@googleapis/securitycenter 8.2.0 → 9.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -199,7 +199,7 @@ export declare namespace securitycenter_v1beta2 {
199
199
  */
200
200
  export interface Schema$AttackExposure {
201
201
  /**
202
- * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
202
+ * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
203
203
  */
204
204
  attackExposureResult?: string | null;
205
205
  /**
@@ -279,6 +279,71 @@ export declare namespace securitycenter_v1beta2 {
279
279
  */
280
280
  name?: string | null;
281
281
  }
282
+ /**
283
+ * Represents an Azure management group.
284
+ */
285
+ export interface Schema$AzureManagementGroup {
286
+ /**
287
+ * The display name of the Azure management group.
288
+ */
289
+ displayName?: string | null;
290
+ /**
291
+ * The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
292
+ */
293
+ id?: string | null;
294
+ }
295
+ /**
296
+ * Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
297
+ */
298
+ export interface Schema$AzureMetadata {
299
+ /**
300
+ * A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
301
+ */
302
+ managementGroups?: Schema$AzureManagementGroup[];
303
+ /**
304
+ * The Azure resource group associated with the resource.
305
+ */
306
+ resourceGroup?: Schema$AzureResourceGroup;
307
+ /**
308
+ * The Azure subscription associated with the resource.
309
+ */
310
+ subscription?: Schema$AzureSubscription;
311
+ /**
312
+ * The Azure Entra tenant associated with the resource.
313
+ */
314
+ tenant?: Schema$AzureTenant;
315
+ }
316
+ /**
317
+ * Represents an Azure resource group.
318
+ */
319
+ export interface Schema$AzureResourceGroup {
320
+ /**
321
+ * The name of the Azure resource group. This is not a UUID.
322
+ */
323
+ name?: string | null;
324
+ }
325
+ /**
326
+ * Represents an Azure subscription.
327
+ */
328
+ export interface Schema$AzureSubscription {
329
+ /**
330
+ * The display name of the Azure subscription.
331
+ */
332
+ displayName?: string | null;
333
+ /**
334
+ * The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
335
+ */
336
+ id?: string | null;
337
+ }
338
+ /**
339
+ * Represents a Microsoft Entra tenant.
340
+ */
341
+ export interface Schema$AzureTenant {
342
+ /**
343
+ * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
344
+ */
345
+ id?: string | null;
346
+ }
282
347
  /**
283
348
  * Information related to Google Cloud Backup and DR Service findings.
284
349
  */
@@ -550,13 +615,13 @@ export declare namespace securitycenter_v1beta2 {
550
615
  */
551
616
  export interface Schema$ContainerThreatDetectionSettings {
552
617
  /**
553
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
618
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
554
619
  */
555
620
  modules?: {
556
621
  [key: string]: Schema$Config;
557
622
  } | null;
558
623
  /**
559
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
624
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
560
625
  */
561
626
  name?: string | null;
562
627
  /**
@@ -584,6 +649,14 @@ export declare namespace securitycenter_v1beta2 {
584
649
  * The exploitation activity of the vulnerability in the wild.
585
650
  */
586
651
  exploitationActivity?: string | null;
652
+ /**
653
+ * Date the first publicly available exploit or PoC was released.
654
+ */
655
+ exploitReleaseDate?: string | null;
656
+ /**
657
+ * Date of the earliest known exploitation.
658
+ */
659
+ firstExploitationDate?: string | null;
587
660
  /**
588
661
  * The unique identifier for the vulnerability. e.g. CVE-2021-34527
589
662
  */
@@ -650,6 +723,27 @@ export declare namespace securitycenter_v1beta2 {
650
723
  */
651
724
  userInteraction?: string | null;
652
725
  }
726
+ /**
727
+ * Details about a data access attempt made by a principal not authorized under applicable data security policy.
728
+ */
729
+ export interface Schema$DataAccessEvent {
730
+ /**
731
+ * Unique identifier for data access event.
732
+ */
733
+ eventId?: string | null;
734
+ /**
735
+ * Timestamp of data access event.
736
+ */
737
+ eventTime?: string | null;
738
+ /**
739
+ * The operation performed by the principal to access the data.
740
+ */
741
+ operation?: string | null;
742
+ /**
743
+ * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
744
+ */
745
+ principalEmail?: string | null;
746
+ }
653
747
  /**
654
748
  * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
655
749
  */
@@ -679,6 +773,31 @@ export declare namespace securitycenter_v1beta2 {
679
773
  */
680
774
  version?: string | null;
681
775
  }
776
+ /**
777
+ * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
778
+ */
779
+ export interface Schema$DataFlowEvent {
780
+ /**
781
+ * Unique identifier for data flow event.
782
+ */
783
+ eventId?: string | null;
784
+ /**
785
+ * Timestamp of data flow event.
786
+ */
787
+ eventTime?: string | null;
788
+ /**
789
+ * The operation performed by the principal for the data flow event.
790
+ */
791
+ operation?: string | null;
792
+ /**
793
+ * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
794
+ */
795
+ principalEmail?: string | null;
796
+ /**
797
+ * Non-compliant location of the principal or the data destination.
