@googleapis/securitycenter 8.2.0 → 9.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/v1beta2.ts CHANGED
@@ -254,7 +254,7 @@ export namespace securitycenter_v1beta2 {
254
254
  */
255
255
  export interface Schema$AttackExposure {
256
256
  /**
257
- * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
257
+ * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
258
258
  */
259
259
  attackExposureResult?: string | null;
260
260
  /**
@@ -334,6 +334,71 @@ export namespace securitycenter_v1beta2 {
334
334
  */
335
335
  name?: string | null;
336
336
  }
337
+ /**
338
+ * Represents an Azure management group.
339
+ */
340
+ export interface Schema$AzureManagementGroup {
341
+ /**
342
+ * The display name of the Azure management group.
343
+ */
344
+ displayName?: string | null;
345
+ /**
346
+ * The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
347
+ */
348
+ id?: string | null;
349
+ }
350
+ /**
351
+ * Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
352
+ */
353
+ export interface Schema$AzureMetadata {
354
+ /**
355
+ * A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
356
+ */
357
+ managementGroups?: Schema$AzureManagementGroup[];
358
+ /**
359
+ * The Azure resource group associated with the resource.
360
+ */
361
+ resourceGroup?: Schema$AzureResourceGroup;
362
+ /**
363
+ * The Azure subscription associated with the resource.
364
+ */
365
+ subscription?: Schema$AzureSubscription;
366
+ /**
367
+ * The Azure Entra tenant associated with the resource.
368
+ */
369
+ tenant?: Schema$AzureTenant;
370
+ }
371
+ /**
372
+ * Represents an Azure resource group.
373
+ */
374
+ export interface Schema$AzureResourceGroup {
375
+ /**
376
+ * The name of the Azure resource group. This is not a UUID.
377
+ */
378
+ name?: string | null;
379
+ }
380
+ /**
381
+ * Represents an Azure subscription.
382
+ */
383
+ export interface Schema$AzureSubscription {
384
+ /**
385
+ * The display name of the Azure subscription.
386
+ */
387
+ displayName?: string | null;
388
+ /**
389
+ * The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
390
+ */
391
+ id?: string | null;
392
+ }
393
+ /**
394
+ * Represents a Microsoft Entra tenant.
395
+ */
396
+ export interface Schema$AzureTenant {
397
+ /**
398
+ * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
399
+ */
400
+ id?: string | null;
401
+ }
337
402
  /**
338
403
  * Information related to Google Cloud Backup and DR Service findings.
339
404
  */
@@ -603,11 +668,11 @@ export namespace securitycenter_v1beta2 {
603
668
  */
604
669
  export interface Schema$ContainerThreatDetectionSettings {
605
670
  /**
606
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
671
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
607
672
  */
608
673
  modules?: {[key: string]: Schema$Config} | null;
609
674
  /**
610
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
675
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
611
676
  */
612
677
  name?: string | null;
613
678
  /**
@@ -635,6 +700,14 @@ export namespace securitycenter_v1beta2 {
635
700
  * The exploitation activity of the vulnerability in the wild.
636
701
  */
637
702
  exploitationActivity?: string | null;
703
+ /**
704
+ * Date the first publicly available exploit or PoC was released.
705
+ */
706
+ exploitReleaseDate?: string | null;
707
+ /**
708
+ * Date of the earliest known exploitation.
709
+ */
710
+ firstExploitationDate?: string | null;
638
711
  /**
639
712
  * The unique identifier for the vulnerability. e.g. CVE-2021-34527
640
713
  */
@@ -701,6 +774,27 @@ export namespace securitycenter_v1beta2 {
701
774
  */
702
775
  userInteraction?: string | null;
703
776
  }
777
+ /**
778
+ * Details about a data access attempt made by a principal not authorized under applicable data security policy.
779
+ */
780
+ export interface Schema$DataAccessEvent {
781
+ /**
782
+ * Unique identifier for data access event.
783
+ */
784
+ eventId?: string | null;
785
+ /**
786
+ * Timestamp of data access event.
787
+ */
788
+ eventTime?: string | null;
789
+ /**
790
+ * The operation performed by the principal to access the data.
791
+ */
792
+ operation?: string | null;
793
+ /**
794
+ * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
795
+ */
796
+ principalEmail?: string | null;
797
+ }
704
798
  /**
705
799
  * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
706
800
  */
@@ -730,6 +824,31 @@ export namespace securitycenter_v1beta2 {
730
824
  */
731
825
  version?: string | null;
732
826
  }
827
+ /**
828
+ * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
829
+ */
830
+ export interface Schema$DataFlowEvent {
831
+ /**
832
+ * Unique identifier for data flow event.
