@googleapis/securitycenter 9.0.0 → 9.1.0

package/v1beta2.ts

@@ -363,6 +363,10 @@ export namespace securitycenter_v1beta2 {
      * The Azure subscription associated with the resource.
      */
     subscription?: Schema$AzureSubscription;
+    /**
+     * The Azure Entra tenant associated with the resource.
+     */
+    tenant?: Schema$AzureTenant;
   }
   /**
    * Represents an Azure resource group.
@@ -386,6 +390,15 @@ export namespace securitycenter_v1beta2 {
      */
     id?: string | null;
   }
+  /**
+   * Represents a Microsoft Entra tenant.
+   */
+  export interface Schema$AzureTenant {
+    /**
+     * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+     */
+    id?: string | null;
+  }
   /**
    * Information related to Google Cloud Backup and DR Service findings.
    */
@@ -691,6 +704,10 @@ export namespace securitycenter_v1beta2 {
      * Date the first publicly available exploit or PoC was released.
      */
     exploitReleaseDate?: string | null;
+    /**
+     * Date of the earliest known exploitation.
+     */
+    firstExploitationDate?: string | null;
     /**
      * The unique identifier for the vulnerability. e.g. CVE-2021-34527
      */
@@ -757,6 +774,27 @@ export namespace securitycenter_v1beta2 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+   */
+  export interface Schema$DataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+  }
   /**
    * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
    */
@@ -786,6 +824,31 @@ export namespace securitycenter_v1beta2 {
      */
     version?: string | null;
   }
+  /**
+   * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+   */
+  export interface Schema$DataFlowEvent {
+    /**
+     * Unique identifier for data flow event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data flow event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal for the data flow event.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+    /**
+     * Non-compliant location of the principal or the data destination.
+     */
+    violatedLocation?: string | null;
+  }
   /**
    * Details of a subscription.
    */
@@ -1020,10 +1083,18 @@ export namespace securitycenter_v1beta2 {
      * The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Data access events associated with the finding.
+     */
+    dataAccessEvents?: Schema$DataAccessEvent[];
     /**
      * Database associated with the finding.
      */
     database?: Schema$Database;
+    /**
+     * Data flow events associated with the finding.
+     */
+    dataFlowEvents?: Schema$DataFlowEvent[];
     /**
      * Contains more details about the finding.
      */
@@ -2035,6 +2106,10 @@ export namespace securitycenter_v1beta2 {
      * The Azure subscription associated with the resource.
      */
     subscription?: Schema$GoogleCloudSecuritycenterV2AzureSubscription;
+    /**
+     * The Azure Entra tenant associated with the resource.
+     */
+    tenant?: Schema$GoogleCloudSecuritycenterV2AzureTenant;
   }
   /**
    * Represents an Azure resource group.
@@ -2058,6 +2133,15 @@ export namespace securitycenter_v1beta2 {
      */
     id?: string | null;
   }
+  /**
+   * Represents a Microsoft Entra tenant.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
+    /**
+     * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
+     */
+    id?: string | null;
+  }
   /**
    * Information related to Google Cloud Backup and DR Service findings.
    */
@@ -2350,6 +2434,10 @@ export namespace securitycenter_v1beta2 {
      * Date the first publicly available exploit or PoC was released.
      */
     exploitReleaseDate?: string | null;
+    /**
+     * Date of the earliest known exploitation.
+     */
+    firstExploitationDate?: string | null;
     /**
      * The unique identifier for the vulnerability. e.g. CVE-2021-34527
      */
@@ -2416,6 +2504,27 @@ export namespace securitycenter_v1beta2 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * Details about a data access attempt made by a principal not authorized under applicable data security policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DataAccessEvent {
+    /**
+     * Unique identifier for data access event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data access event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal to access the data.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+  }
   /**
    * Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.
    */
@@ -2445,6 +2554,31 @@ export namespace securitycenter_v1beta2 {
      */
     version?: string | null;
   }
+  /**
+   * Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DataFlowEvent {
+    /**
+     * Unique identifier for data flow event.
+     */
+    eventId?: string | null;
+    /**
+     * Timestamp of data flow event.
+     */
+    eventTime?: string | null;
+    /**
+     * The operation performed by the principal for the data flow event.
+     */
+    operation?: string | null;
+    /**
+     * The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.
+     */
+    principalEmail?: string | null;
+    /**
+     * Non-compliant location of the principal or the data destination.
+     */
+    violatedLocation?: string | null;
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -2671,10 +2805,18 @@ export namespace securitycenter_v1beta2 {
      * Output only. The time at which the finding was created in Security Command Center.
      */
     createTime?: string | null;
+    /**
+     * Data access events associated with the finding.
+     */
+    dataAccessEvents?: Schema$GoogleCloudSecuritycenterV2DataAccessEvent[];
     /**
      * Database associated with the finding.
      */
     database?: Schema$GoogleCloudSecuritycenterV2Database;
+    /**
+     * Data flow events associated with the finding.
+     */
+    dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
     /**
      * Contains more details about the finding.
      */