@googleapis/securitycenter 9.1.0 → 12.0.0

package/v1.ts

@@ -219,6 +219,24 @@ export namespace securitycenter_v1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Details about resources affected by this finding.
+   */
+  export interface Schema$AffectedResources {
+    /**
+     * The count of resources affected by the finding.
+     */
+    count?: string | null;
+  }
+  /**
+   * Allowed IP rule.
+   */
+  export interface Schema$Allowed {
+    /**
+     * Optional. Optional list of allowed IP rules.
+     */
+    ipRules?: Schema$IpRule[];
+  }
   /**
    * Represents an application associated with a finding.
    */
@@ -295,13 +313,21 @@ export namespace securitycenter_v1 {
      */
     classification?: string | null;
     /**
-     * Total BPS (bytes per second) volume of attack.
+     * Total BPS (bytes per second) volume of attack. Deprecated - refer to volume_bps_long instead.
      */
     volumeBps?: number | null;
     /**
-     * Total PPS (packets per second) volume of attack.
+     * Total BPS (bytes per second) volume of attack.
+     */
+    volumeBpsLong?: string | null;
+    /**
+     * Total PPS (packets per second) volume of attack. Deprecated - refer to volume_pps_long instead.
      */
     volumePps?: number | null;
+    /**
+     * Total PPS (packets per second) volume of attack.
+     */
+    volumePpsLong?: string | null;
   }
   /**
    * An attack exposure contains the results of an attack path simulation run.
@@ -536,6 +562,10 @@ export namespace securitycenter_v1 {
    * Represents an Azure resource group.
    */
   export interface Schema$AzureResourceGroup {
+    /**
+     * The ID of the Azure resource group.
+     */
+    id?: string | null;
     /**
      * The name of the Azure resource group. This is not a UUID.
      */
@@ -558,6 +588,10 @@ export namespace securitycenter_v1 {
    * Represents a Microsoft Entra tenant.
    */
   export interface Schema$AzureTenant {
+    /**
+     * The display name of the Azure tenant.
+     */
+    displayName?: string | null;
     /**
      * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
      */
@@ -660,6 +694,15 @@ export namespace securitycenter_v1 {
      */
     muteState?: string | null;
   }
+  /**
+   * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+   */
+  export interface Schema$Chokepoint {
+    /**
+     * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Fields related to Google Cloud Armor findings.
    */
@@ -761,43 +804,6 @@ export namespace securitycenter_v1 {
      */
     version?: string | null;
   }
-  /**
-   * Result containing the properties and count of a ComplianceSnapshot request.
-   */
-  export interface Schema$ComplianceSnapshot {
-    /**
-     * The category of Findings matching.
-     */
-    category?: string | null;
-    /**
-     * The cloud provider for the compliance snapshot.
-     */
-    cloudProvider?: string | null;
-    /**
-     * The compliance standard (ie CIS).
-     */
-    complianceStandard?: string | null;
-    /**
-     * The compliance version (ie 1.3) in CIS 1.3.
-     */
-    complianceVersion?: string | null;
-    /**
-     * Total count of findings for the given properties.
-     */
-    count?: string | null;
-    /**
-     * The leaf container resource name that is closest to the snapshot.
-     */
-    leafContainerResource?: string | null;
-    /**
-     * The compliance snapshot name. Format: //sources//complianceSnapshots/
-     */
-    name?: string | null;
-    /**
-     * The snapshot time of the snapshot.
-     */
-    snapshotTime?: string | null;
-  }
   /**
    * Contains information about the IP connection associated with the finding.
    */
@@ -992,6 +998,19 @@ export namespace securitycenter_v1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+   */
+  export interface Schema$Cwe {
+    /**
+     * The CWE identifier, e.g. CWE-94
+     */
+    id?: string | null;
+    /**
+     * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+     */
+    references?: Schema$Reference[];
+  }
   /**
    * Details about a data access attempt made by a principal not authorized under applicable data security policy.
    */
@@ -1067,6 +1086,36 @@ export namespace securitycenter_v1 {
      */
     violatedLocation?: string | null;
   }
+  /**
+   * Details about data retention deletion violations, in which the data is non-compliant based on their retention or deletion time, as defined in the applicable data security policy. The Data Retention Deletion (DRD) control is a control of the DSPM (Data Security Posture Management) suite that enables organizations to manage data retention and deletion policies in compliance with regulations, such as GDPR and CRPA. DRD supports two primary policy types: maximum storage length (max TTL) and minimum storage length (min TTL). Both are aimed at helping organizations meet regulatory and data management commitments.
+   */
+  export interface Schema$DataRetentionDeletionEvent {
+    /**
+     * Number of objects that violated the policy for this resource. If the number is less than 1,000, then the value of this field is the exact number. If the number of objects that violated the policy is greater than or equal to 1,000, then the value of this field is 1000.
+     */
+    dataObjectCount?: string | null;
+    /**
+     * Timestamp indicating when the event was detected.
+     */
+    eventDetectionTime?: string | null;
+    /**
+     * Type of the DRD event.
+     */
+    eventType?: string | null;
+    /**
+     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+     */
+    maxRetentionAllowed?: string | null;
+  }
+  /**
+   * Denied IP rule.
+   */
+  export interface Schema$Denied {
+    /**
+     * Optional. Optional list of denied IP rules.
+     */
+    ipRules?: Schema$IpRule[];
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -1080,6 +1129,15 @@ export namespace securitycenter_v1 {
      */
     percentPagesMatched?: number | null;
   }
+  /**
+   * Contains information about the disk associated with the finding.
+   */
+  export interface Schema$Disk {
+    /**
+     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
+     */
+    name?: string | null;
+  }
   /**
    * Path of the file in terms of underlying disk/partition identifiers.
    */
@@ -1110,6 +1168,10 @@ export namespace securitycenter_v1 {
    * An EffectiveEventThreatDetectionCustomModule is the representation of an Event Threat Detection custom module at a specified level of the resource hierarchy: organization, folder, or project. If a custom module is inherited from a parent organization or folder, the value of the `enablement_state` property in EffectiveEventThreatDetectionCustomModule is set to the value that is effective in the parent, instead of `INHERITED`. For example, if the module is enabled in a parent organization or folder, the effective `enablement_state` for the module in all child folders or projects is also `enabled`. EffectiveEventThreatDetectionCustomModule is read-only.
    */
   export interface Schema$EffectiveEventThreatDetectionCustomModule {
+    /**
+     * The cloud provider of the custom module.
+     */
+    cloudProvider?: string | null;
     /**
      * Output only. Config for the effective module.
      */
@@ -1160,6 +1222,10 @@ export namespace securitycenter_v1 {
      * Output only. The closest ancestor module that this module inherits the enablement state from. The format is the same as the EventThreatDetectionCustomModule resource name.
      */
     ancestorModule?: string | null;
+    /**
+     * The cloud provider of the custom module.
+     */
+    cloudProvider?: string | null;
     /**
      * Config for the module. For the resident module, its config value is defined at this level. For the inherited module, its config value is inherited from the ancestor module.
      */
@@ -1285,6 +1351,10 @@ export namespace securitycenter_v1 {
      * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
      */
     access?: Schema$Access;
+    /**
+     * AffectedResources associated with the finding.
+     */
+    affectedResources?: Schema$AffectedResources;
     /**
      * Represents an application associated with the finding.
      */
@@ -1305,6 +1375,10 @@ export namespace securitycenter_v1 {
      * The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION"
      */
     category?: string | null;
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+     */
+    chokepoint?: Schema$Chokepoint;
     /**
      * Fields related to Cloud Armor findings.
      */
@@ -1349,10 +1423,18 @@ export namespace securitycenter_v1 {
      * Data flow events associated with the finding.
      */
     dataFlowEvents?: Schema$DataFlowEvent[];
+    /**
+     * Data retention deletion events associated with the finding.
+     */
+    dataRetentionDeletionEvents?: Schema$DataRetentionDeletionEvent[];
     /**
      * Contains more details about the finding.
      */
     description?: string | null;
+    /**
+     * Disk associated with the finding.
+     */
+    disk?: Schema$Disk;
     /**
      * The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
      */
@@ -1391,6 +1473,14 @@ export namespace securitycenter_v1 {
      * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
      */
     indicator?: Schema$Indicator;
+    /**
+     * IP rules associated with the finding.
+     */
+    ipRules?: Schema$IpRules;
+    /**
+     * Job associated with the finding.
+     */
+    job?: Schema$Job;
     /**
      * Signature of the kernel rootkit.
      */
@@ -1435,6 +1525,10 @@ export namespace securitycenter_v1 {
      * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. Example: "organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}", "folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}", "projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}".
      */
     name?: string | null;
+    /**
+     * Represents the VPC networks that the resource is attached to.
+     */
+    networks?: Schema$Network[];
     /**
      * Steps to address the finding.
      */
@@ -1678,6 +1772,10 @@ export namespace securitycenter_v1 {
    * An EffectiveSecurityHealthAnalyticsCustomModule is the representation of a Security Health Analytics custom module at a specified level of the resource hierarchy: organization, folder, or project. If a custom module is inherited from a parent organization or folder, the value of the `enablementState` property in EffectiveSecurityHealthAnalyticsCustomModule is set to the value that is effective in the parent, instead of `INHERITED`. For example, if the module is enabled in a parent organization or folder, the effective enablement_state for the module in all child folders or projects is also `enabled`. EffectiveSecurityHealthAnalyticsCustomModule is read-only.
    */
   export interface Schema$GoogleCloudSecuritycenterV1EffectiveSecurityHealthAnalyticsCustomModule {
+    /**
+     * The cloud provider of the custom module.
+     */
+    cloudProvider?: string | null;
     /**
      * Output only. The user-specified configuration for the module.
      */
@@ -2076,7 +2174,7 @@ export namespace securitycenter_v1 {
      */
     sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping;
     /**
-     * Required. Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
+     * Required. Tag values combined with `AND` to check against. For Google Cloud resources, they are tag value IDs in the form of "tagValues/123". Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
      */
     tagValues?: string[] | null;
     /**
@@ -2105,6 +2203,10 @@ export namespace securitycenter_v1 {
      * Output only. If empty, indicates that the custom module was created in the organization, folder, or project in which you are viewing the custom module. Otherwise, `ancestor_module` specifies the organization or folder from which the custom module is inherited.
      */
     ancestorModule?: string | null;
+    /**
+     * The cloud provider of the custom module.
+     */
+    cloudProvider?: string | null;
     /**
      * The user specified custom configuration for the module.
      */
@@ -2234,6 +2336,24 @@ export namespace securitycenter_v1 {
      */
     confidence?: number | null;
   }
+  /**
+   * Details about resources affected by this finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2AffectedResources {
+    /**
+     * The count of resources affected by the finding.
+     */
+    count?: string | null;
+  }
+  /**
+   * Allowed IP rule.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Allowed {
+    /**
+     * Optional. Optional list of allowed IP rules.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+  }
   /**
    * Represents an application associated with a finding.
    */
@@ -2256,13 +2376,21 @@ export namespace securitycenter_v1 {
      */
     classification?: string | null;
     /**
-     * Total BPS (bytes per second) volume of attack.
+     * Total BPS (bytes per second) volume of attack. Deprecated - refer to volume_bps_long instead.
      */
     volumeBps?: number | null;
     /**
-     * Total PPS (packets per second) volume of attack.
+     * Total BPS (bytes per second) volume of attack.
+     */
+    volumeBpsLong?: string | null;
+    /**
+     * Total PPS (packets per second) volume of attack. Deprecated - refer to volume_pps_long instead.
      */
     volumePps?: number | null;
+    /**
+     * Total PPS (packets per second) volume of attack.
+     */
+    volumePpsLong?: string | null;
   }
   /**
    * An attack exposure contains the results of an attack path simulation run.
@@ -2387,6 +2515,10 @@ export namespace securitycenter_v1 {
    * Represents an Azure resource group.
    */
   export interface Schema$GoogleCloudSecuritycenterV2AzureResourceGroup {
+    /**
+     * The ID of the Azure resource group.
+     */
+    id?: string | null;
     /**
      * The name of the Azure resource group. This is not a UUID.
      */
@@ -2409,6 +2541,10 @@ export namespace securitycenter_v1 {
    * Represents a Microsoft Entra tenant.
    */
   export interface Schema$GoogleCloudSecuritycenterV2AzureTenant {
+    /**
+     * The display name of the Azure tenant.
+     */
+    displayName?: string | null;
     /**
      * The ID of the Microsoft Entra tenant, for example, "a11aaa11-aa11-1aa1-11aa-1aaa11a".
      */
@@ -2521,6 +2657,15 @@ export namespace securitycenter_v1 {
    * The response to a BulkMute request. Contains the LRO information.
    */
   export interface Schema$GoogleCloudSecuritycenterV2BulkMuteFindingsResponse {}
+  /**
+   * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Chokepoint {
+    /**
+     * List of resource names of findings associated with this chokepoint. For example, organizations/123/sources/456/findings/789. This list will have at most 100 findings.
+     */
+    relatedFindings?: string[] | null;
+  }
   /**
    * Fields related to Google Cloud Armor findings.
    */
@@ -2776,6 +2921,19 @@ export namespace securitycenter_v1 {
      */
     userInteraction?: string | null;
   }
+  /**
+   * CWE stands for Common Weakness Enumeration. Information about this weakness, as described by [CWE](https://cwe.mitre.org/).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Cwe {
+    /**
+     * The CWE identifier, e.g. CWE-94
