@googleapis/securitycenter 9.0.0 → 11.0.0

package/build/v1.d.ts

@@ -242,13 +242,21 @@ export declare namespace securitycenter_v1 {
          */
         classification?: string | null;
         /**
-         * Total BPS (bytes per second) volume of attack.
+         * Total BPS (bytes per second) volume of attack. Deprecated - refer to volume_bps_long instead.
          */
         volumeBps?: number | null;
         /**
-         * Total PPS (packets per second) volume of attack.
+         * Total BPS (bytes per second) volume of attack.
+         */
+        volumeBpsLong?: string | null;
+        /**
+         * Total PPS (packets per second) volume of attack. Deprecated - refer to volume_pps_long instead.
          */
         volumePps?: number | null;
+        /**
+         * Total PPS (packets per second) volume of attack.
+         */
+        volumePpsLong?: string | null;
     }
     /**
      * An attack exposure contains the results of an attack path simulation run.
@@ -476,11 +484,19 @@ export declare namespace securitycenter_v1 {
          * The Azure subscription associated with the resource.
          */
         subscription?: Schema$AzureSubscription;
+        /**
+         * The Azure Entra tenant associated with the resource.
+         */
+        tenant?: Schema$AzureTenant;
     }
     /**
      * Represents an Azure resource group.
      */
     export interface Schema$AzureResourceGroup {
+        /**
+         * The ID of the Azure resource group.
+         */
+        id?: string | null;
         /**
          * The name of the Azure resource group. This is not a UUID.
          */
@@ -499,6 +515,19 @@ export declare namespace securitycenter_v1 {
          */
         id?: string | null;
     }
+    /**
+     * Represents a Microsoft Entra tenant.
+     */
+    export interface Schema$AzureTenant {
+        /**
+         * The display name of the Azure tenant.
+         */
+        displayName?: string | null;
+        /**
+         * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+         */
+        id?: string | null;
+    }
     /**
      * Information related to Google Cloud Backup and DR Service findings.
      */
@@ -858,6 +887,10 @@ export declare namespace securitycenter_v1 {
          * Date the first publicly available exploit or PoC was released.
          */
         exploitReleaseDate?: string | null;
+        /**
+         * Date of the earliest known exploitation.
+         */
+        firstExploitationDate?: string | null;
         /**
          * The unique identifier for the vulnerability. e.g. CVE-2021-34527
          */
@@ -924,6 +957,27 @@ export declare namespace securitycenter_v1 {
          */
         userInteraction?: string | null;
     }
+    /**
+     * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+     */
+    export interface Schema$DataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+    }
     /**
      * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
      */
@@ -953,6 +1007,52 @@ export declare namespace securitycenter_v1 {
          */
         version?: string | null;
     }
+    /**
+     * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+     */
+    export interface Schema$DataFlowEvent {
+        /**
+         * Unique identifier for data flow event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data flow event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal for the data flow event.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+        /**
+         * Non-compliant location of the principal or the data destination.
+         */
+        violatedLocation?: string | null;
+    }
+    /**
+     * Details about data retention deletion violations, in which the data is non-compliant based on their retention or deletion time, as defined in the applicable data security policy. The Data Retention Deletion (DRD) control is a control of the DSPM (Data Security Posture Management) suite that enables organizations to manage data retention and deletion policies in compliance with regulations, such as GDPR and CRPA. DRD supports two primary policy types: maximum storage length (max TTL) and minimum storage length (min TTL). Both are aimed at helping organizations meet regulatory and data management commitments.
+     */
+    export interface Schema$DataRetentionDeletionEvent {
+        /**
+         * Number of objects that violated the policy for this resource. If the number is less than 1,000, then the value of this field is the exact number. If the number of objects that violated the policy is greater than or equal to 1,000, then the value of this field is 1000.
+         */
+        dataObjectCount?: string | null;
+        /**
+         * Timestamp indicating when the event was detected.
+         */
+        eventDetectionTime?: string | null;
+        /**
+         * Type of the DRD event.
+         */
+        eventType?: string | null;
+        /**
+         * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+         */
+        maxRetentionAllowed?: string | null;
+    }
     /**
      * Memory hash detection contributing to the binary family match.
      */
@@ -966,6 +1066,15 @@ export declare namespace securitycenter_v1 {
          */
         percentPagesMatched?: number | null;
     }
+    /**
+     * Contains information about the disk associated with the finding.
+     */
+    export interface Schema$Disk {
+        /**
+         * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+         */
+        name?: string | null;
+    }
     /**
      * Path of the file in terms of underlying disk/partition identifiers.
      */
@@ -996,6 +1105,10 @@ export declare namespace securitycenter_v1 {
      * An EffectiveEventThreatDetectionCustomModule is the representation of an Event Threat Detection custom module at a specified level of the resource hierarchy: organization, folder, or project. If a custom module is inherited from a parent organization or folder, the value of the `enablement_state` property in EffectiveEventThreatDetectionCustomModule is set to the value that is effective in the parent, instead of `INHERITED`. For example, if the module is enabled in a parent organization or folder, the effective `enablement_state` for the module in all child folders or projects is also `enabled`. EffectiveEventThreatDetectionCustomModule is read-only.
      */
     export interface Schema$EffectiveEventThreatDetectionCustomModule {
+        /**
+         * The cloud provider of the custom module.
+         */
+        cloudProvider?: string | null;
         /**
          * Output only. Config for the effective module.