833
+ */
834
+ eventId?: string | null;
835
+ /**
836
+ * Timestamp of data flow event.
837
+ */
838
+ eventTime?: string | null;
839
+ /**
840
+ * The operation performed by the principal for the data flow event.
841
+ */
842
+ operation?: string | null;
843
+ /**
844
+ * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
845
+ */
846
+ principalEmail?: string | null;
847
+ /**
848
+ * Non-compliant location of the principal or the data destination.
849
+ */
850
+ violatedLocation?: string | null;
851
+ }
733
852
  /**
734
853
  * Details of a subscription.
735
854
  */
@@ -773,6 +892,19 @@ export namespace securitycenter_v1beta2 {
773
892
  */
774
893
  relativePath?: string | null;
775
894
  }
895
+ /**
896
+ * The record of a dynamic mute rule that matches the finding.
897
+ */
898
+ export interface Schema$DynamicMuteRecord {
899
+ /**
900
+ * When the dynamic mute rule first matched the finding.
901
+ */
902
+ matchTime?: string | null;
903
+ /**
904
+ * The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
905
+ */
906
+ muteConfig?: string | null;
907
+ }
776
908
  /**
777
909
  * A name-value pair representing an environment variable used in an operating system process.
778
910
  */
@@ -791,11 +923,11 @@ export namespace securitycenter_v1beta2 {
791
923
  */
792
924
  export interface Schema$EventThreatDetectionSettings {
793
925
  /**
794
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
926
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
795
927
  */
796
928
  modules?: {[key: string]: Schema$Config} | null;
797
929
  /**
798
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
930
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
799
931
  */
800
932
  name?: string | null;
801
933
  /**
@@ -951,10 +1083,18 @@ export namespace securitycenter_v1beta2 {
951
1083
  * The time at which the finding was created in Security Command Center.
952
1084
  */
953
1085
  createTime?: string | null;
1086
+ /**
1087
+ * Data access events associated with the finding.
1088
+ */
1089
+ dataAccessEvents?: Schema$DataAccessEvent[];
954
1090
  /**
955
1091
  * Database associated with the finding.
956
1092
  */
957
1093
  database?: Schema$Database;
1094
+ /**
1095
+ * Data flow events associated with the finding.
1096
+ */
1097
+ dataFlowEvents?: Schema$DataFlowEvent[];
958
1098
  /**
959
1099
  * Contains more details about the finding.
960
1100
  */
@@ -985,6 +1125,10 @@ export namespace securitycenter_v1beta2 {
985
1125
  * The class of the finding.
986
1126
  */
987
1127
  findingClass?: string | null;
1128
+ /**
1129
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
1130
+ */
1131
+ groupMemberships?: Schema$GroupMembership[];
988
1132
  /**
989
1133
  * Represents IAM bindings associated with the finding.
990
1134
  */
@@ -1021,6 +1165,10 @@ export namespace securitycenter_v1beta2 {
1021
1165
  * Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
1022
1166
  */
1023
1167
  mute?: string | null;
1168
+ /**
1169
+ * Output only. The mute information regarding this finding.
1170
+ */
1171
+ muteInfo?: Schema$MuteInfo;
1024
1172
  /**
1025
1173
  * Records additional information about the mute operation, for example, the [mute configuration](/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
1026
1174
  */
@@ -1081,6 +1229,10 @@ export namespace securitycenter_v1beta2 {
1081
1229
  * The state of the finding.
1082
1230
  */
1083
1231
  state?: string | null;
1232
+ /**
1233
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
1234
+ */
1235
+ toxicCombination?: Schema$ToxicCombination;
1084
1236
  /**
1085
1237
  * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
1086
1238
  */
@@ -1336,6 +1488,10 @@ export namespace securitycenter_v1beta2 {
1336
1488
  * The human readable name to be displayed for the mute config.
1337
1489
  */
1338
1490
  displayName?: string | null;
1491
+ /**
1492
+ * Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
1493
+ */
1494
+ expiryTime?: string | null;
1339
1495
  /**
1340
1496
  * Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
1341
1497
  */
@@ -1345,9 +1501,13 @@ export namespace securitycenter_v1beta2 {
1345
1501
  */
1346
1502
  mostRecentEditor?: string | null;
1347
1503
  /**
1348
- * This field will be ignored if provided on config creation. Format "organizations/{organization\}/muteConfigs/{mute_config\}" "folders/{folder\}/muteConfigs/{mute_config\}" "projects/{project\}/muteConfigs/{mute_config\}" "organizations/{organization\}/locations/global/muteConfigs/{mute_config\}" "folders/{folder\}/locations/global/muteConfigs/{mute_config\}" "projects/{project\}/locations/global/muteConfigs/{mute_config\}"
1504
+ * This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`
1349
1505
  */
1350
1506
  name?: string | null;
1507
+ /**
1508
+ * Optional. The type of the mute config, which determines what type of mute state the config affects. The static mute state takes precedence over the dynamic mute state. Immutable after creation. STATIC by default if not set during creation.