+     */
+    id?: string | null;
+    /**
+     * Any reference to the details on the CWE, for example, https://cwe.mitre.org/data/definitions/94.html
+     */
+    references?: Schema$GoogleCloudSecuritycenterV2Reference[];
+  }
   /**
    * Details about a data access attempt made by a principal not authorized under applicable data security policy.
    */
@@ -2851,6 +3009,36 @@ export namespace securitycenter_v1 {
      */
     violatedLocation?: string | null;
   }
+  /**
+   * Details about data retention deletion violations, in which the data is non-compliant based on their retention or deletion time, as defined in the applicable data security policy. The Data Retention Deletion (DRD) control is a control of the DSPM (Data Security Posture Management) suite that enables organizations to manage data retention and deletion policies in compliance with regulations, such as GDPR and CRPA. DRD supports two primary policy types: maximum storage length (max TTL) and minimum storage length (min TTL). Both are aimed at helping organizations meet regulatory and data management commitments.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2DataRetentionDeletionEvent {
+    /**
+     * Number of objects that violated the policy for this resource. If the number is less than 1,000, then the value of this field is the exact number. If the number of objects that violated the policy is greater than or equal to 1,000, then the value of this field is 1000.
+     */
+    dataObjectCount?: string | null;
+    /**
+     * Timestamp indicating when the event was detected.
+     */
+    eventDetectionTime?: string | null;
+    /**
+     * Type of the DRD event.
+     */
+    eventType?: string | null;
+    /**
+     * Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.
+     */
+    maxRetentionAllowed?: string | null;
+  }
+  /**
+   * Denied IP rule.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Denied {
+    /**
+     * Optional. Optional list of denied IP rules.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRule[];
+  }
   /**
    * Memory hash detection contributing to the binary family match.
    */
@@ -2864,6 +3052,15 @@ export namespace securitycenter_v1 {
      */
     percentPagesMatched?: number | null;
   }
+  /**
+   * Contains information about the disk associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Disk {
+    /**
+     * The name of the disk, for example, "https://www.googleapis.com/compute/v1/projects/{project-id\}/zones/{zone-id\}/disks/{disk-id\}".
+     */
+    name?: string | null;
+  }
   /**
    * Path of the file in terms of underlying disk/partition identifiers.
    */
@@ -3023,6 +3220,10 @@ export namespace securitycenter_v1 {
      * Access details associated with the finding, such as more information on the caller, which method was accessed, and from where.
      */
     access?: Schema$GoogleCloudSecuritycenterV2Access;
+    /**
+     * AffectedResources associated with the finding.
+     */
+    affectedResources?: Schema$GoogleCloudSecuritycenterV2AffectedResources;
     /**
      * Represents an application associated with the finding.
      */
@@ -3043,6 +3244,10 @@ export namespace securitycenter_v1 {
      * Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION"
      */
     category?: string | null;
+    /**
+     * Contains details about a chokepoint, which is a resource or resource group where high-risk attack paths converge, based on [attack path simulations] (https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_path_simulations). This field cannot be updated. Its value is ignored in all update requests.
+     */
+    chokepoint?: Schema$GoogleCloudSecuritycenterV2Chokepoint;
     /**
      * Fields related to Cloud Armor findings.
      */
@@ -3089,10 +3294,18 @@ export namespace securitycenter_v1 {
      * Data flow events associated with the finding.
      */
     dataFlowEvents?: Schema$GoogleCloudSecuritycenterV2DataFlowEvent[];
+    /**
+     * Data retention deletion events associated with the finding.
+     */
+    dataRetentionDeletionEvents?: Schema$GoogleCloudSecuritycenterV2DataRetentionDeletionEvent[];
     /**
      * Contains more details about the finding.
      */
     description?: string | null;
+    /**
+     * Disk associated with the finding.
+     */
+    disk?: Schema$GoogleCloudSecuritycenterV2Disk;
     /**
      * The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.
      */
@@ -3131,6 +3344,14 @@ export namespace securitycenter_v1 {
      * Represents what's commonly known as an *indicator of compromise* (IoC) in computer forensics. This is an artifact observed on a network or in an operating system that, with high confidence, indicates a computer intrusion. For more information, see [Indicator of compromise](https://en.wikipedia.org/wiki/Indicator_of_compromise).
      */
     indicator?: Schema$GoogleCloudSecuritycenterV2Indicator;
+    /**
+     * IP rules associated with the finding.
+     */
+    ipRules?: Schema$GoogleCloudSecuritycenterV2IpRules;
+    /**
+     * Job associated with the finding.
+     */
+    job?: Schema$GoogleCloudSecuritycenterV2Job;
     /**
      * Signature of the kernel rootkit.
      */
@@ -3175,6 +3396,10 @@ export namespace securitycenter_v1 {
      * The [relative resource name](https://cloud.google.com/apis/design/resource_names#relative_resource_name) of the finding. The following list shows some examples: + `organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}` + `organizations/{organization_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/findings/{finding_id\}` + `folders/{folder_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/findings/{finding_id\}` + `projects/{project_id\}/sources/{source_id\}/locations/{location_id\}/findings/{finding_id\}`
      */
     name?: string | null;
+    /**
+     * Represents the VPC networks that the resource is attached to.
+     */
+    networks?: Schema$GoogleCloudSecuritycenterV2Network[];
     /**
      * Steps to address the finding.
      */
@@ -3306,109 +3531,435 @@ export namespace securitycenter_v1 {
     uris?: string[] | null;
   }
   /**
-   * Kernel mode rootkit signatures.
+   * IP rule information.
    */
-  export interface Schema$GoogleCloudSecuritycenterV2KernelRootkit {
-    /**
-     * Rootkit name, when available.
-     */
-    name?: string | null;
+  export interface Schema$GoogleCloudSecuritycenterV2IpRule {
     /**
-     * True if unexpected modifications of kernel code memory are present.
+     * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
      */
-    unexpectedCodeModification?: boolean | null;
+    portRanges?: Schema$GoogleCloudSecuritycenterV2PortRange[];
     /**
-     * True if `ftrace` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
+     * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
      */
-    unexpectedFtraceHandler?: boolean | null;
+    protocol?: string | null;
+  }
+  /**
+   * IP rules associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IpRules {
     /**
-     * True if interrupt handlers that are are not in the expected kernel or module code regions are present.
+     * Tuple with allowed rules.
      */
-    unexpectedInterruptHandler?: boolean | null;
+    allowed?: Schema$GoogleCloudSecuritycenterV2Allowed;
     /**
-     * True if kernel code pages that are not in the expected kernel or module code regions are present.
+     * Tuple with denied rules.
      */
-    unexpectedKernelCodePages?: boolean | null;
+    denied?: Schema$GoogleCloudSecuritycenterV2Denied;
     /**
-     * True if `kprobe` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
+     * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
      */
-    unexpectedKprobeHandler?: boolean | null;
+    destinationIpRanges?: string[] | null;
     /**
-     * True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.
+     * The direction that the rule is applicable to, one of ingress or egress.
      */
-    unexpectedProcessesInRunqueue?: boolean | null;
+    direction?: string | null;
     /**
-     * True if unexpected modifications of kernel read-only data memory are present.
+     * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
      */
-    unexpectedReadOnlyDataModification?: boolean | null;
+    exposedServices?: string[] | null;
     /**
-     * True if system call handlers that are are not in the expected kernel or module code regions are present.
+     * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
      */
-    unexpectedSystemCallHandler?: boolean | null;
+    sourceIpRanges?: string[] | null;
   }
   /**
-   * Kubernetes-related attributes.
+   * Security Command Center Issue.
    */
-  export interface Schema$GoogleCloudSecuritycenterV2Kubernetes {
+  export interface Schema$GoogleCloudSecuritycenterV2Issue {
     /**
-     * Provides information on any Kubernetes access reviews (privilege checks) relevant to the finding.
+     * Output only. The time the issue was created.
      */
-    accessReviews?: Schema$GoogleCloudSecuritycenterV2AccessReview[];
+    createTime?: string | null;
     /**
-     * Provides Kubernetes role binding information for findings that involve [RoleBindings or ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
+     * The description of the issue in Markdown format.
      */
-    bindings?: Schema$GoogleCloudSecuritycenterV2Binding[];
+    description?: string | null;
     /**
-     * GKE [node pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools) associated with the finding. This field contains node pool information for each node, when it is available.
+     * The finding category or rule name that generated the issue.
      */
-    nodePools?: Schema$GoogleCloudSecuritycenterV2NodePool[];
+    detection?: string | null;
     /**
-     * Provides Kubernetes [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes) information.
+     * The domains of the issue.
      */
-    nodes?: Schema$GoogleCloudSecuritycenterV2Node[];
+    domains?: Schema$GoogleCloudSecuritycenterV2IssueDomain[];
     /**
-     * Kubernetes objects related to the finding.
+     * The exposure score of the issue.
      */
-    objects?: Schema$GoogleCloudSecuritycenterV2Object[];
+    exposureScore?: number | null;
     /**
-     * Kubernetes [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod) associated with the finding. This field contains Pod records for each container that is owned by a Pod.
+     * The type of the issue.
      */
-    pods?: Schema$GoogleCloudSecuritycenterV2Pod[];
+    issueType?: string | null;
     /**
-     * Provides Kubernetes role information for findings that involve [Roles or ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
+     * The time the issue was last observed.
      */
-    roles?: Schema$GoogleCloudSecuritycenterV2Role[];
-  }
-  /**
-   * Represents a generic name-value label. A label has separate name and value fields to support filtering with the `contains()` function. For more information, see [Filtering on array-type fields](https://cloud.google.com/security-command-center/docs/how-to-api-list-findings#array-contains-filtering).
-   */
-  export interface Schema$GoogleCloudSecuritycenterV2Label {
+    lastObservationTime?: string | null;
     /**
-     * Name of the label.
+     * The mute information of the issue.
+     */
+    mute?: Schema$GoogleCloudSecuritycenterV2IssueMute;
+    /**
+     * Identifier. The name of the issue. Format: organizations/{organization\}/locations/{location\}/issues/{issue\}
      */
     name?: string | null;
     /**
-     * Value that corresponds to the label's name.
+     * The primary resource associated with the issue.
      */
-    value?: string | null;
-  }
-  /**
-   * Contains information related to the load balancer associated with the finding.
-   */
-  export interface Schema$GoogleCloudSecuritycenterV2LoadBalancer {
+    primaryResource?: Schema$GoogleCloudSecuritycenterV2IssueResource;
     /**
-     * The name of the load balancer associated with the finding.
+     * The findings related to the issue.
      */
-    name?: string | null;
-  }
-  /**
-   * An individual entry in a log.
-   */
-  export interface Schema$GoogleCloudSecuritycenterV2LogEntry {
+    relatedFindings?: Schema$GoogleCloudSecuritycenterV2IssueFinding[];
     /**
-     * An individual entry in a log stored in Cloud Logging.
+     * Approaches to remediate the issue in Markdown format.
      */
-    cloudLoggingEntry?: Schema$GoogleCloudSecuritycenterV2CloudLoggingEntry;
+    remediations?: string[] | null;
+    /**
+     * Additional resources associated with the issue.
+     */
+    secondaryResources?: Schema$GoogleCloudSecuritycenterV2IssueResource[];
+    /**
+     * The security context of the issue.
+     */
+    securityContexts?: Schema$GoogleCloudSecuritycenterV2IssueSecurityContext[];
+    /**
+     * The severity of the issue.
+     */
+    severity?: string | null;
+    /**
+     * Output only. The state of the issue.
+     */
+    state?: string | null;
+    /**
+     * Output only. The time the issue was last updated.
+     */
+    updateTime?: string | null;
+  }
+  /**
+   * The domains of an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueDomain {
+    /**
+     * The domain category of the issue.
+     */
+    domainCategory?: string | null;
+  }
+  /**
+   * Finding related to an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueFinding {
+    /**
+     * The CVE of the finding.
+     */
+    cve?: Schema$GoogleCloudSecuritycenterV2IssueFindingCve;
+    /**
+     * The name of the finding.
+     */
+    name?: string | null;
+    /**
+     * The security bulletin of the finding.
+     */
+    securityBulletin?: Schema$GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin;
+  }
+  /**
+   * The CVE of the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueFindingCve {
+    /**
+     * The CVE name.
+     */
+    name?: string | null;
+  }
+  /**
+   * The security bulletin of the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin {
+    /**
+     * The security bulletin name.
+     */
+    name?: string | null;
+  }
+  /**
+   * The mute information of the issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueMute {
+    /**
+     * The email address of the user who last changed the mute state of the issue.
+     */
+    muteInitiator?: string | null;
+    /**
+     * The user-provided reason for muting the issue.
+     */
+    muteReason?: string | null;
+    /**
+     * Output only. The mute state of the issue.
+     */
+    muteState?: string | null;
+    /**
+     * The time the issue was muted.
+     */
+    muteUpdateTime?: string | null;
+  }
+  /**
+   * A resource associated with the an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResource {
+    /**
+     * The AWS metadata of the resource associated with the issue. Only populated for AWS resources.
+     */
+    awsMetadata?: Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadata;
+    /**
+     * The Azure metadata of the resource associated with the issue. Only populated for Azure resources.
+     */
+    azureMetadata?: Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadata;
+    /**
+     * The cloud provider of the resource associated with the issue.
