@maxim_mazurok/gapi.client.dlp-v2 0.0.20240908 → 0.0.20240916

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://dlp.googleapis.com/$discovery/rest?version=v2
-// Revision: 20240908
+// Revision: 20240916
 
 /// <reference types="gapi.client" />
 
@@ -50,6 +50,24 @@ declare namespace gapi.client {
     interface GooglePrivacyDlpV2AllOtherDatabaseResources {}
     interface GooglePrivacyDlpV2AllOtherResources {}
     interface GooglePrivacyDlpV2AllText {}
+    interface GooglePrivacyDlpV2AmazonS3Bucket {
+      /** The AWS account. */
+      awsAccount?: GooglePrivacyDlpV2AwsAccount;
+      /** Required. The bucket name. */
+      bucketName?: string;
+    }
+    interface GooglePrivacyDlpV2AmazonS3BucketConditions {
+      /** Optional. Bucket types that should be profiled. Optional. Defaults to TYPE_ALL_SUPPORTED if unspecified. */
+      bucketTypes?: string[];
+      /** Optional. Object classes that should be profiled. Optional. Defaults to ALL_SUPPORTED_CLASSES if unspecified. */
+      objectStorageClasses?: string[];
+    }
+    interface GooglePrivacyDlpV2AmazonS3BucketRegex {
+      /** The AWS account regex. */
+      awsAccountRegex?: GooglePrivacyDlpV2AwsAccountRegex;
+      /** Optional. Regex to test the bucket name against. If empty, all buckets match. */
+      bucketNameRegex?: string;
+    }
     interface GooglePrivacyDlpV2AnalyzeDataSourceRiskDetails {
       /** Categorical stats result */
       categoricalStatsResult?: GooglePrivacyDlpV2CategoricalStatsResult;
@@ -78,6 +96,20 @@ declare namespace gapi.client {
       /** Required. Auxiliary table location. */
       table?: GooglePrivacyDlpV2BigQueryTable;
     }
+    interface GooglePrivacyDlpV2AwsAccount {
+      /** Required. AWS account ID. */
+      accountId?: string;
+    }
+    interface GooglePrivacyDlpV2AwsAccountRegex {
+      /** Optional. Regex to test the AWS account ID against. If empty, all accounts match. */
+      accountIdRegex?: string;
+    }
+    interface GooglePrivacyDlpV2AwsDiscoveryStartingLocation {
+      /** The AWS account ID that this discovery config applies to. Within an AWS organization, you can find the AWS account ID inside an AWS account ARN. Example: arn:{partition}:organizations::{management_account_id}:account/{org_id}/{account_id} */
+      accountId?: string;
+      /** All AWS assets stored in Asset Inventory that didn't match other AWS discovery configs. */
+      allAssetInventoryAssets?: boolean;
+    }
     interface GooglePrivacyDlpV2BigQueryDiscoveryTarget {
       /** How often and when to update profiles. New tables that match both the filter and conditions are scanned as quickly as possible depending on system capacity. */
       cadence?: GooglePrivacyDlpV2DiscoveryGenerationCadence;
@@ -569,6 +601,8 @@ declare namespace gapi.client {
       inspectTemplates?: string[];
       /** The data to scan. */
       location?: GooglePrivacyDlpV2DataProfileLocation;
+      /** Must be set only when scanning other clouds. */
+      otherCloudStartingLocation?: GooglePrivacyDlpV2OtherCloudDiscoveryStartingLocation;
       /** The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the Cloud DLP API must be enabled. */
       projectId?: string;
     }
@@ -814,6 +848,8 @@ declare namespace gapi.client {
       name?: string;
       /** Only set when the parent is an org. */
       orgConfig?: GooglePrivacyDlpV2OrgConfig;
+      /** Must be set only when scanning other clouds. */
+      otherCloudStartingLocation?: GooglePrivacyDlpV2OtherCloudDiscoveryStartingLocation;
       /** Required. A status for this configuration. */
       status?: string;
       /** Target to match against for determining what to scan and how frequently. */
@@ -843,6 +879,26 @@ declare namespace gapi.client {
       /** How frequently data profiles can be updated when the template is modified. Defaults to never. */
       frequency?: string;
     }
