@maxim_mazurok/gapi.client.securitycenter-v1beta2 0.0.20240328 → 0.0.20240422
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.d.ts +258 -4
- package/package.json +1 -1
package/index.d.ts
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
// This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
|
|
10
10
|
// In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
|
|
11
11
|
// Generated from: https://securitycenter.googleapis.com/$discovery/rest?version=v1beta2
|
|
12
|
-
// Revision:
|
|
12
|
+
// Revision: 20240422
|
|
13
13
|
|
|
14
14
|
/// <reference types="gapi.client" />
|
|
15
15
|
|
|
@@ -68,12 +68,24 @@ declare namespace gapi.client {
|
|
|
68
68
|
/** The API version of the resource. "*" means all. */
|
|
69
69
|
version?: string;
|
|
70
70
|
}
|
|
71
|
+
interface AdaptiveProtection {
|
|
72
|
+
/** A score of 0 means that there is low confidence that the detected event is an actual attack. A score of 1 means that there is high confidence that the detected event is an attack. See the [Adaptive Protection documentation](https://cloud.google.com/armor/docs/adaptive-protection-overview#configure-alert-tuning) for further explanation. */
|
|
73
|
+
confidence?: number;
|
|
74
|
+
}
|
|
71
75
|
interface Application {
|
|
72
76
|
/** The base URI that identifies the network location of the application in which the vulnerability was detected. For example, `http://example.com`. */
|
|
73
77
|
baseUri?: string;
|
|
74
78
|
/** The full URI with payload that can be used to reproduce the vulnerability. For example, `http://example.com?p=aMmYgI6H`. */
|
|
75
79
|
fullUri?: string;
|
|
76
80
|
}
|
|
81
|
+
interface Attack {
|
|
82
|
+
/** Type of attack, for example, 'SYN-flood', 'NTP-udp', or 'CHARGEN-udp'. */
|
|
83
|
+
classification?: string;
|
|
84
|
+
/** Total BPS (bytes per second) volume of attack. */
|
|
85
|
+
volumeBps?: number;
|
|
86
|
+
/** Total PPS (packets per second) volume of attack. */
|
|
87
|
+
volumePps?: number;
|
|
88
|
+
}
|
|
77
89
|
interface AttackExposure {
|
|
78
90
|
/** The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789 */
|
|
79
91
|
attackExposureResult?: string;
|
|
@@ -90,6 +102,30 @@ declare namespace gapi.client {
|
|
|
90
102
|
/** What state this AttackExposure is in. This captures whether or not an attack exposure has been calculated or not. */
|
|
91
103
|
state?: string;
|
|
92
104
|
}
|
|
105
|
+
interface AwsAccount {
|
|
106
|
+
/** The unique identifier (ID) of the account, containing exactly 12 digits. */
|
|
107
|
+
id?: string;
|
|
108
|
+
/** The friendly name of this account. */
|
|
109
|
+
name?: string;
|
|
110
|
+
}
|
|
111
|
+
interface AwsMetadata {
|
|
112
|
+
/** The AWS account associated with the resource. */
|
|
113
|
+
account?: AwsAccount;
|
|
114
|
+
/** The AWS organization associated with the resource. */
|
|
115
|
+
organization?: AwsOrganization;
|
|
116
|
+
/** A list of AWS organizational units associated with the resource, ordered from lowest level (closest to the account) to highest level. */
|
|
117
|
+
organizationalUnits?: AwsOrganizationalUnit[];
|
|
118
|
+
}
|
|
119
|
+
interface AwsOrganization {
|
|
120
|
+
/** The unique identifier (ID) for the organization. The regex pattern for an organization ID string requires "o-" followed by from 10 to 32 lowercase letters or digits. */
|
|
121
|
+
id?: string;
|
|
122
|
+
}
|
|
123
|
+
interface AwsOrganizationalUnit {
|
|
124
|
+
/** The unique identifier (ID) associated with this OU. The regex pattern for an organizational unit ID string requires "ou-" followed by from 4 to 32 lowercase letters or digits (the ID of the root that contains the OU). This string is followed by a second "-" dash and from 8 to 32 additional lowercase letters or digits. For example, "ou-ab12-cd34ef56". */
|
|
125
|
+
id?: string;
|
|
126
|
+
/** The friendly name of the OU. */
|
|
127
|
+
name?: string;
|
|