1509
+ */
1510
+ type?: string | null;
1351
1511
  /**
1352
1512
  * Output only. The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
1353
1513
  */
@@ -1533,6 +1693,10 @@ export namespace securitycenter_v1beta2 {
1533
1693
  * The AWS metadata associated with the finding.
1534
1694
  */
1535
1695
  awsMetadata?: Schema$AwsMetadata;
1696
+ /**
1697
+ * The Azure metadata associated with the finding.
1698
+ */
1699
+ azureMetadata?: Schema$AzureMetadata;
1536
1700
  /**
1537
1701
  * Indicates which cloud provider the resource resides in.
1538
1702
  */
@@ -1578,7 +1742,7 @@ export namespace securitycenter_v1beta2 {
1578
1742
  */
1579
1743
  resourcePath?: Schema$ResourcePath;
1580
1744
  /**
1581
- * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
1745
+ * A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
1582
1746
  */
1583
1747
  resourcePathString?: string | null;
1584
1748
  /**
@@ -1620,11 +1784,11 @@ export namespace securitycenter_v1beta2 {
1620
1784
  */
1621
1785
  name?: string | null;
1622
1786
  /**
1623
- * List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
1787
+ * List of resource labels to search for, evaluated with `AND`. For example, `"resource_labels_selector": {"key": "value", "env": "prod"\}` will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
1624
1788
  */
1625
1789
  resourceLabelsSelector?: {[key: string]: string} | null;
1626
1790
  /**
1627
- * Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
1791
+ * Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
1628
1792
  */
1629
1793
  resourceType?: string | null;
1630
1794
  /**
@@ -1632,7 +1796,7 @@ export namespace securitycenter_v1beta2 {
1632
1796
  */
1633
1797
  resourceValue?: string | null;
1634
1798
  /**
1635
- * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with AND of other resources.
1799
+ * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with `AND` of other resources.
1636
1800
  */
1637
1801
  scope?: string | null;
1638
1802
  /**
@@ -1640,7 +1804,7 @@ export namespace securitycenter_v1beta2 {
1640
1804
  */
1641
1805
  sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
1642
1806
  /**
1643
- * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
1807
+ * Required. Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
1644
1808
  */
1645
1809
  tagValues?: string[] | null;
1646
1810
  /**
@@ -1833,7 +1997,7 @@ export namespace securitycenter_v1beta2 {
1833
1997
  */
1834
1998
  export interface Schema$GoogleCloudSecuritycenterV2AttackExposure {
1835
1999
  /**
1836
- * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
2000
+ * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
1837
2001
  */
1838
2002
  attackExposureResult?: string | null;
1839
2003
  /**
@@ -1913,6 +2077,71 @@ export namespace securitycenter_v1beta2 {
1913
2077
  */
1914
2078
  name?: string | null;
1915
2079
  }
2080
+ /**
2081
+ * Represents an Azure management group.
2082
+ */
2083
+ export interface Schema$GoogleCloudSecuritycenterV2AzureManagementGroup {
2084
+ /**
2085
+ * The display name of the Azure management group.
2086
+ */
2087
+ displayName?: string | null;
2088
+ /**
2089
+ * The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
2090
+ */
2091
+ id?: string | null;
2092
+ }
2093
+ /**
2094
+ * Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
2095
+ */
2096
+ export interface Schema$GoogleCloudSecuritycenterV2AzureMetadata {
2097
+ /**
2098
+ * A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
2099
+ */
2100
+ managementGroups?: Schema$GoogleCloudSecuritycenterV2AzureManagementGroup[];
2101
+ /**
2102
+ * The Azure resource group associated with the resource.
2103
+ */
2104
+ resourceGroup?: Schema$GoogleCloudSecuritycenterV2AzureResourceGroup;
2105
+ /**
2106
+ * The Azure subscription associated with the resource.
2107
+ */
2108
+ subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
2109
+ /**
2110
+ * The Azure Entra tenant associated with the resource.
