@googleapis/securitycenter 8.2.0 → 9.1.0

package/v1beta1.ts

@@ -292,7 +292,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$AttackExposure {
     /**
-     * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
+     * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
      */
     attackExposureResult?: string | null;
     /**
@@ -398,6 +398,71 @@ export namespace securitycenter_v1beta1 {
      */
     name?: string | null;
   }
+  /**
+   * Represents an Azure management group.
+   */
+  export interface Schema$AzureManagementGroup {
+    /**
+     * The display name of the Azure management group.
+     */
+    displayName?: string | null;
+    /**
+     * The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
+     */
+    id?: string | null;
+  }
+  /**
+   * Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
+   */
+  export interface Schema$AzureMetadata {
+    /**
+     * A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
+     */
+    managementGroups?: Schema$AzureManagementGroup[];
+    /**
+     * The Azure resource group associated with the resource.
+     */
+    resourceGroup?: Schema$AzureResourceGroup;
+    /**
+     * The Azure subscription associated with the resource.
+     */
+    subscription?: Schema$AzureSubscription;
+    /**
+     * The Azure Entra tenant associated with the resource.
+     */
+    tenant?: Schema$AzureTenant;
+  }
+  /**
+   * Represents an Azure resource group.
+   */
+  export interface Schema$AzureResourceGroup {
+    /**
+     * The name of the Azure resource group. This is not a UUID.
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an Azure subscription.
+   */
+  export interface Schema$AzureSubscription {
+    /**
+     * The display name of the Azure subscription.
+     */
+    displayName?: string | null;
+    /**
+     * The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
+     */
+    id?: string | null;
+  }
+  /**
+   * Represents a Microsoft Entra tenant.
+   */
+  export interface Schema$AzureTenant {
+    /**
+     * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+     */
+    id?: string | null;
+  }
   /**
    * Information related to Google Cloud Backup and DR Service findings.
    */
@@ -682,6 +747,14 @@ export namespace securitycenter_v1beta1 {
      * The exploitation activity of the vulnerability in the wild.
      */
     exploitationActivity?: string | null;
+    /**
+     * Date the first publicly available exploit or PoC was released.
+     */
+    exploitReleaseDate?: string | null;
+    /**
+     * Date of the earliest known exploitation.
+     */
+    firstExploitationDate?: string | null;
     /**
      * The unique identifier for the vulnerability. e.g. CVE-2021-34527
      */
@@ -748,6 +821,27 @@ export namespace securitycenter_v1beta1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+   */
+  export interface Schema$DataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+  }
   /**
    * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
    */
@@ -777,6 +871,31 @@ export namespace securitycenter_v1beta1 {
      */
     version?: string | null;
   }
+  /**
+   * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+   */
+  export interface Schema$DataFlowEvent {
+    /**
+     * Unique identifier for data flow event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data flow event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal for the data flow event.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+    /**
+     * Non-compliant location of the principal or the data destination.
+     */
+    violatedLocation?: string | null;
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -803,6 +922,19 @@ export namespace securitycenter_v1beta1 {
      */
     relativePath?: string | null;
   }
+  /**
+   * The record of a dynamic mute rule that matches the finding.
+   */
+  export interface Schema$DynamicMuteRecord {
+    /**
+     * When the dynamic mute rule first matched the finding.
+     */
+    matchTime?: string | null;
+    /**
+     * The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
+     */
+    muteConfig?: string | null;
+  }
   /**
    * A generic empty message that you can re-use to avoid defining duplicated empty messages in your APIs. A typical example is to use it as the request or the response type of an API method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns (google.protobuf.Empty); \}
    */
@@ -964,10 +1096,18 @@ export namespace securitycenter_v1beta1 {
      * The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Data access events associated with the finding.
+     */
+    dataAccessEvents?: Schema$DataAccessEvent[];
     /**
      * Database associated with the finding.
      */
     database?: Schema$Database;
+    /**
+     * Data flow events associated with the finding.
+     */
+    dataFlowEvents?: Schema$DataFlowEvent[];
     /**
      * Contains more details about the finding.
      */
@@ -998,6 +1138,10 @@ export namespace securitycenter_v1beta1 {
      * The class of the finding.
      */
     findingClass?: string | null;
+    /**
+     * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
+     */
+    groupMemberships?: Schema$GroupMembership[];
     /**
      * Represents IAM bindings associated with the finding.
      */
@@ -1034,6 +1178,10 @@ export namespace securitycenter_v1beta1 {
      * Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
      */
     mute?: string | null;
+    /**
+     * Output only. The mute information regarding this finding.