128
|
+
}
|
|
93
129
|
interface BackupDisasterRecovery {
|
|
94
130
|
/** The name of the Backup and DR appliance that captures, moves, and manages the lifecycle of backup data. For example, `backup-server-57137`. */
|
|
95
131
|
appliance?: string;
|
|
@@ -112,6 +148,20 @@ declare namespace gapi.client {
|
|
|
112
148
|
/** The name of the Backup and DR storage pool that the backup and recovery appliance is storing data in. The storage pool could be of type Cloud, Primary, Snapshot, or OnVault. See the [Backup and DR documentation on storage pools](https://cloud.google.com/backup-disaster-recovery/docs/concepts/storage-pools). For example, `DiskPoolOne`. */
|
|
113
149
|
storagePool?: string;
|
|
114
150
|
}
|
|
151
|
+
interface CloudArmor {
|
|
152
|
+
/** Information about potential Layer 7 DDoS attacks identified by [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/adaptive-protection-overview). */
|
|
153
|
+
adaptiveProtection?: AdaptiveProtection;
|
|
154
|
+
/** Information about DDoS attack volume and classification. */
|
|
155
|
+
attack?: Attack;
|
|
156
|
+
/** Duration of attack from the start until the current moment (updated every 5 minutes). */
|
|
157
|
+
duration?: string;
|
|
158
|
+
/** Information about incoming requests evaluated by [Google Cloud Armor security policies](https://cloud.google.com/armor/docs/security-policy-overview). */
|
|
159
|
+
requests?: Requests;
|
|
160
|
+
/** Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding. */
|
|
161
|
+
securityPolicy?: SecurityPolicy;
|
|
162
|
+
/** Distinguish between volumetric & protocol DDoS attack and application layer attacks. For example, "L3_4" for Layer 3 and Layer 4 DDoS attacks, or "L_7" for Layer 7 DDoS attacks. */
|
|
163
|
+
threatVector?: string;
|
|
164
|
+
}
|
|
115
165
|
interface CloudDlpDataProfile {
|
|
116
166
|
/** Name of the data profile, for example, `projects/123/locations/europe/tableProfiles/8383929`. */
|
|
117
167
|
dataProfile?: string;
|
|
@@ -149,6 +199,8 @@ declare namespace gapi.client {
|
|
|
149
199
|
interface ComplianceSnapshot {
|
|
150
200
|
/** The category of Findings matching. */
|
|
151
201
|
category?: string;
|
|
202
|
+
/** The cloud provider for the compliance snapshot. */
|
|
203
|
+
cloudProvider?: string;
|
|
152
204
|
/** The compliance standard (ie CIS). */
|
|
153
205
|
complianceStandard?: string;
|
|
154
206
|
/** The compliance version (ie 1.3) in CIS 1.3. */
|
|
@@ -159,8 +211,6 @@ declare namespace gapi.client {
|
|
|
159
211
|
leafContainerResource?: string;
|
|
160
212
|
/** The compliance snapshot name. Format: //sources//complianceSnapshots/ */
|
|
161
213
|
name?: string;
|
|
162
|
-
/** The CRM resource display name that is closest to the snapshot the Findings belong to. */
|
|
163
|
-
projectDisplayName?: string;
|
|
164
214
|
/** The snapshot time of the snapshot. */
|
|
165
215
|
snapshotTime?: string;
|
|
166
216
|
}
|
|
@@ -355,6 +405,8 @@ declare namespace gapi.client {
|
|
|
355
405
|
canonicalName?: string;
|
|
356
406
|
/** The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: "XSS_FLASH_INJECTION" */
|
|
357
407
|
category?: string;
|
|
408
|
+
/** Fields related to Cloud Armor findings. */
|
|
409
|
+
cloudArmor?: CloudArmor;
|
|
358
410
|
/** Cloud DLP data profile that is associated with the finding. */
|
|
359
411
|
cloudDlpDataProfile?: CloudDlpDataProfile;
|
|
360
412
|
/** Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding. */
|
|
@@ -413,6 +465,8 @@ declare namespace gapi.client {
|
|
|
413
465
|
name?: string;
|
|
414
466
|
/** Steps to address the finding. */
|
|
415
467
|
nextSteps?: string;
|
|
468
|
+
/** Notebook associated with the finding. */
|
|
469
|
+
notebook?: Notebook;
|
|
416
470
|
/** Contains information about the org policies associated with the finding. */
|
|
417
471
|
orgPolicies?: OrgPolicy[];
|
|
418
472
|