798
+ */
799
+ violatedLocation?: string | null;
800
+ }
682
801
  /**
683
802
  * Details of a subscription.
684
803
  */
@@ -722,6 +841,19 @@ export declare namespace securitycenter_v1beta2 {
722
841
  */
723
842
  relativePath?: string | null;
724
843
  }
844
+ /**
845
+ * The record of a dynamic mute rule that matches the finding.
846
+ */
847
+ export interface Schema$DynamicMuteRecord {
848
+ /**
849
+ * When the dynamic mute rule first matched the finding.
850
+ */
851
+ matchTime?: string | null;
852
+ /**
853
+ * The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
854
+ */
855
+ muteConfig?: string | null;
856
+ }
725
857
  /**
726
858
  * A name-value pair representing an environment variable used in an operating system process.
727
859
  */
@@ -740,13 +872,13 @@ export declare namespace securitycenter_v1beta2 {
740
872
  */
741
873
  export interface Schema$EventThreatDetectionSettings {
742
874
  /**
743
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
875
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
744
876
  */
745
877
  modules?: {
746
878
  [key: string]: Schema$Config;
747
879
  } | null;
748
880
  /**
749
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
881
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
750
882
  */
751
883
  name?: string | null;
752
884
  /**
@@ -904,10 +1036,18 @@ export declare namespace securitycenter_v1beta2 {
904
1036
  * The time at which the finding was created in Security Command Center.
905
1037
  */
906
1038
  createTime?: string | null;
1039
+ /**
1040
+ * Data access events associated with the finding.
1041
+ */
1042
+ dataAccessEvents?: Schema$DataAccessEvent[];
907
1043
  /**
908
1044
  * Database associated with the finding.
909
1045
  */
910
1046
  database?: Schema$Database;
1047
+ /**
1048
+ * Data flow events associated with the finding.
1049
+ */
1050
+ dataFlowEvents?: Schema$DataFlowEvent[];
911
1051
  /**
912
1052
  * Contains more details about the finding.
913
1053
  */
@@ -938,6 +1078,10 @@ export declare namespace securitycenter_v1beta2 {
938
1078
  * The class of the finding.
939
1079
  */
940
1080
  findingClass?: string | null;
1081
+ /**
1082
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
1083
+ */
1084
+ groupMemberships?: Schema$GroupMembership[];
941
1085
  /**
942
1086
  * Represents IAM bindings associated with the finding.
943
1087
  */
@@ -974,6 +1118,10 @@ export declare namespace securitycenter_v1beta2 {
974
1118
  * Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
975
1119
  */
976
1120
  mute?: string | null;
1121
+ /**
1122
+ * Output only. The mute information regarding this finding.
1123
+ */
1124
+ muteInfo?: Schema$MuteInfo;
977
1125
  /**
978
1126
  * Records additional information about the mute operation, for example, the [mute configuration](/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
979
1127
  */
@@ -1036,6 +1184,10 @@ export declare namespace securitycenter_v1beta2 {
1036
1184
  * The state of the finding.
1037
1185
  */
1038
1186
  state?: string | null;
1187
+ /**
1188
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
1189
+ */
1190
+ toxicCombination?: Schema$ToxicCombination;
1039
1191
  /**
1040
1192
  * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
1041
1193
  */
@@ -1292,6 +1444,10 @@ export declare namespace securitycenter_v1beta2 {
1292
1444
  * The human readable name to be displayed for the mute config.
1293
1445
  */
1294
1446
  displayName?: string | null;
1447
+ /**
1448
+ * Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
1449
+ */
1450
+ expiryTime?: string | null;
1295
1451
  /**
1296
1452
  * Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
1297
1453
  */
@@ -1301,9 +1457,13 @@ export declare namespace securitycenter_v1beta2 {
1301
1457
  */
1302
1458
  mostRecentEditor?: string | null;
1303
1459
  /**
1304
- * This field will be ignored if provided on config creation. Format "organizations/{organization\}/muteConfigs/{mute_config\}" "folders/{folder\}/muteConfigs/{mute_config\}" "projects/{project\}/muteConfigs/{mute_config\}" "organizations/{organization\}/locations/global/muteConfigs/{mute_config\}" "folders/{folder\}/locations/global/muteConfigs/{mute_config\}" "projects/{project\}/locations/global/muteConfigs/{mute_config\}"
1460
+ * This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`
1305
1461
  */
1306
1462
  name?: string | null;
1463
+ /**
1464
+ * Optional. The type of the mute config, which determines what type of mute state the config affects. The static mute state takes precedence over the dynamic mute state. Immutable after creation. STATIC by default if not set during creation.
1465
+ */
1466
+ type?: string | null;
1307
1467
  /**
1308
1468
  * Output only. The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update.
1309
1469
  */
@@ -1493,6 +1653,10 @@ export declare namespace securitycenter_v1beta2 {
1493
1653
  * The AWS metadata associated with the finding.
1494
1654
  */
1495
1655
  awsMetadata?: Schema$AwsMetadata;
1656
+ /**
1657
+ * The Azure metadata associated with the finding.
1658
+ */
1659
+ azureMetadata?: Schema$AzureMetadata;
1496
1660
  /**
1497
1661
  * Indicates which cloud provider the resource resides in.