+     */
+    cloudProvider?: string | null;
+    /**
+     * The resource-type specific display name of the resource associated with the issue.
+     */
+    displayName?: string | null;
+    /**
+     * The Google Cloud metadata of the resource associated with the issue. Only populated for Google Cloud resources.
+     */
+    googleCloudMetadata?: Schema$GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata;
+    /**
+     * The full resource name of the resource associated with the issue.
+     */
+    name?: string | null;
+    /**
+     * The type of the resource associated with the issue.
+     */
+    type?: string | null;
+  }
+  /**
+   * The AWS metadata of a resource associated with an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadata {
+    /**
+     * The AWS account of the resource associated with the issue.
+     */
+    account?: Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount;
+  }
+  /**
+   * The AWS account of the resource associated with the issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount {
+    /**
+     * The AWS account ID of the resource associated with the issue.
+     */
+    id?: string | null;
+    /**
+     * The AWS account name of the resource associated with the issue.
+     */
+    name?: string | null;
+  }
+  /**
+   * The Azure metadata of a resource associated with an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadata {
+    /**
+     * The Azure subscription of the resource associated with the issue.
+     */
+    subscription?: Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription;
+  }
+  /**
+   * The Azure subscription of the resource associated with the issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription {
+    /**
+     * The Azure subscription display name of the resource associated with the issue.
+     */
+    displayName?: string | null;
+    /**
+     * The Azure subscription ID of the resource associated with the issue.
+     */
+    id?: string | null;
+  }
+  /**
+   * Google Cloud metadata of a resource associated with an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata {
+    /**
+     * The project ID that the resource associated with the issue belongs to.
+     */
+    projectId?: string | null;
+  }
+  /**
+   * Security context associated with an issue.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueSecurityContext {
+    /**
+     * The aggregated count of the security context.
+     */
+    aggregatedCount?: Schema$GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount;
+    /**
+     * The context of the security context.
+     */
+    context?: Schema$GoogleCloudSecuritycenterV2IssueSecurityContextContext;
+  }
+  /**
+   * Aggregated count of a security context.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount {
+    /**
+     * Aggregation key.
+     */
+    key?: string | null;
+    /**
+     * Aggregation value.
+     */
+    value?: number | null;
+  }
+  /**
+   * Context of a security context.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2IssueSecurityContextContext {
+    /**
+     * Context type.
+     */
+    type?: string | null;
+    /**
+     * Context values.
+     */
+    values?: string[] | null;
+  }
+  /**
+   * Describes a job
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Job {
+    /**
+     * Optional. If the job did not complete successfully, this field describes why.
+     */
+    errorCode?: number | null;
+    /**
+     * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+     */
+    location?: string | null;
+    /**
+     * The fully-qualified name for a job. e.g. `projects//jobs/`
+     */
+    name?: string | null;
+    /**
+     * Output only. State of the job, such as `RUNNING` or `PENDING`.
+     */
+    state?: string | null;
+  }
+  /**
+   * Kernel mode rootkit signatures.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2KernelRootkit {
+    /**
+     * Rootkit name, when available.
+     */
+    name?: string | null;
+    /**
+     * True if unexpected modifications of kernel code memory are present.
+     */
+    unexpectedCodeModification?: boolean | null;
+    /**
+     * True if `ftrace` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
+     */
+    unexpectedFtraceHandler?: boolean | null;
+    /**
+     * True if interrupt handlers that are are not in the expected kernel or module code regions are present.
+     */
+    unexpectedInterruptHandler?: boolean | null;
+    /**
+     * True if kernel code pages that are not in the expected kernel or module code regions are present.
+     */
+    unexpectedKernelCodePages?: boolean | null;
+    /**
+     * True if `kprobe` points are present with callbacks pointing to regions that are not in the expected kernel or module code range.
+     */
+    unexpectedKprobeHandler?: boolean | null;
+    /**
+     * True if unexpected processes in the scheduler run queue are present. Such processes are in the run queue, but not in the process task list.
+     */
+    unexpectedProcessesInRunqueue?: boolean | null;
+    /**
+     * True if unexpected modifications of kernel read-only data memory are present.
+     */
+    unexpectedReadOnlyDataModification?: boolean | null;
+    /**
+     * True if system call handlers that are are not in the expected kernel or module code regions are present.
+     */
+    unexpectedSystemCallHandler?: boolean | null;
+  }
+  /**
+   * Kubernetes-related attributes.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Kubernetes {
+    /**
+     * Provides information on any Kubernetes access reviews (privilege checks) relevant to the finding.
+     */
+    accessReviews?: Schema$GoogleCloudSecuritycenterV2AccessReview[];
+    /**
+     * Provides Kubernetes role binding information for findings that involve [RoleBindings or ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
+     */
+    bindings?: Schema$GoogleCloudSecuritycenterV2Binding[];
+    /**
+     * GKE [node pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools) associated with the finding. This field contains node pool information for each node, when it is available.
+     */
+    nodePools?: Schema$GoogleCloudSecuritycenterV2NodePool[];
+    /**
+     * Provides Kubernetes [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes) information.
+     */
+    nodes?: Schema$GoogleCloudSecuritycenterV2Node[];
+    /**
+     * Kubernetes objects related to the finding.
+     */
+    objects?: Schema$GoogleCloudSecuritycenterV2Object[];
+    /**
+     * Kubernetes [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod) associated with the finding. This field contains Pod records for each container that is owned by a Pod.
+     */
+    pods?: Schema$GoogleCloudSecuritycenterV2Pod[];
+    /**
+     * Provides Kubernetes role information for findings that involve [Roles or ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
+     */
+    roles?: Schema$GoogleCloudSecuritycenterV2Role[];
+  }
+  /**
+   * Represents a generic name-value label. A label has separate name and value fields to support filtering with the `contains()` function. For more information, see [Filtering on array-type fields](https://cloud.google.com/security-command-center/docs/how-to-api-list-findings#array-contains-filtering).
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Label {
+    /**
+     * Name of the label.
+     */
+    name?: string | null;
+    /**
+     * Value that corresponds to the label's name.
+     */
+    value?: string | null;
+  }
+  /**
+   * Contains information related to the load balancer associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2LoadBalancer {
+    /**
+     * The name of the load balancer associated with the finding.
+     */
+    name?: string | null;
+  }
+  /**
+   * An individual entry in a log.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2LogEntry {
+    /**
+     * An individual entry in a log stored in Cloud Logging.
+     */
+    cloudLoggingEntry?: Schema$GoogleCloudSecuritycenterV2CloudLoggingEntry;
   }
   /**
    * A signature corresponding to memory page hashes.
@@ -3498,6 +4049,15 @@ export namespace securitycenter_v1 {
      */
     staticMute?: Schema$GoogleCloudSecuritycenterV2StaticMute;
   }
+  /**
+   * Contains information about a VPC network associated with the finding.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2Network {
+    /**
+     * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+     */
+    name?: string | null;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -3588,7 +4148,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$GoogleCloudSecuritycenterV2OrgPolicy {
     /**
-     * The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
+     * Identifier. The resource name of the org policy. Example: "organizations/{organization_id\}/policies/{constraint_name\}"
      */
     name?: string | null;
   }
@@ -3651,6 +4211,19 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+   */
+  export interface Schema$GoogleCloudSecuritycenterV2PortRange {
+    /**
+     * Maximum port value.
+     */
+    max?: string | null;
+    /**
+     * Minimum port value.
+     */
+    min?: string | null;
+  }
   /**
    * Represents an operating system process.
    */
@@ -3863,7 +4436,7 @@ export namespace securitycenter_v1 {
      */
     sensitiveDataProtectionMapping?: Schema$GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping;
     /**
-     * Tag values combined with `AND` to check against. Values in the form "tagValues/123" Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
+     * Tag values combined with `AND` to check against. For Google Cloud resources, they are tag value IDs in the form of "tagValues/123". Example: `[ "tagValues/123", "tagValues/456", "tagValues/789" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing
      */
     tagValues?: string[] | null;
     /**
@@ -4082,6 +4655,10 @@ export namespace securitycenter_v1 {
      * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
     cve?: Schema$GoogleCloudSecuritycenterV2Cve;
+    /**
+     * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+     */
+    cwes?: Schema$GoogleCloudSecuritycenterV2Cwe[];
     /**
      * The fixed package is relevant to the finding.
      */
@@ -4090,6 +4667,14 @@ export namespace securitycenter_v1 {
      * The offending package is relevant to the finding.
      */
     offendingPackage?: Schema$GoogleCloudSecuritycenterV2Package;
+    /**
+     * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+     */
+    providerRiskScore?: string | null;
+    /**
+     * Represents whether the vulnerability is reachable (detected via static analysis)
+     */
+    reachable?: boolean | null;
     /**
      * The security bulletin is relevant to this finding.
      */
@@ -4277,6 +4862,69 @@ export namespace securitycenter_v1 {
      */
     uris?: string[] | null;
   }
+  /**
+   * IP rule information.
+   */
+  export interface Schema$IpRule {
+    /**
+     * Optional. An optional list of ports to which this rule applies. This field is only applicable for the UDP or (S)TCP protocols. Each entry must be either an integer or a range including a min and max port number.
+     */
+    portRanges?: Schema$PortRange[];
+    /**
+     * The IP protocol this rule applies to. This value can either be one of the following well known protocol strings (TCP, UDP, ICMP, ESP, AH, IPIP, SCTP) or a string representation of the integer value.
+     */
+    protocol?: string | null;
+  }
+  /**
+   * IP rules associated with the finding.
+   */
+  export interface Schema$IpRules {
+    /**
+     * Tuple with allowed rules.
+     */
+    allowed?: Schema$Allowed;
+    /**
+     * Tuple with denied rules.
+     */
+    denied?: Schema$Denied;
+    /**
+     * If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    destinationIpRanges?: string[] | null;
+    /**
+     * The direction that the rule is applicable to, one of ingress or egress.
+     */
+    direction?: string | null;
+    /**
+     * Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml.
+     */
+    exposedServices?: string[] | null;
+    /**
+     * If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4.
+     */
+    sourceIpRanges?: string[] | null;
+  }
+  /**
+   * Describes a job
+   */
+  export interface Schema$Job {
+    /**
+     * Optional. If the job did not complete successfully, this field describes why.
+     */
+    errorCode?: number | null;
+    /**
+     * Optional. Gives the location where the job ran, such as `US` or `europe-west1`
+     */
+    location?: string | null;
+    /**
+     * The fully-qualified name for a job. e.g. `projects//jobs/`
+     */
+    name?: string | null;
+    /**
+     * Output only. State of the job, such as `RUNNING` or `PENDING`.
+     */
+    state?: string | null;
+  }
   /**
    * Kernel mode rootkit signatures.
    */
@@ -4691,6 +5339,15 @@ export namespace securitycenter_v1 {
      */
     staticMute?: Schema$StaticMute;
   }
+  /**
+   * Contains information about a VPC network associated with the finding.
+   */
+  export interface Schema$Network {
+    /**
+     * The name of the VPC network resource, for example, `//compute.googleapis.com/projects/my-project/global/networks/my-network`.
+     */
+    name?: string | null;
+  }
   /**
    * Kubernetes nodes associated with the finding.
    */
@@ -4932,6 +5589,19 @@ export namespace securitycenter_v1 {
      */
     field?: string | null;
   }
+  /**
+   * A port range which is inclusive of the min and max values. Values are between 0 and 2^16-1. The max can be equal / must be not smaller than the min value. If min and max are equal this indicates that it is a single port.
+   */
+  export interface Schema$PortRange {
+    /**
+     * Maximum port value.
+     */
+    max?: string | null;
+    /**
+     * Minimum port value.
+     */
+    min?: string | null;
+  }
   /**
    * A position in the uploaded text version of a module.
    */
@@ -5307,7 +5977,7 @@ export namespace securitycenter_v1 {
    */
   export interface Schema$SetFindingStateRequest {
     /**
-     * Required. The time at which the updated state takes effect.
+     * Optional. The time at which the updated state takes effect. If unset, defaults to the request time.
      */
     startTime?: string | null;
     /**
@@ -5614,6 +6284,10 @@ export namespace securitycenter_v1 {
      * CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)
      */
     cve?: Schema$Cve;
+    /**
+     * Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.
+     */
+    cwes?: Schema$Cwe[];
     /**
      * The fixed package is relevant to the finding.
      */
@@ -5622,6 +6296,14 @@ export namespace securitycenter_v1 {
      * The offending package is relevant to the finding.
      */
     offendingPackage?: Schema$Package;
+    /**
+     * Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.
+     */
+    providerRiskScore?: string | null;
+    /**
+     * Represents whether the vulnerability is reachable (detected via static analysis)
+     */
+    reachable?: boolean | null;
     /**
      * The security bulletin is relevant to this finding.
      */
@@ -7717,104 +8399,6 @@ export namespace securitycenter_v1 {
       this.context = context;
     }
 
