@maxim_mazurok/gapi.client.securitycenter-v1beta2 0.2.20260227 → 0.3.20260309

package/index.d.ts

@@ -9,7 +9,7 @@
 // This file was generated by https://github.com/Maxim-Mazurok/google-api-typings-generator. Please do not edit it manually.
 // In case of any problems please post issue to https://github.com/Maxim-Mazurok/google-api-typings-generator
 // Generated from: https://securitycenter.googleapis.com/$discovery/rest?version=v1beta2
-// Revision: 20260227
+// Revision: 20260309
 
 /// <reference types="gapi.client" />
 
@@ -92,7 +92,12 @@ declare namespace gapi.client {
     }
     interface AiModel {
       /** The platform on which the model is deployed. */
-      deploymentPlatform?: string;
+      deploymentPlatform?:
+        | 'DEPLOYMENT_PLATFORM_UNSPECIFIED'
+        | 'VERTEX_AI'
+        | 'GKE'
+        | 'GCE'
+        | 'FINE_TUNED_MODEL';
       /** The user defined display name of model. Ex. baseline-classification-model */
       displayName?: string;
       /** The domain of the model, for example, “image-classification”. */
@@ -130,7 +135,7 @@ declare namespace gapi.client {
       /** The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy". */
       policyId?: string;
       /** The type of the policy evaluation. */
-      type?: string;
+      type?: 'ARTIFACT_GUARD_POLICY_TYPE_UNSPECIFIED' | 'VULNERABILITY';
     }
     interface Attack {
       /** Type of attack, for example, 'SYN-flood', 'NTP-udp', or 'CHARGEN-udp'. */
@@ -158,7 +163,7 @@ declare namespace gapi.client {
       /** A number between 0 (inclusive) and infinity that represents how important this finding is to remediate. The higher the score, the more important it is to remediate. */
       score?: number;
       /** What state this AttackExposure is in. This captures whether or not an attack exposure has been calculated or not. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'CALCULATED' | 'NOT_CALCULATED';
     }
     interface AwsAccount {
       /** The unique identifier (ID) of the account, containing exactly 12 digits. */
@@ -268,7 +273,7 @@ declare namespace gapi.client {
       /** Policy type of the CloudControl */
       policyType?: string;
       /** Type of cloud control. */
-      type?: string;
+      type?: 'CLOUD_CONTROL_TYPE_UNSPECIFIED' | 'BUILT_IN' | 'CUSTOM';
       /** Version of the Cloud Control */
       version?: number;
     }
@@ -278,7 +283,7 @@ declare namespace gapi.client {
       /** Type of information detected by SDP. Info type includes name, version and sensitivity of the detected information type. */
       infoTypes?: InfoType[];
       /** The resource hierarchy level at which the data profile was generated. */
-      parentType?: string;
+      parentType?: 'PARENT_TYPE_UNSPECIFIED' | 'ORGANIZATION' | 'PROJECT';
     }
     interface CloudDlpInspection {
       /** Whether Cloud DLP scanned the complete resource or a sampled subset. */
@@ -318,7 +323,11 @@ declare namespace gapi.client {
     }
     interface Config {
       /** The state of enablement for the module at its level of the resource hierarchy. */
-      moduleEnablementState?: string;
+      moduleEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** The configuration value for the module. The absence of this field implies its inheritance from the parent. */
       value?: {[P in string]: any};
     }
@@ -328,7 +337,13 @@ declare namespace gapi.client {
       /** Destination port. Not present for sockets that are listening and not connected. */
       destinationPort?: number;
       /** IANA Internet Protocol Number such as TCP(6) and UDP(17). */
-      protocol?: string;
+      protocol?:
+        | 'PROTOCOL_UNSPECIFIED'
+        | 'ICMP'
+        | 'TCP'
+        | 'UDP'
+        | 'GRE'
+        | 'ESP';
       /** Source IP address. */
       sourceIp?: string;
       /** Source port. */
@@ -362,7 +377,11 @@ declare namespace gapi.client {
       /** Output only. The service account used by Container Threat Detection for scanning. Service accounts are scoped at the project level meaning this field will be empty at any level above a project. */
       serviceAccount?: string;
       /** The state of enablement for the service at its level of the resource hierarchy. A DISABLED state will override all module enablement_states to DISABLED. */
-      serviceEnablementState?: string;
+      serviceEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** Output only. The time the settings were last updated. */
       updateTime?: string;
     }
@@ -376,7 +395,13 @@ declare namespace gapi.client {
       /** Describe Common Vulnerability Scoring System specified at https://www.first.org/cvss/v3.1/specification-document */
       cvssv3?: Cvssv3;
       /** The exploitation activity of the vulnerability in the wild. */
-      exploitationActivity?: string;
+      exploitationActivity?:
+        | 'EXPLOITATION_ACTIVITY_UNSPECIFIED'
+        | 'WIDE'
+        | 'CONFIRMED'
+        | 'AVAILABLE'
+        | 'ANTICIPATED'
+        | 'NO_KNOWN';
       /** Date the first publicly available exploit or PoC was released. */
       exploitReleaseDate?: string;
       /** Date of the earliest known exploitation. */
@@ -384,7 +409,12 @@ declare namespace gapi.client {
       /** The unique identifier for the vulnerability. e.g. CVE-2021-34527 */
       id?: string;
       /** The potential impact of the vulnerability if it was to be exploited. */
-      impact?: string;
+      impact?:
+        | 'RISK_RATING_UNSPECIFIED'
+        | 'LOW'
+        | 'MEDIUM'
+        | 'HIGH'
+        | 'CRITICAL';
       /** Whether or not the vulnerability has been observed in the wild. */
       observedInTheWild?: boolean;
       /** Additional information about the CVE. e.g. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34527 */
@@ -396,23 +426,50 @@ declare namespace gapi.client {
     }
     interface Cvssv3 {
       /** This metric describes the conditions beyond the attacker's control that must exist in order to exploit the vulnerability. */
-      attackComplexity?: string;
+      attackComplexity?:
+        | 'ATTACK_COMPLEXITY_UNSPECIFIED'
+        | 'ATTACK_COMPLEXITY_LOW'
+        | 'ATTACK_COMPLEXITY_HIGH';
       /** Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. This metric reflects the context by which vulnerability exploitation is possible. */
-      attackVector?: string;
+      attackVector?:
+        | 'ATTACK_VECTOR_UNSPECIFIED'
+        | 'ATTACK_VECTOR_NETWORK'
+        | 'ATTACK_VECTOR_ADJACENT'
+        | 'ATTACK_VECTOR_LOCAL'
+        | 'ATTACK_VECTOR_PHYSICAL';
       /** This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability. */
-      availabilityImpact?: string;
+      availabilityImpact?:
+        | 'IMPACT_UNSPECIFIED'
+        | 'IMPACT_HIGH'
+        | 'IMPACT_LOW'
+        | 'IMPACT_NONE';
       /** The base score is a function of the base metric scores. */
       baseScore?: number;
       /** This metric measures the impact to the confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability. */
-      confidentialityImpact?: string;
+      confidentialityImpact?:
+        | 'IMPACT_UNSPECIFIED'
+        | 'IMPACT_HIGH'
+        | 'IMPACT_LOW'
+        | 'IMPACT_NONE';
       /** This metric measures the impact to integrity of a successfully exploited vulnerability. */
-      integrityImpact?: string;
+      integrityImpact?:
+        | 'IMPACT_UNSPECIFIED'
+        | 'IMPACT_HIGH'
+        | 'IMPACT_LOW'
+        | 'IMPACT_NONE';
       /** This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability. */
-      privilegesRequired?: string;
+      privilegesRequired?:
+        | 'PRIVILEGES_REQUIRED_UNSPECIFIED'
+        | 'PRIVILEGES_REQUIRED_NONE'
+        | 'PRIVILEGES_REQUIRED_LOW'
+        | 'PRIVILEGES_REQUIRED_HIGH';
       /** The Scope metric captures whether a vulnerability in one vulnerable component impacts resources in components beyond its security scope. */
-      scope?: string;
+      scope?: 'SCOPE_UNSPECIFIED' | 'SCOPE_UNCHANGED' | 'SCOPE_CHANGED';
       /** This metric captures the requirement for a human user, other than the attacker, to participate in the successful compromise of the vulnerable component. */
-      userInteraction?: string;
+      userInteraction?:
+        | 'USER_INTERACTION_UNSPECIFIED'
+        | 'USER_INTERACTION_NONE'
+        | 'USER_INTERACTION_REQUIRED';
     }
     interface Cwe {
       /** The CWE identifier, e.g. CWE-94 */
@@ -426,7 +483,7 @@ declare namespace gapi.client {
       /** Timestamp of data access event. */
       eventTime?: string;
       /** The operation performed by the principal to access the data. */
-      operation?: string;
+      operation?: 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY';
       /** The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other. */
       principalEmail?: string;
     }
@@ -450,7 +507,7 @@ declare namespace gapi.client {
       /** Timestamp of data flow event. */
       eventTime?: string;
       /** The operation performed by the principal for the data flow event. */
-      operation?: string;
+      operation?: 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY';
       /** The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other. */
       principalEmail?: string;
       /** Non-compliant location of the principal or the data destination. */
@@ -462,7 +519,12 @@ declare namespace gapi.client {
       /** Timestamp indicating when the event was detected. */
       eventDetectionTime?: string;
       /** Type of the DRD event. */
-      eventType?: string;
+      eventType?:
+        | 'EVENT_TYPE_UNSPECIFIED'
+        | 'EVENT_TYPE_MAX_TTL_EXCEEDED'
+        | 'EVENT_TYPE_MAX_TTL_FROM_CREATION'
+        | 'EVENT_TYPE_MAX_TTL_FROM_LAST_MODIFICATION'
+        | 'EVENT_TYPE_MIN_TTL_FROM_CREATION';
       /** Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days. */
       maxRetentionAllowed?: string;
       /** Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION. */
@@ -486,7 +548,13 @@ declare namespace gapi.client {
       /** The time the subscription has or will start. */
       startTime?: string;
       /** The type of subscription */
-      type?: string;
+      type?:
+        | 'TYPE_UNSPECIFIED'
+        | 'STANDARD'
+        | 'TRIAL'
+        | 'ALPHA'
+        | 'DEMO'
+        | 'PAY_AS_YOU_GO';
     }
     interface Detection {
       /** The name of the binary associated with the memory hash signature detection. */
@@ -522,7 +590,11 @@ declare namespace gapi.client {
       /** Identifier. The resource name of the EventThreatDetectionSettings. Formats: * organizations/{organization}/eventThreatDetectionSettings * folders/{folder}/eventThreatDetectionSettings * projects/{project}/eventThreatDetectionSettings */
       name?: string;
       /** The state of enablement for the service at its level of the resource hierarchy. A DISABLED state will override all module enablement_states to DISABLED. */
-      serviceEnablementState?: string;
+      serviceEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** Output only. The time the settings were last updated. */
       updateTime?: string;
     }
@@ -589,7 +661,10 @@ declare namespace gapi.client {
       /** Path of the file in terms of underlying disk/partition identifiers. */
       diskPath?: DiskPath;
       /** The load state of the file. */
-      fileLoadState?: string;
+      fileLoadState?:
+        | 'FILE_LOAD_STATE_UNSPECIFIED'
+        | 'LOADED_BY_PROCESS'
+        | 'NOT_LOADED_BY_PROCESS';
       /** The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file. */
       hashedSize?: string;
       /** Operation(s) performed on a file. */
@@ -605,7 +680,13 @@ declare namespace gapi.client {
     }
     interface FileOperation {
       /** The type of the operation */
-      type?: string;
+      type?:
+        | 'OPERATION_TYPE_UNSPECIFIED'
+        | 'OPEN'
+        | 'READ'
+        | 'RENAME'
+        | 'WRITE'
+        | 'EXECUTE';
     }
     interface Finding {
       /** Access details associated with the finding, such as more information on the caller, which method was accessed, and from where. */
@@ -673,7 +754,18 @@ declare namespace gapi.client {