1498
1662
  */
@@ -1538,7 +1702,7 @@ export declare namespace securitycenter_v1beta2 {
1538
1702
  */
1539
1703
  resourcePath?: Schema$ResourcePath;
1540
1704
  /**
1541
- * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
1705
+ * A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
1542
1706
  */
1543
1707
  resourcePathString?: string | null;
1544
1708
  /**
@@ -1580,13 +1744,13 @@ export declare namespace securitycenter_v1beta2 {
1580
1744
  */
1581
1745
  name?: string | null;
1582
1746
  /**
1583
- * List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
1747
+ * List of resource labels to search for, evaluated with `AND`. For example, `"resource_labels_selector": {"key": "value", "env": "prod"\}` will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
1584
1748
  */
1585
1749
  resourceLabelsSelector?: {
1586
1750
  [key: string]: string;
1587
1751
  } | null;
1588
1752
  /**
1589
- * Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
1753
+ * Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
1590
1754
  */
1591
1755
  resourceType?: string | null;
1592
1756
  /**
@@ -1594,7 +1758,7 @@ export declare namespace securitycenter_v1beta2 {
1594
1758
  */
1595
1759
  resourceValue?: string | null;
1596
1760
  /**
1597
- * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with AND of other resources.
1761
+ * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with `AND` of other resources.
1598
1762
  */
1599
1763
  scope?: string | null;
1600
1764
  /**
@@ -1602,7 +1766,7 @@ export declare namespace securitycenter_v1beta2 {
1602
1766
  */
1603
1767
  sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
1604
1768
  /**
1605
- * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
1769
+ * Required. Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
1606
1770
  */
1607
1771
  tagValues?: string[] | null;
1608
1772
  /**
@@ -1795,7 +1959,7 @@ export declare namespace securitycenter_v1beta2 {
1795
1959
  */
1796
1960
  export interface Schema$GoogleCloudSecuritycenterV2AttackExposure {
1797
1961
  /**
1798
- * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789
1962
+ * The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`
1799
1963
  */
1800
1964
  attackExposureResult?: string | null;
1801
1965
  /**
@@ -1875,6 +2039,71 @@ export declare namespace securitycenter_v1beta2 {
1875
2039
  */
1876
2040
  name?: string | null;
1877
2041
  }
2042
+ /**
2043
+ * Represents an Azure management group.
2044
+ */
2045
+ export interface Schema$GoogleCloudSecuritycenterV2AzureManagementGroup {
2046
+ /**
2047
+ * The display name of the Azure management group.
2048
+ */
2049
+ displayName?: string | null;
2050
+ /**
2051
+ * The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.
2052
+ */
2053
+ id?: string | null;
2054
+ }
2055
+ /**
2056
+ * Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.
2057
+ */
2058
+ export interface Schema$GoogleCloudSecuritycenterV2AzureMetadata {
2059
+ /**
2060
+ * A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.
2061
+ */
2062
+ managementGroups?: Schema$GoogleCloudSecuritycenterV2AzureManagementGroup[];
2063
+ /**
2064
+ * The Azure resource group associated with the resource.
2065
+ */
2066
+ resourceGroup?: Schema$GoogleCloudSecuritycenterV2AzureResourceGroup;
2067
+ /**
2068
+ * The Azure subscription associated with the resource.
2069
+ */
2070
+ subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
2071
+ /**
2072
+ * The Azure Entra tenant associated with the resource.
2073
+ */
2074
+ tenant?: Schema$GoogleCloudSecuritycenterV2AzureTenant;
2075
+ }
2076
+ /**
2077
+ * Represents an Azure resource group.
2078
+ */
2079
+ export interface Schema$GoogleCloudSecuritycenterV2AzureResourceGroup {
2080
+ /**
2081
+ * The name of the Azure resource group. This is not a UUID.
2082
+ */
2083
+ name?: string | null;
2084
+ }
2085
+ /**
2086
+ * Represents an Azure subscription.
2087
+ */
2088
+ export interface Schema$GoogleCloudSecuritycenterV2AzureSubscription {
2089
+ /**
2090
+ * The display name of the Azure subscription.
2091
+ */
2092
+ displayName?: string | null;
2093
+ /**
2094
+ * The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.
2095
+ */
2096
+ id?: string | null;
2097
+ }
2098
+ /**
2099
+ * Represents a Microsoft Entra tenant.
2100
+ */
2101
+ export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
2102
+ /**
2103
+ * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
2104
+ */
2105
+ id?: string | null;
2106
+ }
1878
2107
  /**
1879
2108
  * Information related to Google Cloud Backup and DR Service findings.
1880
2109
  */
@@ -1929,7 +2158,7 @@ export declare namespace securitycenter_v1beta2 {
1929
2158
  */
1930
2159
  createTime?: string | null;
1931
2160
  /**
1932
- * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery Dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
2161
+ * The dataset to write findings' updates to. Its format is "projects/[project_id]/datasets/[bigquery_dataset_id]". BigQuery dataset unique ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_).
