@googleapis/securitycenter 8.1.0 → 9.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/build/v1.d.ts +630 -168
- package/build/v1.js +193 -0
- package/build/v1.js.map +1 -1
- package/build/v1beta1.d.ts +313 -27
- package/build/v1beta1.js.map +1 -1
- package/build/v1beta2.d.ts +339 -53
- package/build/v1beta2.js.map +1 -1
- package/package.json +1 -1
- package/v1.ts +1184 -229
- package/v1beta1.ts +313 -27
- package/v1beta2.ts +339 -53
package/build/v1beta2.d.ts
CHANGED
|
@@ -199,7 +199,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
199
199
|
*/
|
|
200
200
|
export interface Schema$AttackExposure {
|
|
201
201
|
/**
|
|
202
|
-
* The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
|
|
202
|
+
* The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
|
|
203
203
|
*/
|
|
204
204
|
attackExposureResult?: string | null;
|
|
205
205
|
/**
|
|
@@ -279,6 +279,58 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
279
279
|
*/
|
|
280
280
|
name?: string | null;
|
|
281
281
|
}
|
|
282
|
+
/**
|
|
283
|
+
* Represents an Azure management group.
|
|
284
|
+
*/
|
|
285
|
+
export interface Schema$AzureManagementGroup {
|
|
286
|
+
/**
|
|
287
|
+
* The display name of the Azure management group.
|
|
288
|
+
*/
|
|
289
|
+
displayName?: string | null;
|
|
290
|
+
/**
|
|
291
|
+
* The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
|
|
292
|
+
*/
|
|
293
|
+
id?: string | null;
|
|
294
|
+
}
|
|
295
|
+
/**
|
|
296
|
+
* Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
|
|
297
|
+
*/
|
|
298
|
+
export interface Schema$AzureMetadata {
|
|
299
|
+
/**
|
|
300
|
+
* A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
|
|
301
|
+
*/
|
|
302
|
+
managementGroups?: Schema$AzureManagementGroup[];
|
|
303
|
+
/**
|
|
304
|
+
* The Azure resource group associated with the resource.
|
|
305
|
+
*/
|
|
306
|
+
resourceGroup?: Schema$AzureResourceGroup;
|
|
307
|
+
/**
|
|
308
|
+
* The Azure subscription associated with the resource.
|
|
309
|
+
*/
|
|
310
|
+
subscription?: Schema$AzureSubscription;
|
|
311
|
+
}
|
|
312
|
+
/**
|
|
313
|
+
* Represents an Azure resource group.
|
|
314
|
+
*/
|
|
315
|
+
export interface Schema$AzureResourceGroup {
|
|
316
|
+
/**
|
|
317
|
+
* The name of the Azure resource group. This is not a UUID.
|
|
318
|
+
*/
|
|
319
|
+
name?: string | null;
|
|
320
|
+
}
|
|
321
|
+
/**
|
|
322
|
+
* Represents an Azure subscription.
|
|
323
|
+
*/
|
|
324
|
+
export interface Schema$AzureSubscription {
|
|
325
|
+
/**
|
|
326
|
+
* The display name of the Azure subscription.
|
|
327
|
+
*/
|
|
328
|
+
displayName?: string | null;
|
|
329
|
+
/**
|
|
330
|
+
* The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
|
|
331
|
+
*/
|
|
332
|
+
id?: string | null;
|
|
333
|
+
}
|
|
282
334
|
/**
|
|
283
335
|
* Information related to Google Cloud Backup and DR Service findings.
|
|
284
336
|
*/
|
|
@@ -550,13 +602,13 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
550
602
|
*/
|
|
551
603
|
export interface Schema$ContainerThreatDetectionSettings {
|
|
552
604
|
/**
|
|
553
|
-
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
|
|
605
|
+
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
|
|
554
606
|
*/
|
|
555
607
|
modules?: {
|
|
556
608
|
[key: string]: Schema$Config;
|
|
557
609
|
} | null;
|
|
558
610
|
/**
|
|
559
|
-
* The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
611
|
+
* Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
560
612
|
*/
|
|
561
613
|
name?: string | null;
|
|
562
614
|
/**
|
|
@@ -584,6 +636,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
584
636
|
* The exploitation activity of the vulnerability in the wild.
|
|
585
637
|
*/
|
|
586
638
|
exploitationActivity?: string | null;
|
|
639
|
+
/**
|
|
640
|
+
* Date the first publicly available exploit or PoC was released.
|
|
641
|
+
*/
|
|
642
|
+
exploitReleaseDate?: string | null;
|
|
587
643
|
/**
|
|
588
644
|
* The unique identifier for the vulnerability. e.g. CVE-2021-34527
|
|
589
645
|
*/
|
|
@@ -722,6 +778,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
722
778
|
*/
|
|
723
779
|
relativePath?: string | null;
|
|
724
780
|
}
|
|
781
|
+
/**
|
|
782
|
+
* The record of a dynamic mute rule that matches the finding.
|
|
783
|
+
*/
|
|
784
|
+
export interface Schema$DynamicMuteRecord {
|
|
785
|
+
/**
|
|
786
|
+
* When the dynamic mute rule first matched the finding.