       /** File associated with the finding. */
       files?: File[];
       /** The class of the finding. */
-      findingClass?: string;
+      findingClass?:
+        | 'FINDING_CLASS_UNSPECIFIED'
+        | 'THREAT'
+        | 'VULNERABILITY'
+        | 'MISCONFIGURATION'
+        | 'OBSERVATION'
+        | 'SCC_ERROR'
+        | 'POSTURE_VIOLATION'
+        | 'TOXIC_COMBINATION'
+        | 'SENSITIVE_DATA_RISK'
+        | 'CHOKEPOINT'
+        | 'EXTERNAL_EXPOSURE';
       /** Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests. */
       groupMemberships?: GroupMembership[];
       /** Represents IAM bindings associated with the finding. */
@@ -697,7 +789,7 @@ declare namespace gapi.client {
       /** Unique identifier of the module which generated the finding. Example: folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885 */
       moduleName?: string;
       /** Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute. */
-      mute?: string;
+      mute?: 'MUTE_UNSPECIFIED' | 'MUTED' | 'UNMUTED' | 'UNDEFINED';
       /** Output only. The mute information regarding this finding. */
       muteInfo?: MuteInfo;
       /** Records additional information about the mute operation, for example, the [mute configuration](/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding. */
@@ -729,11 +821,16 @@ declare namespace gapi.client {
       /** The security posture associated with the finding. */
       securityPosture?: SecurityPosture;
       /** The severity of the finding. This field is managed by the source that writes the finding. */
-      severity?: string;
+      severity?:
+        | 'SEVERITY_UNSPECIFIED'
+        | 'CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
       /** Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only. */
       sourceProperties?: {[P in string]: any};
       /** The state of the finding. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE';
       /** Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests. */
       toxicCombination?: ToxicCombination;
       /** VertexAi associated with the finding. */
@@ -749,7 +846,13 @@ declare namespace gapi.client {
     }
     interface Framework {
       /** Category of the framework associated with the finding. E.g. Security Benchmark, or Assured Workloads */
-      category?: string[];
+      category?:
+        | 'FRAMEWORK_CATEGORY_UNSPECIFIED'
+        | 'SECURITY_BENCHMARKS'
+        | 'ASSURED_WORKLOADS'
+        | 'DATA_SECURITY'
+        | 'GOOGLE_BEST_PRACTICES'
+        | 'CUSTOM_FRAMEWORK'[];
       /** The controls associated with the framework. */
       controls?: Control[];
       /** Display name of the framework. For a standard framework, this will look like e.g. PCI DSS 3.2.1, whereas for a custom framework it can be a user defined string like MyFramework */
@@ -757,7 +860,10 @@ declare namespace gapi.client {
       /** Name of the framework associated with the finding */
       name?: string;
       /** Type of the framework associated with the finding, to specify whether the framework is built-in (pre-defined and immutable) or a custom framework defined by the customer (equivalent to security posture) */
-      type?: string;
+      type?:
+        | 'FRAMEWORK_TYPE_UNSPECIFIED'
+        | 'FRAMEWORK_TYPE_BUILT_IN'
+        | 'FRAMEWORK_TYPE_CUSTOM';
     }
     interface GcpMetadata {
       /** Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization. */
@@ -781,7 +887,7 @@ declare namespace gapi.client {
       /** The duration between asset discovery run start and end */
       duration?: string;
       /** The state of an asset discovery run. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'COMPLETED' | 'SUPERSEDED' | 'TERMINATED';
     }
     interface GoogleCloudSecuritycenterV1BigQueryExport {
       /** Output only. The time at which the BigQuery export was created. This field is set by the server and will be ignored if provided on export on creation. */
@@ -824,7 +930,12 @@ declare namespace gapi.client {
       /** The resource types that the custom module operates on. Each custom module can specify up to 5 resource types. */
       resourceSelector?: GoogleCloudSecuritycenterV1ResourceSelector;
       /** The severity to assign to findings generated by the module. */
-      severity?: string;
+      severity?:
+        | 'SEVERITY_UNSPECIFIED'
+        | 'CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
     }
     interface GoogleCloudSecuritycenterV1CustomOutputSpec {
       /** A list of custom output properties to add to the finding. */
@@ -832,13 +943,17 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV1EffectiveSecurityHealthAnalyticsCustomModule {
       /** The cloud provider of the custom module. */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** Output only. The user-specified configuration for the module. */
       customConfig?: GoogleCloudSecuritycenterV1CustomConfig;
       /** Output only. The display name for the custom module. The name must be between 1 and 128 characters, start with a lowercase letter, and contain alphanumeric characters or underscores only. */
       displayName?: string;
       /** Output only. The effective state of enablement for the module at the given level of the hierarchy. */
-      enablementState?: string;
+      enablementState?: 'ENABLEMENT_STATE_UNSPECIFIED' | 'ENABLED' | 'DISABLED';
       /** Output only. The resource name of the custom module. Its format is "organizations/{organization}/securityHealthAnalyticsSettings/effectiveCustomModules/{customModule}", or "folders/{folder}/securityHealthAnalyticsSettings/effectiveCustomModules/{customModule}", or "projects/{project}/securityHealthAnalyticsSettings/effectiveCustomModules/{customModule}" */
       name?: string;
     }
@@ -882,7 +997,7 @@ declare namespace gapi.client {
       /** This field will be ignored if provided on config creation. Format `organizations/{organization}/muteConfigs/{mute_config}` `folders/{folder}/muteConfigs/{mute_config}` `projects/{project}/muteConfigs/{mute_config}` `organizations/{organization}/locations/global/muteConfigs/{mute_config}` `folders/{folder}/locations/global/muteConfigs/{mute_config}` `projects/{project}/locations/global/muteConfigs/{mute_config}` */