1933
2162
  */
1934
2163
  dataset?: string | null;
1935
2164
  /**
@@ -1945,7 +2174,7 @@ export declare namespace securitycenter_v1beta2 {
1945
2174
  */
1946
2175
  mostRecentEditor?: string | null;
1947
2176
  /**
1948
- * The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
2177
+ * Identifier. The relative resource name of this export. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name. The following list shows some examples: + `organizations/{organization_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `folders/{folder_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` + `projects/{project_id\}/locations/{location_id\}/bigQueryExports/{export_id\}` This field is provided in responses, and is ignored when provided in create requests.
1949
2178
  */
1950
2179
  name?: string | null;
1951
2180
  /**
@@ -2164,6 +2393,14 @@ export declare namespace securitycenter_v1beta2 {
2164
2393
  * The exploitation activity of the vulnerability in the wild.
2165
2394
  */
2166
2395
  exploitationActivity?: string | null;
2396
+ /**
2397
+ * Date the first publicly available exploit or PoC was released.
2398
+ */
2399
+ exploitReleaseDate?: string | null;
2400
+ /**
2401
+ * Date of the earliest known exploitation.
2402
+ */
2403
+ firstExploitationDate?: string | null;
2167
2404
  /**
2168
2405
  * The unique identifier for the vulnerability. e.g. CVE-2021-34527
2169
2406
  */
@@ -2230,6 +2467,27 @@ export declare namespace securitycenter_v1beta2 {
2230
2467
  */
2231
2468
  userInteraction?: string | null;
2232
2469
  }
2470
+ /**
2471
+ * Details about a data access attempt made by a principal not authorized under applicable data security policy.
2472
+ */
2473
+ export interface Schema$GoogleCloudSecuritycenterV2DataAccessEvent {
2474
+ /**
2475
+ * Unique identifier for data access event.
2476
+ */
2477
+ eventId?: string | null;
2478
+ /**
2479
+ * Timestamp of data access event.
2480
+ */
2481
+ eventTime?: string | null;
2482
+ /**
2483
+ * The operation performed by the principal to access the data.
2484
+ */
2485
+ operation?: string | null;
2486
+ /**
2487
+ * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
2488
+ */
2489
+ principalEmail?: string | null;
2490
+ }
2233
2491
  /**
2234
2492
  * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
2235
2493
  */
@@ -2259,6 +2517,31 @@ export declare namespace securitycenter_v1beta2 {
2259
2517
  */
2260
2518
  version?: string | null;
2261
2519
  }
2520
+ /**
2521
+ * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
2522
+ */
2523
+ export interface Schema$GoogleCloudSecuritycenterV2DataFlowEvent {
2524
+ /**
2525
+ * Unique identifier for data flow event.
2526
+ */
2527
+ eventId?: string | null;
2528
+ /**
2529
+ * Timestamp of data flow event.
2530
+ */
2531
+ eventTime?: string | null;
2532
+ /**
2533
+ * The operation performed by the principal for the data flow event.
2534
+ */
2535
+ operation?: string | null;
2536
+ /**
2537
+ * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
2538
+ */
2539
+ principalEmail?: string | null;
2540
+ /**
2541
+ * Non-compliant location of the principal or the data destination.
2542
+ */
2543
+ violatedLocation?: string | null;
2544
+ }
2262
2545
  /**
2263
2546
  * Memory hash detection contributing to the binary family match.
2264
2547
  */
@@ -2285,6 +2568,19 @@ export declare namespace securitycenter_v1beta2 {
2285
2568
  */
2286
2569
  relativePath?: string | null;
2287
2570
  }
2571
+ /**
2572
+ * The record of a dynamic mute rule that matches the finding.
2573
+ */
2574
+ export interface Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord {
2575
+ /**
2576
+ * When the dynamic mute rule first matched the finding.
2577
+ */
2578
+ matchTime?: string | null;
2579
+ /**
2580
+ * The relative resource name of the mute rule, represented by a mute config, that created this record, for example `organizations/123/muteConfigs/mymuteconfig` or `organizations/123/locations/global/muteConfigs/mymuteconfig`.
2581
+ */
2582
+ muteConfig?: string | null;
2583
+ }
2288
2584
  /**
2289
2585
  * A name-value pair representing an environment variable used in an operating system process.
2290
2586
  */
@@ -2472,10 +2768,18 @@ export declare namespace securitycenter_v1beta2 {
2472
2768
  * Output only. The time at which the finding was created in Security Command Center.
2473
2769
  */
2474
2770
  createTime?: string | null;
2771
+ /**
2772
+ * Data access events associated with the finding.
2773
+ */
2774
+ dataAccessEvents?: Schema$GoogleCloudSecuritycenterV2DataAccessEvent[];
2475
2775
  /**
2476
2776
  * Database associated with the finding.
2477
2777
  */
2478
2778
  database?: Schema$GoogleCloudSecuritycenterV2Database;
2779
+ /**
2780
+ * Data flow events associated with the finding.
2781
+ */
2782
+ dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
2479
2783
  /**
2480
2784
  * Contains more details about the finding.
2481
2785
  */
@@ -2506,6 +2810,10 @@ export declare namespace securitycenter_v1beta2 {
2506
2810
  * The class of the finding.
2507
2811
  */
2508
2812
  findingClass?: string | null;
2813
+ /**
2814
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.