|
|
787
|
+
*/
|
|
788
|
+
matchTime?: string | null;
|
|
789
|
+
/**
|
|
790
|
+
* The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
|
|
791
|
+
*/
|
|
792
|
+
muteConfig?: string | null;
|
|
793
|
+
}
|
|
725
794
|
/**
|
|
726
795
|
* A name-value pair representing an environment variable used in an operating system process.
|
|
727
796
|
*/
|
|
@@ -740,13 +809,13 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
740
809
|
*/
|
|
741
810
|
export interface Schema$EventThreatDetectionSettings {
|
|
742
811
|
/**
|
|
743
|
-
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
|
|
812
|
+
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
|
|
744
813
|
*/
|
|
745
814
|
modules?: {
|
|
746
815
|
[key: string]: Schema$Config;
|
|
747
816
|
} | null;
|
|
748
817
|
/**
|
|
749
|
-
* The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
818
|
+
* Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
750
819
|
*/
|
|
751
820
|
name?: string | null;
|
|
752
821
|
/**
|
|
@@ -938,6 +1007,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
938
1007
|
* The class of the finding.
|
|
939
1008
|
*/
|
|
940
1009
|
findingClass?: string | null;
|
|
1010
|
+
/**
|
|
1011
|
+
* Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
|
|
1012
|
+
*/
|
|
1013
|
+
groupMemberships?: Schema$GroupMembership[];
|
|
941
1014
|
/**
|
|
942
1015
|
* Represents IAM bindings associated with the finding.
|
|
943
1016
|
*/
|
|
@@ -974,6 +1047,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
974
1047
|
* Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
|
|
975
1048
|
*/
|
|
976
1049
|
mute?: string | null;
|
|
1050
|
+
/**
|
|
1051
|
+
* Output only. The mute information regarding this finding.
|
|
1052
|
+
*/
|
|
1053
|
+
muteInfo?: Schema$MuteInfo;
|
|
977
1054
|
/**
|
|
978
1055
|
* Records additional information about the mute operation, for example, the [mute configuration](/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
|
|
979
1056
|
*/
|
|
@@ -1036,6 +1113,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1036
1113
|
* The state of the finding.
|
|
1037
1114
|
*/
|
|
1038
1115
|
state?: string | null;
|
|
1116
|
+
/**
|
|
1117
|
+
* Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
|
|
1118
|
+
*/
|
|
1119
|
+
toxicCombination?: Schema$ToxicCombination;
|
|
1039
1120
|
/**
|
|
1040
1121
|
* Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
|
|
1041
1122
|
*/
|
|
@@ -1292,6 +1373,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1292
1373
|
* The human readable name to be displayed for the mute config.
|
|
1293
1374
|
*/
|
|
1294
1375
|
displayName?: string | null;
|
|
1376
|
+
/**
|
|
1377
|
+
* Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
|
|
1378
|
+
*/
|
|
1379
|
+
expiryTime?: string | null;
|
|
1295
1380
|
/**
|
|
1296
1381
|
* Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
|
|
1297
1382
|
*/
|
|
@@ -1301,9 +1386,13 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1301
1386
|
*/
|
|
1302
1387
|
mostRecentEditor?: string | null;
|
|
1303
1388
|
/**
|
|
1304
|
-
* This field will be ignored if provided on config creation. Format
|
|
1389
|
+
* This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`
|
|
1305
1390
|
*/
|
|
1306
1391
|
name?: string | null;
|
|
1392
|
+
/**
|
|
1393
|
+
* Optional. The type of the mute config, which determines what type of mute state the config affects. The static mute state takes precedence over the dynamic mute state. Immutable after creation. STATIC by default if not set during creation.
|
|
1394
|
+
*/
|
|
1395
|
+
type?: string | null;
|
|
1307
1396
|
/**
|
|
1308
1397
|
* Output only. The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
|
|
1309
1398
|
*/
|
|
@@ -1493,6 +1582,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1493
1582
|
* The AWS metadata associated with the finding.
|
|
1494
1583
|
*/
|
|
1495
1584
|
awsMetadata?: Schema$AwsMetadata;
|
|
1585
|
+
/**
|
|
1586
|
+
* The Azure metadata associated with the finding.
|
|
1587
|
+
*/
|
|
1588
|
+
azureMetadata?: Schema$AzureMetadata;
|
|
1496
1589
|
/**
|
|
1497
1590
|
* Indicates which cloud provider the resource resides in.
|
|
1498
1591
|
*/
|
|
@@ -1538,7 +1631,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1538
1631
|
*/
|
|
1539
1632
|
resourcePath?: Schema$ResourcePath;
|
|
1540
1633
|
/**
|
|
1541
|
-
* A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
|
|
1634
|
+
* A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
|
|
1542
1635
|
*/
|
|
1543
1636
|
resourcePathString?: string | null;
|
|
1544
1637
|
/**
|
|
@@ -1560,7 +1653,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1560
1653
|
resourceTypes?: string[] | null;
|
|
1561
1654
|
}
|
|
1562
1655
|
/**
|
|
1563
|
-
* A resource value
|
|
1656
|
+
* A resource value configuration (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.