       name?: string;
       /** Optional. The type of the mute config, which determines what type of mute state the config affects. The static mute state takes precedence over the dynamic mute state. Immutable after creation. STATIC by default if not set during creation. */
-      type?: string;
+      type?: 'MUTE_CONFIG_TYPE_UNSPECIFIED' | 'STATIC' | 'DYNAMIC';
       /** Output only. The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update. */
       updateTime?: string;
     }
@@ -914,11 +1029,16 @@ declare namespace gapi.client {
       /** Output only. User specified security marks. These marks are entirely managed by the user and come from the SecurityMarks resource that belongs to the finding. */
       securityMarks?: GoogleCloudSecuritycenterV1p1beta1SecurityMarks;
       /** The severity of the finding. This field is managed by the source that writes the finding. */
-      severity?: string;
+      severity?:
+        | 'SEVERITY_UNSPECIFIED'
+        | 'CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
       /** Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only. */
       sourceProperties?: {[P in string]: any};
       /** The state of the finding. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE';
     }
     interface GoogleCloudSecuritycenterV1p1beta1Folder {
       /** Full resource name of this folder. See: https://cloud.google.com/apis/design/resource_names#full_resource_name */
@@ -952,7 +1072,7 @@ declare namespace gapi.client {
       /** The duration between asset discovery run start and end */
       duration?: string;
       /** The state of an asset discovery run. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'COMPLETED' | 'SUPERSEDED' | 'TERMINATED';
     }
     interface GoogleCloudSecuritycenterV1p1beta1SecurityMarks {
       /** The canonical name of the marks. Examples: "organizations/{organization_id}/assets/{asset_id}/securityMarks" "folders/{folder_id}/assets/{asset_id}/securityMarks" "projects/{project_number}/assets/{asset_id}/securityMarks" "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks" "folders/{folder_id}/sources/{source_id}/findings/{finding_id}/securityMarks" "projects/{project_number}/sources/{source_id}/findings/{finding_id}/securityMarks" */
@@ -982,7 +1102,11 @@ declare namespace gapi.client {
       /** The Azure metadata associated with the finding. */
       azureMetadata?: AzureMetadata;
       /** Indicates which cloud provider the resource resides in. */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** The human readable name of the resource. */
       displayName?: string;
       /** Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization. */
@@ -1034,11 +1158,21 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV1ResourceApplicationAttributesCriticality {
       /** Criticality Type. */
-      type?: string;
+      type?:
+        | 'CRITICALITY_TYPE_UNSPECIFIED'
+        | 'MISSION_CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
     }
     interface GoogleCloudSecuritycenterV1ResourceApplicationAttributesEnvironment {
       /** Environment Type. */
-      type?: string;
+      type?:
+        | 'ENVIRONMENT_TYPE_UNSPECIFIED'
+        | 'PRODUCTION'
+        | 'STAGING'
+        | 'TEST'
+        | 'DEVELOPMENT';
     }
     interface GoogleCloudSecuritycenterV1ResourceSelector {
       /** The resource types to run the detector on. */
@@ -1046,7 +1180,11 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV1ResourceValueConfig {
       /** Cloud provider this configuration applies to */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** Output only. Timestamp this resource value configuration was created. */
       createTime?: string;
       /** Description of the resource value configuration. */
@@ -1058,7 +1196,12 @@ declare namespace gapi.client {
       /** Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources. */
       resourceType?: string;
       /** Required. Resource value level this expression represents */
-      resourceValue?: string;
+      resourceValue?:
+        | 'RESOURCE_VALUE_UNSPECIFIED'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW'
+        | 'NONE';
       /** Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope will be checked with `AND` of other resources. */
       scope?: string;
       /** A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset". */
@@ -1072,19 +1215,27 @@ declare namespace gapi.client {
       /** The duration between asset discovery run start and end */
       duration?: string;
       /** The state of an asset discovery run. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'COMPLETED' | 'SUPERSEDED' | 'TERMINATED';
     }
     interface GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule {
       /** Output only. If empty, indicates that the custom module was created in the organization, folder, or project in which you are viewing the custom module. Otherwise, `ancestor_module` specifies the organization or folder from which the custom module is inherited. */
       ancestorModule?: string;
       /** The cloud provider of the custom module. */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** The user specified custom configuration for the module. */
       customConfig?: GoogleCloudSecuritycenterV1CustomConfig;
       /** The display name of the Security Health Analytics custom module. This display name becomes the finding category for all findings that are returned by this custom module. The display name must be between 1 and 128 characters, start with a lowercase letter, and contain alphanumeric characters or underscores only. */
       displayName?: string;
       /** The enablement state of the custom module. */
-      enablementState?: string;
+      enablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'ENABLED'
+        | 'DISABLED'
+        | 'INHERITED';
       /** Output only. The editor that last updated the custom module. */