2815
+ */
2816
+ groupMemberships?: Schema$GoogleCloudSecuritycenterV2GroupMembership[];
2509
2817
  /**
2510
2818
  * Represents IAM bindings associated with the finding.
2511
2819
  */
@@ -2542,6 +2850,10 @@ export declare namespace securitycenter_v1beta2 {
2542
2850
  * Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute.
2543
2851
  */
2544
2852
  mute?: string | null;
2853
+ /**
2854
+ * Output only. The mute information regarding this finding.
2855
+ */
2856
+ muteInfo?: Schema$GoogleCloudSecuritycenterV2MuteInfo;
2545
2857
  /**
2546
2858
  * Records additional information about the mute operation, for example, the [mute configuration](https://cloud.google.com/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding.
2547
2859
  */
@@ -2604,6 +2916,10 @@ export declare namespace securitycenter_v1beta2 {
2604
2916
  * Output only. The state of the finding.
2605
2917
  */
2606
2918
  state?: string | null;
2919
+ /**
2920
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
2921
+ */
2922
+ toxicCombination?: Schema$GoogleCloudSecuritycenterV2ToxicCombination;
2607
2923
  /**
2608
2924
  * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
2609
2925
  */
@@ -2631,6 +2947,19 @@ export declare namespace securitycenter_v1beta2 {
2631
2947
  */
2632
2948
  regionCode?: string | null;
2633
2949
  }
2950
+ /**
2951
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
2952
+ */
2953
+ export interface Schema$GoogleCloudSecuritycenterV2GroupMembership {
2954
+ /**
2955
+ * ID of the group.
2956
+ */
2957
+ groupId?: string | null;
2958
+ /**
2959
+ * Type of group.
2960
+ */
2961
+ groupType?: string | null;
2962
+ }
2634
2963
  /**
2635
2964
  * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
2636
2965
  */
@@ -2824,6 +3153,10 @@ export declare namespace securitycenter_v1beta2 {
2824
3153
  * A description of the mute config.
2825
3154
  */
2826
3155
  description?: string | null;
3156
+ /**
3157
+ * Optional. The expiry of the mute config. Only applicable for dynamic configs. If the expiry is set, when the config expires, it is removed from all findings.
3158
+ */
3159
+ expiryTime?: string | null;
2827
3160
  /**
2828
3161
  * Required. An expression that defines the filter to apply across create/update events of findings. While creating a filter string, be mindful of the scope in which the mute configuration is being created. E.g., If a filter contains project = X but is created under the project = Y scope, it might not match any findings. The following field and operator combinations are supported: * severity: `=`, `:` * category: `=`, `:` * resource.name: `=`, `:` * resource.project_name: `=`, `:` * resource.project_display_name: `=`, `:` * resource.folders.resource_folder: `=`, `:` * resource.parent_name: `=`, `:` * resource.parent_display_name: `=`, `:` * resource.type: `=`, `:` * finding_class: `=`, `:` * indicator.ip_addresses: `=`, `:` * indicator.domains: `=`, `:`
2829
3162
  */
@@ -2833,7 +3166,7 @@ export declare namespace securitycenter_v1beta2 {
2833
3166
  */
2834
3167
  mostRecentEditor?: string | null;
2835
3168
  /**
2836
- * This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
3169
+ * Identifier. This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization\}/muteConfigs/{mute_config\}` + `organizations/{organization\}locations/{location\}//muteConfigs/{mute_config\}` + `folders/{folder\}/muteConfigs/{mute_config\}` + `folders/{folder\}/locations/{location\}/muteConfigs/{mute_config\}` + `projects/{project\}/muteConfigs/{mute_config\}` + `projects/{project\}/locations/{location\}/muteConfigs/{mute_config\}`
2837
3170
  */
2838
3171
  name?: string | null;
2839
3172
  /**
@@ -2845,6 +3178,19 @@ export declare namespace securitycenter_v1beta2 {
2845
3178
  */
2846
3179
  updateTime?: string | null;
2847
3180
  }
3181
+ /**
3182
+ * Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
3183
+ */
3184
+ export interface Schema$GoogleCloudSecuritycenterV2MuteInfo {
3185
+ /**
3186
+ * The list of dynamic mute rules that currently match the finding.
3187
+ */
3188
+ dynamicMuteRecords?: Schema$GoogleCloudSecuritycenterV2DynamicMuteRecord[];
3189
+ /**
3190
+ * If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
3191
+ */
3192
+ staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
3193
+ }
2848
3194
  /**
2849
3195
  * Kubernetes nodes associated with the finding.
2850
3196
  */
@@ -3102,6 +3448,10 @@ export declare namespace securitycenter_v1beta2 {
3102
3448
  * The AWS metadata associated with the finding.
3103
3449
  */
3104
3450
  awsMetadata?: Schema$GoogleCloudSecuritycenterV2AwsMetadata;
3451
+ /**
3452
+ * The Azure metadata associated with the finding.
3453
+ */
3454
+ azureMetadata?: Schema$GoogleCloudSecuritycenterV2AzureMetadata;
3105
3455
  /**
3106
3456
  * Indicates which cloud provider the finding is from.