|
|
1564
1657
|
*/
|
|
1565
1658
|
export interface Schema$GoogleCloudSecuritycenterV1ResourceValueConfig {
|
|
1566
1659
|
/**
|
|
@@ -1568,25 +1661,25 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1568
1661
|
*/
|
|
1569
1662
|
cloudProvider?: string | null;
|
|
1570
1663
|
/**
|
|
1571
|
-
* Output only. Timestamp this resource value
|
|
1664
|
+
* Output only. Timestamp this resource value configuration was created.
|
|
1572
1665
|
*/
|
|
1573
1666
|
createTime?: string | null;
|
|
1574
1667
|
/**
|
|
1575
|
-
* Description of the resource value
|
|
1668
|
+
* Description of the resource value configuration.
|
|
1576
1669
|
*/
|
|
1577
1670
|
description?: string | null;
|
|
1578
1671
|
/**
|
|
1579
|
-
* Name for the resource value
|
|
1672
|
+
* Name for the resource value configuration
|
|
1580
1673
|
*/
|
|
1581
1674
|
name?: string | null;
|
|
1582
1675
|
/**
|
|
1583
|
-
* List of resource labels to search for, evaluated with AND
|
|
1676
|
+
* List of resource labels to search for, evaluated with `AND`. For example, `"resource_labels_selector": {"key": "value", "env": "prod"\}` will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
|
|
1584
1677
|
*/
|
|
1585
1678
|
resourceLabelsSelector?: {
|
|
1586
1679
|
[key: string]: string;
|
|
1587
1680
|
} | null;
|
|
1588
1681
|
/**
|
|
1589
|
-
* Apply resource_value only to resources that match resource_type. resource_type will be checked with
|
|
1682
|
+
* Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
|
|
1590
1683
|
*/
|
|
1591
1684
|
resourceType?: string | null;
|
|
1592
1685
|
/**
|
|
@@ -1594,7 +1687,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1594
1687
|
*/
|
|
1595
1688
|
resourceValue?: string | null;
|
|
1596
1689
|
/**
|
|
1597
|
-
* Project or folder to scope this
|
|
1690
|
+
* Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with `AND` of other resources.
|
|
1598
1691
|
*/
|
|
1599
1692
|
scope?: string | null;
|
|
1600
1693
|
/**
|
|
@@ -1602,11 +1695,11 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1602
1695
|
*/
|
|
1603
1696
|
sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
|
|
1604
1697
|
/**
|
|
1605
|
-
* Required. Tag values combined with AND to check against. Values in the form "tagValues/123"
|
|
1698
|
+
* Required. Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
|
|
1606
1699
|
*/
|
|
1607
1700
|
tagValues?: string[] | null;
|
|
1608
1701
|
/**
|
|
1609
|
-
* Output only. Timestamp this resource value
|
|
1702
|
+
* Output only. Timestamp this resource value configuration was last updated.
|
|
1610
1703
|
*/
|
|
1611
1704
|
updateTime?: string | null;
|
|
1612
1705
|
}
|
|
@@ -1795,7 +1888,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1795
1888
|
*/
|
|
1796
1889
|
export interface Schema$GoogleCloudSecuritycenterV2AttackExposure {
|
|
1797
1890
|
/**
|
|
1798
|
-
* The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
|
|
1891
|
+
* The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
|
|
1799
1892
|
*/
|
|
1800
1893
|
attackExposureResult?: string | null;
|
|
1801
1894
|
/**
|
|
@@ -1875,6 +1968,58 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1875
1968
|
*/
|
|
1876
1969
|
name?: string | null;
|
|
1877
1970
|
}
|
|
1971
|
+
/**
|
|
1972
|
+
* Represents an Azure management group.
|
|
1973
|
+
*/
|
|
1974
|
+
export interface Schema$GoogleCloudSecuritycenterV2AzureManagementGroup {
|
|
1975
|
+
/**
|
|
1976
|
+
* The display name of the Azure management group.
|
|
1977
|
+
*/
|
|
1978
|
+
displayName?: string | null;
|
|
1979
|
+
/**
|
|
1980
|
+
* The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
|
|
1981
|
+
*/
|
|
1982
|
+
id?: string | null;
|
|
1983
|
+
}
|
|
1984
|
+
/**
|
|
1985
|
+
* Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
|
|
1986
|
+
*/
|
|
1987
|
+
export interface Schema$GoogleCloudSecuritycenterV2AzureMetadata {
|
|
1988
|
+
/**
|
|
1989
|
+
* A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
|
|
1990
|
+
*/
|
|
1991
|
+
managementGroups?: Schema$GoogleCloudSecuritycenterV2AzureManagementGroup[];
|
|
1992
|
+
/**
|
|
1993
|
+
* The Azure resource group associated with the resource.
|
|
1994
|
+
*/
|
|
1995
|
+
resourceGroup?: Schema$GoogleCloudSecuritycenterV2AzureResourceGroup;
|
|
1996
|
+
/**
|
|
1997
|
+
* The Azure subscription associated with the resource.
|
|
1998
|
+
*/
|
|
1999
|
+
subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
|
|
2000
|
+
}
|
|
2001
|
+
/**
|
|
2002
|
+
* Represents an Azure resource group.
|
|
2003
|
+
*/
|
|
2004
|
+
export interface Schema$GoogleCloudSecuritycenterV2AzureResourceGroup {
|
|
2005
|
+
/**
|
|
2006
|
+
* The name of the Azure resource group. This is not a UUID.