       lastEditor?: string;
       /** Immutable. The resource name of the custom module. Its format is "organizations/{organization}/securityHealthAnalyticsSettings/customModules/{customModule}", or "folders/{folder}/securityHealthAnalyticsSettings/customModules/{customModule}", or "projects/{project}/securityHealthAnalyticsSettings/customModules/{customModule}" The id {customModule} is server-generated and is not user settable. It will be a numeric id containing 1-20 digits. */
@@ -1094,9 +1245,19 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping {
       /** Resource value mapping for high-sensitivity Sensitive Data Protection findings */
-      highSensitivityMapping?: string;
+      highSensitivityMapping?:
+        | 'RESOURCE_VALUE_UNSPECIFIED'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW'
+        | 'NONE';
       /** Resource value mapping for medium-sensitivity Sensitive Data Protection findings */
-      mediumSensitivityMapping?: string;
+      mediumSensitivityMapping?:
+        | 'RESOURCE_VALUE_UNSPECIFIED'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW'
+        | 'NONE';
     }
     interface GoogleCloudSecuritycenterV2Access {
       /** Caller's IP address, such as "1.1.1.1". */
@@ -1162,7 +1323,12 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2AiModel {
       /** The platform on which the model is deployed. */
-      deploymentPlatform?: string;
+      deploymentPlatform?:
+        | 'DEPLOYMENT_PLATFORM_UNSPECIFIED'
+        | 'VERTEX_AI'
+        | 'GKE'
+        | 'GCE'
+        | 'FINE_TUNED_MODEL';
       /** The user defined display name of model. Ex. baseline-classification-model */
       displayName?: string;
       /** The domain of the model, for example, “image-classification”. */
@@ -1200,7 +1366,7 @@ declare namespace gapi.client {
       /** The ID of the failing policy, for example, "organizations/3392779/locations/global/policies/prod-policy". */
       policyId?: string;
       /** The type of the policy evaluation. */
-      type?: string;
+      type?: 'ARTIFACT_GUARD_POLICY_TYPE_UNSPECIFIED' | 'VULNERABILITY';
     }
     interface GoogleCloudSecuritycenterV2Attack {
       /** Type of attack, for example, 'SYN-flood', 'NTP-udp', or 'CHARGEN-udp'. */
@@ -1228,7 +1394,7 @@ declare namespace gapi.client {
       /** A number between 0 (inclusive) and infinity that represents how important this finding is to remediate. The higher the score, the more important it is to remediate. */
       score?: number;
       /** Output only. What state this AttackExposure is in. This captures whether or not an attack exposure has been calculated or not. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'CALCULATED' | 'NOT_CALCULATED';
     }
     interface GoogleCloudSecuritycenterV2AwsAccount {
       /** The unique identifier (ID) of the account, containing exactly 12 digits. */
@@ -1365,7 +1531,7 @@ declare namespace gapi.client {
       /** Policy type of the CloudControl */
       policyType?: string;
       /** Type of cloud control. */
-      type?: string;
+      type?: 'CLOUD_CONTROL_TYPE_UNSPECIFIED' | 'BUILT_IN' | 'CUSTOM';
       /** Version of the Cloud Control */
       version?: number;
     }
@@ -1375,7 +1541,7 @@ declare namespace gapi.client {
       /** Type of information detected by SDP. Info type includes name, version and sensitivity of the detected information type. */
       infoTypes?: GoogleCloudSecuritycenterV2InfoType[];
       /** The resource hierarchy level at which the data profile was generated. */
-      parentType?: string;
+      parentType?: 'PARENT_TYPE_UNSPECIFIED' | 'ORGANIZATION' | 'PROJECT';
     }
     interface GoogleCloudSecuritycenterV2CloudDlpInspection {
       /** Whether Cloud DLP scanned the complete resource or a sampled subset. */
@@ -1419,7 +1585,13 @@ declare namespace gapi.client {
       /** Destination port. Not present for sockets that are listening and not connected. */
       destinationPort?: number;
       /** IANA Internet Protocol Number such as TCP(6) and UDP(17). */
-      protocol?: string;
+      protocol?:
+        | 'PROTOCOL_UNSPECIFIED'
+        | 'ICMP'
+        | 'TCP'
+        | 'UDP'
+        | 'GRE'
+        | 'ESP';
       /** Source IP address. */
       sourceIp?: string;
       /** Source port. */
@@ -1455,7 +1627,13 @@ declare namespace gapi.client {
       /** Describe Common Vulnerability Scoring System specified at https://www.first.org/cvss/v3.1/specification-document */
       cvssv3?: GoogleCloudSecuritycenterV2Cvssv3;
       /** The exploitation activity of the vulnerability in the wild. */
-      exploitationActivity?: string;
+      exploitationActivity?:
+        | 'EXPLOITATION_ACTIVITY_UNSPECIFIED'
+        | 'WIDE'
+        | 'CONFIRMED'
+        | 'AVAILABLE'
+        | 'ANTICIPATED'
+        | 'NO_KNOWN';
       /** Date the first publicly available exploit or PoC was released. */
       exploitReleaseDate?: string;
       /** Date of the earliest known exploitation. */
@@ -1463,7 +1641,12 @@ declare namespace gapi.client {
       /** The unique identifier for the vulnerability. e.g. CVE-2021-34527 */
       id?: string;
       /** The potential impact of the vulnerability if it was to be exploited. */
-      impact?: string;
+      impact?:
+        | 'RISK_RATING_UNSPECIFIED'
+        | 'LOW'
+        | 'MEDIUM'
+        | 'HIGH'
+        | 'CRITICAL';
       /** Whether or not the vulnerability has been observed in the wild. */
       observedInTheWild?: boolean;
       /** Additional information about the CVE. e.g. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34527 */
@@ -1475,23 +1658,50 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2Cvssv3 {
       /** This metric describes the conditions beyond the attacker's control that must exist in order to exploit the vulnerability. */
-      attackComplexity?: string;
+      attackComplexity?:
+        | 'ATTACK_COMPLEXITY_UNSPECIFIED'
+        | 'ATTACK_COMPLEXITY_LOW'
+        | 'ATTACK_COMPLEXITY_HIGH';