          */
@@ -1049,6 +1162,10 @@ export declare namespace securitycenter_v1 {
          * Output only. The closest ancestor module that this module inherits the enablement state from. The format is the same as the EventThreatDetectionCustomModule resource name.
          */
         ancestorModule?: string | null;
+        /**
+         * The cloud provider of the custom module.
+         */
+        cloudProvider?: string | null;
         /**
          * Config for the module. For the resident module, its config value is defined at this level. For the inherited module, its config value is inherited from the ancestor module.
          */
@@ -1230,14 +1347,30 @@ export declare namespace securitycenter_v1 {
          * The time at which the finding was created in Security Command Center.
          */
         createTime?: string | null;
+        /**
+         * Data access events associated with the finding.
+         */
+        dataAccessEvents?: Schema$DataAccessEvent[];
         /**
          * Database associated with the finding.
          */
         database?: Schema$Database;
+        /**
+         * Data flow events associated with the finding.
+         */
+        dataFlowEvents?: Schema$DataFlowEvent[];
+        /**
+         * Data retention deletion events associated with the finding.
+         */
+        dataRetentionDeletionEvents?: Schema$DataRetentionDeletionEvent[];
         /**
          * Contains more details about the finding.
          */
         description?: string | null;
+        /**
+         * Disk associated with the finding.
+         */
+        disk?: Schema$Disk;
         /**
          * The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
          */
@@ -1566,6 +1699,10 @@ export declare namespace securitycenter_v1 {
      * An EffectiveSecurityHealthAnalyticsCustomModule is the representation of a Security Health Analytics custom module at a specified level of the resource hierarchy: organization, folder, or project. If a custom module is inherited from a parent organization or folder, the value of the `enablementState` property in EffectiveSecurityHealthAnalyticsCustomModule is set to the value that is effective in the parent, instead of `INHERITED`. For example, if the module is enabled in a parent organization or folder, the effective enablement_state for the module in all child folders or projects is also `enabled`. EffectiveSecurityHealthAnalyticsCustomModule is read-only.
      */
     export interface Schema$GoogleCloudSecuritycenterV1EffectiveSecurityHealthAnalyticsCustomModule {
+        /**
+         * The cloud provider of the custom module.
+         */
+        cloudProvider?: string | null;
         /**
          * Output only. The user-specified configuration for the module.
          */
@@ -1970,7 +2107,7 @@ export declare namespace securitycenter_v1 {
          */
         sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
         /**
-         * Required. Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
+         * Required. Tag values combined with `AND` to check against. For Google Cloud resources, they are tag value IDs in the form of "tagValues/123". Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
          */
         tagValues?: string[] | null;
         /**
@@ -1999,6 +2136,10 @@ export declare namespace securitycenter_v1 {
          * Output only. If empty, indicates that the custom module was created in the organization, folder, or project in which you are viewing the custom module. Otherwise, `ancestor_module` specifies the organization or folder from which the custom module is inherited.
          */
         ancestorModule?: string | null;
+        /**
+         * The cloud provider of the custom module.
+         */
+        cloudProvider?: string | null;
         /**
          * The user specified custom configuration for the module.
          */
@@ -2150,13 +2291,21 @@ export declare namespace securitycenter_v1 {
          */
         classification?: string | null;
         /**
-         * Total BPS (bytes per second) volume of attack.
+         * Total BPS (bytes per second) volume of attack. Deprecated - refer to volume_bps_long instead.
          */
         volumeBps?: number | null;
         /**
-         * Total PPS (packets per second) volume of attack.
+         * Total BPS (bytes per second) volume of attack.
+         */
+        volumeBpsLong?: string | null;
+        /**
+         * Total PPS (packets per second) volume of attack. Deprecated - refer to volume_pps_long instead.
          */
         volumePps?: number | null;
+        /**
+         * Total PPS (packets per second) volume of attack.
+         */
+        volumePpsLong?: string | null;
     }
     /**
      * An attack exposure contains the results of an attack path simulation run.
@@ -2272,11 +2421,19 @@ export declare namespace securitycenter_v1 {
          * The Azure subscription associated with the resource.
          */
         subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
+        /**
+         * The Azure Entra tenant associated with the resource.
+         */
+        tenant?: Schema$GoogleCloudSecuritycenterV2AzureTenant;
     }
     /**
      * Represents an Azure resource group.
      */
     export interface Schema$GoogleCloudSecuritycenterV2AzureResourceGroup {
+        /**
+         * The ID of the Azure resource group.
+         */
+        id?: string | null;
         /**
          * The name of the Azure resource group. This is not a UUID.
          */
@@ -2295,6 +2452,19 @@ export declare namespace securitycenter_v1 {
          */
         id?: string | null;
     }
+    /**
+     * Represents a Microsoft Entra tenant.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
+        /**
+         * The display name of the Azure tenant.
+         */
+        displayName?: string | null;
+        /**
+         * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+         */
+        id?: string | null;
+    }
     /**
      * Information related to Google Cloud Backup and DR Service findings.
      */
@@ -2588,6 +2758,10 @@ export declare namespace securitycenter_v1 {
          * Date the first publicly available exploit or PoC was released.
          */
         exploitReleaseDate?: string | null;
+        /**
+         * Date of the earliest known exploitation.
+         */
+        firstExploitationDate?: string | null;
         /**
          * The unique identifier for the vulnerability. e.g. CVE-2021-34527
          */
@@ -2654,6 +2828,27 @@ export declare namespace securitycenter_v1 {
          */
         userInteraction?: string | null;
     }
+    /**
+     * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+    }
     /**
      * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
      */
@@ -2683,6 +2878,52 @@ export declare namespace securitycenter_v1 {
          */
         version?: string | null;
     }
+    /**
+     * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DataFlowEvent {
+        /**
+         * Unique identifier for data flow event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data flow event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal for the data flow event.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+        /**
+         * Non-compliant location of the principal or the data destination.