3107
3457
  */
@@ -3127,7 +3477,7 @@ export declare namespace securitycenter_v1beta2 {
3127
3477
  */
3128
3478
  resourcePath?: Schema$GoogleCloudSecuritycenterV2ResourcePath;
3129
3479
  /**
3130
- * A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\} where there can be any number of folders. For AWS, it has the format of org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\} where there can be any number of management groups.
3480
+ * A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id\}/folders/{folder_id\}/folders/{folder_id\}/projects/{project_id\}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id\}/ou/{organizational_unit_id\}/ou/{organizational_unit_id\}/account/{account_id\}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id\}/mg/{management_group_id\}/subscription/{subscription_id\}/rg/{resource_group_name\}` where there can be any number of management groups.
3131
3481
  */
3132
3482
  resourcePathString?: string | null;
3133
3483
  /**
@@ -3182,25 +3532,25 @@ export declare namespace securitycenter_v1beta2 {
3182
3532
  */
3183
3533
  description?: string | null;
3184
3534
  /**
3185
- * Name for the resource value configuration
3535
+ * Identifier. Name for the resource value configuration
3186
3536
  */
3187
3537
  name?: string | null;
3188
3538
  /**
3189
- * List of resource labels to search for, evaluated with AND. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" AND "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
3539
+ * List of resource labels to search for, evaluated with `AND`. For example, "resource_labels_selector": {"key": "value", "env": "prod"\} will match resources with labels "key": "value" `AND` "env": "prod" https://cloud.google.com/resource-manager/docs/creating-managing-labels
3190
3540
  */
3191
3541
  resourceLabelsSelector?: {
3192
3542
  [key: string]: string;
3193
3543
  } | null;
3194
3544
  /**
3195
- * Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
3545
+ * Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources.
3196
3546
  */
3197
3547
  resourceType?: string | null;
3198
3548
  /**
3199
- * Resource value level this expression represents Only required when there is no SDP mapping in the request
3549
+ * Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request
3200
3550
  */
3201
3551
  resourceValue?: string | null;
3202
3552
  /**
3203
- * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with AND of other resources.
3553
+ * Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with `AND` of other resources.
3204
3554
  */
3205
3555
  scope?: string | null;
3206
3556
  /**
@@ -3208,7 +3558,7 @@ export declare namespace securitycenter_v1beta2 {
3208
3558
  */
3209
3559
  sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping;
3210
3560
  /**
3211
- * Required. Tag values combined with AND to check against. Values in the form "tagValues/123" Example: [ "tagValues/123", "tagValues/456", "tagValues/789" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
3561
+ * Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
3212
3562
  */
3213
3563
  tagValues?: string[] | null;
3214
3564
  /**
@@ -3349,6 +3699,19 @@ export declare namespace securitycenter_v1beta2 {
3349
3699
  */
3350
3700
  principalSubject?: string | null;
3351
3701
  }
3702
+ /**
3703
+ * Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
3704
+ */
3705
+ export interface Schema$GoogleCloudSecuritycenterV2StaticMute {
3706
+ /**
3707
+ * When the static mute was applied.
3708
+ */
3709
+ applyTime?: string | null;
3710
+ /**
3711
+ * The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
3712
+ */
3713
+ state?: string | null;
3714
+ }
3352
3715
  /**
3353
3716
  * Represents a Kubernetes subject.
3354
3717
  */
@@ -3395,6 +3758,19 @@ export declare namespace securitycenter_v1beta2 {
3395
3758
  */
3396
3759
  uri?: string | null;
3397
3760
  }
3761
+ /**
3762
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
3763
+ */
3764
+ export interface Schema$GoogleCloudSecuritycenterV2ToxicCombination {
3765
+ /**
3766
+ * The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
3767
+ */
3768
+ attackExposureScore?: number | null;
3769
+ /**
3770
+ * List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
3771
+ */
3772
+ relatedFindings?: string[] | null;
3773
+ }
3398
3774
  /**
3399
3775
  * Refers to common vulnerability fields e.g. cve, cvss, cwe etc.
3400
3776
  */
@@ -3425,6 +3801,19 @@ export declare namespace securitycenter_v1beta2 {
3425
3801
  */
3426
3802
  yaraRule?: string | null;
3427
3803
  }
3804
+ /**
3805
+ * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
3806
+ */
3807
+ export interface Schema$GroupMembership {
3808
+ /**
3809
+ * ID of the group.
3810
+ */
3811
+ groupId?: string | null;
3812
+ /**
3813
+ * Type of group.
3814
+ */
3815
+ groupType?: string | null;
3816
+ }
3428
3817
  /**
3429
3818
  * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
3430
3819
  */
@@ -3606,6 +3995,19 @@ export declare namespace securitycenter_v1beta2 {
3606
3995
  */
3607
3996
  version?: string | null;
3608
3997
  }
3998
+ /**
3999
+ * Mute information about the finding, including whether the finding has a static mute or any matching dynamic mute rules.
4000
+ */
4001
+ export interface Schema$MuteInfo {
4002
+ /**
4003
+ * The list of dynamic mute rules that currently match the finding.
4004
+ */
4005
+ dynamicMuteRecords?: Schema$DynamicMuteRecord[];
4006
+ /**
4007
+ * If set, the static mute applied to this finding. Static mutes override dynamic mutes. If unset, there is no static mute.