+    interface GooglePrivacyDlpV2DiscoveryOtherCloudConditions {
+      /** Amazon S3 bucket conditions. */
+      amazonS3BucketConditions?: GooglePrivacyDlpV2AmazonS3BucketConditions;
+      /** Minimum age a resource must be before Cloud DLP can profile it. Value must be 1 hour or greater. */
+      minAge?: string;
+    }
+    interface GooglePrivacyDlpV2DiscoveryOtherCloudFilter {
+      /** A collection of resources for this filter to apply to. */
+      collection?: GooglePrivacyDlpV2OtherCloudResourceCollection;
+      /** Optional. Catch-all. This should always be the last target in the list because anything above it will apply first. Should only appear once in a configuration. If none is specified, a default one will be added automatically. */
+      others?: any;
+      /** The resource to scan. Configs using this filter can only have one target (the target with this single resource reference). */
+      singleResource?: GooglePrivacyDlpV2OtherCloudSingleResourceReference;
+    }
+    interface GooglePrivacyDlpV2DiscoveryOtherCloudGenerationCadence {
+      /** Optional. Governs when to update data profiles when the inspection rules defined by the `InspectTemplate` change. If not set, changing the template will not cause a data profile to update. */
+      inspectTemplateModifiedCadence?: GooglePrivacyDlpV2DiscoveryInspectTemplateModifiedCadence;
+      /** Optional. Frequency to update profiles regardless of whether the underlying resource has changes. Defaults to never. */
+      refreshFrequency?: string;
+    }
     interface GooglePrivacyDlpV2DiscoverySchemaModifiedCadence {
       /** How frequently profiles may be updated when schemas are modified. Defaults to monthly. */
       frequency?: string;
@@ -868,6 +924,8 @@ declare namespace gapi.client {
       cloudSqlTarget?: GooglePrivacyDlpV2CloudSqlDiscoveryTarget;
       /** Cloud Storage target for Discovery. The first target to match a table will be the one applied. */
       cloudStorageTarget?: GooglePrivacyDlpV2CloudStorageDiscoveryTarget;
+      /** Other clouds target for discovery. The first target to match a resource will be the one applied. */
+      otherCloudTarget?: GooglePrivacyDlpV2OtherCloudDiscoveryTarget;
       /** Discovery target that looks for credentials and secrets stored in cloud resource metadata and reports them as vulnerabilities to Security Command Center. Only one target of this type is allowed. */
       secretsTarget?: any;
     }
@@ -1012,11 +1070,11 @@ declare namespace gapi.client {
       fileStoreInfoTypeSummaries?: GooglePrivacyDlpV2FileStoreInfoTypeSummary[];
       /** The file store does not have any files. */
       fileStoreIsEmpty?: boolean;
-      /** The location of the file store. * Cloud Storage: https://cloud.google.com/storage/docs/locations#available-locations */
+      /** The location of the file store. * Cloud Storage: https://cloud.google.com/storage/docs/locations#available-locations * Amazon S3: https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints */
       fileStoreLocation?: string;
-      /** The file store path. * Cloud Storage: `gs://{bucket}` */
+      /** The file store path. * Cloud Storage: `gs://{bucket}` * Amazon S3: `s3://{bucket}` */
       fileStorePath?: string;
-      /** The resource name of the resource profiled. https://cloud.google.com/apis/design/resource_names#full_resource_name */
+      /** The resource name of the resource profiled. https://cloud.google.com/apis/design/resource_names#full_resource_name Example format of an S3 bucket full resource name: `//cloudasset.googleapis.com/organizations/{org_id}/otherCloudConnections/aws/arn:aws:s3:::{bucket_name}` */
       fullResource?: string;
       /** The time the file store was last modified. */
       lastModifiedTime?: string;
@@ -1030,7 +1088,7 @@ declare namespace gapi.client {
       profileStatus?: GooglePrivacyDlpV2ProfileStatus;