|
|
2007
|
+
*/
|
|
2008
|
+
name?: string | null;
|
|
2009
|
+
}
|
|
2010
|
+
/**
|
|
2011
|
+
* Represents an Azure subscription.
|
|
2012
|
+
*/
|
|
2013
|
+
export interface Schema$GoogleCloudSecuritycenterV2AzureSubscription {
|
|
2014
|
+
/**
|
|
2015
|
+
* The display name of the Azure subscription.
|
|
2016
|
+
*/
|
|
2017
|
+
displayName?: string | null;
|
|
2018
|
+
/**
|
|
2019
|
+
* The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
|
|
2020
|
+
*/
|
|
2021
|
+
id?: string | null;
|
|
2022
|
+
}
|
|
1878
2023
|
/**
|
|
1879
2024
|
* Information related to Google Cloud Backup and DR Service findings.
|
|
1880
2025
|
*/
|
|
@@ -1929,7 +2074,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1929
2074
|
*/
|
|
1930
2075
|
createTime?: string | null;
|
|
1931
2076
|
/**
|
|
1932
|
-
* The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery
|
|
2077
|
+
* The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
|
|
1933
2078
|
*/
|
|
1934
2079
|
dataset?: string | null;
|
|
1935
2080
|
/**
|
|
@@ -1945,7 +2090,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
1945
2090
|
*/
|
|
1946
2091
|
mostRecentEditor?: string | null;
|
|
1947
2092
|
/**
|
|
1948
|
-
* The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
|
|
2093
|
+
* Identifier. The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
|
|
1949
2094
|
*/
|
|
1950
2095
|
name?: string | null;
|
|
1951
2096
|
/**
|
|
@@ -2164,6 +2309,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2164
2309
|
* The exploitation activity of the vulnerability in the wild.
|
|
2165
2310
|
*/
|
|
2166
2311
|
exploitationActivity?: string | null;
|
|
2312
|
+
/**
|
|
2313
|
+
* Date the first publicly available exploit or PoC was released.
|
|
2314
|
+
*/
|
|
2315
|
+
exploitReleaseDate?: string | null;
|
|
2167
2316
|
/**
|
|
2168
2317
|
* The unique identifier for the vulnerability. e.g. CVE-2021-34527
|
|
2169
2318
|
*/
|
|
@@ -2285,6 +2434,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2285
2434
|
*/
|
|
2286
2435
|
relativePath?: string | null;
|
|
2287
2436
|
}
|
|
2437
|
+
/**
|
|
2438
|
+
* The record of a dynamic mute rule that matches the finding.
|
|
2439
|
+
*/
|
|
2440
|
+
export interface Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord {
|
|
2441
|
+
/**
|
|
2442
|
+
* When the dynamic mute rule first matched the finding.
|
|
2443
|
+
*/
|
|
2444
|
+
matchTime?: string | null;
|
|
2445
|
+
/**
|
|
2446
|
+
* The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
|
|
2447
|
+
*/
|
|
2448
|
+
muteConfig?: string | null;
|
|
2449
|
+
}
|
|
2288
2450
|
/**
|
|
2289
2451
|
* A name-value pair representing an environment variable used in an operating system process.
|
|
2290
2452
|
*/
|
|
@@ -2506,6 +2668,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2506
2668
|
* The class of the finding.
|
|
2507
2669
|
*/
|
|
2508
2670
|
findingClass?: string | null;
|
|
2671
|
+
/**
|
|
2672
|
+
* Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
|
|
2673
|
+
*/
|
|
2674
|
+
groupMemberships?: Schema$GoogleCloudSecuritycenterV2GroupMembership[];
|
|
2509
2675
|
/**
|
|
2510
2676
|
* Represents IAM bindings associated with the finding.
|
|
2511
2677
|
*/
|
|
@@ -2542,6 +2708,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2542
2708
|
* Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
|
|
2543
2709
|
*/
|
|
2544
2710
|
mute?: string | null;
|
|
2711
|
+
/**
|
|
2712
|
+
* Output only. The mute information regarding this finding.
|
|
2713
|
+
*/
|
|
2714
|
+
muteInfo?: Schema$GoogleCloudSecuritycenterV2MuteInfo;
|
|
2545
2715
|
/**
|
|
2546
2716
|
* Records additional information about the mute operation, for example, the [mute configuration](https://cloud.google.com/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
|
|
2547
2717
|
*/
|
|
@@ -2604,6 +2774,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2604
2774
|
* Output only. The state of the finding.
|
|
2605
2775
|
*/
|
|
2606
2776
|
state?: string | null;
|
|
2777
|
+
/**
|
|
2778
|
+
* Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
|
|
2779
|
+
*/
|
|
2780
|
+
toxicCombination?: Schema$GoogleCloudSecuritycenterV2ToxicCombination;
|
|
2607
2781
|
/**
|
|
2608
2782
|
* Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
|
|
2609
2783
|
*/
|
|
@@ -2631,6 +2805,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2631
2805
|
*/
|
|
2632
2806
|
regionCode?: string | null;
|
|
2633
2807
|
}
|
|
2808
|
+
/**
|
|
2809
|
+
* Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
|
|
2810
|
+
*/
|
|
2811
|
+
export interface Schema$GoogleCloudSecuritycenterV2GroupMembership {
|
|
2812
|
+
/**
|
|
2813
|
+
* ID of the group.
