null;
+        /**
+         * The full resource name of resource's parent.
+         */
+        parent?: string | null;
+        /**
+         * The human readable name of resource's parent.
+         */
+        parentDisplayName?: string | null;
+        /**
+         * The full resource name of project that the resource belongs to.
+         */
+        project?: string | null;
+        /**
+         * The project ID that the resource belongs to.
+         */
+        projectDisplayName?: string | null;
+    }
     /**
      * Represents a geographical location for a given access.
      */
@@ -1616,6 +1760,14 @@ export declare namespace securitycenter_v1 {
      * Information related to the Google Cloud resource.
      */
     export interface Schema$GoogleCloudSecuritycenterV1Resource {
+        /**
+         * The AWS metadata associated with the finding.
+         */
+        awsMetadata?: Schema$AwsMetadata;
+        /**
+         * Indicates which cloud provider the resource resides in.
+         */
+        cloudProvider?: string | null;
         /**
          * The human readable name of the resource.
          */
@@ -1624,10 +1776,18 @@ export declare namespace securitycenter_v1 {
          * Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization.
          */
         folders?: Schema$Folder[];
+        /**
+         * The region or location of the service (if applicable).
+         */
+        location?: string | null;
         /**
          * The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name
          */
         name?: string | null;
+        /**
+         * Indicates which organization or tenant in the cloud provider the finding applies to.
+         */
+        organization?: string | null;
         /**
          * The full resource name of resource's parent.
          */
@@ -1644,6 +1804,18 @@ export declare namespace securitycenter_v1 {
          * The project ID that the resource belongs to.
          */
         projectDisplayName?: string | null;
+        /**
+         * Provides the path to the resource within the resource hierarchy.
+         */
+        resourcePath?: Schema$ResourcePath;
+        /**
+         * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
+         */
+        resourcePathString?: string | null;
+        /**
+         * The parent service or product from which the resource is provided, for example, GKE or SNS.
+         */
+        service?: string | null;
         /**
          * The full resource type of the resource.
          */
@@ -1662,6 +1834,10 @@ export declare namespace securitycenter_v1 {
      * A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.
      */
     export interface Schema$GoogleCloudSecuritycenterV1ResourceValueConfig {
+        /**
+         * Cloud provider this configuration applies to
+         */
+        cloudProvider?: string | null;
         /**
          * Output only. Timestamp this resource value config was created.
          */
@@ -1846,6 +2022,15 @@ export declare namespace securitycenter_v1 {
          */
         version?: string | null;
     }
+    /**
+     * Information about [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/cloud-armor-overview#google-cloud-armor-adaptive-protection).
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AdaptiveProtection {
+        /**
+         * A score of 0 means that there is low confidence that the detected event is an actual attack. A score of 1 means that there is high confidence that the detected event is an attack. See the [Adaptive Protection documentation](https://cloud.google.com/armor/docs/adaptive-protection-overview#configure-alert-tuning) for further explanation.
+         */
+        confidence?: number | null;
+    }
     /**
      * Represents an application associated with a finding.
      */
@@ -1859,6 +2044,23 @@ export declare namespace securitycenter_v1 {
          */
         fullUri?: string | null;
     }
+    /**
+     * Information about DDoS attack volume and classification.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Attack {
+        /**
+         * Type of attack, for example, 'SYN-flood', 'NTP-udp', or 'CHARGEN-udp'.
+         */
+        classification?: string | null;
+        /**
+         * Total BPS (bytes per second) volume of attack.
+         */
+        volumeBps?: number | null;
+        /**
+         * Total PPS (packets per second) volume of attack.
+         */
+        volumePps?: number | null;
+    }
     /**
      * An attack exposure contains the results of an attack path simulation run.
      */
@@ -1892,6 +2094,58 @@ export declare namespace securitycenter_v1 {
          */
         state?: string | null;
     }
+    /**
+     * An AWS account that is a member of an organization.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AwsAccount {
+        /**
+         * The unique identifier (ID) of the account, containing exactly 12 digits.
+         */
+        id?: string | null;
+        /**
+         * The friendly name of this account.
+         */
+        name?: string | null;
+    }
+    /**
+     * AWS metadata associated with the resource, only applicable if the finding's cloud provider is Amazon Web Services.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AwsMetadata {
+        /**
+         * The AWS account associated with the resource.