+     */
+    muteInfo?: Schema$MuteInfo;
     /**
      * Records additional information about the mute operation, for example, the [mute configuration](/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
      */
@@ -1094,6 +1242,10 @@ export namespace securitycenter_v1beta1 {
      * The state of the finding.
      */
     state?: string | null;
+    /**
+     * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
+     */
+    toxicCombination?: Schema$ToxicCombination;
     /**
      * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
@@ -1425,6 +1577,10 @@ export namespace securitycenter_v1beta1 {
      * The human readable name to be displayed for the mute config.
      */
     displayName?: string | null;
+    /**
+     * Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
+     */
+    expiryTime?: string | null;
     /**
      * Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
      */
@@ -1434,9 +1590,13 @@ export namespace securitycenter_v1beta1 {
      */
     mostRecentEditor?: string | null;
     /**
-     * This field will be ignored if provided on config creation. Format "organizations/{organization\}/muteConfigs/{mute_config\}" "folders/{folder\}/muteConfigs/{mute_config\}" "projects/{project\}/muteConfigs/{mute_config\}" "organizations/{organization\}/locations/global/muteConfigs/{mute_config\}" "folders/{folder\}/locations/global/muteConfigs/{mute_config\}" "projects/{project\}/locations/global/muteConfigs/{mute_config\}"
+     * This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`
      */
     name?: string | null;
+    /**
+     * Optional. The type of the mute config, which determines what type of mute state the config affects. The static mute state takes precedence over the dynamic mute state. Immutable after creation. STATIC by default if not set during creation.
+     */
+    type?: string | null;
     /**
      * Output only. The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
      */
@@ -1622,6 +1782,10 @@ export namespace securitycenter_v1beta1 {
      * The AWS metadata associated with the finding.
      */
     awsMetadata?: Schema$AwsMetadata;
+    /**
+     * The Azure metadata associated with the finding.
+     */
+    azureMetadata?: Schema$AzureMetadata;
     /**
      * Indicates which cloud provider the resource resides in.
      */
@@ -1667,7 +1831,7 @@ export namespace securitycenter_v1beta1 {
      */
     resourcePath?: Schema$ResourcePath;
     /**
-     * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
+     * A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
      */
     resourcePathString?: string | null;
     /**
@@ -1709,11 +1873,11 @@ export namespace securitycenter_v1beta1 {
      */
     name?: string | null;
     /**
-     * List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
+     * List of resource labels to search for, evaluated with `AND`. For example, `"resource_labels_selector": {"key": "value", "env": "prod"\}` will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
      */
     resourceLabelsSelector?: {[key: string]: string} | null;
     /**
-     * Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
+     * Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
      */
     resourceType?: string | null;
     /**
@@ -1721,7 +1885,7 @@ export namespace securitycenter_v1beta1 {
      */
     resourceValue?: string | null;
     /**
-     * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with AND of other resources.
+     * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with `AND` of other resources.
      */
     scope?: string | null;
     /**
@@ -1729,7 +1893,7 @@ export namespace securitycenter_v1beta1 {
      */
     sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
     /**
-     * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
+     * Required. Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
      */
     tagValues?: string[] | null;
     /**
@@ -1922,7 +2086,7 @@ export namespace securitycenter_v1beta1 {
    */
   export interface Schema$GoogleCloudSecuritycenterV2AttackExposure {
     /**
-     * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
+     * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
      */
     attackExposureResult?: string | null;
     /**
@@ -2002,6 +2166,71 @@ export namespace securitycenter_v1beta1 {
      */
     name?: string | null;
   }
+  /**
+   * Represents an Azure management group.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AzureManagementGroup {
+    /**
+     * The display name of the Azure management group.
+     */
+    displayName?: string | null;
+    /**
+     * The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
+     */
+    id?: string | null;
+  }
+  /**
+   * Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AzureMetadata {
+    /**
+     * A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
+     */
+    managementGroups?: Schema$GoogleCloudSecuritycenterV2AzureManagementGroup[];
+    /**
+     * The Azure resource group associated with the resource.
+     */
+    resourceGroup?: Schema$GoogleCloudSecuritycenterV2AzureResourceGroup;
+    /**
+     * The Azure subscription associated with the resource.
+     */
+    subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
+    /**
+     * The Azure Entra tenant associated with the resource.
+     */
+    tenant?: Schema$GoogleCloudSecuritycenterV2AzureTenant;
+  }
+  /**
+   * Represents an Azure resource group.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AzureResourceGroup {
+    /**
+     * The name of the Azure resource group. This is not a UUID.