|
|
2814
|
+
*/
|
|
2815
|
+
groupId?: string | null;
|
|
2816
|
+
/**
|
|
2817
|
+
* Type of group.
|
|
2818
|
+
*/
|
|
2819
|
+
groupType?: string | null;
|
|
2820
|
+
}
|
|
2634
2821
|
/**
|
|
2635
2822
|
* Represents a particular IAM binding, which captures a member's role addition, removal, or state.
|
|
2636
2823
|
*/
|
|
@@ -2824,6 +3011,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2824
3011
|
* A description of the mute config.
|
|
2825
3012
|
*/
|
|
2826
3013
|
description?: string | null;
|
|
3014
|
+
/**
|
|
3015
|
+
* Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
|
|
3016
|
+
*/
|
|
3017
|
+
expiryTime?: string | null;
|
|
2827
3018
|
/**
|
|
2828
3019
|
* Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
|
|
2829
3020
|
*/
|
|
@@ -2833,7 +3024,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2833
3024
|
*/
|
|
2834
3025
|
mostRecentEditor?: string | null;
|
|
2835
3026
|
/**
|
|
2836
|
-
* This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
|
|
3027
|
+
* Identifier. This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
|
|
2837
3028
|
*/
|
|
2838
3029
|
name?: string | null;
|
|
2839
3030
|
/**
|
|
@@ -2845,6 +3036,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
2845
3036
|
*/
|
|
2846
3037
|
updateTime?: string | null;
|
|
2847
3038
|
}
|
|
3039
|
+
/**
|
|
3040
|
+
* Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
|
|
3041
|
+
*/
|
|
3042
|
+
export interface Schema$GoogleCloudSecuritycenterV2MuteInfo {
|
|
3043
|
+
/**
|
|
3044
|
+
* The list of dynamic mute rules that currently match the finding.
|
|
3045
|
+
*/
|
|
3046
|
+
dynamicMuteRecords?: Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord[];
|
|
3047
|
+
/**
|
|
3048
|
+
* If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
|
|
3049
|
+
*/
|
|
3050
|
+
staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
|
|
3051
|
+
}
|
|
2848
3052
|
/**
|
|
2849
3053
|
* Kubernetes nodes associated with the finding.
|
|
2850
3054
|
*/
|
|
@@ -3102,6 +3306,10 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3102
3306
|
* The AWS metadata associated with the finding.
|
|
3103
3307
|
*/
|
|
3104
3308
|
awsMetadata?: Schema$GoogleCloudSecuritycenterV2AwsMetadata;
|
|
3309
|
+
/**
|
|
3310
|
+
* The Azure metadata associated with the finding.
|
|
3311
|
+
*/
|
|
3312
|
+
azureMetadata?: Schema$GoogleCloudSecuritycenterV2AzureMetadata;
|
|
3105
3313
|
/**
|
|
3106
3314
|
* Indicates which cloud provider the finding is from.
|
|
3107
3315
|
*/
|
|
@@ -3127,7 +3335,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3127
3335
|
*/
|
|
3128
3336
|
resourcePath?: Schema$GoogleCloudSecuritycenterV2ResourcePath;
|
|
3129
3337
|
/**
|
|
3130
|
-
* A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
|
|
3338
|
+
* A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
|
|
3131
3339
|
*/
|
|
3132
3340
|
resourcePathString?: string | null;
|
|
3133
3341
|
/**
|
|
@@ -3166,7 +3374,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3166
3374
|
nodeType?: string | null;
|
|
3167
3375
|
}
|
|
3168
3376
|
/**
|
|
3169
|
-
* A resource value
|
|
3377
|
+
* A resource value configuration (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.
|
|
3170
3378
|
*/
|
|
3171
3379
|
export interface Schema$GoogleCloudSecuritycenterV2ResourceValueConfig {
|
|
3172
3380
|
/**
|
|
@@ -3174,33 +3382,33 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3174
3382
|
*/
|
|
3175
3383
|
cloudProvider?: string | null;
|
|
3176
3384
|
/**
|
|
3177
|
-
* Output only. Timestamp this resource value
|
|
3385
|
+
* Output only. Timestamp this resource value configuration was created.
|
|
3178
3386
|
*/
|
|
3179
3387
|
createTime?: string | null;
|
|
3180
3388
|
/**
|
|
3181
|
-
* Description of the resource value
|
|
3389
|
+
* Description of the resource value configuration.