-    /**
-     * Creates a mute config.
-     *
-     * @param params - Parameters for request
-     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-     * @param callback - Optional callback that handles the response.
-     * @returns A promise if used with async/await, or void if used with a callback.
-     */
-    create(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Create,
-      options: StreamMethodOptions
-    ): GaxiosPromise<Readable>;
-    create(
-      params?: Params$Resource$Folders$Locations$Muteconfigs$Create,
-      options?: MethodOptions
-    ): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-    create(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Create,
-      options: StreamMethodOptions | BodyResponseCallback<Readable>,
-      callback: BodyResponseCallback<Readable>
-    ): void;
-    create(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Create,
-      options:
-        | MethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Create,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      paramsOrCallback?:
-        | Params$Resource$Folders$Locations$Muteconfigs$Create
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      optionsOrCallback?:
-        | MethodOptions
-        | StreamMethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      callback?:
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>
-    ):
-      | void
-      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-      | GaxiosPromise<Readable> {
-      let params = (paramsOrCallback ||
-        {}) as Params$Resource$Folders$Locations$Muteconfigs$Create;
-      let options = (optionsOrCallback || {}) as MethodOptions;
-
-      if (typeof paramsOrCallback === 'function') {
-        callback = paramsOrCallback;
-        params = {} as Params$Resource$Folders$Locations$Muteconfigs$Create;
-        options = {};
-      }
-
-      if (typeof optionsOrCallback === 'function') {
-        callback = optionsOrCallback;
-        options = {};
-      }
-
-      const rootUrl =
-        options.rootUrl || 'https://securitycenter.googleapis.com/';
-      const parameters = {
-        options: Object.assign(
-          {
-            url: (rootUrl + '/v1/{+parent}/muteConfigs').replace(
-              /([^:]\/)\/+/g,
-              '$1'
-            ),
-            method: 'POST',
-            apiVersion: '',
-          },
-          options
-        ),
-        params,
-        requiredParams: ['parent'],
-        pathParams: ['parent'],
-        context: this.context,
-      };
-      if (callback) {
-        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters,
-          callback as BodyResponseCallback<unknown>
-        );
-      } else {
-        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters
-        );
-      }
-    }
-
     /**
      * Deletes an existing mute config.
      *
@@ -7897,162 +8481,69 @@ export namespace securitycenter_v1 {
           callback as BodyResponseCallback<unknown>
         );
       } else {
-        return createAPIRequest<Schema$Empty>(parameters);
-      }
-    }
-
-    /**
-     * Gets a mute config.
-     *
-     * @param params - Parameters for request
-     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-     * @param callback - Optional callback that handles the response.
-     * @returns A promise if used with async/await, or void if used with a callback.
-     */
-    get(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
-      options: StreamMethodOptions
-    ): GaxiosPromise<Readable>;
-    get(
-      params?: Params$Resource$Folders$Locations$Muteconfigs$Get,
-      options?: MethodOptions
-    ): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-    get(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
-      options: StreamMethodOptions | BodyResponseCallback<Readable>,
-      callback: BodyResponseCallback<Readable>
-    ): void;
-    get(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
-      options:
-        | MethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    get(
-      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    get(
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    get(
-      paramsOrCallback?:
-        | Params$Resource$Folders$Locations$Muteconfigs$Get
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      optionsOrCallback?:
-        | MethodOptions
-        | StreamMethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      callback?:
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>
-    ):
-      | void
-      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-      | GaxiosPromise<Readable> {
-      let params = (paramsOrCallback ||
-        {}) as Params$Resource$Folders$Locations$Muteconfigs$Get;
-      let options = (optionsOrCallback || {}) as MethodOptions;
-
-      if (typeof paramsOrCallback === 'function') {
-        callback = paramsOrCallback;
-        params = {} as Params$Resource$Folders$Locations$Muteconfigs$Get;
-        options = {};
-      }
-
-      if (typeof optionsOrCallback === 'function') {
-        callback = optionsOrCallback;
-        options = {};
-      }
-
-      const rootUrl =
-        options.rootUrl || 'https://securitycenter.googleapis.com/';
-      const parameters = {
-        options: Object.assign(
-          {
-            url: (rootUrl + '/v1/{+name}').replace(/([^:]\/)\/+/g, '$1'),
-            method: 'GET',
-            apiVersion: '',
-          },
-          options
-        ),
-        params,
-        requiredParams: ['name'],
-        pathParams: ['name'],
-        context: this.context,
-      };
-      if (callback) {
-        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters,
-          callback as BodyResponseCallback<unknown>
-        );
-      } else {
-        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters
-        );
+        return createAPIRequest<Schema$Empty>(parameters);
       }
     }
 