/** The relative resource name of the source the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. For example: "organizations/{organization_id}/sources/{source_id}" */
|
|
@@ -442,6 +496,20 @@ declare namespace gapi.client {
|
|
|
442
496
|
/** The user defined display name for this folder. */
|
|
443
497
|
resourceFolderDisplayName?: string;
|
|
444
498
|
}
|
|
499
|
+
interface GcpMetadata {
|
|
500
|
+
/** Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization. */
|
|
501
|
+
folders?: GoogleCloudSecuritycenterV2Folder[];
|
|
502
|
+
/** The name of the organization that the resource belongs to. */
|
|
503
|
+
organization?: string;
|
|
504
|
+
/** The full resource name of resource's parent. */
|
|
505
|
+
parent?: string;
|
|
506
|
+
/** The human readable name of resource's parent. */
|
|
507
|
+
parentDisplayName?: string;
|
|
508
|
+
/** The full resource name of project that the resource belongs to. */
|
|
509
|
+
project?: string;
|
|
510
|
+
/** The project ID that the resource belongs to. */
|
|
511
|
+
projectDisplayName?: string;
|
|
512
|
+
}
|
|
445
513
|
interface Geolocation {
|
|
446
514
|
/** A CLDR. */
|
|
447
515
|
regionCode?: string;
|
|
@@ -632,12 +700,20 @@ declare namespace gapi.client {
|
|
|
632
700
|
valueExpression?: Expr;
|
|
633
701
|
}
|
|
634
702
|
interface GoogleCloudSecuritycenterV1Resource {
|
|
703
|
+
/** The AWS metadata associated with the finding. */
|
|
704
|
+
awsMetadata?: AwsMetadata;
|
|
705
|
+
/** Indicates which cloud provider the resource resides in. */
|
|
706
|
+
cloudProvider?: string;
|
|
635
707
|
/** The human readable name of the resource. */
|
|
636
708
|
displayName?: string;
|
|
637
709
|
/** Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization. */
|
|
638
710
|
folders?: Folder[];
|
|
711
|
+
/** The region or location of the service (if applicable). */
|
|
712
|
+
location?: string;
|
|
639
713
|
/** The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name */
|
|
640
714
|
name?: string;
|
|
715
|
+
/** Indicates which organization or tenant in the cloud provider the finding applies to. */
|
|
716
|
+
organization?: string;
|
|
641
717
|
/** The full resource name of resource's parent. */
|
|
642
718
|
parent?: string;
|
|
643
719
|
/** The human readable name of resource's parent. */
|
|
@@ -646,6 +722,12 @@ declare namespace gapi.client {
|
|
|
646
722
|
project?: string;
|
|
647
723
|
/** The project ID that the resource belongs to. */
|
|
648
724
|
projectDisplayName?: string;
|
|
725
|
+
/** Provides the path to the resource within the resource hierarchy. */
|
|
726
|
+
resourcePath?: ResourcePath;
|
|
727
|
+
/** A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id} where there can be any number of folders. For AWS, it has the format of org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name} where there can be any number of management groups. */
|
|
728
|
+
resourcePathString?: string;
|
|
729
|
+
/** The parent service or product from which the resource is provided, for example, GKE or SNS. */
|
|
730
|
+
service?: string;
|
|
649
731
|
/** The full resource type of the resource. */
|
|
650
732
|
type?: string;
|
|
651
733
|
}
|
|
@@ -654,6 +736,8 @@ declare namespace gapi.client {
|
|
|
654
736
|
resourceTypes?: string[];
|
|
655
737
|
}
|
|
656
738
|
interface GoogleCloudSecuritycenterV1ResourceValueConfig {
|
|
739
|
+
/** Cloud provider this configuration applies to */
|
|
740
|
+
cloudProvider?: string;
|
|
657
741
|
/** Output only. Timestamp this resource value config was created. */
|
|
658
742
|
createTime?: string;
|
|
659
743
|
/** Description of the resource value config. */
|
|
@@ -743,12 +827,24 @@ declare namespace gapi.client {
|
|
|
743
827
|
/** The API version of the resource. "*" means all. */
|
|
744
828
|
version?: string;
|
|
745
829
|
}
|
|
830
|
+
interface GoogleCloudSecuritycenterV2AdaptiveProtection {
|
|
831
|
+