|
|
3182
3390
|
*/
|
|
3183
3391
|
description?: string | null;
|
|
3184
3392
|
/**
|
|
3185
|
-
* Name for the resource value
|
|
3393
|
+
* Identifier. Name for the resource value configuration
|
|
3186
3394
|
*/
|
|
3187
3395
|
name?: string | null;
|
|
3188
3396
|
/**
|
|
3189
|
-
* List of resource labels to search for, evaluated with AND
|
|
3397
|
+
* List of resource labels to search for, evaluated with `AND`. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
|
|
3190
3398
|
*/
|
|
3191
3399
|
resourceLabelsSelector?: {
|
|
3192
3400
|
[key: string]: string;
|
|
3193
3401
|
} | null;
|
|
3194
3402
|
/**
|
|
3195
|
-
* Apply resource_value only to resources that match resource_type. resource_type will be checked with
|
|
3403
|
+
* Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
|
|
3196
3404
|
*/
|
|
3197
3405
|
resourceType?: string | null;
|
|
3198
3406
|
/**
|
|
3199
|
-
* Resource value level this expression represents Only required when there is no
|
|
3407
|
+
* Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request
|
|
3200
3408
|
*/
|
|
3201
3409
|
resourceValue?: string | null;
|
|
3202
3410
|
/**
|
|
3203
|
-
* Project or folder to scope this
|
|
3411
|
+
* Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with `AND` of other resources.
|
|
3204
3412
|
*/
|
|
3205
3413
|
scope?: string | null;
|
|
3206
3414
|
/**
|
|
@@ -3208,11 +3416,11 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3208
3416
|
*/
|
|
3209
3417
|
sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping;
|
|
3210
3418
|
/**
|
|
3211
|
-
*
|
|
3419
|
+
* Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
|
|
3212
3420
|
*/
|
|
3213
3421
|
tagValues?: string[] | null;
|
|
3214
3422
|
/**
|
|
3215
|
-
* Output only. Timestamp this resource value
|
|
3423
|
+
* Output only. Timestamp this resource value configuration was last updated.
|
|
3216
3424
|
*/
|
|
3217
3425
|
updateTime?: string | null;
|
|
3218
3426
|
}
|
|
@@ -3349,6 +3557,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3349
3557
|
*/
|
|
3350
3558
|
principalSubject?: string | null;
|
|
3351
3559
|
}
|
|
3560
|
+
/**
|
|
3561
|
+
* Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
|
|
3562
|
+
*/
|
|
3563
|
+
export interface Schema$GoogleCloudSecuritycenterV2StaticMute {
|
|
3564
|
+
/**
|
|
3565
|
+
* When the static mute was applied.
|
|
3566
|
+
*/
|
|
3567
|
+
applyTime?: string | null;
|
|
3568
|
+
/**
|
|
3569
|
+
* The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
|
|
3570
|
+
*/
|
|
3571
|
+
state?: string | null;
|
|
3572
|
+
}
|
|
3352
3573
|
/**
|
|
3353
3574
|
* Represents a Kubernetes subject.
|
|
3354
3575
|
*/
|
|
@@ -3395,6 +3616,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3395
3616
|
*/
|
|
3396
3617
|
uri?: string | null;
|
|
3397
3618
|
}
|
|
3619
|
+
/**
|
|
3620
|
+
* Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
|
|
3621
|
+
*/
|
|
3622
|
+
export interface Schema$GoogleCloudSecuritycenterV2ToxicCombination {
|
|
3623
|
+
/**
|
|
3624
|
+
* The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
|
|
3625
|
+
*/
|
|
3626
|
+
attackExposureScore?: number | null;
|
|
3627
|
+
/**
|
|
3628
|
+
* List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
|
|
3629
|
+
*/
|
|
3630
|
+
relatedFindings?: string[] | null;
|
|
3631
|
+
}
|
|
3398
3632
|
/**
|
|
3399
3633
|
* Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
|
|
3400
3634
|
*/
|
|
@@ -3425,6 +3659,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3425
3659
|
*/
|
|
3426
3660
|
yaraRule?: string | null;
|
|
3427
3661
|
}
|
|
3662
|
+
/**
|
|
3663
|
+
* Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
|
|
3664
|
+
*/
|
|
3665
|
+
export interface Schema$GroupMembership {
|
|
3666
|
+
/**
|
|
3667
|
+
* ID of the group.
|
|
3668
|
+
*/
|
|
3669
|
+
groupId?: string | null;
|
|
3670
|
+
/**
|
|
3671
|
+
* Type of group.
|
|
3672
|
+
*/
|
|
3673
|
+
groupType?: string | null;
|
|
3674
|
+
}
|
|
3428
3675
|
/**
|
|
3429
3676
|
* Represents a particular IAM binding, which captures a member's role addition, removal, or state.
|
|
3430
3677
|
*/
|
|
@@ -3606,6 +3853,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3606
3853
|
*/
|
|
3607
3854
|
version?: string | null;
|
|
3608
3855
|
}
|
|
3856
|
+
/**
|
|
3857
|
+
* Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
|
|
3858
|
+
*/
|
|
3859
|
+
export interface Schema$MuteInfo {
|
|
3860
|
+
/**
|
|
3861
|
+
* The list of dynamic mute rules that currently match the finding.
|
|
3862
|
+
*/
|
|
3863
|
+
dynamicMuteRecords?: Schema$DynamicMuteRecord[];
|
|
3864
|
+
/**
|
|
3865
|
+
* If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
|
|
3866
|
+
*/
|
|
3867
|
+
staticMute?: Schema$StaticMute;
|
|
3868
|
+
}
|
|
3609
3869
|
/**
|
|
3610
3870
|
* Kubernetes nodes associated with the finding.