     /**
-     * Lists mute configs.
+     * Gets a mute config.
      *
      * @param params - Parameters for request
      * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
      * @param callback - Optional callback that handles the response.
      * @returns A promise if used with async/await, or void if used with a callback.
      */
-    list(
-      params: Params$Resource$Folders$Locations$Muteconfigs$List,
+    get(
+      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
       options: StreamMethodOptions
     ): GaxiosPromise<Readable>;
-    list(
-      params?: Params$Resource$Folders$Locations$Muteconfigs$List,
+    get(
+      params?: Params$Resource$Folders$Locations$Muteconfigs$Get,
       options?: MethodOptions
-    ): GaxiosPromise<Schema$ListMuteConfigsResponse>;
-    list(
-      params: Params$Resource$Folders$Locations$Muteconfigs$List,
+    ): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
+    get(
+      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
       options: StreamMethodOptions | BodyResponseCallback<Readable>,
       callback: BodyResponseCallback<Readable>
     ): void;
-    list(
-      params: Params$Resource$Folders$Locations$Muteconfigs$List,
+    get(
+      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
       options:
         | MethodOptions
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>,
-      callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>,
+      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
     ): void;
-    list(
-      params: Params$Resource$Folders$Locations$Muteconfigs$List,
-      callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>
+    get(
+      params: Params$Resource$Folders$Locations$Muteconfigs$Get,
+      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
     ): void;
-    list(callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-    list(
+    get(
+      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
+    ): void;
+    get(
       paramsOrCallback?:
-        | Params$Resource$Folders$Locations$Muteconfigs$List
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | Params$Resource$Folders$Locations$Muteconfigs$Get
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
         | BodyResponseCallback<Readable>,
       optionsOrCallback?:
         | MethodOptions
         | StreamMethodOptions
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
         | BodyResponseCallback<Readable>,
       callback?:
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
         | BodyResponseCallback<Readable>
     ):
       | void
-      | GaxiosPromise<Schema$ListMuteConfigsResponse>
+      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
       | GaxiosPromise<Readable> {
       let params = (paramsOrCallback ||
-        {}) as Params$Resource$Folders$Locations$Muteconfigs$List;
+        {}) as Params$Resource$Folders$Locations$Muteconfigs$Get;
       let options = (optionsOrCallback || {}) as MethodOptions;
 