+         */
+        violatedLocation?: string | null;
+    }
+    /**
+     * Details about data retention deletion violations, in which the data is non-compliant based on their retention or deletion time, as defined in the applicable data security policy. The Data Retention Deletion (DRD) control is a control of the DSPM (Data Security Posture Management) suite that enables organizations to manage data retention and deletion policies in compliance with regulations, such as GDPR and CRPA. DRD supports two primary policy types: maximum storage length (max TTL) and minimum storage length (min TTL). Both are aimed at helping organizations meet regulatory and data management commitments.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DataRetentionDeletionEvent {
+        /**
+         * Number of objects that violated the policy for this resource. If the number is less than 1,000, then the value of this field is the exact number. If the number of objects that violated the policy is greater than or equal to 1,000, then the value of this field is 1000.
+         */
+        dataObjectCount?: string | null;
+        /**
+         * Timestamp indicating when the event was detected.
+         */
+        eventDetectionTime?: string | null;
+        /**
+         * Type of the DRD event.
+         */
+        eventType?: string | null;
+        /**
+         * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+         */
+        maxRetentionAllowed?: string | null;
+    }
     /**
      * Memory hash detection contributing to the binary family match.
      */
@@ -2696,6 +2937,15 @@ export declare namespace securitycenter_v1 {
          */
         percentPagesMatched?: number | null;
     }
+    /**
+     * Contains information about the disk associated with the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Disk {
+        /**
+         * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id".
+         */
+        name?: string | null;
+    }
     /**
      * Path of the file in terms of underlying disk/partition identifiers.
      */
@@ -2909,14 +3159,30 @@ export declare namespace securitycenter_v1 {
          * Output only. The time at which the finding was created in Security Command Center.
          */
         createTime?: string | null;
+        /**
+         * Data access events associated with the finding.
+         */
+        dataAccessEvents?: Schema$GoogleCloudSecuritycenterV2DataAccessEvent[];
         /**
          * Database associated with the finding.
          */
         database?: Schema$GoogleCloudSecuritycenterV2Database;
+        /**
+         * Data flow events associated with the finding.
+         */
+        dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
+        /**
+         * Data retention deletion events associated with the finding.
+         */
+        dataRetentionDeletionEvents?: Schema$GoogleCloudSecuritycenterV2DataRetentionDeletionEvent[];
         /**
          * Contains more details about the finding.
          */
         description?: string | null;
+        /**
+         * Disk associated with the finding.
+         */
+        disk?: Schema$GoogleCloudSecuritycenterV2Disk;
         /**
          * The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
          */
@@ -3038,98 +3304,361 @@ export declare namespace securitycenter_v1 {
         /**
          * The severity of the finding. This field is managed by the source that writes the finding.
          */
-        severity?: string | null;
+        severity?: string | null;
+        /**
+         * Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
+         */
+        sourceProperties?: {
+            [key: string]: any;
+        } | null;
+        /**
+         * Output only. The state of the finding.
+         */
+        state?: string | null;
+        /**
+         * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
+         */
+        toxicCombination?: Schema$GoogleCloudSecuritycenterV2ToxicCombination;
+        /**
+         * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
+         */
+        vulnerability?: Schema$GoogleCloudSecuritycenterV2Vulnerability;
+    }
+    /**
+     * Message that contains the resource name and display name of a folder resource.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Folder {
+        /**
+         * Full resource name of this folder. See: https://cloud.google.com/apis/design/resource_names#full_resource_name
+         */
+        resourceFolder?: string | null;
+        /**
+         * The user defined display name for this folder.
+         */
+        resourceFolderDisplayName?: string | null;
+    }
+    /**
+     * Represents a geographical location for a given access.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Geolocation {
+        /**
+         * A CLDR.
+         */
+        regionCode?: string | null;
+    }
+    /**
+     * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2GroupMembership {
+        /**
+         * ID of the group.
+         */
+        groupId?: string | null;
+        /**
+         * Type of group.
+         */
+        groupType?: string | null;
+    }
+    /**
+     * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IamBinding {
+        /**
+         * The action that was performed on a Binding.
+         */
+        action?: string | null;
+        /**
+         * A single identity requesting access for a Cloud Platform resource, for example, "foo@google.com".
+         */
+        member?: string | null;
+        /**
+         * Role that is assigned to "members". For example, "roles/viewer", "roles/editor", or "roles/owner".
+         */
+        role?: string | null;
+    }
+    /**
+     * Represents what's commonly known as an _indicator of compromise_ (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Indicator {
+        /**
+         * List of domains associated to the Finding.
+         */
+        domains?: string[] | null;
+        /**
+         * The list of IP addresses that are associated with the finding.
+         */
+        ipAddresses?: string[] | null;
+        /**
+         * The list of matched signatures indicating that the given process is present in the environment.
+         */
+        signatures?: Schema$GoogleCloudSecuritycenterV2ProcessSignature[];
+        /**
+         * The list of URIs associated to the Findings.
+         */
+        uris?: string[] | null;
+    }
+    /**
+     * Security Command Center Issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2Issue {
+        /**
+         * Output only. The time the issue was created.
+         */
+        createTime?: string | null;
+        /**
+         * The description of the issue in Markdown format.