+         */
+        account?: Schema$GoogleCloudSecuritycenterV2AwsAccount;
+        /**
+         * The AWS organization associated with the resource.
+         */
+        organization?: Schema$GoogleCloudSecuritycenterV2AwsOrganization;
+        /**
+         * A list of AWS organizational units associated with the resource, ordered from lowest level (closest to the account) to highest level.
+         */
+        organizationalUnits?: Schema$GoogleCloudSecuritycenterV2AwsOrganizationalUnit[];
+    }
+    /**
+     * An organization is a collection of accounts that are centrally managed together using consolidated billing, organized hierarchically with organizational units (OUs), and controlled with policies.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AwsOrganization {
+        /**
+         * The unique identifier (ID) for the organization. The regex pattern for an organization ID string requires "o-" followed by from 10 to 32 lowercase letters or digits.
+         */
+        id?: string | null;
+    }
+    /**
+     * An Organizational Unit (OU) is a container of AWS accounts within a root of an organization. Policies that are attached to an OU apply to all accounts contained in that OU and in any child OUs.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AwsOrganizationalUnit {
+        /**
+         * The unique identifier (ID) associated with this OU. The regex pattern for an organizational unit ID string requires "ou-" followed by from 4 to 32 lowercase letters or digits (the ID of the root that contains the OU). This string is followed by a second "-" dash and from 8 to 32 additional lowercase letters or digits. For example, "ou-ab12-cd34ef56".
+         */
+        id?: string | null;
+        /**
+         * The friendly name of the OU.
+         */
+        name?: string | null;
+    }
     /**
      * Information related to Google Cloud Backup and DR Service findings.
      */
@@ -2000,6 +2254,35 @@ export declare namespace securitycenter_v1 {
      */
     export interface Schema$GoogleCloudSecuritycenterV2BulkMuteFindingsResponse {
     }
+    /**
+     * Fields related to Google Cloud Armor findings.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2CloudArmor {
+        /**
+         * Information about potential Layer 7 DDoS attacks identified by [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/adaptive-protection-overview).
+         */
+        adaptiveProtection?: Schema$GoogleCloudSecuritycenterV2AdaptiveProtection;
+        /**
+         * Information about DDoS attack volume and classification.
+         */
+        attack?: Schema$GoogleCloudSecuritycenterV2Attack;
+        /**
+         * Duration of attack from the start until the current moment (updated every 5 minutes).
+         */
+        duration?: string | null;
+        /**
+         * Information about incoming requests evaluated by [Google Cloud Armor security policies](https://cloud.google.com/armor/docs/security-policy-overview).
+         */
+        requests?: Schema$GoogleCloudSecuritycenterV2Requests;
+        /**
+         * Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding.
+         */
+        securityPolicy?: Schema$GoogleCloudSecuritycenterV2SecurityPolicy;
+        /**
+         * Distinguish between volumetric & protocol DDoS attack and application layer attacks. For example, "L3_4" for Layer 3 and Layer 4 DDoS attacks, or "L_7" for Layer 7 DDoS attacks.
+         */
+        threatVector?: string | null;
+    }
     /**
      * The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.
      */
@@ -2426,6 +2709,10 @@ export declare namespace securitycenter_v1 {
          * Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"
          */
         category?: string | null;
+        /**
+         * Fields related to Cloud Armor findings.
+         */
+        cloudArmor?: Schema$GoogleCloudSecuritycenterV2CloudArmor;
         /**
          * Cloud DLP data profile that is associated with the finding.
          */
@@ -2542,6 +2829,10 @@ export declare namespace securitycenter_v1 {
          * Steps to address the finding.
          */
         nextSteps?: string | null;
+        /**
+         * Notebook associated with the finding.
+         */
+        notebook?: Schema$GoogleCloudSecuritycenterV2Notebook;
         /**
          * Contains information about the org policies associated with the finding.
          */
@@ -2589,6 +2880,19 @@ export declare namespace securitycenter_v1 {
          */
         vulnerability?: Schema$GoogleCloudSecuritycenterV2Vulnerability;
     }
+    /**
+     * Message that contains the resource name and display name of a folder resource.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Folder {
+        /**
+         * Full resource name of this folder. See: https://cloud.google.com/apis/design/resource_names#full_resource_name
+         */
+        resourceFolder?: string | null;
+        /**
+         * The user defined display name for this folder.
+         */
+        resourceFolderDisplayName?: string | null;
+    }
     /**
      * Represents a geographical location for a given access.