/** A score of 0 means that there is low confidence that the detected event is an actual attack. A score of 1 means that there is high confidence that the detected event is an attack. See the [Adaptive Protection documentation](https://cloud.google.com/armor/docs/adaptive-protection-overview#configure-alert-tuning) for further explanation. */
|
|
832
|
+
confidence?: number;
|
|
833
|
+
}
|
|
746
834
|
interface GoogleCloudSecuritycenterV2Application {
|
|
747
835
|
/** The base URI that identifies the network location of the application in which the vulnerability was detected. For example, `http://example.com`. */
|
|
748
836
|
baseUri?: string;
|
|
749
837
|
/** The full URI with payload that could be used to reproduce the vulnerability. For example, `http://example.com?p=aMmYgI6H`. */
|
|
750
838
|
fullUri?: string;
|
|
751
839
|
}
|
|
840
|
+
interface GoogleCloudSecuritycenterV2Attack {
|
|
841
|
+
/** Type of attack, for example, 'SYN-flood', 'NTP-udp', or 'CHARGEN-udp'. */
|
|
842
|
+
classification?: string;
|
|
843
|
+
/** Total BPS (bytes per second) volume of attack. */
|
|
844
|
+
volumeBps?: number;
|
|
845
|
+
/** Total PPS (packets per second) volume of attack. */
|
|
846
|
+
volumePps?: number;
|
|
847
|
+
}
|
|
752
848
|
interface GoogleCloudSecuritycenterV2AttackExposure {
|
|
753
849
|
/** The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789 */
|
|
754
850
|
attackExposureResult?: string;
|
|
@@ -765,6 +861,30 @@ declare namespace gapi.client {
|
|
|
765
861
|
/** Output only. What state this AttackExposure is in. This captures whether or not an attack exposure has been calculated or not. */
|
|
766
862
|
state?: string;
|
|
767
863
|
}
|
|
864
|
+
interface GoogleCloudSecuritycenterV2AwsAccount {
|
|
865
|
+
/** The unique identifier (ID) of the account, containing exactly 12 digits. */
|
|
866
|
+
id?: string;
|
|
867
|
+
/** The friendly name of this account. */
|
|
868
|
+
name?: string;
|
|
869
|
+
}
|
|
870
|
+
interface GoogleCloudSecuritycenterV2AwsMetadata {
|
|
871
|
+
/** The AWS account associated with the resource. */
|
|
872
|
+
account?: GoogleCloudSecuritycenterV2AwsAccount;
|
|
873
|
+
/** The AWS organization associated with the resource. */
|
|
874
|
+
organization?: GoogleCloudSecuritycenterV2AwsOrganization;
|
|
875
|
+
/** A list of AWS organizational units associated with the resource, ordered from lowest level (closest to the account) to highest level. */
|
|
876
|
+
organizationalUnits?: GoogleCloudSecuritycenterV2AwsOrganizationalUnit[];
|
|
877
|
+
}
|
|
878
|
+
interface GoogleCloudSecuritycenterV2AwsOrganization {
|
|
879
|
+
/** The unique identifier (ID) for the organization. The regex pattern for an organization ID string requires "o-" followed by from 10 to 32 lowercase letters or digits. */
|
|
880
|
+
id?: string;
|
|
881
|
+
}
|
|
882
|
+
interface GoogleCloudSecuritycenterV2AwsOrganizationalUnit {
|
|
883
|
+
/** The unique identifier (ID) associated with this OU. The regex pattern for an organizational unit ID string requires "ou-" followed by from 4 to 32 lowercase letters or digits (the ID of the root that contains the OU). This string is followed by a second "-" dash and from 8 to 32 additional lowercase letters or digits. For example, "ou-ab12-cd34ef56". */
|
|
884
|
+
id?: string;
|
|
885
|
+
/** The friendly name of the OU. */
|
|
886
|
+
name?: string;
|
|
887
|
+
}
|
|
768
888
|
interface GoogleCloudSecuritycenterV2BackupDisasterRecovery {
|
|
769
889
|
/** The name of the Backup and DR appliance that captures, moves, and manages the lifecycle of backup data. For example, `backup-server-57137`. */
|
|
770
890
|
appliance?: string;
|
|
@@ -816,6 +936,20 @@ declare namespace gapi.client {
|
|
|
816
936
|
subjects?: GoogleCloudSecuritycenterV2Subject[];
|
|
817
937
|
}
|
|
818
938
|
interface GoogleCloudSecuritycenterV2BulkMuteFindingsResponse {}
|
|
939
|
+
interface GoogleCloudSecuritycenterV2CloudArmor {