2111
+ */
2112
+ tenant?: Schema$GoogleCloudSecuritycenterV2AzureTenant;
2113
+ }
2114
+ /**
2115
+ * Represents an Azure resource group.
2116
+ */
2117
+ export interface Schema$GoogleCloudSecuritycenterV2AzureResourceGroup {
2118
+ /**
2119
+ * The name of the Azure resource group. This is not a UUID.
2120
+ */
2121
+ name?: string | null;
2122
+ }
2123
+ /**
2124
+ * Represents an Azure subscription.
2125
+ */
2126
+ export interface Schema$GoogleCloudSecuritycenterV2AzureSubscription {
2127
+ /**
2128
+ * The display name of the Azure subscription.
2129
+ */
2130
+ displayName?: string | null;
2131
+ /**
2132
+ * The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
2133
+ */
2134
+ id?: string | null;
2135
+ }
2136
+ /**
2137
+ * Represents a Microsoft Entra tenant.
2138
+ */
2139
+ export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
2140
+ /**
2141
+ * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
2142
+ */
2143
+ id?: string | null;
2144
+ }
1916
2145
  /**
1917
2146
  * Information related to Google Cloud Backup and DR Service findings.
1918
2147
  */
@@ -1967,7 +2196,7 @@ export namespace securitycenter_v1beta2 {
1967
2196
  */
1968
2197
  createTime?: string | null;
1969
2198
  /**
1970
- * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
2199
+ * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
1971
2200
  */
1972
2201
  dataset?: string | null;
1973
2202
  /**
@@ -1983,7 +2212,7 @@ export namespace securitycenter_v1beta2 {
1983
2212
  */
1984
2213
  mostRecentEditor?: string | null;
1985
2214
  /**
1986
- * The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
2215
+ * Identifier. The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
1987
2216
  */
1988
2217
  name?: string | null;
1989
2218
  /**
@@ -2201,6 +2430,14 @@ export namespace securitycenter_v1beta2 {
2201
2430
  * The exploitation activity of the vulnerability in the wild.
2202
2431
  */
2203
2432
  exploitationActivity?: string | null;
2433
+ /**
2434
+ * Date the first publicly available exploit or PoC was released.
2435
+ */
2436
+ exploitReleaseDate?: string | null;
2437
+ /**
2438
+ * Date of the earliest known exploitation.
2439
+ */
2440
+ firstExploitationDate?: string | null;
2204
2441
  /**
2205
2442
  * The unique identifier for the vulnerability. e.g. CVE-2021-34527
2206
2443
  */
@@ -2267,6 +2504,27 @@ export namespace securitycenter_v1beta2 {
2267
2504
  */
2268
2505
  userInteraction?: string | null;
2269
2506
  }
2507
+ /**
2508
+ * Details about a data access attempt made by a principal not authorized under applicable data security policy.
2509
+ */
2510
+ export interface Schema$GoogleCloudSecuritycenterV2DataAccessEvent {
2511
+ /**
2512
+ * Unique identifier for data access event.
2513
+ */
2514
+ eventId?: string | null;
2515
+ /**
2516
+ * Timestamp of data access event.
2517
+ */
2518
+ eventTime?: string | null;
2519
+ /**
2520
+ * The operation performed by the principal to access the data.
2521
+ */
2522
+ operation?: string | null;
2523
+ /**
2524
+ * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
2525
+ */
2526
+ principalEmail?: string | null;
2527
+ }
2270
2528
  /**
2271
2529
  * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
2272
2530
  */
@@ -2296,6 +2554,31 @@ export namespace securitycenter_v1beta2 {
2296
2554
  */
2297
2555
  version?: string | null;
2298
2556
  }
2557
+ /**
2558
+ * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
2559
+ */
2560
+ export interface Schema$GoogleCloudSecuritycenterV2DataFlowEvent {
2561
+ /**
2562
+ * Unique identifier for data flow event.
2563
+ */
2564
+ eventId?: string | null;
2565
+ /**
2566
+ * Timestamp of data flow event.
2567
+ */
2568
+ eventTime?: string | null;
2569
+ /**
2570
+ * The operation performed by the principal for the data flow event.
2571
+ */
2572
+ operation?: string | null;
2573
+ /**
2574
+ * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
2575
+ */
2576
+ principalEmail?: string | null;
2577
+ /**
2578
+ * Non-compliant location of the principal or the data destination.
2579
+ */
2580
+ violatedLocation?: string | null;
2581
+ }
2299
2582
  /**
2300
2583
  * Memory hash detection contributing to the binary family match.