       if (typeof paramsOrCallback === 'function') {
         callback = paramsOrCallback;
-        params = {} as Params$Resource$Folders$Locations$Muteconfigs$List;
+        params = {} as Params$Resource$Folders$Locations$Muteconfigs$Get;
         options = {};
       }
 
@@ -8066,24 +8557,26 @@ export namespace securitycenter_v1 {
       const parameters = {
         options: Object.assign(
           {
-            url: (rootUrl + '/v1/{+parent}').replace(/([^:]\/)\/+/g, '$1'),
+            url: (rootUrl + '/v1/{+name}').replace(/([^:]\/)\/+/g, '$1'),
             method: 'GET',
             apiVersion: '',
           },
           options
         ),
         params,
-        requiredParams: ['parent'],
-        pathParams: ['parent'],
+        requiredParams: ['name'],
+        pathParams: ['name'],
         context: this.context,
       };
       if (callback) {
-        createAPIRequest<Schema$ListMuteConfigsResponse>(
+        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
           parameters,
           callback as BodyResponseCallback<unknown>
         );
       } else {
-        return createAPIRequest<Schema$ListMuteConfigsResponse>(parameters);
+        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
+          parameters
+        );
       }
     }
 
@@ -8183,22 +8676,6 @@ export namespace securitycenter_v1 {
     }
   }
 
-  export interface Params$Resource$Folders$Locations$Muteconfigs$Create
-    extends StandardParameters {
-    /**
-     * Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.
-     */
-    muteConfigId?: string;
-    /**
-     * Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-     */
-    parent?: string;
-
-    /**
-     * Request body metadata
-     */
-    requestBody?: Schema$GoogleCloudSecuritycenterV1MuteConfig;
-  }
   export interface Params$Resource$Folders$Locations$Muteconfigs$Delete
     extends StandardParameters {
     /**
@@ -8213,21 +8690,6 @@ export namespace securitycenter_v1 {
      */
     name?: string;
   }
-  export interface Params$Resource$Folders$Locations$Muteconfigs$List
-    extends StandardParameters {
-    /**
-     * The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
-     */
-    pageSize?: number;
-    /**
-     * A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.
-     */
-    pageToken?: string;
-    /**
-     * Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.
-     */
-    parent?: string;
-  }
   export interface Params$Resource$Folders$Locations$Muteconfigs$Patch
     extends StandardParameters {
     /**
@@ -11212,6 +11674,7 @@ export namespace securitycenter_v1 {
   export class Resource$Organizations {
     context: APIRequestContext;
     assets: Resource$Organizations$Assets;
+    attackPaths: Resource$Organizations$Attackpaths;
     bigQueryExports: Resource$Organizations$Bigqueryexports;
     eventThreatDetectionSettings: Resource$Organizations$Eventthreatdetectionsettings;
     findings: Resource$Organizations$Findings;
@@ -11227,6 +11690,7 @@ export namespace securitycenter_v1 {
     constructor(context: APIRequestContext) {
       this.context = context;
       this.assets = new Resource$Organizations$Assets(this.context);
+      this.attackPaths = new Resource$Organizations$Attackpaths(this.context);
       this.bigQueryExports = new Resource$Organizations$Bigqueryexports(
         this.context
       );
@@ -11816,99 +12280,220 @@ export namespace securitycenter_v1 {
           options
         ),
         params,
-        requiredParams: ['name'],
-        pathParams: ['name'],
+        requiredParams: ['name'],
+        pathParams: ['name'],
+        context: this.context,
+      };
+      if (callback) {
+        createAPIRequest<Schema$SecurityMarks>(
+          parameters,
+          callback as BodyResponseCallback<unknown>
+        );
+      } else {
+        return createAPIRequest<Schema$SecurityMarks>(parameters);
+      }
+    }
+  }
+
+  export interface Params$Resource$Organizations$Assets$Group
+    extends StandardParameters {
+    /**
+     * Required. The name of the parent to group the assets by. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
+     */
+    parent?: string;
+
+    /**
+     * Request body metadata
+     */
+    requestBody?: Schema$GroupAssetsRequest;
+  }
+  export interface Params$Resource$Organizations$Assets$List
+    extends StandardParameters {
+    /**
+     * When compare_duration is set, the ListAssetsResult's "state_change" attribute is updated to indicate whether the asset was added, removed, or remained present during the compare_duration period of time that precedes the read_time. This is the time between (read_time - compare_duration) and read_time. The state_change value is derived based on the presence of the asset at the two points in time. Intermediate state changes between the two times don't affect the result. For example, the results aren't affected if the asset is removed and re-created again. Possible "state_change" values when compare_duration is specified: * "ADDED": indicates that the asset was not present at the start of compare_duration, but present at read_time. * "REMOVED": indicates that the asset was present at the start of compare_duration, but not present at read_time. * "ACTIVE": indicates that the asset was present at both the start and the end of the time period defined by compare_duration and read_time. If compare_duration is not specified, then the only possible state_change is "UNUSED", which will be the state_change set for all assets present at read_time.
+     */
+    compareDuration?: string;
+    /**
+     * A field mask to specify the ListAssetsResult fields to be listed in the response. An empty field mask will list all fields.
+     */
+    fieldMask?: string;
+    /**
+     * Expression that defines the filter to apply across assets. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the Asset resource. Examples include: * name * security_center_properties.resource_name * resource_properties.a_property * security_marks.marks.marka The supported operators are: * `=` for all value types. * `\>`, `<`, `\>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes. The following are the allowed field and operator combinations: * name: `=` * update_time: `=`, `\>`, `<`, `\>=`, `<=` Usage: This should be milliseconds since epoch or an RFC3339 string. Examples: `update_time = "2019-06-10T16:07:18-07:00"` `update_time = 1560208038000` * create_time: `=`, `\>`, `<`, `\>=`, `<=` Usage: This should be milliseconds since epoch or an RFC3339 string. Examples: `create_time = "2019-06-10T16:07:18-07:00"` `create_time = 1560208038000` * iam_policy.policy_blob: `=`, `:` * resource_properties: `=`, `:`, `\>`, `<`, `\>=`, `<=` * security_marks.marks: `=`, `:` * security_center_properties.resource_name: `=`, `:` * security_center_properties.resource_display_name: `=`, `:` * security_center_properties.resource_type: `=`, `:` * security_center_properties.resource_parent: `=`, `:` * security_center_properties.resource_parent_display_name: `=`, `:` * security_center_properties.resource_project: `=`, `:` * security_center_properties.resource_project_display_name: `=`, `:` * security_center_properties.resource_owners: `=`, `:` For example, `resource_properties.size = 100` is a valid filter string. Use a partial match on the empty string to filter based on a property existing: `resource_properties.my_property : ""` Use a negated partial match on the empty string to filter based on a property not existing: `-resource_properties.my_property : ""`
+     */
+    filter?: string;
+    /**
+     * Expression that defines what fields and order to use for sorting. The string value should follow SQL syntax: comma separated list of fields. For example: "name,resource_properties.a_property". The default sorting order is ascending. To specify descending order for a field, a suffix " desc" should be appended to the field name. For example: "name desc,resource_properties.a_property". Redundant space characters in the syntax are insignificant. "name desc,resource_properties.a_property" and " name desc , resource_properties.a_property " are equivalent. The following fields are supported: name update_time resource_properties security_marks.marks security_center_properties.resource_name security_center_properties.resource_display_name security_center_properties.resource_parent security_center_properties.resource_parent_display_name security_center_properties.resource_project security_center_properties.resource_project_display_name security_center_properties.resource_type
+     */
+    orderBy?: string;
+    /**
+     * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
+     */
+    pageSize?: number;
+    /**
+     * The value returned by the last `ListAssetsResponse`; indicates that this is a continuation of a prior `ListAssets` call, and that the system should return the next page of data.
+     */
+    pageToken?: string;
+    /**
+     * Required. The name of the parent resource that contains the assets. The value that you can specify on parent depends on the method in which you specify parent. You can specify one of the following values: `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
+     */
+    parent?: string;
+    /**
+     * Time used as a reference point when filtering assets. The filter is limited to assets existing at the supplied time and their values are those at that specific time. Absence of this field will default to the API's version of NOW.
+     */
+    readTime?: string;
+  }
+  export interface Params$Resource$Organizations$Assets$Rundiscovery
+    extends StandardParameters {
+    /**
+     * Required. Name of the organization to run asset discovery for. Its format is `organizations/[organization_id]`.
+     */
+    parent?: string;
+
+    /**
+     * Request body metadata
+     */
+    requestBody?: Schema$RunAssetDiscoveryRequest;
+  }
+  export interface Params$Resource$Organizations$Assets$Updatesecuritymarks
+    extends StandardParameters {
+    /**
+     * The relative resource name of the SecurityMarks. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Examples: "organizations/{organization_id\}/assets/{asset_id\}/securityMarks" "organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}/securityMarks".
+     */
+    name?: string;
+    /**
+     * The time at which the updated SecurityMarks take effect. If not set uses current server time. Updates will be applied to the SecurityMarks that are active immediately preceding this time. Must be earlier or equal to the server time.
+     */
+    startTime?: string;
+    /**
+     * The FieldMask to use when updating the security marks resource. The field mask must not contain duplicate fields. If empty or set to "marks", all marks will be replaced. Individual marks can be updated using "marks.".
+     */
+    updateMask?: string;
+
+    /**
+     * Request body metadata
+     */
+    requestBody?: Schema$SecurityMarks;
+  }
+
+  export class Resource$Organizations$Attackpaths {
+    context: APIRequestContext;
+    constructor(context: APIRequestContext) {
+      this.context = context;
+    }
+
+    /**
+     * Lists the attack paths for a set of simulation results or valued resources and filter.
+     *
+     * @param params - Parameters for request
+     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
+     * @param callback - Optional callback that handles the response.
+     * @returns A promise if used with async/await, or void if used with a callback.
+     */
+    list(
+      params: Params$Resource$Organizations$Attackpaths$List,
+      options: StreamMethodOptions
+    ): GaxiosPromise<Readable>;
+    list(
+      params?: Params$Resource$Organizations$Attackpaths$List,
+      options?: MethodOptions
+    ): GaxiosPromise<Schema$ListAttackPathsResponse>;
+    list(
+      params: Params$Resource$Organizations$Attackpaths$List,
+      options: StreamMethodOptions | BodyResponseCallback<Readable>,
+      callback: BodyResponseCallback<Readable>
+    ): void;
+    list(
+      params: Params$Resource$Organizations$Attackpaths$List,
+      options:
+        | MethodOptions
+        | BodyResponseCallback<Schema$ListAttackPathsResponse>,
+      callback: BodyResponseCallback<Schema$ListAttackPathsResponse>
+    ): void;
+    list(
+      params: Params$Resource$Organizations$Attackpaths$List,
+      callback: BodyResponseCallback<Schema$ListAttackPathsResponse>
+    ): void;
+    list(callback: BodyResponseCallback<Schema$ListAttackPathsResponse>): void;
+    list(
+      paramsOrCallback?:
+        | Params$Resource$Organizations$Attackpaths$List
+        | BodyResponseCallback<Schema$ListAttackPathsResponse>
+        | BodyResponseCallback<Readable>,
+      optionsOrCallback?:
+        | MethodOptions
+        | StreamMethodOptions
+        | BodyResponseCallback<Schema$ListAttackPathsResponse>
+        | BodyResponseCallback<Readable>,
+      callback?:
+        | BodyResponseCallback<Schema$ListAttackPathsResponse>
+        | BodyResponseCallback<Readable>
+    ):
+      | void
+      | GaxiosPromise<Schema$ListAttackPathsResponse>
+      | GaxiosPromise<Readable> {
+      let params = (paramsOrCallback ||
+        {}) as Params$Resource$Organizations$Attackpaths$List;
+      let options = (optionsOrCallback || {}) as MethodOptions;
+
+      if (typeof paramsOrCallback === 'function') {
+        callback = paramsOrCallback;
+        params = {} as Params$Resource$Organizations$Attackpaths$List;
+        options = {};
+      }
+
+      if (typeof optionsOrCallback === 'function') {
+        callback = optionsOrCallback;
+        options = {};
+      }
+
+      const rootUrl =
+        options.rootUrl || 'https://securitycenter.googleapis.com/';
+      const parameters = {
+        options: Object.assign(
+          {
+            url: (rootUrl + '/v1/{+parent}/attackPaths').replace(
+              /([^:]\/)\/+/g,
+              '$1'
+            ),
+            method: 'GET',
+            apiVersion: '',
+          },
+          options
+        ),
+        params,
+        requiredParams: ['parent'],
+        pathParams: ['parent'],
         context: this.context,
       };
       if (callback) {
-        createAPIRequest<Schema$SecurityMarks>(
+        createAPIRequest<Schema$ListAttackPathsResponse>(
           parameters,
           callback as BodyResponseCallback<unknown>
         );
       } else {
-        return createAPIRequest<Schema$SecurityMarks>(parameters);
+        return createAPIRequest<Schema$ListAttackPathsResponse>(parameters);
       }
     }
   }
 