      */
@@ -2834,6 +3138,27 @@ export declare namespace securitycenter_v1 {
          */
         nodes?: Schema$GoogleCloudSecuritycenterV2Node[];
     }
+    /**
+     * Represents a Jupyter notebook IPYNB file, such as a [Colab Enterprise notebook](https://cloud.google.com/colab/docs/introduction) file, that is associated with a finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Notebook {
+        /**
+         * The user ID of the latest author to modify the notebook.
+         */
+        lastAuthor?: string | null;
+        /**
+         * The name of the notebook.
+         */
+        name?: string | null;
+        /**
+         * The most recent time the notebook was updated.
+         */
+        notebookUpdateTime?: string | null;
+        /**
+         * The source notebook service, for example, "Colab Enterprise".
+         */
+        service?: string | null;
+    }
     /**
      * Cloud SCC's Notification
      */
@@ -3019,27 +3344,106 @@ export declare namespace securitycenter_v1 {
          */
         uri?: string | null;
     }
+    /**
+     * Information about the requests relevant to the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Requests {
+        /**
+         * Allowed RPS (requests per second) over the long term.
+         */
+        longTermAllowed?: number | null;
+        /**
+         * Denied RPS (requests per second) over the long term.
+         */
+        longTermDenied?: number | null;
+        /**
+         * For 'Increasing deny ratio', the ratio is the denied traffic divided by the allowed traffic. For 'Allowed traffic spike', the ratio is the allowed traffic in the short term divided by allowed traffic in the long term.
+         */
+        ratio?: number | null;
+        /**
+         * Allowed RPS (requests per second) in the short term.
+         */
+        shortTermAllowed?: number | null;
+    }
     /**
      * Information related to the Google Cloud resource.
      */
     export interface Schema$GoogleCloudSecuritycenterV2Resource {
+        /**
+         * The AWS metadata associated with the finding.
+         */
+        awsMetadata?: Schema$GoogleCloudSecuritycenterV2AwsMetadata;
+        /**
+         * Indicates which cloud provider the finding is from.
+         */
+        cloudProvider?: string | null;
         /**
          * The human readable name of the resource.
          */
         displayName?: string | null;
+        /**
+         * The GCP metadata associated with the finding.
+         */
+        gcpMetadata?: Schema$GcpMetadata;
+        /**
+         * The region or location of the service (if applicable).
+         */
+        location?: string | null;
         /**
          * The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name
          */
         name?: string | null;
+        /**
+         * Provides the path to the resource within the resource hierarchy.
+         */
+        resourcePath?: Schema$GoogleCloudSecuritycenterV2ResourcePath;
+        /**
+         * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
+         */
+        resourcePathString?: string | null;
+        /**
+         * The service or resource provider associated with the resource.
+         */
+        service?: string | null;
         /**
          * The full resource type of the resource.
          */
         type?: string | null;
     }
+    /**
+     * Represents the path of resources leading up to the resource this finding is about.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourcePath {
+        /**
+         * The list of nodes that make the up resource path, ordered from lowest level to highest level.
+         */
+        nodes?: Schema$GoogleCloudSecuritycenterV2ResourcePathNode[];
+    }
+    /**
+     * A node within the resource path. Each node represents a resource within the resource hierarchy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2ResourcePathNode {
+        /**
+         * The display name of the resource this node represents.
+         */
+        displayName?: string | null;
+        /**
+         * The ID of the resource this node represents.
+         */
+        id?: string | null;
+        /**
+         * The type of resource this node represents.
+         */
+        nodeType?: string | null;
+    }
     /**
      * A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.
      */
     export interface Schema$GoogleCloudSecuritycenterV2ResourceValueConfig {
+        /**
+         * Cloud provider this configuration applies to
+         */
+        cloudProvider?: string | null;
         /**
          * Output only. Timestamp this resource value config was created.
