@googleapis/securitycenter 9.0.0 → 9.1.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [9.1.0](https://github.com/googleapis/google-api-nodejs-client/compare/securitycenter-v9.0.0...securitycenter-v9.1.0) (2024-08-30)
+
+
+### Features
+
+* **securitycenter:** update the API ([b82bcee](https://github.com/googleapis/google-api-nodejs-client/commit/b82bceec5286bf7e018e33c6674ed17b7f644698))
+
 ## [9.0.0](https://github.com/googleapis/google-api-nodejs-client/compare/securitycenter-v8.3.0...securitycenter-v9.0.0) (2024-08-16)
 
 

package/build/v1.d.ts

@@ -476,6 +476,10 @@ export declare namespace securitycenter_v1 {
          * The Azure subscription associated with the resource.
          */
         subscription?: Schema$AzureSubscription;
+        /**
+         * The Azure Entra tenant associated with the resource.
+         */
+        tenant?: Schema$AzureTenant;
     }
     /**
      * Represents an Azure resource group.
@@ -499,6 +503,15 @@ export declare namespace securitycenter_v1 {
          */
         id?: string | null;
     }
+    /**
+     * Represents a Microsoft Entra tenant.
+     */
+    export interface Schema$AzureTenant {
+        /**
+         * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+         */
+        id?: string | null;
+    }
     /**
      * Information related to Google Cloud Backup and DR Service findings.
      */
@@ -858,6 +871,10 @@ export declare namespace securitycenter_v1 {
          * Date the first publicly available exploit or PoC was released.
          */
         exploitReleaseDate?: string | null;
+        /**
+         * Date of the earliest known exploitation.
+         */
+        firstExploitationDate?: string | null;
         /**
          * The unique identifier for the vulnerability. e.g. CVE-2021-34527
          */
@@ -924,6 +941,27 @@ export declare namespace securitycenter_v1 {
          */
         userInteraction?: string | null;
     }
+    /**
+     * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+     */
+    export interface Schema$DataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+    }
     /**
      * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
      */
@@ -953,6 +991,31 @@ export declare namespace securitycenter_v1 {
          */
         version?: string | null;
     }
+    /**
+     * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+     */
+    export interface Schema$DataFlowEvent {
+        /**
+         * Unique identifier for data flow event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data flow event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal for the data flow event.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+        /**
+         * Non-compliant location of the principal or the data destination.
+         */
+        violatedLocation?: string | null;
+    }
     /**
      * Memory hash detection contributing to the binary family match.
      */
@@ -1230,10 +1293,18 @@ export declare namespace securitycenter_v1 {
          * The time at which the finding was created in Security Command Center.
          */
         createTime?: string | null;
+        /**
+         * Data access events associated with the finding.
+         */
+        dataAccessEvents?: Schema$DataAccessEvent[];
         /**
          * Database associated with the finding.
          */
         database?: Schema$Database;
+        /**
+         * Data flow events associated with the finding.
+         */
+        dataFlowEvents?: Schema$DataFlowEvent[];
         /**
          * Contains more details about the finding.
          */
@@ -2272,6 +2343,10 @@ export declare namespace securitycenter_v1 {
          * The Azure subscription associated with the resource.
          */
         subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
+        /**
+         * The Azure Entra tenant associated with the resource.
+         */
+        tenant?: Schema$GoogleCloudSecuritycenterV2AzureTenant;
     }
     /**
      * Represents an Azure resource group.
@@ -2295,6 +2370,15 @@ export declare namespace securitycenter_v1 {
          */
         id?: string | null;
     }
+    /**
+     * Represents a Microsoft Entra tenant.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
+        /**
+         * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+         */
+        id?: string | null;
+    }
     /**
      * Information related to Google Cloud Backup and DR Service findings.
      */
@@ -2588,6 +2672,10 @@ export declare namespace securitycenter_v1 {
          * Date the first publicly available exploit or PoC was released.
          */
         exploitReleaseDate?: string | null;
+        /**
+         * Date of the earliest known exploitation.
+         */
+        firstExploitationDate?: string | null;
         /**
          * The unique identifier for the vulnerability. e.g. CVE-2021-34527
          */
@@ -2654,6 +2742,27 @@ export declare namespace securitycenter_v1 {
          */
         userInteraction?: string | null;
     }
+    /**
+     * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DataAccessEvent {
+        /**
+         * Unique identifier for data access event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data access event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal to access the data.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+    }
     /**
      * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
      */
@@ -2683,6 +2792,31 @@ export declare namespace securitycenter_v1 {
          */
         version?: string | null;
     }
+    /**
+     * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+     */
+    export interface Schema$GoogleCloudSecuritycenterV2DataFlowEvent {
+        /**
+         * Unique identifier for data flow event.
+         */
+        eventId?: string | null;
+        /**
+         * Timestamp of data flow event.
+         */
+        eventTime?: string | null;
+        /**
+         * The operation performed by the principal for the data flow event.
+         */
+        operation?: string | null;
+        /**
+         * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+         */
+        principalEmail?: string | null;
+        /**
+         * Non-compliant location of the principal or the data destination.
+         */
+        violatedLocation?: string | null;
+    }
     /**
      * Memory hash detection contributing to the binary family match.
      */
@@ -2909,10 +3043,18 @@ export declare namespace securitycenter_v1 {
          * Output only. The time at which the finding was created in Security Command Center.
          */
         createTime?: string | null;
+        /**
+         * Data access events associated with the finding.
+         */
+        dataAccessEvents?: Schema$GoogleCloudSecuritycenterV2DataAccessEvent[];
         /**
          * Database associated with the finding.
          */
         database?: Schema$GoogleCloudSecuritycenterV2Database;
+        /**
+         * Data flow events associated with the finding.
+         */
+        dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
         /**
          * Contains more details about the finding.
          */
@@ -6909,6 +7051,7 @@ export declare namespace securitycenter_v1 {
         securityHealthAnalyticsSettings: Resource$Organizations$Securityhealthanalyticssettings;
         simulations: Resource$Organizations$Simulations;
         sources: Resource$Organizations$Sources;
+        valuedResources: Resource$Organizations$Valuedresources;
         constructor(context: APIRequestContext);
         /**
          * Gets the settings for an organization.
@@ -8988,6 +9131,46 @@ export declare namespace securitycenter_v1 {
          */
         requestBody?: Schema$GoogleCloudSecuritycenterV1ExternalSystem;
     }
+    export class Resource$Organizations$Valuedresources {
+        context: APIRequestContext;
+        constructor(context: APIRequestContext);
+        /**
+         * Lists the valued resources for a set of simulation results and filter.
+         *
+         * @param params - Parameters for request
+         * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+         * @param callback - Optional callback that handles the response.
+         * @returns A promise if used with async/await, or void if used with a callback.
+         */
+        list(params: Params$Resource$Organizations$Valuedresources$List, options: StreamMethodOptions): GaxiosPromise<Readable>;
+        list(params?: Params$Resource$Organizations$Valuedresources$List, options?: MethodOptions): GaxiosPromise<Schema$ListValuedResourcesResponse>;
+        list(params: Params$Resource$Organizations$Valuedresources$List, options: StreamMethodOptions | BodyResponseCallback<Readable>, callback: BodyResponseCallback<Readable>): void;
+        list(params: Params$Resource$Organizations$Valuedresources$List, options: MethodOptions | BodyResponseCallback<Schema$ListValuedResourcesResponse>, callback: BodyResponseCallback<Schema$ListValuedResourcesResponse>): void;
+        list(params: Params$Resource$Organizations$Valuedresources$List, callback: BodyResponseCallback<Schema$ListValuedResourcesResponse>): void;
+        list(callback: BodyResponseCallback<Schema$ListValuedResourcesResponse>): void;
+    }
+    export interface Params$Resource$Organizations$Valuedresources$List extends StandardParameters {
+        /**
+         * The filter expression that filters the valued resources in the response. Supported fields: * `resource_value` supports = * `resource_type` supports =
+         */
+        filter?: string;
+        /**
+         * Optional. The fields by which to order the valued resources response. Supported fields: * `exposed_score` * `resource_value` * `resource_type` * `resource` * `display_name` Values should be a comma separated list of fields. For example: `exposed_score,resource_value`. The default sorting order is descending. To specify ascending or descending order for a field, append a ` ASC` or a ` DESC` suffix, respectively; for example: `exposed_score DESC`.
+         */
+        orderBy?: string;
+        /**
+         * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
+         */
+        pageSize?: number;
+        /**
+         * The value returned by the last `ListValuedResourcesResponse`; indicates that this is a continuation of a prior `ListValuedResources` call, and that the system should return the next page of data.
+         */
+        pageToken?: string;
+        /**
+         * Required. Name of parent to list valued resources. Valid formats: `organizations/{organization\}`, `organizations/{organization\}/simulations/{simulation\}` `organizations/{organization\}/simulations/{simulation\}/attackExposureResults/{attack_exposure_result_v2\}`
+         */
+        parent?: string;
+    }
     export class Resource$Projects {
         context: APIRequestContext;
         assets: Resource$Projects$Assets;