+     */
+    name?: string | null;
+  }
+  /**
+   * Represents an Azure subscription.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AzureSubscription {
+    /**
+     * The display name of the Azure subscription.
+     */
+    displayName?: string | null;
+    /**
+     * The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
+     */
+    id?: string | null;
+  }
+  /**
+   * Represents a Microsoft Entra tenant.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
+    /**
+     * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+     */
+    id?: string | null;
+  }
   /**
    * Information related to Google Cloud Backup and DR Service findings.
    */
@@ -2056,7 +2285,7 @@ export namespace securitycenter_v1beta1 {
      */
     createTime?: string | null;
     /**
-     * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
+     * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
      */
     dataset?: string | null;
     /**
@@ -2072,7 +2301,7 @@ export namespace securitycenter_v1beta1 {
      */
     mostRecentEditor?: string | null;
     /**
-     * The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
+     * Identifier. The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
      */
     name?: string | null;
     /**
@@ -2290,6 +2519,14 @@ export namespace securitycenter_v1beta1 {
      * The exploitation activity of the vulnerability in the wild.
      */
     exploitationActivity?: string | null;
+    /**
+     * Date the first publicly available exploit or PoC was released.
+     */
+    exploitReleaseDate?: string | null;
+    /**
+     * Date of the earliest known exploitation.
+     */
+    firstExploitationDate?: string | null;
     /**
      * The unique identifier for the vulnerability. e.g. CVE-2021-34527
      */
@@ -2356,6 +2593,27 @@ export namespace securitycenter_v1beta1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+  }
   /**
    * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
    */
@@ -2385,6 +2643,31 @@ export namespace securitycenter_v1beta1 {
      */
     version?: string | null;
   }
+  /**
+   * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DataFlowEvent {
+    /**
+     * Unique identifier for data flow event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data flow event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal for the data flow event.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+    /**
+     * Non-compliant location of the principal or the data destination.
+     */
+    violatedLocation?: string | null;
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -2411,6 +2694,19 @@ export namespace securitycenter_v1beta1 {
      */
     relativePath?: string | null;
   }
+  /**
+   * The record of a dynamic mute rule that matches the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord {
+    /**
+     * When the dynamic mute rule first matched the finding.
+     */
+    matchTime?: string | null;
+    /**
+     * The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
+     */
+    muteConfig?: string | null;
+  }
   /**
    * A name-value pair representing an environment variable used in an operating system process.
    */
@@ -2598,10 +2894,18 @@ export namespace securitycenter_v1beta1 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Data access events associated with the finding.
+     */
+    dataAccessEvents?: Schema$GoogleCloudSecuritycenterV2DataAccessEvent[];
     /**
      * Database associated with the finding.
      */
     database?: Schema$GoogleCloudSecuritycenterV2Database;
+    /**
+     * Data flow events associated with the finding.
+     */
+    dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
     /**
      * Contains more details about the finding.
      */
@@ -2632,6 +2936,10 @@ export namespace securitycenter_v1beta1 {
      * The class of the finding.
      */
     findingClass?: string | null;
+    /**
+     * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
+     */
+    groupMemberships?: Schema$GoogleCloudSecuritycenterV2GroupMembership[];
     /**
      * Represents IAM bindings associated with the finding.
      */
@@ -2668,6 +2976,10 @@ export namespace securitycenter_v1beta1 {
      * Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
      */
     mute?: string | null;
+    /**
+     * Output only. The mute information regarding this finding.
+     */
+    muteInfo?: Schema$GoogleCloudSecuritycenterV2MuteInfo;
     /**
      * Records additional information about the mute operation, for example, the [mute configuration](https://cloud.google.com/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
      */
@@ -2728,6 +3040,10 @@ export namespace securitycenter_v1beta1 {
      * Output only. The state of the finding.
      */
     state?: string | null;
+    /**
+     * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
+     */
+    toxicCombination?: Schema$GoogleCloudSecuritycenterV2ToxicCombination;
     /**
      * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
@@ -2755,6 +3071,19 @@ export namespace securitycenter_v1beta1 {
      */
     regionCode?: string | null;
   }
+  /**
+   * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2GroupMembership {
+    /**
+     * ID of the group.
+     */
+    groupId?: string | null;
+    /**
+     * Type of group.
+     */
+    groupType?: string | null;
+  }
   /**
    * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
    */
@@ -2948,6 +3277,10 @@ export namespace securitycenter_v1beta1 {
      * A description of the mute config.