       /** The resource name of the project data profile for this file store. */
       projectDataProfile?: string;
-      /** The Google Cloud project ID that owns the resource. */
+      /** The Google Cloud project ID that owns the resource. For Amazon S3 buckets, this is the AWS Account Id. */
       projectId?: string;
       /** Attributes of the resource being profiled. Currently used attributes: * customer_managed_encryption: boolean - true: the resource is encrypted with a customer-managed key. - false: the resource is encrypted with a provider-managed key. */
       resourceAttributes?: {[P in string]: GooglePrivacyDlpV2Value};
@@ -1586,6 +1644,38 @@ declare namespace gapi.client {
       /** The project that will run the scan. The DLP service account that exists within this project must have access to all resources that are profiled, and the Cloud DLP API must be enabled. */
       projectId?: string;
     }
+    interface GooglePrivacyDlpV2OtherCloudDiscoveryStartingLocation {
+      /** The AWS starting location for discovery. */
+      awsLocation?: GooglePrivacyDlpV2AwsDiscoveryStartingLocation;
+    }
+    interface GooglePrivacyDlpV2OtherCloudDiscoveryTarget {
+      /** Optional. In addition to matching the filter, these conditions must be true before a profile is generated. */
+      conditions?: GooglePrivacyDlpV2DiscoveryOtherCloudConditions;
+      /** Required. The type of data profiles generated by this discovery target. Supported values are: * aws/s3/bucket */
+      dataSourceType?: GooglePrivacyDlpV2DataSourceType;
+      /** Disable profiling for resources that match this filter. */
+      disabled?: any;
+      /** Required. The resources that the discovery cadence applies to. The first target with a matching filter will be the one to apply to a resource. */
+      filter?: GooglePrivacyDlpV2DiscoveryOtherCloudFilter;
+      /** How often and when to update data profiles. New resources that match both the filter and conditions are scanned as quickly as possible depending on system capacity. */
+      generationCadence?: GooglePrivacyDlpV2DiscoveryOtherCloudGenerationCadence;
+    }
+    interface GooglePrivacyDlpV2OtherCloudResourceCollection {
+      /** A collection of regular expressions to match a resource against. */
+      includeRegexes?: GooglePrivacyDlpV2OtherCloudResourceRegexes;
+    }
+    interface GooglePrivacyDlpV2OtherCloudResourceRegex {
+      /** Regex for Amazon S3 buckets. */
+      amazonS3BucketRegex?: GooglePrivacyDlpV2AmazonS3BucketRegex;
+    }
+    interface GooglePrivacyDlpV2OtherCloudResourceRegexes {
+      /** A group of regular expression patterns to match against one or more resources. Maximum of 100 entries. The sum of all regular expression's length can't exceed 10 KiB. */
+      patterns?: GooglePrivacyDlpV2OtherCloudResourceRegex[];
+    }
+    interface GooglePrivacyDlpV2OtherCloudSingleResourceReference {
+      /** Amazon S3 bucket. */
+      amazonS3Bucket?: GooglePrivacyDlpV2AmazonS3Bucket;
+    }
     interface GooglePrivacyDlpV2OtherInfoTypeSummary {
       /** Approximate percentage of non-null rows that contained data detected by this infotype. */
       estimatedPrevalence?: number;
@@ -3612,7 +3702,7 @@ declare namespace gapi.client {
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
-        /** Optional. Allows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields/values: - `project_id` - The Google Cloud project ID. - `file_store_path` - The path like "gs://bucket". - `data_source_type` - The profile's data source type, like "google/storage/bucket". - `data_storage_location` - The location where the file store's data is stored, like "us-central1". - `sensitivity_level` - HIGH|MODERATE|LOW - `data_risk_level` - HIGH|MODERATE|LOW - `resource_visibility`: PUBLIC|RESTRICTED - `status_code` - an RPC status code as defined in https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto * The operator must be `=` or `!=`. Examples: * `project_id = 12345 AND status_code = 1` * `project_id = 12345 AND sensitivity_level = HIGH` * `project_id = 12345 AND resource_visibility = PUBLIC` * `file_store_path = "gs://mybucket"` The length of this field should be no more than 500 characters. */