       /** Base Metrics Represents the intrinsic characteristics of a vulnerability that are constant over time and across user environments. This metric reflects the context by which vulnerability exploitation is possible. */
-      attackVector?: string;
+      attackVector?:
+        | 'ATTACK_VECTOR_UNSPECIFIED'
+        | 'ATTACK_VECTOR_NETWORK'
+        | 'ATTACK_VECTOR_ADJACENT'
+        | 'ATTACK_VECTOR_LOCAL'
+        | 'ATTACK_VECTOR_PHYSICAL';
       /** This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability. */
-      availabilityImpact?: string;
+      availabilityImpact?:
+        | 'IMPACT_UNSPECIFIED'
+        | 'IMPACT_HIGH'
+        | 'IMPACT_LOW'
+        | 'IMPACT_NONE';
       /** The base score is a function of the base metric scores. */
       baseScore?: number;
       /** This metric measures the impact to the confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability. */
-      confidentialityImpact?: string;
+      confidentialityImpact?:
+        | 'IMPACT_UNSPECIFIED'
+        | 'IMPACT_HIGH'
+        | 'IMPACT_LOW'
+        | 'IMPACT_NONE';
       /** This metric measures the impact to integrity of a successfully exploited vulnerability. */
-      integrityImpact?: string;
+      integrityImpact?:
+        | 'IMPACT_UNSPECIFIED'
+        | 'IMPACT_HIGH'
+        | 'IMPACT_LOW'
+        | 'IMPACT_NONE';
       /** This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability. */
-      privilegesRequired?: string;
+      privilegesRequired?:
+        | 'PRIVILEGES_REQUIRED_UNSPECIFIED'
+        | 'PRIVILEGES_REQUIRED_NONE'
+        | 'PRIVILEGES_REQUIRED_LOW'
+        | 'PRIVILEGES_REQUIRED_HIGH';
       /** The Scope metric captures whether a vulnerability in one vulnerable component impacts resources in components beyond its security scope. */
-      scope?: string;
+      scope?: 'SCOPE_UNSPECIFIED' | 'SCOPE_UNCHANGED' | 'SCOPE_CHANGED';
       /** This metric captures the requirement for a human user, other than the attacker, to participate in the successful compromise of the vulnerable component. */
-      userInteraction?: string;
+      userInteraction?:
+        | 'USER_INTERACTION_UNSPECIFIED'
+        | 'USER_INTERACTION_NONE'
+        | 'USER_INTERACTION_REQUIRED';
     }
     interface GoogleCloudSecuritycenterV2Cwe {
       /** The CWE identifier, e.g. CWE-94 */
@@ -1505,7 +1715,7 @@ declare namespace gapi.client {
       /** Timestamp of data access event. */
       eventTime?: string;
       /** The operation performed by the principal to access the data. */
-      operation?: string;
+      operation?: 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY';
       /** The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other. */
       principalEmail?: string;
     }
@@ -1529,7 +1739,7 @@ declare namespace gapi.client {
       /** Timestamp of data flow event. */
       eventTime?: string;
       /** The operation performed by the principal for the data flow event. */
-      operation?: string;
+      operation?: 'OPERATION_UNSPECIFIED' | 'READ' | 'MOVE' | 'COPY';
       /** The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other. */
       principalEmail?: string;
       /** Non-compliant location of the principal or the data destination. */
@@ -1541,7 +1751,12 @@ declare namespace gapi.client {
       /** Timestamp indicating when the event was detected. */
       eventDetectionTime?: string;
       /** Type of the DRD event. */
-      eventType?: string;
+      eventType?:
+        | 'EVENT_TYPE_UNSPECIFIED'
+        | 'EVENT_TYPE_MAX_TTL_EXCEEDED'
+        | 'EVENT_TYPE_MAX_TTL_FROM_CREATION'
+        | 'EVENT_TYPE_MAX_TTL_FROM_LAST_MODIFICATION'
+        | 'EVENT_TYPE_MIN_TTL_FROM_CREATION';
       /** Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user sets the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days. */
       maxRetentionAllowed?: string;
       /** Min duration of retention allowed from the DSPM retention control. This field is only populated when event type is set to EVENT_TYPE_MIN_TTL_FROM_CREATION. */
@@ -1657,7 +1872,10 @@ declare namespace gapi.client {
       /** Path of the file in terms of underlying disk/partition identifiers. */
       diskPath?: GoogleCloudSecuritycenterV2DiskPath;
       /** The load state of the file. */
-      fileLoadState?: string;
+      fileLoadState?:
+        | 'FILE_LOAD_STATE_UNSPECIFIED'
+        | 'LOADED_BY_PROCESS'
+        | 'NOT_LOADED_BY_PROCESS';
       /** The length in bytes of the file prefix that was hashed. If hashed_size == size, any hashes reported represent the entire file. */
       hashedSize?: string;
       /** Operation(s) performed on a file. */
@@ -1673,7 +1891,13 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2FileOperation {
       /** The type of the operation */
-      type?: string;
+      type?:
+        | 'OPERATION_TYPE_UNSPECIFIED'
+        | 'OPEN'
+        | 'READ'
+        | 'RENAME'
+        | 'WRITE'
+        | 'EXECUTE';
     }
     interface GoogleCloudSecuritycenterV2Finding {
       /** Access details associated with the finding, such as more information on the caller, which method was accessed, and from where. */
@@ -1743,7 +1967,18 @@ declare namespace gapi.client {
       /** File associated with the finding. */
       files?: GoogleCloudSecuritycenterV2File[];
       /** The class of the finding. */
-      findingClass?: string;
+      findingClass?:
+        | 'FINDING_CLASS_UNSPECIFIED'
+        | 'THREAT'
+        | 'VULNERABILITY'
+        | 'MISCONFIGURATION'
+        | 'OBSERVATION'
+        | 'SCC_ERROR'
+        | 'POSTURE_VIOLATION'
+        | 'TOXIC_COMBINATION'
+        | 'SENSITIVE_DATA_RISK'
+        | 'CHOKEPOINT'
+        | 'EXTERNAL_EXPOSURE';
       /** Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests. */
       groupMemberships?: GoogleCloudSecuritycenterV2GroupMembership[];
       /** Represents IAM bindings associated with the finding. */
@@ -1767,7 +2002,7 @@ declare namespace gapi.client {
       /** Unique identifier of the module which generated the finding. Example: folders/598186756061/securityHealthAnalyticsSettings/customModules/56799441161885 */