+         */
+        description?: string | null;
+        /**
+         * The finding category or rule name that generated the issue.
+         */
+        detection?: string | null;
+        /**
+         * The domains of the issue.
+         */
+        domains?: Schema$GoogleCloudSecuritycenterV2IssueDomain[];
+        /**
+         * The exposure score of the issue.
+         */
+        exposureScore?: number | null;
+        /**
+         * The type of the issue.
+         */
+        issueType?: string | null;
+        /**
+         * The time the issue was last observed.
+         */
+        lastObservationTime?: string | null;
+        /**
+         * The mute information of the issue.
+         */
+        mute?: Schema$GoogleCloudSecuritycenterV2IssueMute;
+        /**
+         * Identifier. The name of the issue. Format: organizations/{organization\}/locations/{location\}/issues/{issue\}
+         */
+        name?: string | null;
+        /**
+         * The primary resource associated with the issue.
+         */
+        primaryResource?: Schema$GoogleCloudSecuritycenterV2IssueResource;
+        /**
+         * The findings related to the issue.
+         */
+        relatedFindings?: Schema$GoogleCloudSecuritycenterV2IssueFinding[];
+        /**
+         * Approaches to remediate the issue in Markdown format.
+         */
+        remediations?: string[] | null;
+        /**
+         * Additional resources associated with the issue.
+         */
+        secondaryResources?: Schema$GoogleCloudSecuritycenterV2IssueResource[];
+        /**
+         * The security context of the issue.
+         */
+        securityContexts?: Schema$GoogleCloudSecuritycenterV2IssueSecurityContext[];
+        /**
+         * The severity of the issue.
+         */
+        severity?: string | null;
+        /**
+         * Output only. The state of the issue.
+         */
+        state?: string | null;
+        /**
+         * Output only. The time the issue was last updated.
+         */
+        updateTime?: string | null;
+    }
+    /**
+     * The domains of an issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueDomain {
+        /**
+         * The domain category of the issue.
+         */
+        domainCategory?: string | null;
+    }
+    /**
+     * Finding related to an issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueFinding {
+        /**
+         * The CVE of the finding.
+         */
+        cve?: Schema$GoogleCloudSecuritycenterV2IssueFindingCve;
+        /**
+         * The name of the finding.
+         */
+        name?: string | null;
+        /**
+         * The security bulletin of the finding.
+         */
+        securityBulletin?: Schema$GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin;
+    }
+    /**
+     * The CVE of the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueFindingCve {
+        /**
+         * The CVE name.
+         */
+        name?: string | null;
+    }
+    /**
+     * The security bulletin of the finding.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin {
+        /**
+         * The security bulletin name.
+         */
+        name?: string | null;
+    }
+    /**
+     * The mute information of the issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueMute {
+        /**
+         * The email address of the user who last changed the mute state of the issue.
+         */
+        muteInitiator?: string | null;
+        /**
+         * The user-provided reason for muting the issue.
+         */
+        muteReason?: string | null;
+        /**
+         * Output only. The mute state of the issue.
+         */
+        muteState?: string | null;
+        /**
+         * The time the issue was muted.
+         */
+        muteUpdateTime?: string | null;
+    }
+    /**
+     * A resource associated with the an issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResource {
+        /**
+         * The AWS metadata of the resource associated with the issue. Only populated for AWS resources.
+         */
+        awsMetadata?: Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadata;
+        /**
+         * The Azure metadata of the resource associated with the issue. Only populated for Azure resources.
+         */
+        azureMetadata?: Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadata;
+        /**
+         * The cloud provider of the resource associated with the issue.
+         */
+        cloudProvider?: string | null;
+        /**
+         * The resource-type specific display name of the resource associated with the issue.
+         */
+        displayName?: string | null;
         /**
-         * Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only.
+         * The Google Cloud metadata of the resource associated with the issue. Only populated for Google Cloud resources.
          */
-        sourceProperties?: {
-            [key: string]: any;
-        } | null;
+        googleCloudMetadata?: Schema$GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata;
         /**
-         * Output only. The state of the finding.
+         * The full resource name of the resource associated with the issue.
          */
-        state?: string | null;
+        name?: string | null;
         /**
-         * Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests.
+         * The type of the resource associated with the issue.
          */
-        toxicCombination?: Schema$GoogleCloudSecuritycenterV2ToxicCombination;
+        type?: string | null;
+    }
+    /**
+     * The AWS metadata of a resource associated with an issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadata {
         /**
-         * Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
+         * The AWS account of the resource associated with the issue.
          */
-        vulnerability?: Schema$GoogleCloudSecuritycenterV2Vulnerability;
+        account?: Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount;
     }
     /**
-     * Message that contains the resource name and display name of a folder resource.
+     * The AWS account of the resource associated with the issue.
      */
-    export interface Schema$GoogleCloudSecuritycenterV2Folder {
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount {
         /**
-         * Full resource name of this folder. See: https://cloud.google.com/apis/design/resource_names#full_resource_name
+         * The AWS account ID of the resource associated with the issue.
          */
-        resourceFolder?: string | null;
+        id?: string | null;
         /**
-         * The user defined display name for this folder.
+         * The AWS account name of the resource associated with the issue.
          */
-        resourceFolderDisplayName?: string | null;
+        name?: string | null;
     }
     /**
-     * Represents a geographical location for a given access.
+     * The Azure metadata of a resource associated with an issue.
      */
-    export interface Schema$GoogleCloudSecuritycenterV2Geolocation {
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadata {
         /**
-         * A CLDR.