2301
2584
  */
@@ -2322,6 +2605,19 @@ export namespace securitycenter_v1beta2 {
2322
2605
  */
2323
2606
  relativePath?: string | null;
2324
2607
  }
2608
+ /**
2609
+ * The record of a dynamic mute rule that matches the finding.
2610
+ */
2611
+ export interface Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord {
2612
+ /**
2613
+ * When the dynamic mute rule first matched the finding.
2614
+ */
2615
+ matchTime?: string | null;
2616
+ /**
2617
+ * The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
2618
+ */
2619
+ muteConfig?: string | null;
2620
+ }
2325
2621
  /**
2326
2622
  * A name-value pair representing an environment variable used in an operating system process.
2327
2623
  */
@@ -2509,10 +2805,18 @@ export namespace securitycenter_v1beta2 {
2509
2805
  * Output only. The time at which the finding was created in Security Command Center.
2510
2806
  */
2511
2807
  createTime?: string | null;
2808
+ /**
2809
+ * Data access events associated with the finding.
2810
+ */
2811
+ dataAccessEvents?: Schema$GoogleCloudSecuritycenterV2DataAccessEvent[];
2512
2812
  /**
2513
2813
  * Database associated with the finding.
2514
2814
  */
2515
2815
  database?: Schema$GoogleCloudSecuritycenterV2Database;
2816
+ /**
2817
+ * Data flow events associated with the finding.
2818
+ */
2819
+ dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
2516
2820
  /**
2517
2821
  * Contains more details about the finding.
2518
2822
  */
@@ -2543,6 +2847,10 @@ export namespace securitycenter_v1beta2 {
2543
2847
  * The class of the finding.
2544
2848
  */
2545
2849
  findingClass?: string | null;
2850
+ /**
2851
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
2852
+ */
2853
+ groupMemberships?: Schema$GoogleCloudSecuritycenterV2GroupMembership[];
2546
2854
  /**
2547
2855
  * Represents IAM bindings associated with the finding.
2548
2856
  */
@@ -2579,6 +2887,10 @@ export namespace securitycenter_v1beta2 {
2579
2887
  * Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
2580
2888
  */
2581
2889
  mute?: string | null;
2890
+ /**
2891
+ * Output only. The mute information regarding this finding.
2892
+ */
2893
+ muteInfo?: Schema$GoogleCloudSecuritycenterV2MuteInfo;
2582
2894
  /**
2583
2895
  * Records additional information about the mute operation, for example, the [mute configuration](https://cloud.google.com/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
2584
2896
  */
@@ -2639,6 +2951,10 @@ export namespace securitycenter_v1beta2 {
2639
2951
  * Output only. The state of the finding.
2640
2952
  */
2641
2953
  state?: string | null;
2954
+ /**
2955
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
2956
+ */
2957
+ toxicCombination?: Schema$GoogleCloudSecuritycenterV2ToxicCombination;
2642
2958
  /**
2643
2959
  * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
2644
2960
  */
@@ -2666,6 +2982,19 @@ export namespace securitycenter_v1beta2 {
2666
2982
  */
2667
2983
  regionCode?: string | null;
2668
2984
  }
2985
+ /**
2986
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
2987
+ */
2988
+ export interface Schema$GoogleCloudSecuritycenterV2GroupMembership {
2989
+ /**
2990
+ * ID of the group.
2991
+ */
2992
+ groupId?: string | null;
2993
+ /**
2994
+ * Type of group.
2995
+ */
2996
+ groupType?: string | null;
2997
+ }
2669
2998
  /**
2670
2999
  * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
2671
3000
  */
@@ -2859,6 +3188,10 @@ export namespace securitycenter_v1beta2 {
2859
3188
  * A description of the mute config.
2860
3189
  */
2861
3190
  description?: string | null;
3191
+ /**
3192
+ * Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
3193
+ */
3194
+ expiryTime?: string | null;
2862
3195
  /**
2863
3196
  * Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
2864
3197
  */
@@ -2868,7 +3201,7 @@ export namespace securitycenter_v1beta2 {
2868
3201
  */
2869
3202
  mostRecentEditor?: string | null;
2870
3203
  /**
2871
- * This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
3204
+ * Identifier. This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
2872
3205
  */
2873
3206
  name?: string | null;
2874
3207
  /**
@@ -2880,6 +3213,19 @@ export namespace securitycenter_v1beta2 {
2880
3213
  */
2881
3214
  updateTime?: string | null;
2882
3215
  }
3216
+ /**
3217
+ * Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
3218
+ */
3219
+ export interface Schema$GoogleCloudSecuritycenterV2MuteInfo {
3220
+ /**
3221
+ * The list of dynamic mute rules that currently match the finding.