          */
@@ -3122,7 +3526,7 @@ export declare namespace securitycenter_v1 {
      */
     export interface Schema$GoogleCloudSecuritycenterV2SecurityMarks {
         /**
-         * The canonical name of the marks. The following list shows some examples: + `organizations/{organization_id\}/assets/{asset_id\}/securityMarks" + `organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}/securityMarks" + `organizations/{organization_id\}/sources/{source_id\}/locations/{location\}/findings/{finding_id\}/securityMarks" + `folders/{folder_id\}/assets/{asset_id\}/securityMarks" + `folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}/securityMarks" + `folders/{folder_id\}/sources/{source_id\}/locations/{location\}/findings/{finding_id\}/securityMarks" + `projects/{project_number\}/assets/{asset_id\}/securityMarks" + `projects/{project_number\}/sources/{source_id\}/findings/{finding_id\}/securityMarks" + `projects/{project_number\}/sources/{source_id\}/locations/{location\}/findings/{finding_id\}/securityMarks"
+         * The canonical name of the marks. The following list shows some examples: + `organizations/{organization_id\}/assets/{asset_id\}/securityMarks` + `organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}/securityMarks` + `organizations/{organization_id\}/sources/{source_id\}/locations/{location\}/findings/{finding_id\}/securityMarks` + `folders/{folder_id\}/assets/{asset_id\}/securityMarks` + `folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}/securityMarks` + `folders/{folder_id\}/sources/{source_id\}/locations/{location\}/findings/{finding_id\}/securityMarks` + `projects/{project_number\}/assets/{asset_id\}/securityMarks` + `projects/{project_number\}/sources/{source_id\}/findings/{finding_id\}/securityMarks` + `projects/{project_number\}/sources/{source_id\}/locations/{location\}/findings/{finding_id\}/securityMarks`
          */
         canonicalName?: string | null;
         /**
@@ -3136,6 +3540,23 @@ export declare namespace securitycenter_v1 {
          */
         name?: string | null;
     }
+    /**
+     * Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2SecurityPolicy {
+        /**
+         * The name of the Google Cloud Armor security policy, for example, "my-security-policy".
+         */
+        name?: string | null;
+        /**
+         * Whether or not the associated rule or policy is in preview mode.
+         */
+        preview?: boolean | null;
+        /**
+         * The type of Google Cloud Armor security policy for example, 'backend security policy', 'edge security policy', 'network edge security policy', or 'always-on DDoS protection'.
+         */
+        type?: string | null;
+    }
     /**
      * Represents a posture that is deployed on Google Cloud by the Security Command Center Posture Management service. A posture contains one or more policy sets. A policy set is a group of policies that enforce a set of security rules on Google Cloud.
      */
@@ -3860,6 +4281,27 @@ export declare namespace securitycenter_v1 {
          */
         nodes?: Schema$Node[];
     }
+    /**
+     * Represents a Jupyter notebook IPYNB file, such as a [Colab Enterprise notebook](https://cloud.google.com/colab/docs/introduction) file, that is associated with a finding.
+     */
+    export interface Schema$Notebook {
+        /**
+         * The user ID of the latest author to modify the notebook.
+         */
+        lastAuthor?: string | null;
+        /**
+         * The name of the notebook.
+         */
+        name?: string | null;
+        /**
+         * The most recent time the notebook was updated.
+         */
+        notebookUpdateTime?: string | null;
+        /**
+         * The source notebook service, for example, "Colab Enterprise".
+         */
+        service?: string | null;
+    }
     /**
      * Cloud Security Command Center (Cloud SCC) notification configs. A notification config is a Cloud SCC resource that contains the configuration to send notifications for create/update events of findings, assets and etc.
      */
@@ -4144,10 +4586,39 @@ export declare namespace securitycenter_v1 {
          */
         uri?: string | null;
     }
+    /**
+     * Information about the requests relevant to the finding.
+     */
+    export interface Schema$Requests {
+        /**
+         * Allowed RPS (requests per second) over the long term.
+         */
+        longTermAllowed?: number | null;
+        /**
+         * Denied RPS (requests per second) over the long term.
+         */
+        longTermDenied?: number | null;
+        /**
+         * For 'Increasing deny ratio', the ratio is the denied traffic divided by the allowed traffic. For 'Allowed traffic spike', the ratio is the allowed traffic in the short term divided by allowed traffic in the long term.
+         */
+        ratio?: number | null;
+        /**
+         * Allowed RPS (requests per second) in the short term.
+         */
+        shortTermAllowed?: number | null;
+    }
     /**
      * Information related to the Google Cloud resource that is associated with this finding.
      */
     export interface Schema$Resource {
+        /**
+         * The AWS metadata associated with the finding.
+         */
+        awsMetadata?: Schema$AwsMetadata;
+        /**
+         * Indicates which cloud provider the finding is from.