+         * The Azure subscription of the resource associated with the issue.
          */
-        regionCode?: string | null;
+        subscription?: Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription;
     }
     /**
-     * Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.
+     * The Azure subscription of the resource associated with the issue.
      */
-    export interface Schema$GoogleCloudSecuritycenterV2GroupMembership {
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription {
         /**
-         * ID of the group.
+         * The Azure subscription display name of the resource associated with the issue.
          */
-        groupId?: string | null;
+        displayName?: string | null;
         /**
-         * Type of group.
+         * The Azure subscription ID of the resource associated with the issue.
          */
-        groupType?: string | null;
+        id?: string | null;
     }
     /**
-     * Represents a particular IAM binding, which captures a member's role addition, removal, or state.
+     * Google Cloud metadata of a resource associated with an issue.
      */
-    export interface Schema$GoogleCloudSecuritycenterV2IamBinding {
+    export interface Schema$GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata {
         /**
-         * The action that was performed on a Binding.
+         * The project ID that the resource associated with the issue belongs to.
          */
-        action?: string | null;
+        projectId?: string | null;
+    }
+    /**
+     * Security context associated with an issue.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueSecurityContext {
         /**
-         * A single identity requesting access for a Cloud Platform resource, for example, "foo@google.com".
+         * The aggregated count of the security context.
          */
-        member?: string | null;
+        aggregatedCount?: Schema$GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount;
         /**
-         * Role that is assigned to "members". For example, "roles/viewer", "roles/editor", or "roles/owner".
+         * The context of the security context.
          */
-        role?: string | null;
+        context?: Schema$GoogleCloudSecuritycenterV2IssueSecurityContextContext;
     }
     /**
-     * Represents what's commonly known as an _indicator of compromise_ (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
+     * Aggregated count of a security context.
      */
-    export interface Schema$GoogleCloudSecuritycenterV2Indicator {
+    export interface Schema$GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount {
         /**
-         * List of domains associated to the Finding.
+         * Aggregation key.
          */
-        domains?: string[] | null;
+        key?: string | null;
         /**
-         * The list of IP addresses that are associated with the finding.
+         * Aggregation value.
          */
-        ipAddresses?: string[] | null;
+        value?: number | null;
+    }
+    /**
+     * Context of a security context.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2IssueSecurityContextContext {
         /**
-         * The list of matched signatures indicating that the given process is present in the environment.
+         * Context type.
          */
-        signatures?: Schema$GoogleCloudSecuritycenterV2ProcessSignature[];
+        type?: string | null;
         /**
-         * The list of URIs associated to the Findings.
+         * Context values.
          */
-        uris?: string[] | null;
+        values?: string[] | null;
     }
     /**
      * Kernel mode rootkit signatures.
@@ -3691,7 +4220,7 @@ export declare namespace securitycenter_v1 {
          */
         sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping;
         /**
-         * Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
+         * Tag values combined with `AND` to check against. For Google Cloud resources, they are tag value IDs in the form of "tagValues/123". Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
          */
         tagValues?: string[] | null;
         /**
@@ -5146,7 +5675,7 @@ export declare namespace securitycenter_v1 {
      */
     export interface Schema$SetFindingStateRequest {
         /**
-         * Required. The time at which the updated state takes effect.
+         * Optional. The time at which the updated state takes effect. If unset, defaults to the request time.
          */
         startTime?: string | null;
         /**
@@ -6030,20 +6559,6 @@ export declare namespace securitycenter_v1 {
     export class Resource$Folders$Locations$Muteconfigs {
         context: APIRequestContext;
         constructor(context: APIRequestContext);
-        /**
-         * Creates a mute config.
-         *
-         * @param params - Parameters for request
-         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-         * @param callback - Optional callback that handles the response.
-         * @returns A promise if used with async/await, or void if used with a callback.
-         */
-        create(params: Params$Resource$Folders$Locations$Muteconfigs$Create, options: StreamMethodOptions): GaxiosPromise<Readable>;
-        create(params?: Params$Resource$Folders$Locations$Muteconfigs$Create, options?: MethodOptions): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-        create(params: Params$Resource$Folders$Locations$Muteconfigs$Create, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
-        create(params: Params$Resource$Folders$Locations$Muteconfigs$Create, options: MethodOptions | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        create(params: Params$Resource$Folders$Locations$Muteconfigs$Create, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        create(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         /**
          * Deletes an existing mute config.
          *
@@ -6072,20 +6587,6 @@ export declare namespace securitycenter_v1 {
         get(params: Params$Resource$Folders$Locations$Muteconfigs$Get, options: MethodOptions | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         get(params: Params$Resource$Folders$Locations$Muteconfigs$Get, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         get(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        /**
-         * Lists mute configs.
-         *
-         * @param params - Parameters for request
-         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-         * @param callback - Optional callback that handles the response.
-         * @returns A promise if used with async/await, or void if used with a callback.
-         */
-        list(params: Params$Resource$Folders$Locations$Muteconfigs$List, options: StreamMethodOptions): GaxiosPromise<Readable>;
-        list(params?: Params$Resource$Folders$Locations$Muteconfigs$List, options?: MethodOptions): GaxiosPromise<Schema$ListMuteConfigsResponse>;
-        list(params: Params$Resource$Folders$Locations$Muteconfigs$List, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
-        list(params: Params$Resource$Folders$Locations$Muteconfigs$List, options: MethodOptions | BodyResponseCallback<Schema$ListMuteConfigsResponse>, callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-        list(params: Params$Resource$Folders$Locations$Muteconfigs$List, callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-        list(callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
         /**
          * Updates a mute config.