-  export interface Params$Resource$Organizations$Assets$Group
-    extends StandardParameters {
-    /**
-     * Required. The name of the parent to group the assets by. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-     */
-    parent?: string;
-
-    /**
-     * Request body metadata
-     */
-    requestBody?: Schema$GroupAssetsRequest;
-  }
-  export interface Params$Resource$Organizations$Assets$List
+  export interface Params$Resource$Organizations$Attackpaths$List
     extends StandardParameters {
     /**
-     * When compare_duration is set, the ListAssetsResult's "state_change" attribute is updated to indicate whether the asset was added, removed, or remained present during the compare_duration period of time that precedes the read_time. This is the time between (read_time - compare_duration) and read_time. The state_change value is derived based on the presence of the asset at the two points in time. Intermediate state changes between the two times don't affect the result. For example, the results aren't affected if the asset is removed and re-created again. Possible "state_change" values when compare_duration is specified: * "ADDED": indicates that the asset was not present at the start of compare_duration, but present at read_time. * "REMOVED": indicates that the asset was present at the start of compare_duration, but not present at read_time. * "ACTIVE": indicates that the asset was present at both the start and the end of the time period defined by compare_duration and read_time. If compare_duration is not specified, then the only possible state_change is "UNUSED", which will be the state_change set for all assets present at read_time.
-     */
-    compareDuration?: string;
-    /**
-     * A field mask to specify the ListAssetsResult fields to be listed in the response. An empty field mask will list all fields.
-     */
-    fieldMask?: string;
-    /**
-     * Expression that defines the filter to apply across assets. The expression is a list of zero or more restrictions combined via logical operators `AND` and `OR`. Parentheses are supported, and `OR` has higher precedence than `AND`. Restrictions have the form ` ` and may have a `-` character in front of them to indicate negation. The fields map to those defined in the Asset resource. Examples include: * name * security_center_properties.resource_name * resource_properties.a_property * security_marks.marks.marka The supported operators are: * `=` for all value types. * `\>`, `<`, `\>=`, `<=` for integer values. * `:`, meaning substring matching, for strings. The supported value types are: * string literals in quotes. * integer literals without quotes. * boolean literals `true` and `false` without quotes. The following are the allowed field and operator combinations: * name: `=` * update_time: `=`, `\>`, `<`, `\>=`, `<=` Usage: This should be milliseconds since epoch or an RFC3339 string. Examples: `update_time = "2019-06-10T16:07:18-07:00"` `update_time = 1560208038000` * create_time: `=`, `\>`, `<`, `\>=`, `<=` Usage: This should be milliseconds since epoch or an RFC3339 string. Examples: `create_time = "2019-06-10T16:07:18-07:00"` `create_time = 1560208038000` * iam_policy.policy_blob: `=`, `:` * resource_properties: `=`, `:`, `\>`, `<`, `\>=`, `<=` * security_marks.marks: `=`, `:` * security_center_properties.resource_name: `=`, `:` * security_center_properties.resource_display_name: `=`, `:` * security_center_properties.resource_type: `=`, `:` * security_center_properties.resource_parent: `=`, `:` * security_center_properties.resource_parent_display_name: `=`, `:` * security_center_properties.resource_project: `=`, `:` * security_center_properties.resource_project_display_name: `=`, `:` * security_center_properties.resource_owners: `=`, `:` For example, `resource_properties.size = 100` is a valid filter string. Use a partial match on the empty string to filter based on a property existing: `resource_properties.my_property : ""` Use a negated partial match on the empty string to filter based on a property not existing: `-resource_properties.my_property : ""`
+     * The filter expression that filters the attack path in the response. Supported fields: * `valued_resources` supports =
      */
     filter?: string;
-    /**
-     * Expression that defines what fields and order to use for sorting. The string value should follow SQL syntax: comma separated list of fields. For example: "name,resource_properties.a_property". The default sorting order is ascending. To specify descending order for a field, a suffix " desc" should be appended to the field name. For example: "name desc,resource_properties.a_property". Redundant space characters in the syntax are insignificant. "name desc,resource_properties.a_property" and " name desc , resource_properties.a_property " are equivalent. The following fields are supported: name update_time resource_properties security_marks.marks security_center_properties.resource_name security_center_properties.resource_display_name security_center_properties.resource_parent security_center_properties.resource_parent_display_name security_center_properties.resource_project security_center_properties.resource_project_display_name security_center_properties.resource_type
-     */
-    orderBy?: string;
     /**
      * The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.
      */
     pageSize?: number;
     /**
-     * The value returned by the last `ListAssetsResponse`; indicates that this is a continuation of a prior `ListAssets` call, and that the system should return the next page of data.
+     * The value returned by the last `ListAttackPathsResponse`; indicates that this is a continuation of a prior `ListAttackPaths` call, and that the system should return the next page of data.
      */
     pageToken?: string;
     /**
-     * Required. The name of the parent resource that contains the assets. The value that you can specify on parent depends on the method in which you specify parent. You can specify one of the following values: `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-     */
-    parent?: string;
-    /**
-     * Time used as a reference point when filtering assets. The filter is limited to assets existing at the supplied time and their values are those at that specific time. Absence of this field will default to the API's version of NOW.
-     */
-    readTime?: string;
-  }
-  export interface Params$Resource$Organizations$Assets$Rundiscovery
-    extends StandardParameters {
-    /**
-     * Required. Name of the organization to run asset discovery for. Its format is `organizations/[organization_id]`.
+     * Required. Name of parent to list attack paths. Valid formats: `organizations/{organization\}`, `organizations/{organization\}/simulations/{simulation\}` `organizations/{organization\}/simulations/{simulation\}/attackExposureResults/{attack_exposure_result_v2\}` `organizations/{organization\}/simulations/{simulation\}/valuedResources/{valued_resource\}`
      */
     parent?: string;
-
-    /**
-     * Request body metadata
-     */
-    requestBody?: Schema$RunAssetDiscoveryRequest;
-  }
-  export interface Params$Resource$Organizations$Assets$Updatesecuritymarks
-    extends StandardParameters {
-    /**
-     * The relative resource name of the SecurityMarks. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Examples: "organizations/{organization_id\}/assets/{asset_id\}/securityMarks" "organizations/{organization_id\}/sources/{source_id\}/findings/{finding_id\}/securityMarks".
-     */
-    name?: string;
-    /**
-     * The time at which the updated SecurityMarks take effect. If not set uses current server time. Updates will be applied to the SecurityMarks that are active immediately preceding this time. Must be earlier or equal to the server time.
-     */
-    startTime?: string;
-    /**
-     * The FieldMask to use when updating the security marks resource. The field mask must not contain duplicate fields. If empty or set to "marks", all marks will be replaced. Individual marks can be updated using "marks.".
-     */
-    updateMask?: string;
-
-    /**
-     * Request body metadata
-     */
-    requestBody?: Schema$SecurityMarks;
   }
 
   export class Resource$Organizations$Bigqueryexports {
@@ -13585,105 +14170,6 @@ export namespace securitycenter_v1 {
       this.context = context;
     }
 
-    /**
-     * Creates a mute config.
-     *
-     * @param params - Parameters for request
-     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-     * @param callback - Optional callback that handles the response.
-     * @returns A promise if used with async/await, or void if used with a callback.
-     */
-    create(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$Create,
-      options: StreamMethodOptions
-    ): GaxiosPromise<Readable>;
-    create(
-      params?: Params$Resource$Organizations$Locations$Muteconfigs$Create,
-      options?: MethodOptions
-    ): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-    create(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$Create,
-      options: StreamMethodOptions | BodyResponseCallback<Readable>,
-      callback: BodyResponseCallback<Readable>
-    ): void;
-    create(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$Create,
-      options:
-        | MethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$Create,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      paramsOrCallback?:
-        | Params$Resource$Organizations$Locations$Muteconfigs$Create
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      optionsOrCallback?:
-        | MethodOptions
-        | StreamMethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      callback?:
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>
-    ):
-      | void
-      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-      | GaxiosPromise<Readable> {
-      let params = (paramsOrCallback ||
-        {}) as Params$Resource$Organizations$Locations$Muteconfigs$Create;
-      let options = (optionsOrCallback || {}) as MethodOptions;
-
-      if (typeof paramsOrCallback === 'function') {
-        callback = paramsOrCallback;
-        params =
-          {} as Params$Resource$Organizations$Locations$Muteconfigs$Create;
-        options = {};
-      }
-
-      if (typeof optionsOrCallback === 'function') {
-        callback = optionsOrCallback;
-        options = {};
-      }
-
-      const rootUrl =
-        options.rootUrl || 'https://securitycenter.googleapis.com/';
-      const parameters = {
-        options: Object.assign(
-          {
-            url: (rootUrl + '/v1/{+parent}/muteConfigs').replace(
-              /([^:]\/)\/+/g,
-              '$1'
-            ),
-            method: 'POST',
-            apiVersion: '',
-          },
-          options
-        ),
-        params,
-        requiredParams: ['parent'],
-        pathParams: ['parent'],
-        context: this.context,
-      };
-      if (callback) {
-        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters,
-          callback as BodyResponseCallback<unknown>
-        );
-      } else {
-        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters
-        );
-      }
-    }
-
     /**
      * Deletes an existing mute config.
      *
@@ -13804,125 +14290,32 @@ export namespace securitycenter_v1 {
       callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
     ): void;
     get(
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    get(
-      paramsOrCallback?:
-        | Params$Resource$Organizations$Locations$Muteconfigs$Get
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      optionsOrCallback?:
-        | MethodOptions
-        | StreamMethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      callback?:
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>
-    ):
-      | void
-      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-      | GaxiosPromise<Readable> {
-      let params = (paramsOrCallback ||
-        {}) as Params$Resource$Organizations$Locations$Muteconfigs$Get;
-      let options = (optionsOrCallback || {}) as MethodOptions;
-
-      if (typeof paramsOrCallback === 'function') {
-        callback = paramsOrCallback;
-        params = {} as Params$Resource$Organizations$Locations$Muteconfigs$Get;
-        options = {};
-      }
-
-      if (typeof optionsOrCallback === 'function') {
-        callback = optionsOrCallback;
-        options = {};
-      }
-
-      const rootUrl =
-        options.rootUrl || 'https://securitycenter.googleapis.com/';
-      const parameters = {
-        options: Object.assign(
-          {
-            url: (rootUrl + '/v1/{+name}').replace(/([^:]\/)\/+/g, '$1'),
-            method: 'GET',
-            apiVersion: '',
-          },
-          options
-        ),
-        params,
-        requiredParams: ['name'],
-        pathParams: ['name'],
-        context: this.context,
-      };
-      if (callback) {
-        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters,
-          callback as BodyResponseCallback<unknown>
-        );
-      } else {
-        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters
-        );
-      }
-    }
-
-    /**
-     * Lists mute configs.
-     *
-     * @param params - Parameters for request
-     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-     * @param callback - Optional callback that handles the response.
-     * @returns A promise if used with async/await, or void if used with a callback.
-     */
-    list(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$List,
-      options: StreamMethodOptions
-    ): GaxiosPromise<Readable>;
-    list(
-      params?: Params$Resource$Organizations$Locations$Muteconfigs$List,
-      options?: MethodOptions
-    ): GaxiosPromise<Schema$ListMuteConfigsResponse>;
-    list(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$List,
-      options: StreamMethodOptions | BodyResponseCallback<Readable>,
-      callback: BodyResponseCallback<Readable>
-    ): void;
-    list(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$List,
-      options:
-        | MethodOptions
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>,
-      callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>
-    ): void;
-    list(
-      params: Params$Resource$Organizations$Locations$Muteconfigs$List,
-      callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>
+      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
     ): void;
-    list(callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-    list(
+    get(
       paramsOrCallback?:
-        | Params$Resource$Organizations$Locations$Muteconfigs$List
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | Params$Resource$Organizations$Locations$Muteconfigs$Get
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
         | BodyResponseCallback<Readable>,
       optionsOrCallback?:
         | MethodOptions
         | StreamMethodOptions
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
         | BodyResponseCallback<Readable>,
       callback?:
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
+        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
         | BodyResponseCallback<Readable>
     ):
       | void
-      | GaxiosPromise<Schema$ListMuteConfigsResponse>
+      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
       | GaxiosPromise<Readable> {
       let params = (paramsOrCallback ||
-        {}) as Params$Resource$Organizations$Locations$Muteconfigs$List;
+        {}) as Params$Resource$Organizations$Locations$Muteconfigs$Get;
       let options = (optionsOrCallback || {}) as MethodOptions;
 
       if (typeof paramsOrCallback === 'function') {
         callback = paramsOrCallback;
-        params = {} as Params$Resource$Organizations$Locations$Muteconfigs$List;
+        params = {} as Params$Resource$Organizations$Locations$Muteconfigs$Get;
         options = {};
       }
 