|
|
940
|
+
/** Information about potential Layer 7 DDoS attacks identified by [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/adaptive-protection-overview). */
|
|
941
|
+
adaptiveProtection?: GoogleCloudSecuritycenterV2AdaptiveProtection;
|
|
942
|
+
/** Information about DDoS attack volume and classification. */
|
|
943
|
+
attack?: GoogleCloudSecuritycenterV2Attack;
|
|
944
|
+
/** Duration of attack from the start until the current moment (updated every 5 minutes). */
|
|
945
|
+
duration?: string;
|
|
946
|
+
/** Information about incoming requests evaluated by [Google Cloud Armor security policies](https://cloud.google.com/armor/docs/security-policy-overview). */
|
|
947
|
+
requests?: GoogleCloudSecuritycenterV2Requests;
|
|
948
|
+
/** Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding. */
|
|
949
|
+
securityPolicy?: GoogleCloudSecuritycenterV2SecurityPolicy;
|
|
950
|
+
/** Distinguish between volumetric & protocol DDoS attack and application layer attacks. For example, "L3_4" for Layer 3 and Layer 4 DDoS attacks, or "L_7" for Layer 7 DDoS attacks. */
|
|
951
|
+
threatVector?: string;
|
|
952
|
+
}
|
|
819
953
|
interface GoogleCloudSecuritycenterV2CloudDlpDataProfile {
|
|
820
954
|
/** Name of the data profile, for example, `projects/123/locations/europe/tableProfiles/8383929`. */
|
|
821
955
|
dataProfile?: string;
|
|
@@ -1019,6 +1153,8 @@ declare namespace gapi.client {
|
|
|
1019
1153
|
canonicalName?: string;
|
|
1020
1154
|
/** Immutable. The additional taxonomy group within findings from a given source. Example: "XSS_FLASH_INJECTION" */
|
|
1021
1155
|
category?: string;
|
|
1156
|
+
/** Fields related to Cloud Armor findings. */
|
|
1157
|
+
cloudArmor?: GoogleCloudSecuritycenterV2CloudArmor;
|
|
1022
1158
|
/** Cloud DLP data profile that is associated with the finding. */
|
|
1023
1159
|
cloudDlpDataProfile?: GoogleCloudSecuritycenterV2CloudDlpDataProfile;
|
|
1024
1160
|
/** Cloud Data Loss Prevention (Cloud DLP) inspection results that are associated with the finding. */
|
|
@@ -1077,6 +1213,8 @@ declare namespace gapi.client {
|
|
|
1077
1213
|
name?: string;
|
|
1078
1214
|
/** Steps to address the finding. */
|
|
1079
1215
|
nextSteps?: string;
|
|
1216
|
+
/** Notebook associated with the finding. */
|
|
1217
|
+
notebook?: GoogleCloudSecuritycenterV2Notebook;
|
|
1080
1218
|
/** Contains information about the org policies associated with the finding. */
|
|
1081
1219
|
orgPolicies?: GoogleCloudSecuritycenterV2OrgPolicy[];
|
|
1082
1220
|
/** The relative resource name of the source and location the finding belongs to. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name This field is immutable after creation time. The following list shows some examples: + `organizations/{organization_id}/sources/{source_id}` + `folders/{folders_id}/sources/{source_id}` + `projects/{projects_id}/sources/{source_id}` + `organizations/{organization_id}/sources/{source_id}/locations/{location_id}` + `folders/{folders_id}/sources/{source_id}/locations/{location_id}` + `projects/{projects_id}/sources/{source_id}/locations/{location_id}` */
|
|
@@ -1100,6 +1238,12 @@ declare namespace gapi.client {
|
|
|
1100
1238
|
/** Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/) */
|
|
1101
1239
|
vulnerability?: GoogleCloudSecuritycenterV2Vulnerability;
|
|
1102
1240
|
}
|
|
1241
|
+
interface GoogleCloudSecuritycenterV2Folder {
|
|
1242
|
+
/** Full resource name of this folder. See: https://cloud.google.com/apis/design/resource_names#full_resource_name */
|
|
1243
|
+
resourceFolder?: string;
|
|
1244
|
+
/** The user defined display name for this folder. */
|
|
1245
|
+
resourceFolderDisplayName?: string;
|
|
1246
|
+
}
|
|
1103
1247
|
interface GoogleCloudSecuritycenterV2Geolocation {
|
|
1104
1248
|
/** A CLDR. */
|
|
1105
1249
|
regionCode?: string;
|
|
@@ -1216,6 +1360,16 @@ declare namespace gapi.client {