          *
@@ -6101,20 +6602,6 @@ export declare namespace securitycenter_v1 {
         patch(params: Params$Resource$Folders$Locations$Muteconfigs$Patch, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         patch(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
     }
-    export interface Params$Resource$Folders$Locations$Muteconfigs$Create extends StandardParameters {
-        /**
-         * Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.
-         */
-        muteConfigId?: string;
-        /**
-         * Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-         */
-        parent?: string;
-        /**
-         * Request body metadata
-         */
-        requestBody?: Schema$GoogleCloudSecuritycenterV1MuteConfig;
-    }
     export interface Params$Resource$Folders$Locations$Muteconfigs$Delete extends StandardParameters {
         /**
          * Required. Name of the mute config to delete. Its format is `organizations/{organization\}/muteConfigs/{config_id\}`, `folders/{folder\}/muteConfigs/{config_id\}`, `projects/{project\}/muteConfigs/{config_id\}`, `organizations/{organization\}/locations/global/muteConfigs/{config_id\}`, `folders/{folder\}/locations/global/muteConfigs/{config_id\}`, or `projects/{project\}/locations/global/muteConfigs/{config_id\}`.
@@ -6127,20 +6614,6 @@ export declare namespace securitycenter_v1 {
          */
         name?: string;
     }
-    export interface Params$Resource$Folders$Locations$Muteconfigs$List extends StandardParameters {
-        /**
-         * The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
-         */
-        pageSize?: number;
-        /**
-         * A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.
-         */
-        pageToken?: string;
-        /**
-         * Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.
-         */
-        parent?: string;
-    }
     export interface Params$Resource$Folders$Locations$Muteconfigs$Patch extends StandardParameters {
         /**
          * This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`
@@ -6898,6 +7371,7 @@ export declare namespace securitycenter_v1 {
     export class Resource$Organizations {
         context: APIRequestContext;
         assets: Resource$Organizations$Assets;
+        attackPaths: Resource$Organizations$Attackpaths;
         bigQueryExports: Resource$Organizations$Bigqueryexports;
         eventThreatDetectionSettings: Resource$Organizations$Eventthreatdetectionsettings;
         findings: Resource$Organizations$Findings;
@@ -6909,6 +7383,7 @@ export declare namespace securitycenter_v1 {
         securityHealthAnalyticsSettings: Resource$Organizations$Securityhealthanalyticssettings;
         simulations: Resource$Organizations$Simulations;
         sources: Resource$Organizations$Sources;
+        valuedResources: Resource$Organizations$Valuedresources;
         constructor(context: APIRequestContext);
         /**
          * Gets the settings for an organization.
@@ -7091,6 +7566,42 @@ export declare namespace securitycenter_v1 {
          */
         requestBody?: Schema$SecurityMarks;
     }
+    export class Resource$Organizations$Attackpaths {
+        context: APIRequestContext;
+        constructor(context: APIRequestContext);
+        /**
+         * Lists the attack paths for a set of simulation results or valued resources and filter.
+         *
+         * @param params - Parameters for request
+         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+         * @param callback - Optional callback that handles the response.
+         * @returns A promise if used with async/await, or void if used with a callback.
+         */
+        list(params: Params$Resource$Organizations$Attackpaths$List, options: StreamMethodOptions): GaxiosPromise<Readable>;
+        list(params?: Params$Resource$Organizations$Attackpaths$List, options?: MethodOptions): GaxiosPromise<Schema$ListAttackPathsResponse>;
+        list(params: Params$Resource$Organizations$Attackpaths$List, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
+        list(params: Params$Resource$Organizations$Attackpaths$List, options: MethodOptions | BodyResponseCallback<Schema$ListAttackPathsResponse>, callback: BodyResponseCallback<Schema$ListAttackPathsResponse>): void;
+        list(params: Params$Resource$Organizations$Attackpaths$List, callback: BodyResponseCallback<Schema$ListAttackPathsResponse>): void;
+        list(callback: BodyResponseCallback<Schema$ListAttackPathsResponse>): void;
+    }
+    export interface Params$Resource$Organizations$Attackpaths$List extends StandardParameters {
+        /**
+         * The filter expression that filters the attack path in the response. Supported fields: * `valued_resources` supports =
+         */
+        filter?: string;
+        /**
+         * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
+         */
+        pageSize?: number;
+        /**
+         * The value returned by the last `ListAttackPathsResponse`; indicates that this is a continuation of a prior `ListAttackPaths` call, and that the system should return the next page of data.
+         */
+        pageToken?: string;
+        /**
+         * Required. Name of parent to list attack paths. Valid formats: `organizations/{organization\}`, `organizations/{organization\}/simulations/{simulation\}` `organizations/{organization\}/simulations/{simulation\}/attackExposureResults/{attack_exposure_result_v2\}` `organizations/{organization\}/simulations/{simulation\}/valuedResources/{valued_resource\}`
+         */
+        parent?: string;
+    }
     export class Resource$Organizations$Bigqueryexports {
         context: APIRequestContext;
         constructor(context: APIRequestContext);
@@ -7489,20 +8000,6 @@ export declare namespace securitycenter_v1 {
     export class Resource$Organizations$Locations$Muteconfigs {
         context: APIRequestContext;
         constructor(context: APIRequestContext);
-        /**
-         * Creates a mute config.
-         *
-         * @param params - Parameters for request
-         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-         * @param callback - Optional callback that handles the response.
-         * @returns A promise if used with async/await, or void if used with a callback.