@@ -13936,24 +14329,26 @@ export namespace securitycenter_v1 {
       const parameters = {
         options: Object.assign(
           {
-            url: (rootUrl + '/v1/{+parent}').replace(/([^:]\/)\/+/g, '$1'),
+            url: (rootUrl + '/v1/{+name}').replace(/([^:]\/)\/+/g, '$1'),
             method: 'GET',
             apiVersion: '',
           },
           options
         ),
         params,
-        requiredParams: ['parent'],
-        pathParams: ['parent'],
+        requiredParams: ['name'],
+        pathParams: ['name'],
         context: this.context,
       };
       if (callback) {
-        createAPIRequest<Schema$ListMuteConfigsResponse>(
+        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
           parameters,
           callback as BodyResponseCallback<unknown>
         );
       } else {
-        return createAPIRequest<Schema$ListMuteConfigsResponse>(parameters);
+        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
+          parameters
+        );
       }
     }
 
@@ -14054,22 +14449,6 @@ export namespace securitycenter_v1 {
     }
   }
 
-  export interface Params$Resource$Organizations$Locations$Muteconfigs$Create
-    extends StandardParameters {
-    /**
-     * Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.
-     */
-    muteConfigId?: string;
-    /**
-     * Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-     */
-    parent?: string;
-
-    /**
-     * Request body metadata
-     */
-    requestBody?: Schema$GoogleCloudSecuritycenterV1MuteConfig;
-  }
   export interface Params$Resource$Organizations$Locations$Muteconfigs$Delete
     extends StandardParameters {
     /**
@@ -14084,21 +14463,6 @@ export namespace securitycenter_v1 {
      */
     name?: string;
   }
-  export interface Params$Resource$Organizations$Locations$Muteconfigs$List
-    extends StandardParameters {
-    /**
-     * The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
-     */
-    pageSize?: number;
-    /**
-     * A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.
-     */
-    pageToken?: string;
-    /**
-     * Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.
-     */
-    parent?: string;
-  }
   export interface Params$Resource$Organizations$Locations$Muteconfigs$Patch
     extends StandardParameters {
     /**
@@ -15183,7 +15547,7 @@ export namespace securitycenter_v1 {
     }
 
     /**
-     * Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.
+     * Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.
      *
      * @param params - Parameters for request
      * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
@@ -21758,104 +22122,6 @@ export namespace securitycenter_v1 {
       this.context = context;
     }
 
-    /**
-     * Creates a mute config.
-     *
-     * @param params - Parameters for request
-     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-     * @param callback - Optional callback that handles the response.
-     * @returns A promise if used with async/await, or void if used with a callback.
-     */
-    create(
-      params: Params$Resource$Projects$Locations$Muteconfigs$Create,
-      options: StreamMethodOptions
-    ): GaxiosPromise<Readable>;
-    create(
-      params?: Params$Resource$Projects$Locations$Muteconfigs$Create,
-      options?: MethodOptions
-    ): GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>;
-    create(
-      params: Params$Resource$Projects$Locations$Muteconfigs$Create,
-      options: StreamMethodOptions | BodyResponseCallback<Readable>,
-      callback: BodyResponseCallback<Readable>
-    ): void;
-    create(
-      params: Params$Resource$Projects$Locations$Muteconfigs$Create,
-      options:
-        | MethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      params: Params$Resource$Projects$Locations$Muteconfigs$Create,
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      callback: BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-    ): void;
-    create(
-      paramsOrCallback?:
-        | Params$Resource$Projects$Locations$Muteconfigs$Create
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      optionsOrCallback?:
-        | MethodOptions
-        | StreamMethodOptions
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>,
-      callback?:
-        | BodyResponseCallback<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-        | BodyResponseCallback<Readable>
-    ):
-      | void
-      | GaxiosPromise<Schema$GoogleCloudSecuritycenterV1MuteConfig>
-      | GaxiosPromise<Readable> {
-      let params = (paramsOrCallback ||
-        {}) as Params$Resource$Projects$Locations$Muteconfigs$Create;
-      let options = (optionsOrCallback || {}) as MethodOptions;
-
-      if (typeof paramsOrCallback === 'function') {
-        callback = paramsOrCallback;
-        params = {} as Params$Resource$Projects$Locations$Muteconfigs$Create;
-        options = {};
-      }
-
-      if (typeof optionsOrCallback === 'function') {
-        callback = optionsOrCallback;
-        options = {};
-      }
-
-      const rootUrl =
-        options.rootUrl || 'https://securitycenter.googleapis.com/';
-      const parameters = {
-        options: Object.assign(
-          {
-            url: (rootUrl + '/v1/{+parent}/muteConfigs').replace(
-              /([^:]\/)\/+/g,
-              '$1'
-            ),
-            method: 'POST',
-            apiVersion: '',
-          },
-          options
-        ),
-        params,
-        requiredParams: ['parent'],
-        pathParams: ['parent'],
-        context: this.context,
-      };
-      if (callback) {
-        createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters,
-          callback as BodyResponseCallback<unknown>
-        );
-      } else {
-        return createAPIRequest<Schema$GoogleCloudSecuritycenterV1MuteConfig>(
-          parameters
-        );
-      }
-    }
-
     /**
      * Deletes an existing mute config.
      *
@@ -22037,97 +22303,6 @@ export namespace securitycenter_v1 {
       }
     }
 
-    /**
-     * Lists mute configs.
-     *
-     * @param params - Parameters for request
-     * @param options - Optionally override request options, such as `url`, `method`, and `encoding`.
-     * @param callback - Optional callback that handles the response.
-     * @returns A promise if used with async/await, or void if used with a callback.
-     */
-    list(
-      params: Params$Resource$Projects$Locations$Muteconfigs$List,
-      options: StreamMethodOptions
-    ): GaxiosPromise<Readable>;
-    list(
-      params?: Params$Resource$Projects$Locations$Muteconfigs$List,
-      options?: MethodOptions
-    ): GaxiosPromise<Schema$ListMuteConfigsResponse>;
-    list(
-      params: Params$Resource$Projects$Locations$Muteconfigs$List,
-      options: StreamMethodOptions | BodyResponseCallback<Readable>,
-      callback: BodyResponseCallback<Readable>
-    ): void;
-    list(
-      params: Params$Resource$Projects$Locations$Muteconfigs$List,
-      options:
-        | MethodOptions
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>,
-      callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>
-    ): void;
-    list(
-      params: Params$Resource$Projects$Locations$Muteconfigs$List,
-      callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>
-    ): void;
-    list(callback: BodyResponseCallback<Schema$ListMuteConfigsResponse>): void;
-    list(
-      paramsOrCallback?:
-        | Params$Resource$Projects$Locations$Muteconfigs$List
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
-        | BodyResponseCallback<Readable>,
-      optionsOrCallback?:
-        | MethodOptions
-        | StreamMethodOptions
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
-        | BodyResponseCallback<Readable>,
-      callback?:
-        | BodyResponseCallback<Schema$ListMuteConfigsResponse>
-        | BodyResponseCallback<Readable>
-    ):
-      | void
-      | GaxiosPromise<Schema$ListMuteConfigsResponse>
-      | GaxiosPromise<Readable> {
-      let params = (paramsOrCallback ||
-        {}) as Params$Resource$Projects$Locations$Muteconfigs$List;
-      let options = (optionsOrCallback || {}) as MethodOptions;
-
-      if (typeof paramsOrCallback === 'function') {
-        callback = paramsOrCallback;
-        params = {} as Params$Resource$Projects$Locations$Muteconfigs$List;
-        options = {};
-      }
-
-      if (typeof optionsOrCallback === 'function') {
-        callback = optionsOrCallback;
-        options = {};
-      }
-
-      const rootUrl =
-        options.rootUrl || 'https://securitycenter.googleapis.com/';
-      const parameters = {
-        options: Object.assign(
-          {
-            url: (rootUrl + '/v1/{+parent}').replace(/([^:]\/)\/+/g, '$1'),
-            method: 'GET',
-            apiVersion: '',
-          },
-          options
-        ),
-        params,
-        requiredParams: ['parent'],
-        pathParams: ['parent'],
-        context: this.context,
-      };
-      if (callback) {
-        createAPIRequest<Schema$ListMuteConfigsResponse>(
-          parameters,
-          callback as BodyResponseCallback<unknown>
-        );
-      } else {
-        return createAPIRequest<Schema$ListMuteConfigsResponse>(parameters);
-      }
-    }
-
     /**
      * Updates a mute config.
      *
@@ -22224,22 +22399,6 @@ export namespace securitycenter_v1 {
     }
   }
 
-  export interface Params$Resource$Projects$Locations$Muteconfigs$Create
-    extends StandardParameters {
-    /**
-     * Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.
-     */
-    muteConfigId?: string;
-    /**
-     * Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.
-     */
-    parent?: string;
-
-    /**
-     * Request body metadata
-     */
-    requestBody?: Schema$GoogleCloudSecuritycenterV1MuteConfig;
-  }
   export interface Params$Resource$Projects$Locations$Muteconfigs$Delete
     extends StandardParameters {
     /**
@@ -22254,21 +22413,6 @@ export namespace securitycenter_v1 {
      */
     name?: string;
   }
-  export interface Params$Resource$Projects$Locations$Muteconfigs$List
-    extends StandardParameters {
-    /**
-     * The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
-     */
-    pageSize?: number;
-    /**
-     * A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.
-     */
-    pageToken?: string;
-    /**
-     * Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.
-     */
-    parent?: string;
-  }
   export interface Params$Resource$Projects$Locations$Muteconfigs$Patch
     extends StandardParameters {
     /**