3222
+ */
3223
+ dynamicMuteRecords?: Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord[];
3224
+ /**
3225
+ * If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
3226
+ */
3227
+ staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
3228
+ }
2883
3229
  /**
2884
3230
  * Kubernetes nodes associated with the finding.
2885
3231
  */
@@ -3137,6 +3483,10 @@ export namespace securitycenter_v1beta2 {
3137
3483
  * The AWS metadata associated with the finding.
3138
3484
  */
3139
3485
  awsMetadata?: Schema$GoogleCloudSecuritycenterV2AwsMetadata;
3486
+ /**
3487
+ * The Azure metadata associated with the finding.
3488
+ */
3489
+ azureMetadata?: Schema$GoogleCloudSecuritycenterV2AzureMetadata;
3140
3490
  /**
3141
3491
  * Indicates which cloud provider the finding is from.
3142
3492
  */
@@ -3162,7 +3512,7 @@ export namespace securitycenter_v1beta2 {
3162
3512
  */
3163
3513
  resourcePath?: Schema$GoogleCloudSecuritycenterV2ResourcePath;
3164
3514
  /**
3165
- * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
3515
+ * A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
3166
3516
  */
3167
3517
  resourcePathString?: string | null;
3168
3518
  /**
@@ -3217,23 +3567,23 @@ export namespace securitycenter_v1beta2 {
3217
3567
  */
3218
3568
  description?: string | null;
3219
3569
  /**
3220
- * Name for the resource value configuration
3570
+ * Identifier. Name for the resource value configuration
3221
3571
  */
3222
3572
  name?: string | null;
3223
3573
  /**
3224
- * List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
3574
+ * List of resource labels to search for, evaluated with `AND`. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
3225
3575
  */
3226
3576
  resourceLabelsSelector?: {[key: string]: string} | null;
3227
3577
  /**
3228
- * Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
3578
+ * Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
3229
3579
  */
3230
3580
  resourceType?: string | null;
3231
3581
  /**
3232
- * Resource value level this expression represents Only required when there is no SDP mapping in the request
3582
+ * Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request
3233
3583
  */
3234
3584
  resourceValue?: string | null;
3235
3585
  /**
3236
- * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with AND of other resources.
3586
+ * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with `AND` of other resources.
3237
3587
  */
3238
3588
  scope?: string | null;
3239
3589
  /**
@@ -3241,7 +3591,7 @@ export namespace securitycenter_v1beta2 {
3241
3591
  */
3242
3592
  sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping;
3243
3593
  /**
3244
- * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
3594
+ * Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
3245
3595
  */
3246
3596
  tagValues?: string[] | null;
3247
3597
  /**
@@ -3380,6 +3730,19 @@ export namespace securitycenter_v1beta2 {
3380
3730
  */
3381
3731
  principalSubject?: string | null;
3382
3732
  }
3733
+ /**
3734
+ * Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
3735
+ */
3736
+ export interface Schema$GoogleCloudSecuritycenterV2StaticMute {
3737
+ /**
3738
+ * When the static mute was applied.
3739
+ */
3740
+ applyTime?: string | null;
3741
+ /**
3742
+ * The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
3743
+ */
3744
+ state?: string | null;
3745
+ }
3383
3746
  /**
3384
3747
  * Represents a Kubernetes subject.
3385
3748
  */
@@ -3426,6 +3789,19 @@ export namespace securitycenter_v1beta2 {
3426
3789
  */
3427
3790
  uri?: string | null;
3428
3791
  }
3792
+ /**
3793
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
3794
+ */
3795
+ export interface Schema$GoogleCloudSecuritycenterV2ToxicCombination {
3796
+ /**
3797
+ * The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
3798
+ */
3799
+ attackExposureScore?: number | null;
3800
+ /**
3801
+ * List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
3802
+ */
3803
+ relatedFindings?: string[] | null;
3804
+ }
3429
3805
  /**
3430
3806
  * Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
3431
3807
  */
@@ -3456,6 +3832,19 @@ export namespace securitycenter_v1beta2 {
3456
3832
  */
3457
3833
  yaraRule?: string | null;
3458
3834
  }
3835
+ /**
3836
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
3837
+ */
3838
+ export interface Schema$GroupMembership {
3839
+ /**
3840
+ * ID of the group.
3841
+ */
3842
+ groupId?: string | null;
3843
+ /**
3844
+ * Type of group.