       moduleName?: string;
       /** Indicates the mute state of a finding (either muted, unmuted or undefined). Unlike other attributes of a finding, a finding provider shouldn't set the value of mute. */
-      mute?: string;
+      mute?: 'MUTE_UNSPECIFIED' | 'MUTED' | 'UNMUTED' | 'UNDEFINED';
       /** Output only. The mute information regarding this finding. */
       muteInfo?: GoogleCloudSecuritycenterV2MuteInfo;
       /** Records additional information about the mute operation, for example, the [mute configuration](https://cloud.google.com/security-command-center/docs/how-to-mute-findings) that muted the finding and the user who muted the finding. */
@@ -1799,11 +2034,16 @@ declare namespace gapi.client {
       /** The security posture associated with the finding. */
       securityPosture?: GoogleCloudSecuritycenterV2SecurityPosture;
       /** The severity of the finding. This field is managed by the source that writes the finding. */
-      severity?: string;
+      severity?:
+        | 'SEVERITY_UNSPECIFIED'
+        | 'CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
       /** Source specific properties. These properties are managed by the source that writes the finding. The key names in the source_properties map must be between 1 and 255 characters, and must start with a letter and contain alphanumeric characters or underscores only. */
       sourceProperties?: {[P in string]: any};
       /** Output only. The state of the finding. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE';
       /** Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests. */
       toxicCombination?: GoogleCloudSecuritycenterV2ToxicCombination;
       /** VertexAi associated with the finding. */
@@ -1819,7 +2059,13 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2Framework {
       /** Category of the framework associated with the finding. E.g. Security Benchmark, or Assured Workloads */
-      category?: string[];
+      category?:
+        | 'FRAMEWORK_CATEGORY_UNSPECIFIED'
+        | 'SECURITY_BENCHMARKS'
+        | 'ASSURED_WORKLOADS'
+        | 'DATA_SECURITY'
+        | 'GOOGLE_BEST_PRACTICES'
+        | 'CUSTOM_FRAMEWORK'[];
       /** The controls associated with the framework. */
       controls?: GoogleCloudSecuritycenterV2Control[];
       /** Display name of the framework. For a standard framework, this will look like e.g. PCI DSS 3.2.1, whereas for a custom framework it can be a user defined string like MyFramework */
@@ -1827,7 +2073,10 @@ declare namespace gapi.client {
       /** Name of the framework associated with the finding */
       name?: string;
       /** Type of the framework associated with the finding, to specify whether the framework is built-in (pre-defined and immutable) or a custom framework defined by the customer (equivalent to security posture) */
-      type?: string;
+      type?:
+        | 'FRAMEWORK_TYPE_UNSPECIFIED'
+        | 'FRAMEWORK_TYPE_BUILT_IN'
+        | 'FRAMEWORK_TYPE_CUSTOM';
     }
     interface GoogleCloudSecuritycenterV2Geolocation {
       /** A CLDR. */
@@ -1837,11 +2086,14 @@ declare namespace gapi.client {
       /** ID of the group. */
       groupId?: string;
       /** Type of group. */
-      groupType?: string;
+      groupType?:
+        | 'GROUP_TYPE_UNSPECIFIED'
+        | 'GROUP_TYPE_TOXIC_COMBINATION'
+        | 'GROUP_TYPE_CHOKEPOINT';
     }
     interface GoogleCloudSecuritycenterV2IamBinding {
       /** The action that was performed on a Binding. */
-      action?: string;
+      action?: 'ACTION_UNSPECIFIED' | 'ADD' | 'REMOVE';
       /** A single identity requesting access for a Cloud Platform resource, for example, "foo@google.com". */
       member?: string;
       /** Role that is assigned to "members". For example, "roles/viewer", "roles/editor", or "roles/owner". */
@@ -1879,7 +2131,7 @@ declare namespace gapi.client {
       /** If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4. */
       destinationIpRanges?: string[];
       /** The direction that the rule is applicable to, one of ingress or egress. */
-      direction?: string;
+      direction?: 'DIRECTION_UNSPECIFIED' | 'INGRESS' | 'EGRESS';
       /** Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml. */
       exposedServices?: string[];
       /** If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4. */
@@ -1897,7 +2149,11 @@ declare namespace gapi.client {
       /** The exposure score of the issue. */
       exposureScore?: number;
       /** The type of the issue. */
-      issueType?: string;
+      issueType?:
+        | 'ISSUE_TYPE_UNSPECIFIED'
+        | 'CHOKEPOINT'
+        | 'TOXIC_COMBINATION'
+        | 'INSIGHT';
       /** The time the issue was last observed. */
       lastObservationTime?: string;
       /** The mute information of the issue. */
@@ -1915,15 +2171,28 @@ declare namespace gapi.client {
       /** The security context of the issue. */
       securityContexts?: GoogleCloudSecuritycenterV2IssueSecurityContext[];
       /** The severity of the issue. */
-      severity?: string;
+      severity?:
+        | 'SEVERITY_UNSPECIFIED'
+        | 'CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
       /** Output only. The state of the issue. */
-      state?: string;
+      state?: 'STATE_UNSPECIFIED' | 'ACTIVE' | 'INACTIVE';
       /** Output only. The time the issue was last updated. */
       updateTime?: string;
     }
     interface GoogleCloudSecuritycenterV2IssueDomain {
       /** The domain category of the issue. */
-      domainCategory?: string;
+      domainCategory?:
+        | 'DOMAIN_CATEGORY_UNSPECIFIED'
+        | 'AI'
+        | 'CODE'
+        | 'CONTAINER'
+        | 'DATA'
+        | 'IDENTITY_AND_ACCESS'
+        | 'VULNERABILITY'
+        | 'THREAT';
     }
     interface GoogleCloudSecuritycenterV2IssueFinding {
       /** The CVE of the finding. */
@@ -1947,7 +2216,7 @@ declare namespace gapi.client {
       /** The user-provided reason for muting the issue. */
       muteReason?: string;
       /** Output only. The mute state of the issue. */