|
|
|
1216
1360
|
/** Nodes associated with the finding. */
|
|
1217
1361
|
nodes?: GoogleCloudSecuritycenterV2Node[];
|
|
1218
1362
|
}
|
|
1363
|
+
interface GoogleCloudSecuritycenterV2Notebook {
|
|
1364
|
+
/** The user ID of the latest author to modify the notebook. */
|
|
1365
|
+
lastAuthor?: string;
|
|
1366
|
+
/** The name of the notebook. */
|
|
1367
|
+
name?: string;
|
|
1368
|
+
/** The most recent time the notebook was updated. */
|
|
1369
|
+
notebookUpdateTime?: string;
|
|
1370
|
+
/** The source notebook service, for example, "Colab Enterprise". */
|
|
1371
|
+
service?: string;
|
|
1372
|
+
}
|
|
1219
1373
|
interface GoogleCloudSecuritycenterV2NotificationMessage {
|
|
1220
1374
|
/** If it's a Finding based notification config, this field will be populated. */
|
|
1221
1375
|
finding?: GoogleCloudSecuritycenterV2Finding;
|
|
@@ -1304,15 +1458,53 @@ declare namespace gapi.client {
|
|
|
1304
1458
|
/** Uri for the mentioned source e.g. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34527. */
|
|
1305
1459
|
uri?: string;
|
|
1306
1460
|
}
|
|
1461
|
+
interface GoogleCloudSecuritycenterV2Requests {
|
|
1462
|
+
/** Allowed RPS (requests per second) over the long term. */
|
|
1463
|
+
longTermAllowed?: number;
|
|
1464
|
+
/** Denied RPS (requests per second) over the long term. */
|
|
1465
|
+
longTermDenied?: number;
|
|
1466
|
+
/** For 'Increasing deny ratio', the ratio is the denied traffic divided by the allowed traffic. For 'Allowed traffic spike', the ratio is the allowed traffic in the short term divided by allowed traffic in the long term. */
|
|
1467
|
+
ratio?: number;
|
|
1468
|
+
/** Allowed RPS (requests per second) in the short term. */
|
|
1469
|
+
shortTermAllowed?: number;
|
|
1470
|
+
}
|
|
1307
1471
|
interface GoogleCloudSecuritycenterV2Resource {
|
|
1472
|
+
/** The AWS metadata associated with the finding. */
|
|
1473
|
+
awsMetadata?: GoogleCloudSecuritycenterV2AwsMetadata;
|
|
1474
|
+
/** Indicates which cloud provider the finding is from. */
|
|
1475
|
+
cloudProvider?: string;
|
|
1308
1476
|
/** The human readable name of the resource. */
|
|
1309
1477
|
displayName?: string;
|
|
1478
|
+
/** The GCP metadata associated with the finding. */
|
|
1479
|
+
gcpMetadata?: GcpMetadata;
|
|
1480
|
+
/** The region or location of the service (if applicable). */
|
|
1481
|
+
location?: string;
|
|
1310
1482
|
/** The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name */
|
|
1311
1483
|
name?: string;
|
|
1484
|
+
/** Provides the path to the resource within the resource hierarchy. */
|
|
1485
|
+
resourcePath?: GoogleCloudSecuritycenterV2ResourcePath;
|
|
1486
|
+
/** A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id} where there can be any number of folders. For AWS, it has the format of org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name} where there can be any number of management groups. */
|
|
1487
|
+
resourcePathString?: string;
|
|
1488
|
+
/** The service or resource provider associated with the resource. */
|
|
1489
|
+
service?: string;
|
|
1312
1490
|
/** The full resource type of the resource. */
|
|
1313
1491
|
type?: string;
|
|
1314
1492
|
}
|
|
1493
|
+
interface GoogleCloudSecuritycenterV2ResourcePath {
|
|
1494
|
+
/** The list of nodes that make the up resource path, ordered from lowest level to highest level. */
|
|
1495
|
+
nodes?: GoogleCloudSecuritycenterV2ResourcePathNode[];
|
|
1496
|
+
}
|
|
1497
|
+
interface GoogleCloudSecuritycenterV2ResourcePathNode {
|
|
1498
|
+
/** The display name of the resource this node represents. */
|
|
1499
|
+
displayName?: string;
|
|
1500
|
+
/** The ID of the resource this node represents. */
|
|
1501
|
+
id?: string;
|
|
1502
|
+
/** The type of resource this node represents. */
|
|
1503
|
+
nodeType?: string;
|
|
1504
|
+
}
|
|
1315
1505
|
interface GoogleCloudSecuritycenterV2ResourceValueConfig {