+        /** Optional. Allows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields/values: - `project_id` - The Google Cloud project ID. - `account_id` - The AWS account ID. - `file_store_path` - The path like "gs://bucket". - `data_source_type` - The profile's data source type, like "google/storage/bucket". - `data_storage_location` - The location where the file store's data is stored, like "us-central1". - `sensitivity_level` - HIGH|MODERATE|LOW - `data_risk_level` - HIGH|MODERATE|LOW - `resource_visibility`: PUBLIC|RESTRICTED - `status_code` - an RPC status code as defined in https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto * The operator must be `=` or `!=`. Examples: * `project_id = 12345 AND status_code = 1` * `project_id = 12345 AND sensitivity_level = HIGH` * `project_id = 12345 AND resource_visibility = PUBLIC` * `file_store_path = "gs://mybucket"` The length of this field should be no more than 500 characters. */
         filter?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;
@@ -7056,7 +7146,7 @@ declare namespace gapi.client {
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
         fields?: string;
-        /** Optional. Allows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields/values: - `project_id` - The Google Cloud project ID. - `file_store_path` - The path like "gs://bucket". - `data_source_type` - The profile's data source type, like "google/storage/bucket". - `data_storage_location` - The location where the file store's data is stored, like "us-central1". - `sensitivity_level` - HIGH|MODERATE|LOW - `data_risk_level` - HIGH|MODERATE|LOW - `resource_visibility`: PUBLIC|RESTRICTED - `status_code` - an RPC status code as defined in https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto * The operator must be `=` or `!=`. Examples: * `project_id = 12345 AND status_code = 1` * `project_id = 12345 AND sensitivity_level = HIGH` * `project_id = 12345 AND resource_visibility = PUBLIC` * `file_store_path = "gs://mybucket"` The length of this field should be no more than 500 characters. */
+        /** Optional. Allows filtering. Supported syntax: * Filter expressions are made up of one or more restrictions. * Restrictions can be combined by `AND` or `OR` logical operators. A sequence of restrictions implicitly uses `AND`. * A restriction has the form of `{field} {operator} {value}`. * Supported fields/values: - `project_id` - The Google Cloud project ID. - `account_id` - The AWS account ID. - `file_store_path` - The path like "gs://bucket". - `data_source_type` - The profile's data source type, like "google/storage/bucket". - `data_storage_location` - The location where the file store's data is stored, like "us-central1". - `sensitivity_level` - HIGH|MODERATE|LOW - `data_risk_level` - HIGH|MODERATE|LOW - `resource_visibility`: PUBLIC|RESTRICTED - `status_code` - an RPC status code as defined in https://github.com/googleapis/googleapis/blob/master/google/rpc/code.proto * The operator must be `=` or `!=`. Examples: * `project_id = 12345 AND status_code = 1` * `project_id = 12345 AND sensitivity_level = HIGH` * `project_id = 12345 AND resource_visibility = PUBLIC` * `file_store_path = "gs://mybucket"` The length of this field should be no more than 500 characters. */
         filter?: string;
         /** API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token. */
         key?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maxim_mazurok/gapi.client.dlp-v2",
-  "version": "0.0.20240908",
+  "version": "0.0.20240916",
   "description": "TypeScript typings for Sensitive Data Protection (DLP) v2",
   "repository": {
     "type": "git",