-         */
-        create(params: Params$Resource$Organizations$Locations$Muteconfigs$Create, options: StreamMethodOptions): GaxiosPromise<Readable>;
-        create(params?: Params$Resource$Organizations$Locations$Muteconfigs$Create, options?: MethodOptions): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-        create(params: Params$Resource$Organizations$Locations$Muteconfigs$Create, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
-        create(params: Params$Resource$Organizations$Locations$Muteconfigs$Create, options: MethodOptions | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        create(params: Params$Resource$Organizations$Locations$Muteconfigs$Create, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        create(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         /**
          * Deletes an existing mute config.
          *
@@ -7531,20 +8028,6 @@ export declare namespace securitycenter_v1 {
         get(params: Params$Resource$Organizations$Locations$Muteconfigs$Get, options: MethodOptions | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         get(params: Params$Resource$Organizations$Locations$Muteconfigs$Get, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         get(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        /**
-         * Lists mute configs.
-         *
-         * @param params - Parameters for request
-         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-         * @param callback - Optional callback that handles the response.
-         * @returns A promise if used with async/await, or void if used with a callback.
-         */
-        list(params: Params$Resource$Organizations$Locations$Muteconfigs$List, options: StreamMethodOptions): GaxiosPromise<Readable>;
-        list(params?: Params$Resource$Organizations$Locations$Muteconfigs$List, options?: MethodOptions): GaxiosPromise<Schema$ListMuteConfigsResponse>;
-        list(params: Params$Resource$Organizations$Locations$Muteconfigs$List, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
-        list(params: Params$Resource$Organizations$Locations$Muteconfigs$List, options: MethodOptions | BodyResponseCallback<Schema$ListMuteConfigsResponse>, callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-        list(params: Params$Resource$Organizations$Locations$Muteconfigs$List, callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-        list(callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
         /**
          * Updates a mute config.
          *
@@ -7560,20 +8043,6 @@ export declare namespace securitycenter_v1 {
         patch(params: Params$Resource$Organizations$Locations$Muteconfigs$Patch, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         patch(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
     }
-    export interface Params$Resource$Organizations$Locations$Muteconfigs$Create extends StandardParameters {
-        /**
-         * Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.
-         */
-        muteConfigId?: string;
-        /**
-         * Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-         */
-        parent?: string;
-        /**
-         * Request body metadata
-         */
-        requestBody?: Schema$GoogleCloudSecuritycenterV1MuteConfig;
-    }
     export interface Params$Resource$Organizations$Locations$Muteconfigs$Delete extends StandardParameters {
         /**
          * Required. Name of the mute config to delete. Its format is `organizations/{organization\}/muteConfigs/{config_id\}`, `folders/{folder\}/muteConfigs/{config_id\}`, `projects/{project\}/muteConfigs/{config_id\}`, `organizations/{organization\}/locations/global/muteConfigs/{config_id\}`, `folders/{folder\}/locations/global/muteConfigs/{config_id\}`, or `projects/{project\}/locations/global/muteConfigs/{config_id\}`.
@@ -7586,20 +8055,6 @@ export declare namespace securitycenter_v1 {
          */
         name?: string;
     }
-    export interface Params$Resource$Organizations$Locations$Muteconfigs$List extends StandardParameters {
-        /**
-         * The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
-         */
-        pageSize?: number;
-        /**
-         * A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.
-         */
-        pageToken?: string;
-        /**
-         * Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.
-         */
-        parent?: string;
-    }
     export interface Params$Resource$Organizations$Locations$Muteconfigs$Patch extends StandardParameters {
         /**
          * This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`
@@ -7874,7 +8329,7 @@ export declare namespace securitycenter_v1 {
         context: APIRequestContext;
         constructor(context: APIRequestContext);
         /**
-         * Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.
+         * Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.
          *
          * @param params - Parameters for request
          * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
@@ -8988,6 +9443,46 @@ export declare namespace securitycenter_v1 {
          */
         requestBody?: Schema$GoogleCloudSecuritycenterV1ExternalSystem;
     }
+    export class Resource$Organizations$Valuedresources {
+        context: APIRequestContext;
+        constructor(context: APIRequestContext);
+        /**
+         * Lists the valued resources for a set of simulation results and filter.
+         *
+         * @param params - Parameters for request
+         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+         * @param callback - Optional callback that handles the response.
+         * @returns A promise if used with async/await, or void if used with a callback.
+         */
+        list(params: Params$Resource$Organizations$Valuedresources$List, options: StreamMethodOptions): GaxiosPromise<Readable>;
+        list(params?: Params$Resource$Organizations$Valuedresources$List, options?: MethodOptions): GaxiosPromise<Schema$ListValuedResourcesResponse>;
+        list(params: Params$Resource$Organizations$Valuedresources$List, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
+        list(params: Params$Resource$Organizations$Valuedresources$List, options: MethodOptions | BodyResponseCallback<Schema$ListValuedResourcesResponse>, callback: BodyResponseCallback<Schema$ListValuedResourcesResponse>): void;
+        list(params: Params$Resource$Organizations$Valuedresources$List, callback: BodyResponseCallback<Schema$ListValuedResourcesResponse>): void;
+        list(callback: BodyResponseCallback<Schema$ListValuedResourcesResponse>): void;
+    }
+    export interface Params$Resource$Organizations$Valuedresources$List extends StandardParameters {
+        /**
+         * The filter expression that filters the valued resources in the response. Supported fields: * `resource_value` supports = * `resource_type` supports =
+         */
+        filter?: string;
+        /**
+         * Optional. The fields by which to order the valued resources response. Supported fields: * `exposed_score` * `resource_value` * `resource_type` * `resource` * `display_name` Values should be a comma separated list of fields. For example: `exposed_score,resource_value`. The default sorting order is descending. To specify ascending or descending order for a field, append a ` ASC` or a ` DESC` suffix, respectively; for example: `exposed_score DESC`.