package/build/v1.js

@@ -1807,6 +1807,7 @@ var securitycenter_v1;
                 new Resource$Organizations$Securityhealthanalyticssettings(this.context);
             this.simulations = new Resource$Organizations$Simulations(this.context);
             this.sources = new Resource$Organizations$Sources(this.context);
+            this.valuedResources = new Resource$Organizations$Valuedresources(this.context);
         }
         getOrganizationSettings(paramsOrCallback, optionsOrCallback, callback) {
             let params = (paramsOrCallback ||
@@ -4446,6 +4447,44 @@ var securitycenter_v1;
         }
     }
     securitycenter_v1.Resource$Organizations$Sources$Findings$Externalsystems = Resource$Organizations$Sources$Findings$Externalsystems;
+    class Resource$Organizations$Valuedresources {
+        constructor(context) {
+            this.context = context;
+        }
+        list(paramsOrCallback, optionsOrCallback, callback) {
+            let params = (paramsOrCallback ||
+                {});
+            let options = (optionsOrCallback || {});
+            if (typeof paramsOrCallback === 'function') {
+                callback = paramsOrCallback;
+                params = {};
+                options = {};
+            }
+            if (typeof optionsOrCallback === 'function') {
+                callback = optionsOrCallback;
+                options = {};
+            }
+            const rootUrl = options.rootUrl || 'https://securitycenter.googleapis.com/';
+            const parameters = {
+                options: Object.assign({
+                    url: (rootUrl + '/v1/{+parent}/valuedResources').replace(/([^:]\/)\/+/g, '$1'),
+                    method: 'GET',
+                    apiVersion: '',
+                }, options),
+                params,
+                requiredParams: ['parent'],
+                pathParams: ['parent'],
+                context: this.context,
+            };
+            if (callback) {
+                (0, googleapis_common_1.createAPIRequest)(parameters, callback);
+            }
+            else {
+                return (0, googleapis_common_1.createAPIRequest)(parameters);
+            }
+        }
+    }
+    securitycenter_v1.Resource$Organizations$Valuedresources = Resource$Organizations$Valuedresources;
     class Resource$Projects {
         constructor(context) {
             this.context = context;