4008
+ */
4009
+ staticMute?: Schema$StaticMute;
4010
+ }
3609
4011
  /**
3610
4012
  * Kubernetes nodes associated with the finding.
3611
4013
  */
@@ -3947,13 +4349,13 @@ export declare namespace securitycenter_v1beta2 {
3947
4349
  */
3948
4350
  export interface Schema$SecurityHealthAnalyticsSettings {
3949
4351
  /**
3950
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
4352
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
3951
4353
  */
3952
4354
  modules?: {
3953
4355
  [key: string]: Schema$Config;
3954
4356
  } | null;
3955
4357
  /**
3956
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
4358
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
3957
4359
  */
3958
4360
  name?: string | null;
3959
4361
  /**
@@ -4055,6 +4457,19 @@ export declare namespace securitycenter_v1beta2 {
4055
4457
  */
4056
4458
  principalSubject?: string | null;
4057
4459
  }
4460
+ /**
4461
+ * Information about the static mute state. A static mute state overrides any dynamic mute rules that apply to this finding. The static mute state can be set by a static mute rule or by muting the finding directly.
4462
+ */
4463
+ export interface Schema$StaticMute {
4464
+ /**
4465
+ * When the static mute was applied.
4466
+ */
4467
+ applyTime?: string | null;
4468
+ /**
4469
+ * The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value.
4470
+ */
4471
+ state?: string | null;
4472
+ }
4058
4473
  /**
4059
4474
  * Represents a Kubernetes subject.
4060
4475
  */
@@ -4118,18 +4533,31 @@ export declare namespace securitycenter_v1beta2 {
4118
4533
  */
4119
4534
  uri?: string | null;
4120
4535
  }
4536
+ /**
4537
+ * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.
4538
+ */
4539
+ export interface Schema$ToxicCombination {
4540
+ /**
4541
+ * The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.
4542
+ */
4543
+ attackExposureScore?: number | null;
4544
+ /**
4545
+ * List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.
4546
+ */
4547
+ relatedFindings?: string[] | null;
4548
+ }
4121
4549
  /**
4122
4550
  * Resource capturing the settings for the Virtual Machine Threat Detection service.
4123
4551
  */
4124
4552
  export interface Schema$VirtualMachineThreatDetectionSettings {
4125
4553
  /**
4126
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
4554
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
4127
4555
  */
4128
4556
  modules?: {
4129
4557
  [key: string]: Schema$Config;
4130
4558
  } | null;
4131
4559
  /**
4132
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
4560
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
4133
4561
  */
4134
4562
  name?: string | null;
4135
4563
  /**
@@ -4203,13 +4631,13 @@ export declare namespace securitycenter_v1beta2 {
4203
4631
  */
4204
4632
  export interface Schema$WebSecurityScannerSettings {
4205
4633
  /**
4206
- * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's.
4634
+ * The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's configuration.
4207
4635
  */
4208
4636
  modules?: {
4209
4637
  [key: string]: Schema$Config;
4210
4638
  } | null;
4211
4639
  /**
4212
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
4640
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
4213
4641
  */
4214
4642
  name?: string | null;
4215
4643
  /**
@@ -4466,7 +4894,7 @@ export declare namespace securitycenter_v1beta2 {
4466
4894
  }
4467
4895
  export interface Params$Resource$Folders$Updatecontainerthreatdetectionsettings extends StandardParameters {
4468
4896
  /**
4469
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
4897
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
4470
4898
  */
4471
4899
  name?: string;
4472
4900
  /**
@@ -4480,7 +4908,7 @@ export declare namespace securitycenter_v1beta2 {
4480
4908
  }
4481
4909
  export interface Params$Resource$Folders$Updateeventthreatdetectionsettings extends StandardParameters {
4482
4910
  /**
4483
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
4911
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
4484
4912
  */
4485
4913
  name?: string;
4486
4914
  /**
@@ -4508,7 +4936,7 @@ export declare namespace securitycenter_v1beta2 {
4508
4936
  }
4509
4937
  export interface Params$Resource$Folders$Updatesecurityhealthanalyticssettings extends StandardParameters {
4510
4938
  /**
4511
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
4939
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
4512
4940
  */
4513
4941
  name?: string;
4514
4942
  /**
@@ -4522,7 +4950,7 @@ export declare namespace securitycenter_v1beta2 {
4522
4950
  }
4523
4951
  export interface Params$Resource$Folders$Updatevirtualmachinethreatdetectionsettings extends StandardParameters {
4524
4952
  /**
4525
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
4953
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
4526
4954
  */
4527
4955
  name?: string;
4528
4956
  /**
@@ -4536,7 +4964,7 @@ export declare namespace securitycenter_v1beta2 {
4536
4964
  }
4537
4965
  export interface Params$Resource$Folders$Updatewebsecurityscannersettings extends StandardParameters {
4538
4966
  /**
4539
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
4967
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
4540
4968
  */
4541
4969
  name?: string;
4542
4970
  /**
@@ -4948,7 +5376,7 @@ export declare namespace securitycenter_v1beta2 {
4948
5376
  }
4949
5377