|
|
3611
3871
|
*/
|
|
@@ -3947,13 +4207,13 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
3947
4207
|
*/
|
|
3948
4208
|
export interface Schema$SecurityHealthAnalyticsSettings {
|
|
3949
4209
|
/**
|
|
3950
|
-
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
|
|
4210
|
+
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
|
|
3951
4211
|
*/
|
|
3952
4212
|
modules?: {
|
|
3953
4213
|
[key: string]: Schema$Config;
|
|
3954
4214
|
} | null;
|
|
3955
4215
|
/**
|
|
3956
|
-
* The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
4216
|
+
* Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
3957
4217
|
*/
|
|
3958
4218
|
name?: string | null;
|
|
3959
4219
|
/**
|
|
@@ -4055,6 +4315,19 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4055
4315
|
*/
|
|
4056
4316
|
principalSubject?: string | null;
|
|
4057
4317
|
}
|
|
4318
|
+
/**
|
|
4319
|
+
* Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
|
|
4320
|
+
*/
|
|
4321
|
+
export interface Schema$StaticMute {
|
|
4322
|
+
/**
|
|
4323
|
+
* When the static mute was applied.
|
|
4324
|
+
*/
|
|
4325
|
+
applyTime?: string | null;
|
|
4326
|
+
/**
|
|
4327
|
+
* The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
|
|
4328
|
+
*/
|
|
4329
|
+
state?: string | null;
|
|
4330
|
+
}
|
|
4058
4331
|
/**
|
|
4059
4332
|
* Represents a Kubernetes subject.
|
|
4060
4333
|
*/
|
|
@@ -4118,18 +4391,31 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4118
4391
|
*/
|
|
4119
4392
|
uri?: string | null;
|
|
4120
4393
|
}
|
|
4394
|
+
/**
|
|
4395
|
+
* Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
|
|
4396
|
+
*/
|
|
4397
|
+
export interface Schema$ToxicCombination {
|
|
4398
|
+
/**
|
|
4399
|
+
* The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
|
|
4400
|
+
*/
|
|
4401
|
+
attackExposureScore?: number | null;
|
|
4402
|
+
/**
|
|
4403
|
+
* List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
|
|
4404
|
+
*/
|
|
4405
|
+
relatedFindings?: string[] | null;
|
|
4406
|
+
}
|
|
4121
4407
|
/**
|
|
4122
4408
|
* Resource capturing the settings for the Virtual Machine Threat Detection service.
|
|
4123
4409
|
*/
|
|
4124
4410
|
export interface Schema$VirtualMachineThreatDetectionSettings {
|
|
4125
4411
|
/**
|
|
4126
|
-
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
|
|
4412
|
+
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
|
|
4127
4413
|
*/
|
|
4128
4414
|
modules?: {
|
|
4129
4415
|
[key: string]: Schema$Config;
|
|
4130
4416
|
} | null;
|
|
4131
4417
|
/**
|
|
4132
|
-
* The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
4418
|
+
* Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
4133
4419
|
*/
|
|
4134
4420
|
name?: string | null;
|
|
4135
4421
|
/**
|
|
@@ -4203,13 +4489,13 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4203
4489
|
*/
|
|
4204
4490
|
export interface Schema$WebSecurityScannerSettings {
|
|
4205
4491
|
/**
|
|
4206
|
-
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
|
|
4492
|
+
* The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
|
|
4207
4493
|
*/
|
|
4208
4494
|
modules?: {
|
|
4209
4495
|
[key: string]: Schema$Config;
|
|
4210
4496
|
} | null;
|
|
4211
4497
|
/**
|
|
4212
|
-
* The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
4498
|
+
* Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
4213
4499
|
*/
|
|
4214
4500
|
name?: string | null;
|
|
4215
4501
|
/**
|
|
@@ -4466,7 +4752,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4466
4752
|
}
|
|
4467
4753
|
export interface Params$Resource$Folders$Updatecontainerthreatdetectionsettings extends StandardParameters {
|
|
4468
4754
|
/**
|
|
4469
|
-
* The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
4755
|
+
* Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
4470
4756
|
*/
|
|
4471
4757
|
name?: string;
|
|
4472
4758
|
/**
|
|
@@ -4480,7 +4766,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4480
4766
|
}
|
|
4481
4767
|
export interface Params$Resource$Folders$Updateeventthreatdetectionsettings extends StandardParameters {
|
|
4482
4768
|
/**
|
|
4483
|
-
* The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
4769
|
+
* Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
4484
4770
|
*/
|
|
4485
4771
|
name?: string;
|
|
4486
4772
|
/**
|
|
@@ -4508,7 +4794,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4508
4794
|
}
|
|
4509
4795
|
export interface Params$Resource$Folders$Updatesecurityhealthanalyticssettings extends StandardParameters {
|
|
4510
4796
|
/**
|
|
4511
|
-
* The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
4797
|
+
* Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
4512
4798
|
*/
|
|
4513
4799
|
name?: string;
|
|
4514
4800
|
/**
|
|
@@ -4522,7 +4808,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4522
4808
|
}
|
|
4523
4809
|
export interface Params$Resource$Folders$Updatevirtualmachinethreatdetectionsettings extends StandardParameters {
|
|
4524
4810
|
/**
|
|
4525
|
-
* The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
4811
|
+
* Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
4526
4812
|
*/
|
|
4527
4813
|
name?: string;
|
|
4528
4814
|
/**
|
|
@@ -4536,7 +4822,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4536