+         */
+        orderBy?: string;
+        /**
+         * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
+         */
+        pageSize?: number;
+        /**
+         * The value returned by the last `ListValuedResourcesResponse`; indicates that this is a continuation of a prior `ListValuedResources` call, and that the system should return the next page of data.
+         */
+        pageToken?: string;
+        /**
+         * Required. Name of parent to list valued resources. Valid formats: `organizations/{organization\}`, `organizations/{organization\}/simulations/{simulation\}` `organizations/{organization\}/simulations/{simulation\}/attackExposureResults/{attack_exposure_result_v2\}`
+         */
+        parent?: string;
+    }
     export class Resource$Projects {
         context: APIRequestContext;
         assets: Resource$Projects$Assets;
@@ -9507,20 +10002,6 @@ export declare namespace securitycenter_v1 {
     export class Resource$Projects$Locations$Muteconfigs {
         context: APIRequestContext;
         constructor(context: APIRequestContext);
-        /**
-         * Creates a mute config.
-         *
-         * @param params - Parameters for request
-         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-         * @param callback - Optional callback that handles the response.
-         * @returns A promise if used with async/await, or void if used with a callback.
-         */
-        create(params: Params$Resource$Projects$Locations$Muteconfigs$Create, options: StreamMethodOptions): GaxiosPromise<Readable>;
-        create(params?: Params$Resource$Projects$Locations$Muteconfigs$Create, options?: MethodOptions): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-        create(params: Params$Resource$Projects$Locations$Muteconfigs$Create, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
-        create(params: Params$Resource$Projects$Locations$Muteconfigs$Create, options: MethodOptions | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        create(params: Params$Resource$Projects$Locations$Muteconfigs$Create, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        create(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         /**
          * Deletes an existing mute config.
          *
@@ -9549,20 +10030,6 @@ export declare namespace securitycenter_v1 {
         get(params: Params$Resource$Projects$Locations$Muteconfigs$Get, options: MethodOptions | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         get(params: Params$Resource$Projects$Locations$Muteconfigs$Get, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         get(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
-        /**
-         * Lists mute configs.
-         *
-         * @param params - Parameters for request
-         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-         * @param callback - Optional callback that handles the response.
-         * @returns A promise if used with async/await, or void if used with a callback.
-         */
-        list(params: Params$Resource$Projects$Locations$Muteconfigs$List, options: StreamMethodOptions): GaxiosPromise<Readable>;
-        list(params?: Params$Resource$Projects$Locations$Muteconfigs$List, options?: MethodOptions): GaxiosPromise<Schema$ListMuteConfigsResponse>;
-        list(params: Params$Resource$Projects$Locations$Muteconfigs$List, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
-        list(params: Params$Resource$Projects$Locations$Muteconfigs$List, options: MethodOptions | BodyResponseCallback<Schema$ListMuteConfigsResponse>, callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-        list(params: Params$Resource$Projects$Locations$Muteconfigs$List, callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-        list(callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
         /**
          * Updates a mute config.
          *
@@ -9578,20 +10045,6 @@ export declare namespace securitycenter_v1 {
         patch(params: Params$Resource$Projects$Locations$Muteconfigs$Patch, callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
         patch(callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>): void;
     }
-    export interface Params$Resource$Projects$Locations$Muteconfigs$Create extends StandardParameters {
-        /**
-         * Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.
-         */
-        muteConfigId?: string;
-        /**
-         * Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-         */
-        parent?: string;
-        /**
-         * Request body metadata
-         */
-        requestBody?: Schema$GoogleCloudSecuritycenterV1MuteConfig;
-    }
     export interface Params$Resource$Projects$Locations$Muteconfigs$Delete extends StandardParameters {
         /**
          * Required. Name of the mute config to delete. Its format is `organizations/{organization\}/muteConfigs/{config_id\}`, `folders/{folder\}/muteConfigs/{config_id\}`, `projects/{project\}/muteConfigs/{config_id\}`, `organizations/{organization\}/locations/global/muteConfigs/{config_id\}`, `folders/{folder\}/locations/global/muteConfigs/{config_id\}`, or `projects/{project\}/locations/global/muteConfigs/{config_id\}`.
@@ -9604,20 +10057,6 @@ export declare namespace securitycenter_v1 {
          */
         name?: string;
     }
-    export interface Params$Resource$Projects$Locations$Muteconfigs$List extends StandardParameters {
-        /**
-         * The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
-         */
-        pageSize?: number;
-        /**
-         * A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.
-         */
-        pageToken?: string;
-        /**
-         * Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.
-         */
-        parent?: string;
-    }
     export interface Params$Resource$Projects$Locations$Muteconfigs$Patch extends StandardParameters {
         /**
          * This field will be ignored if provided on config creation. Format `organizations/{organization\}/muteConfigs/{mute_config\}` `folders/{folder\}/muteConfigs/{mute_config\}` `projects/{project\}/muteConfigs/{mute_config\}` `organizations/{organization\}/locations/global/muteConfigs/{mute_config\}` `folders/{folder\}/locations/global/muteConfigs/{mute_config\}` `projects/{project\}/locations/global/muteConfigs/{mute_config\}`