  export interface Params$Resource$Organizations$Updatecontainerthreatdetectionsettings extends StandardParameters {
4950
5378
  /**
4951
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
5379
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
4952
5380
  */
4953
5381
  name?: string;
4954
5382
  /**
@@ -4962,7 +5390,7 @@ export declare namespace securitycenter_v1beta2 {
4962
5390
  }
4963
5391
  export interface Params$Resource$Organizations$Updateeventthreatdetectionsettings extends StandardParameters {
4964
5392
  /**
4965
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
5393
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
4966
5394
  */
4967
5395
  name?: string;
4968
5396
  /**
@@ -4990,7 +5418,7 @@ export declare namespace securitycenter_v1beta2 {
4990
5418
  }
4991
5419
  export interface Params$Resource$Organizations$Updatesecurityhealthanalyticssettings extends StandardParameters {
4992
5420
  /**
4993
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
5421
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
4994
5422
  */
4995
5423
  name?: string;
4996
5424
  /**
@@ -5004,7 +5432,7 @@ export declare namespace securitycenter_v1beta2 {
5004
5432
  }
5005
5433
  export interface Params$Resource$Organizations$Updatevirtualmachinethreatdetectionsettings extends StandardParameters {
5006
5434
  /**
5007
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
5435
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
5008
5436
  */
5009
5437
  name?: string;
5010
5438
  /**
@@ -5018,7 +5446,7 @@ export declare namespace securitycenter_v1beta2 {
5018
5446
  }
5019
5447
  export interface Params$Resource$Organizations$Updatewebsecurityscannersettings extends StandardParameters {
5020
5448
  /**
5021
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
5449
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
5022
5450
  */
5023
5451
  name?: string;
5024
5452
  /**
@@ -5411,7 +5839,7 @@ export declare namespace securitycenter_v1beta2 {
5411
5839
  }
5412
5840
  export interface Params$Resource$Projects$Updatecontainerthreatdetectionsettings extends StandardParameters {
5413
5841
  /**
5414
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
5842
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
5415
5843
  */
5416
5844
  name?: string;
5417
5845
  /**
@@ -5425,7 +5853,7 @@ export declare namespace securitycenter_v1beta2 {
5425
5853
  }
5426
5854
  export interface Params$Resource$Projects$Updateeventthreatdetectionsettings extends StandardParameters {
5427
5855
  /**
5428
- * The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
5856
+ * Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization\}/eventThreatDetectionSettings * folders/{folder\}/eventThreatDetectionSettings * projects/{project\}/eventThreatDetectionSettings
5429
5857
  */
5430
5858
  name?: string;
5431
5859
  /**
@@ -5453,7 +5881,7 @@ export declare namespace securitycenter_v1beta2 {
5453
5881
  }
5454
5882
  export interface Params$Resource$Projects$Updatesecurityhealthanalyticssettings extends StandardParameters {
5455
5883
  /**
5456
- * The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
5884
+ * Identifier. The resource name of the SecurityHealthAnalyticsSettings. Formats: * organizations/{organization\}/securityHealthAnalyticsSettings * folders/{folder\}/securityHealthAnalyticsSettings * projects/{project\}/securityHealthAnalyticsSettings
5457
5885
  */
5458
5886
  name?: string;
5459
5887
  /**
@@ -5467,7 +5895,7 @@ export declare namespace securitycenter_v1beta2 {
5467
5895
  }
5468
5896
  export interface Params$Resource$Projects$Updatevirtualmachinethreatdetectionsettings extends StandardParameters {
5469
5897
  /**
5470
- * The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
5898
+ * Identifier. The resource name of the VirtualMachineThreatDetectionSettings. Formats: * organizations/{organization\}/virtualMachineThreatDetectionSettings * folders/{folder\}/virtualMachineThreatDetectionSettings * projects/{project\}/virtualMachineThreatDetectionSettings
5471
5899
  */
5472
5900
  name?: string;
5473
5901
  /**
@@ -5481,7 +5909,7 @@ export declare namespace securitycenter_v1beta2 {
5481
5909
  }
5482
5910
  export interface Params$Resource$Projects$Updatewebsecurityscannersettings extends StandardParameters {
5483
5911
  /**
5484
- * The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
5912
+ * Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization\}/webSecurityScannerSettings * folders/{folder\}/webSecurityScannerSettings * projects/{project\}/webSecurityScannerSettings
5485
5913
  */
5486
5914
  name?: string;
5487
5915
  /**
@@ -5587,7 +6015,7 @@ export declare namespace securitycenter_v1beta2 {
5587
6015
  }
5588
6016
  export interface Params$Resource$Projects$Locations$Clusters$Updatecontainerthreatdetectionsettings extends StandardParameters {
5589
6017
  /**
5590
- * The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
6018
+ * Identifier. The resource name of the ContainerThreatDetectionSettings. Formats: * organizations/{organization\}/containerThreatDetectionSettings * folders/{folder\}/containerThreatDetectionSettings * projects/{project\}/containerThreatDetectionSettings * projects/{project\}/locations/{location\}/clusters/{cluster\}/containerThreatDetectionSettings
5591
6019
  */
5592
6020
  name?: string;
5593
6021
  /**