|
|
1506
|
+
/** Cloud provider this configuration applies to */
|
|
1507
|
+
cloudProvider?: string;
|
|
1316
1508
|
/** Output only. Timestamp this resource value config was created. */
|
|
1317
1509
|
createTime?: string;
|
|
1318
1510
|
/** Description of the resource value config. */
|
|
@@ -1351,13 +1543,21 @@ declare namespace gapi.client {
|
|
|
1351
1543
|
suggestedUpgradeVersion?: string;
|
|
1352
1544
|
}
|
|
1353
1545
|
interface GoogleCloudSecuritycenterV2SecurityMarks {
|
|
1354
|
-
/** The canonical name of the marks. The following list shows some examples: + `organizations/{organization_id}/assets/{asset_id}/securityMarks
|
|
1546
|
+
/** The canonical name of the marks. The following list shows some examples: + `organizations/{organization_id}/assets/{asset_id}/securityMarks` + `organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks` + `organizations/{organization_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks` + `folders/{folder_id}/assets/{asset_id}/securityMarks` + `folders/{folder_id}/sources/{source_id}/findings/{finding_id}/securityMarks` + `folders/{folder_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks` + `projects/{project_number}/assets/{asset_id}/securityMarks` + `projects/{project_number}/sources/{source_id}/findings/{finding_id}/securityMarks` + `projects/{project_number}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks` */
|
|
1355
1547
|
canonicalName?: string;
|
|
1356
1548
|
/** Mutable user specified security marks belonging to the parent resource. Constraints are as follows: * Keys and values are treated as case insensitive * Keys must be between 1 - 256 characters (inclusive) * Keys must be letters, numbers, underscores, or dashes * Values have leading and trailing whitespace trimmed, remaining characters must be between 1 - 4096 characters (inclusive) */
|
|
1357
1549
|
marks?: {[P in string]: string};
|
|
1358
1550
|
/** The relative resource name of the SecurityMarks. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name The following list shows some examples: + `organizations/{organization_id}/assets/{asset_id}/securityMarks` + `organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks` + `organizations/{organization_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks` */
|
|
1359
1551
|
name?: string;
|
|
1360
1552
|
}
|
|
1553
|
+
interface GoogleCloudSecuritycenterV2SecurityPolicy {
|
|
1554
|
+
/** The name of the Google Cloud Armor security policy, for example, "my-security-policy". */
|
|
1555
|
+
name?: string;
|
|
1556
|
+
/** Whether or not the associated rule or policy is in preview mode. */
|
|
1557
|
+
preview?: boolean;
|
|
1558
|
+
/** The type of Google Cloud Armor security policy for example, 'backend security policy', 'edge security policy', 'network edge security policy', or 'always-on DDoS protection'. */
|
|
1559
|
+
type?: string;
|
|
1560
|
+
}
|
|
1361
1561
|
interface GoogleCloudSecuritycenterV2SecurityPosture {
|
|
1362
1562
|
/** The name of the updated policy, for example, `projects/{project_id}/policies/{constraint_name}`. */
|
|
1363
1563
|
changedPolicy?: string;
|
|
@@ -1521,6 +1721,16 @@ declare namespace gapi.client {
|
|
|
1521
1721
|
/** Nodes associated with the finding. */
|
|
1522
1722
|
nodes?: Node[];
|
|
1523
1723
|
}
|
|
1724
|
+
interface Notebook {
|
|
1725
|
+
/** The user ID of the latest author to modify the notebook. */
|
|
1726
|
+
lastAuthor?: string;
|
|
1727
|
+
/** The name of the notebook. */
|
|
1728
|
+
name?: string;
|
|
1729
|
+
/** The most recent time the notebook was updated. */
|
|
1730
|
+
notebookUpdateTime?: string;
|
|
1731
|
+
/** The source notebook service, for example, "Colab Enterprise". */
|
|
1732
|
+
service?: string;
|
|
1733
|
+
}
|
|
1524
1734
|
interface Object {
|
|
1525
1735
|
/** Pod containers associated with this finding, if any. */
|
|
1526
1736
|