4822
|
}
|
|
4537
4823
|
export interface Params$Resource$Folders$Updatewebsecurityscannersettings extends StandardParameters {
|
|
4538
4824
|
/**
|
|
4539
|
-
* The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
4825
|
+
* Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
4540
4826
|
*/
|
|
4541
4827
|
name?: string;
|
|
4542
4828
|
/**
|
|
@@ -4948,7 +5234,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4948
5234
|
}
|
|
4949
5235
|
export interface Params$Resource$Organizations$Updatecontainerthreatdetectionsettings extends StandardParameters {
|
|
4950
5236
|
/**
|
|
4951
|
-
* The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
5237
|
+
* Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
4952
5238
|
*/
|
|
4953
5239
|
name?: string;
|
|
4954
5240
|
/**
|
|
@@ -4962,7 +5248,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4962
5248
|
}
|
|
4963
5249
|
export interface Params$Resource$Organizations$Updateeventthreatdetectionsettings extends StandardParameters {
|
|
4964
5250
|
/**
|
|
4965
|
-
* The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
5251
|
+
* Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
4966
5252
|
*/
|
|
4967
5253
|
name?: string;
|
|
4968
5254
|
/**
|
|
@@ -4990,7 +5276,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
4990
5276
|
}
|
|
4991
5277
|
export interface Params$Resource$Organizations$Updatesecurityhealthanalyticssettings extends StandardParameters {
|
|
4992
5278
|
/**
|
|
4993
|
-
* The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
5279
|
+
* Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
4994
5280
|
*/
|
|
4995
5281
|
name?: string;
|
|
4996
5282
|
/**
|
|
@@ -5004,7 +5290,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5004
5290
|
}
|
|
5005
5291
|
export interface Params$Resource$Organizations$Updatevirtualmachinethreatdetectionsettings extends StandardParameters {
|
|
5006
5292
|
/**
|
|
5007
|
-
* The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
5293
|
+
* Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
5008
5294
|
*/
|
|
5009
5295
|
name?: string;
|
|
5010
5296
|
/**
|
|
@@ -5018,7 +5304,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5018
5304
|
}
|
|
5019
5305
|
export interface Params$Resource$Organizations$Updatewebsecurityscannersettings extends StandardParameters {
|
|
5020
5306
|
/**
|
|
5021
|
-
* The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
5307
|
+
* Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
5022
5308
|
*/
|
|
5023
5309
|
name?: string;
|
|
5024
5310
|
/**
|
|
@@ -5411,7 +5697,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5411
5697
|
}
|
|
5412
5698
|
export interface Params$Resource$Projects$Updatecontainerthreatdetectionsettings extends StandardParameters {
|
|
5413
5699
|
/**
|
|
5414
|
-
* The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
5700
|
+
* Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
5415
5701
|
*/
|
|
5416
5702
|
name?: string;
|
|
5417
5703
|
/**
|
|
@@ -5425,7 +5711,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5425
5711
|
}
|
|
5426
5712
|
export interface Params$Resource$Projects$Updateeventthreatdetectionsettings extends StandardParameters {
|
|
5427
5713
|
/**
|
|
5428
|
-
* The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
5714
|
+
* Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
|
|
5429
5715
|
*/
|
|
5430
5716
|
name?: string;
|
|
5431
5717
|
/**
|
|
@@ -5453,7 +5739,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5453
5739
|
}
|
|
5454
5740
|
export interface Params$Resource$Projects$Updatesecurityhealthanalyticssettings extends StandardParameters {
|
|
5455
5741
|
/**
|
|
5456
|
-
* The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
5742
|
+
* Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
|
|
5457
5743
|
*/
|
|
5458
5744
|
name?: string;
|
|
5459
5745
|
/**
|
|
@@ -5467,7 +5753,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5467
5753
|
}
|
|
5468
5754
|
export interface Params$Resource$Projects$Updatevirtualmachinethreatdetectionsettings extends StandardParameters {
|
|
5469
5755
|
/**
|
|
5470
|
-
* The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
5756
|
+
* Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
|
|
5471
5757
|
*/
|
|
5472
5758
|
name?: string;
|
|
5473
5759
|
/**
|
|
@@ -5481,7 +5767,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5481
5767
|
}
|
|
5482
5768
|
export interface Params$Resource$Projects$Updatewebsecurityscannersettings extends StandardParameters {
|
|
5483
5769
|
/**
|
|
5484
|
-
* The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
5770
|
+
* Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
|
|
5485
5771
|
*/
|
|
5486
5772
|
name?: string;
|
|
5487
5773
|
/**
|
|
@@ -5587,7 +5873,7 @@ export declare namespace securitycenter_v1beta2 {
|
|
|
5587
5873
|
}
|
|
5588
5874
|
export interface Params$Resource$Projects$Locations$Clusters$Updatecontainerthreatdetectionsettings extends StandardParameters {
|
|
5589
5875
|
/**
|
|
5590
|
-
* The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
5876
|
+
* Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
|
|
5591
5877
|
*/
|
|
5592
5878
|
name?: string;
|
|
5593
5879
|
/**
|