      */
     description?: string | null;
+    /**
+     * Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
+     */
+    expiryTime?: string | null;
     /**
      * Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
      */
@@ -2957,7 +3290,7 @@ export namespace securitycenter_v1beta1 {
      */
     mostRecentEditor?: string | null;
     /**
-     * This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
+     * Identifier. This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
      */
     name?: string | null;
     /**
@@ -2969,6 +3302,19 @@ export namespace securitycenter_v1beta1 {
      */
     updateTime?: string | null;
   }
+  /**
+   * Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2MuteInfo {
+    /**
+     * The list of dynamic mute rules that currently match the finding.
+     */
+    dynamicMuteRecords?: Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord[];
+    /**
+     * If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
+     */
+    staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -3226,6 +3572,10 @@ export namespace securitycenter_v1beta1 {
      * The AWS metadata associated with the finding.
      */
     awsMetadata?: Schema$GoogleCloudSecuritycenterV2AwsMetadata;
+    /**
+     * The Azure metadata associated with the finding.
+     */
+    azureMetadata?: Schema$GoogleCloudSecuritycenterV2AzureMetadata;
     /**
      * Indicates which cloud provider the finding is from.
      */
@@ -3251,7 +3601,7 @@ export namespace securitycenter_v1beta1 {
      */
     resourcePath?: Schema$GoogleCloudSecuritycenterV2ResourcePath;
     /**
-     * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
+     * A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
      */
     resourcePathString?: string | null;
     /**
@@ -3306,23 +3656,23 @@ export namespace securitycenter_v1beta1 {
      */
     description?: string | null;
     /**
-     * Name for the resource value configuration
+     * Identifier. Name for the resource value configuration
      */
     name?: string | null;
     /**
-     * List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
+     * List of resource labels to search for, evaluated with `AND`. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
      */
     resourceLabelsSelector?: {[key: string]: string} | null;
     /**
-     * Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
+     * Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
      */
     resourceType?: string | null;
     /**
-     * Resource value level this expression represents Only required when there is no SDP mapping in the request
+     * Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request
      */
     resourceValue?: string | null;
     /**
-     * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with AND of other resources.
+     * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with `AND` of other resources.
      */
     scope?: string | null;
     /**
@@ -3330,7 +3680,7 @@ export namespace securitycenter_v1beta1 {
      */
     sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping;
     /**
-     * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
+     * Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
      */
     tagValues?: string[] | null;
     /**
@@ -3469,6 +3819,19 @@ export namespace securitycenter_v1beta1 {
      */
     principalSubject?: string | null;
   }
+  /**
+   * Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2StaticMute {
+    /**
+     * When the static mute was applied.
+     */
+    applyTime?: string | null;
+    /**
+     * The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
+     */
+    state?: string | null;
+  }
   /**
    * Represents a Kubernetes subject.
    */
@@ -3515,6 +3878,19 @@ export namespace securitycenter_v1beta1 {
      */
     uri?: string | null;
   }
+  /**
+   * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2ToxicCombination {
+    /**
+     * The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
+     */
+    attackExposureScore?: number | null;
+    /**
+     * List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
    */
@@ -3633,6 +4009,19 @@ export namespace securitycenter_v1beta1 {
      */
     readTime?: string | null;
   }
+  /**
+   * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
+   */
+  export interface Schema$GroupMembership {
+    /**
+     * ID of the group.
+     */
+    groupId?: string | null;
+    /**
+     * Type of group.
+     */
+    groupType?: string | null;
+  }
   /**
    * Result containing the properties and count of a groupBy request.
    */
@@ -3908,6 +4297,19 @@ export namespace securitycenter_v1beta1 {
      */
     version?: string | null;
   }
+  /**
+   * Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
+   */
+  export interface Schema$MuteInfo {
+    /**
+     * The list of dynamic mute rules that currently match the finding.
+     */
+    dynamicMuteRecords?: Schema$DynamicMuteRecord[];
+    /**
+     * If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
+     */
+    staticMute?: Schema$StaticMute;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -4419,6 +4821,19 @@ export namespace securitycenter_v1beta1 {
      */
     name?: string | null;
   }
+  /**
+   * Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
+   */
+  export interface Schema$StaticMute {
+    /**
+     * When the static mute was applied.
+     */
+    applyTime?: string | null;
+    /**
+     * The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
+     */
+    state?: string | null;
+  }
   /**
    * The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).
    */
@@ -4500,6 +4915,19 @@ export namespace securitycenter_v1beta1 {
      */
     uri?: string | null;
   }
+  /**
+   * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
+   */
+  export interface Schema$ToxicCombination {
+    /**
+     * The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
+     */
+    attackExposureScore?: number | null;
+    /**
+     * List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
    */