+         */
+        cloudProvider?: string | null;
         /**
          * The human readable name of the resource.
          */
@@ -4156,10 +4627,18 @@ export declare namespace securitycenter_v1 {
          * Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization.
          */
         folders?: Schema$Folder[];
+        /**
+         * The region or location of the service (if applicable).
+         */
+        location?: string | null;
         /**
          * The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name
          */
         name?: string | null;
+        /**
+         * Indicates which organization / tenant the finding is for.
+         */
+        organization?: string | null;
         /**
          * The human readable name of resource's parent.
          */
@@ -4176,11 +4655,49 @@ export declare namespace securitycenter_v1 {
          * The full resource name of project that the resource belongs to.
          */
         projectName?: string | null;
+        /**
+         * Provides the path to the resource within the resource hierarchy.
+         */
+        resourcePath?: Schema$ResourcePath;
+        /**
+         * A string representation of the resource path. For Google Cloud, it has the format of org/{organization_id\}/folder/{folder_id\}/folder/{folder_id\}/project/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
+         */
+        resourcePathString?: string | null;
+        /**
+         * The service or resource provider associated with the resource.
+         */
+        service?: string | null;
         /**
          * The full resource type of the resource.
          */
         type?: string | null;
     }
+    /**
+     * Represents the path of resources leading up to the resource this finding is about.
+     */
+    export interface Schema$ResourcePath {
+        /**
+         * The list of nodes that make the up resource path, ordered from lowest level to highest level.
+         */
+        nodes?: Schema$ResourcePathNode[];
+    }
+    /**
+     * A node within the resource path. Each node represents a resource within the resource hierarchy.
+     */
+    export interface Schema$ResourcePathNode {
+        /**
+         * The display name of the resource this node represents.
+         */
+        displayName?: string | null;
+        /**
+         * The ID of the resource this node represents.
+         */
+        id?: string | null;
+        /**
+         * The type of resource this node represents.
+         */
+        nodeType?: string | null;
+    }
     /**
      * Metadata about a ResourceValueConfig. For example, id and name.
      */
@@ -4289,6 +4806,23 @@ export declare namespace securitycenter_v1 {
          */
         name?: string | null;
     }
+    /**
+     * Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding.
+     */
+    export interface Schema$SecurityPolicy {
+        /**
+         * The name of the Google Cloud Armor security policy, for example, "my-security-policy".
+         */
+        name?: string | null;
+        /**
+         * Whether or not the associated rule or policy is in preview mode.
+         */
+        preview?: boolean | null;
+        /**
+         * The type of Google Cloud Armor security policy for example, 'backend security policy', 'edge security policy', 'network edge security policy', or 'always-on DDoS protection'.
+         */
+        type?: string | null;
+    }
     /**
      * Represents a posture that is deployed on Google Cloud by the Security Command Center Posture Management service. A posture contains one or more policy sets. A policy set is a group of policies that enforce a set of security rules on Google Cloud.
      */
@@ -4436,6 +4970,10 @@ export declare namespace securitycenter_v1 {
      * Attack path simulation
      */
     export interface Schema$Simulation {
+        /**
+         * Indicates which cloud provider was used in this simulation.
+         */
+        cloudProvider?: string | null;
         /**
          * Output only. Time simulation was created
          */
@@ -4638,6 +5176,38 @@ export declare namespace securitycenter_v1 {
          */
         securityBulletin?: Schema$SecurityBulletin;
     }
+    /**
+     * Vulnerability count by severity.
+     */
+    export interface Schema$VulnerabilityCountBySeverity {
+        /**
+         * Key is the Severity enum.
+         */
+        severityToFindingCount?: {
+            [key: string]: string;
+        } | null;
+    }
+    /**
+     * Result containing the properties and count of a VulnerabilitySnapshot request.
+     */
+    export interface Schema$VulnerabilitySnapshot {
+        /**
+         * The cloud provider for the vulnerability snapshot.
+         */
+        cloudProvider?: string | null;
+        /**
+         * The vulnerability count by severity.
+         */
+        findingCount?: Schema$VulnerabilityCountBySeverity;
+        /**
+         * Identifier. The vulnerability snapshot name. Format: //locations//vulnerabilitySnapshots/
+         */
+        name?: string | null;
+        /**
+         * The time that the snapshot was taken.
+         */
+        snapshotTime?: string | null;
+    }
     /**
      * A signature corresponding to a YARA rule.
      */