3845
+ */
3846
+ groupType?: string | null;
3847
+ }
3459
3848
  /**
3460
3849
  * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
3461
3850
  */
@@ -3637,6 +4026,19 @@ export namespace securitycenter_v1beta2 {
3637
4026
  */
3638
4027
  version?: string | null;
3639
4028
  }
4029
+ /**
4030
+ * Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
4031
+ */
4032
+ export interface Schema$MuteInfo {
4033
+ /**
4034
+ * The list of dynamic mute rules that currently match the finding.
4035
+ */
4036
+ dynamicMuteRecords?: Schema$DynamicMuteRecord[];
4037
+ /**
4038
+ * If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
4039
+ */
4040
+ staticMute?: Schema$StaticMute;
4041
+ }
3640
4042
  /**
3641
4043
  * Kubernetes nodes associated with the finding.
3642
4044
  */
@@ -3976,11 +4378,11 @@ export namespace securitycenter_v1beta2 {
3976
4378
  */
3977
4379
  export interface Schema$SecurityHealthAnalyticsSettings {
3978
4380
  /**
3979
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
4381
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
3980
4382
  */
3981
4383
  modules?: {[key: string]: Schema$Config} | null;
3982
4384
  /**
3983
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
4385
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
3984
4386
  */
3985
4387
  name?: string | null;
3986
4388
  /**
@@ -4080,6 +4482,19 @@ export namespace securitycenter_v1beta2 {
4080
4482
  */
4081
4483
  principalSubject?: string | null;
4082
4484
  }
4485
+ /**
4486
+ * Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
4487
+ */
4488
+ export interface Schema$StaticMute {
4489
+ /**
4490
+ * When the static mute was applied.
4491
+ */
4492
+ applyTime?: string | null;
4493
+ /**
4494
+ * The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
4495
+ */
4496
+ state?: string | null;
4497
+ }
4083
4498
  /**
4084
4499
  * Represents a Kubernetes subject.
4085
4500
  */
@@ -4143,16 +4558,29 @@ export namespace securitycenter_v1beta2 {
4143
4558
  */
4144
4559
  uri?: string | null;
4145
4560
  }
4561
+ /**
4562
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
4563
+ */
4564
+ export interface Schema$ToxicCombination {
4565
+ /**
4566
+ * The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
4567
+ */
4568
+ attackExposureScore?: number | null;
4569
+ /**
4570
+ * List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
4571
+ */
4572
+ relatedFindings?: string[] | null;
4573
+ }
4146
4574
  /**
4147
4575
  * Resource capturing the settings for the Virtual Machine Threat Detection service.
4148
4576
  */
4149
4577
  export interface Schema$VirtualMachineThreatDetectionSettings {
4150
4578
  /**
4151
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
4579
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
4152
4580
  */
4153
4581
  modules?: {[key: string]: Schema$Config} | null;
4154
4582
  /**
4155
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
4583
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
4156
4584
  */
4157
4585
  name?: string | null;
4158
4586
  /**
@@ -4224,11 +4652,11 @@ export namespace securitycenter_v1beta2 {
4224
4652
  */
4225
4653
  export interface Schema$WebSecurityScannerSettings {
4226
4654
  /**
4227
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
4655
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
4228
4656
  */
4229
4657
  modules?: {[key: string]: Schema$Config} | null;
4230
4658
  /**
4231
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
4659
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
4232
4660
  */
4233
4661
  name?: string | null;
4234
4662
  /**
@@ -5567,7 +5995,7 @@ export namespace securitycenter_v1beta2 {
5567
5995
  export interface Params$Resource$Folders$Updatecontainerthreatdetectionsettings
5568
5996
  extends StandardParameters {
5569
5997
  /**
5570
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
5998
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
5571
5999
  */
5572
6000
  name?: string;
5573
6001
  /**
@@ -5583,7 +6011,7 @@ export namespace securitycenter_v1beta2 {
5583
6011
  export interface Params$Resource$Folders$Updateeventthreatdetectionsettings
5584
6012
  extends StandardParameters {
5585
6013
  /**
5586
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
6014
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
5587
6015
  */
5588
6016
  name?: string;
5589
6017
  /**
@@ -5615,7 +6043,7 @@ export namespace securitycenter_v1beta2 {
5615
6043
  export interface Params$Resource$Folders$Updatesecurityhealthanalyticssettings
5616
6044
  extends StandardParameters {
5617
6045
  /**
5618
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
6046
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
5619
6047
  */
5620
6048
  name?: string;
5621
6049
  /**
@@ -5631,7 +6059,7 @@ export namespace securitycenter_v1beta2 {
5631
6059
  export interface Params$Resource$Folders$Updatevirtualmachinethreatdetectionsettings
5632
6060
  extends StandardParameters {