containers?: Container[];
|
|
@@ -1611,6 +1821,28 @@ declare namespace gapi.client {
|
|
|
1611
1821
|
/** Uri for the mentioned source e.g. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34527. */
|
|
1612
1822
|
uri?: string;
|
|
1613
1823
|
}
|
|
1824
|
+
interface Requests {
|
|
1825
|
+
/** Allowed RPS (requests per second) over the long term. */
|
|
1826
|
+
longTermAllowed?: number;
|
|
1827
|
+
/** Denied RPS (requests per second) over the long term. */
|
|
1828
|
+
longTermDenied?: number;
|
|
1829
|
+
/** For 'Increasing deny ratio', the ratio is the denied traffic divided by the allowed traffic. For 'Allowed traffic spike', the ratio is the allowed traffic in the short term divided by allowed traffic in the long term. */
|
|
1830
|
+
ratio?: number;
|
|
1831
|
+
/** Allowed RPS (requests per second) in the short term. */
|
|
1832
|
+
shortTermAllowed?: number;
|
|
1833
|
+
}
|
|
1834
|
+
interface ResourcePath {
|
|
1835
|
+
/** The list of nodes that make the up resource path, ordered from lowest level to highest level. */
|
|
1836
|
+
nodes?: ResourcePathNode[];
|
|
1837
|
+
}
|
|
1838
|
+
interface ResourcePathNode {
|
|
1839
|
+
/** The display name of the resource this node represents. */
|
|
1840
|
+
displayName?: string;
|
|
1841
|
+
/** The ID of the resource this node represents. */
|
|
1842
|
+
id?: string;
|
|
1843
|
+
/** The type of resource this node represents. */
|
|
1844
|
+
nodeType?: string;
|
|
1845
|
+
}
|
|
1614
1846
|
interface Role {
|
|
1615
1847
|
/** Role type. */
|
|
1616
1848
|
kind?: string;
|
|
@@ -1657,6 +1889,14 @@ declare namespace gapi.client {
|
|
|
1657
1889
|
/** The relative resource name of the SecurityMarks. See: https://cloud.google.com/apis/design/resource_names#relative_resource_name Examples: "organizations/{organization_id}/assets/{asset_id}/securityMarks" "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks". */
|
|
1658
1890
|
name?: string;
|
|
1659
1891
|
}
|
|
1892
|
+
interface SecurityPolicy {
|
|
1893
|
+
/** The name of the Google Cloud Armor security policy, for example, "my-security-policy". */
|
|
1894
|
+
name?: string;
|
|
1895
|
+
/** Whether or not the associated rule or policy is in preview mode. */
|
|
1896
|
+
preview?: boolean;
|
|
1897
|
+
/** The type of Google Cloud Armor security policy for example, 'backend security policy', 'edge security policy', 'network edge security policy', or 'always-on DDoS protection'. */
|
|
1898
|
+
type?: string;
|
|
1899
|
+
}
|
|
1660
1900
|
interface SecurityPosture {
|
|
1661
1901
|
/** The name of the updated policy, for example, `projects/{project_id}/policies/{constraint_name}`. */
|
|
1662
1902
|
changedPolicy?: string;
|
|
@@ -1733,6 +1973,20 @@ declare namespace gapi.client {
|
|
|
1733
1973
|
/** The security bulletin is relevant to this finding. */
|
|
1734
1974
|
securityBulletin?: SecurityBulletin;
|
|
1735
1975
|
}
|
|
1976
|
+
interface VulnerabilityCountBySeverity {
|
|
1977
|
+
/** Key is the Severity enum. */
|
|
1978
|
+
severityToFindingCount?: {[P in string]: string};
|
|
1979
|
+
}
|
|
1980
|
+
interface VulnerabilitySnapshot {
|
|
1981
|
+
/** The cloud provider for the vulnerability snapshot. */
|
|
1982
|
+
cloudProvider?: string;
|
|
1983
|
+
/** The vulnerability count by severity. */
|
|
1984
|
+
findingCount?: VulnerabilityCountBySeverity;
|
|
1985
|
+
/** Identifier. The vulnerability snapshot name. Format: //locations//vulnerabilitySnapshots/ */
|
|
1986
|
+
name?: string;
|
|
1987
|
+
/** The time that the snapshot was taken. */
|
|
1988
|
+
snapshotTime?: string;
|
|
1989
|
+
}
|
|
1736
1990
|
interface WebSecurityScannerSettings {
|
|
1737
1991
|
/** The configurations including the state of enablement for the service's different modules. The absence of a module in the map implies its configuration is inherited from its parent's. */
|
|
1738
1992
|
modules?: {[P in string]: Config};
|