5633
6061
  /**
5634
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
6062
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
5635
6063
  */
5636
6064
  name?: string;
5637
6065
  /**
@@ -5647,7 +6075,7 @@ export namespace securitycenter_v1beta2 {
5647
6075
  export interface Params$Resource$Folders$Updatewebsecurityscannersettings
5648
6076
  extends StandardParameters {
5649
6077
  /**
5650
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
6078
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
5651
6079
  */
5652
6080
  name?: string;
5653
6081
  /**
@@ -7762,7 +8190,7 @@ export namespace securitycenter_v1beta2 {
7762
8190
  export interface Params$Resource$Organizations$Updatecontainerthreatdetectionsettings
7763
8191
  extends StandardParameters {
7764
8192
  /**
7765
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
8193
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
7766
8194
  */
7767
8195
  name?: string;
7768
8196
  /**
@@ -7778,7 +8206,7 @@ export namespace securitycenter_v1beta2 {
7778
8206
  export interface Params$Resource$Organizations$Updateeventthreatdetectionsettings
7779
8207
  extends StandardParameters {
7780
8208
  /**
7781
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
8209
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
7782
8210
  */
7783
8211
  name?: string;
7784
8212
  /**
@@ -7810,7 +8238,7 @@ export namespace securitycenter_v1beta2 {
7810
8238
  export interface Params$Resource$Organizations$Updatesecurityhealthanalyticssettings
7811
8239
  extends StandardParameters {
7812
8240
  /**
7813
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
8241
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
7814
8242
  */
7815
8243
  name?: string;
7816
8244
  /**
@@ -7826,7 +8254,7 @@ export namespace securitycenter_v1beta2 {
7826
8254
  export interface Params$Resource$Organizations$Updatevirtualmachinethreatdetectionsettings
7827
8255
  extends StandardParameters {
7828
8256
  /**
7829
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
8257
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
7830
8258
  */
7831
8259
  name?: string;
7832
8260
  /**
@@ -7842,7 +8270,7 @@ export namespace securitycenter_v1beta2 {
7842
8270
  export interface Params$Resource$Organizations$Updatewebsecurityscannersettings
7843
8271
  extends StandardParameters {
7844
8272
  /**
7845
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
8273
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
7846
8274
  */
7847
8275
  name?: string;
7848
8276
  /**
@@ -9858,7 +10286,7 @@ export namespace securitycenter_v1beta2 {
9858
10286
  export interface Params$Resource$Projects$Updatecontainerthreatdetectionsettings
9859
10287
  extends StandardParameters {
9860
10288
  /**
9861
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
10289
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
9862
10290
  */
9863
10291
  name?: string;
9864
10292
  /**
@@ -9874,7 +10302,7 @@ export namespace securitycenter_v1beta2 {
9874
10302
  export interface Params$Resource$Projects$Updateeventthreatdetectionsettings
9875
10303
  extends StandardParameters {
9876
10304
  /**
9877
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
10305
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
9878
10306
  */
9879
10307
  name?: string;
9880
10308
  /**
@@ -9906,7 +10334,7 @@ export namespace securitycenter_v1beta2 {
9906
10334
  export interface Params$Resource$Projects$Updatesecurityhealthanalyticssettings
9907
10335
  extends StandardParameters {
9908
10336
  /**
9909
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
10337
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
9910
10338
  */
9911
10339
  name?: string;
9912
10340
  /**
@@ -9922,7 +10350,7 @@ export namespace securitycenter_v1beta2 {
9922
10350
  export interface Params$Resource$Projects$Updatevirtualmachinethreatdetectionsettings
9923
10351
  extends StandardParameters {
9924
10352
  /**
9925
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
10353
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
9926
10354
  */
9927
10355
  name?: string;
9928
10356
  /**
@@ -9938,7 +10366,7 @@ export namespace securitycenter_v1beta2 {
9938
10366
  export interface Params$Resource$Projects$Updatewebsecurityscannersettings
9939
10367
  extends StandardParameters {
9940
10368
  /**
9941
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
10369
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
9942
10370
  */
9943
10371
  name?: string;
9944
10372
  /**
@@ -10403,7 +10831,7 @@ export namespace securitycenter_v1beta2 {
10403
10831
  export interface Params$Resource$Projects$Locations$Clusters$Updatecontainerthreatdetectionsettings
10404
10832
  extends StandardParameters {
10405
10833
  /**
10406
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
10834
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
10407
10835
  */
10408
10836
  name?: string;
10409
10837
  /**