-      muteState?: string;
+      muteState?: 'MUTE_STATE_UNSPECIFIED' | 'NOT_MUTED' | 'MUTED';
       /** The time the issue was muted. */
       muteUpdateTime?: string;
     }
@@ -1965,7 +2234,11 @@ declare namespace gapi.client {
       /** The Azure metadata of the resource associated with the issue. Only populated for Azure resources. */
       azureMetadata?: GoogleCloudSecuritycenterV2IssueResourceAzureMetadata;
       /** The cloud provider of the resource associated with the issue. */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** The resource-type specific display name of the resource associated with the issue. */
       displayName?: string;
       /** The Google Cloud metadata of the resource associated with the issue. Only populated for Google Cloud resources. */
@@ -2013,11 +2286,21 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2IssueResourceApplicationAttributesCriticality {
       /** Criticality Type. */
-      type?: string;
+      type?:
+        | 'CRITICALITY_TYPE_UNSPECIFIED'
+        | 'MISSION_CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
     }
     interface GoogleCloudSecuritycenterV2IssueResourceApplicationAttributesEnvironment {
       /** Environment Type. */
-      type?: string;
+      type?:
+        | 'ENVIRONMENT_TYPE_UNSPECIFIED'
+        | 'PRODUCTION'
+        | 'STAGING'
+        | 'TEST'
+        | 'DEVELOPMENT';
     }
     interface GoogleCloudSecuritycenterV2IssueResourceAwsMetadata {
       /** The AWS account of the resource associated with the issue. */
@@ -2069,7 +2352,12 @@ declare namespace gapi.client {
       /** The fully-qualified name for a job. e.g. `projects//jobs/` */
       name?: string;
       /** Output only. State of the job, such as `RUNNING` or `PENDING`. */
-      state?: string;
+      state?:
+        | 'JOB_STATE_UNSPECIFIED'
+        | 'PENDING'
+        | 'RUNNING'
+        | 'SUCCEEDED'
+        | 'FAILED';
     }
     interface GoogleCloudSecuritycenterV2KernelRootkit {
       /** Rootkit name, when available. */
@@ -2129,13 +2417,321 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2MitreAttack {
       /** Additional MITRE ATT&CK tactics related to this finding, if any. */
-      additionalTactics?: string[];
+      additionalTactics?:
+        | 'TACTIC_UNSPECIFIED'
+        | 'RECONNAISSANCE'
+        | 'RESOURCE_DEVELOPMENT'
+        | 'INITIAL_ACCESS'
+        | 'EXECUTION'
+        | 'PERSISTENCE'
+        | 'PRIVILEGE_ESCALATION'
+        | 'DEFENSE_EVASION'
+        | 'CREDENTIAL_ACCESS'
+        | 'DISCOVERY'
+        | 'LATERAL_MOVEMENT'
+        | 'COLLECTION'
+        | 'COMMAND_AND_CONTROL'
+        | 'EXFILTRATION'
+        | 'IMPACT'[];
       /** Additional MITRE ATT&CK techniques related to this finding, if any, along with any of their respective parent techniques. */
-      additionalTechniques?: string[];
+      additionalTechniques?:
+        | 'TECHNIQUE_UNSPECIFIED'
+        | 'DATA_OBFUSCATION'
+        | 'DATA_OBFUSCATION_STEGANOGRAPHY'
+        | 'OS_CREDENTIAL_DUMPING'
+        | 'OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM'
+        | 'OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW'
+        | 'DATA_FROM_LOCAL_SYSTEM'
+        | 'AUTOMATED_EXFILTRATION'
+        | 'OBFUSCATED_FILES_OR_INFO'
+        | 'STEGANOGRAPHY'
+        | 'COMPILE_AFTER_DELIVERY'
+        | 'COMMAND_OBFUSCATION'
+        | 'SCHEDULED_TRANSFER'
+        | 'SYSTEM_OWNER_USER_DISCOVERY'
+        | 'MASQUERADING'
+        | 'MATCH_LEGITIMATE_NAME_OR_LOCATION'
+        | 'BOOT_OR_LOGON_INITIALIZATION_SCRIPTS'
+        | 'STARTUP_ITEMS'
+        | 'NETWORK_SERVICE_DISCOVERY'
+        | 'SCHEDULED_TASK_JOB'
+        | 'SCHEDULED_TASK_JOB_CRON'
+        | 'CONTAINER_ORCHESTRATION_JOB'
+        | 'PROCESS_INJECTION'
+        | 'INPUT_CAPTURE'
+        | 'INPUT_CAPTURE_KEYLOGGING'
+        | 'PROCESS_DISCOVERY'
+        | 'COMMAND_AND_SCRIPTING_INTERPRETER'
+        | 'UNIX_SHELL'
+        | 'PYTHON'
+        | 'EXPLOITATION_FOR_PRIVILEGE_ESCALATION'
+        | 'PERMISSION_GROUPS_DISCOVERY'
+        | 'CLOUD_GROUPS'
+        | 'INDICATOR_REMOVAL'
+        | 'INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS'
+        | 'INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY'
+        | 'INDICATOR_REMOVAL_FILE_DELETION'
+        | 'INDICATOR_REMOVAL_TIMESTOMP'
+        | 'INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA'
+        | 'APPLICATION_LAYER_PROTOCOL'
+        | 'DNS'
+        | 'SOFTWARE_DEPLOYMENT_TOOLS'
+        | 'VALID_ACCOUNTS'
+        | 'DEFAULT_ACCOUNTS'
+        | 'LOCAL_ACCOUNTS'
+        | 'CLOUD_ACCOUNTS'
+        | 'FILE_AND_DIRECTORY_DISCOVERY'
+        | 'ACCOUNT_DISCOVERY_LOCAL_ACCOUNT'
+        | 'PROXY'
+        | 'EXTERNAL_PROXY'
+        | 'MULTI_HOP_PROXY'
+        | 'ACCOUNT_MANIPULATION'
+        | 'ADDITIONAL_CLOUD_CREDENTIALS'
+        | 'ADDITIONAL_CLOUD_ROLES'
+        | 'SSH_AUTHORIZED_KEYS'
+        | 'ADDITIONAL_CONTAINER_CLUSTER_ROLES'
+        | 'MULTI_STAGE_CHANNELS'
+        | 'INGRESS_TOOL_TRANSFER'
+        | 'NATIVE_API'
+        | 'BRUTE_FORCE'
+        | 'AUTOMATED_COLLECTION'
+        | 'SHARED_MODULES'
+        | 'DATA_ENCODING'
+        | 'STANDARD_ENCODING'
+        | 'ACCESS_TOKEN_MANIPULATION'
+        | 'TOKEN_IMPERSONATION_OR_THEFT'
+        | 'CREATE_ACCOUNT'
+        | 'LOCAL_ACCOUNT'
+        | 'DEOBFUSCATE_DECODE_FILES_OR_INFO'
+        | 'EXPLOIT_PUBLIC_FACING_APPLICATION'
+        | 'SUPPLY_CHAIN_COMPROMISE'
+        | 'COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS'
+        | 'EXPLOITATION_FOR_CLIENT_EXECUTION'
+        | 'USER_EXECUTION'
+        | 'EXPLOITATION_FOR_CREDENTIAL_ACCESS'
+        | 'LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION'
+        | 'DOMAIN_POLICY_MODIFICATION'
+        | 'DATA_DESTRUCTION'
+        | 'DATA_ENCRYPTED_FOR_IMPACT'
+        | 'SERVICE_STOP'
+        | 'INHIBIT_SYSTEM_RECOVERY'
+        | 'FIRMWARE_CORRUPTION'
+        | 'RESOURCE_HIJACKING'
+        | 'NETWORK_DENIAL_OF_SERVICE'
+        | 'CLOUD_SERVICE_DISCOVERY'
+        | 'STEAL_APPLICATION_ACCESS_TOKEN'
+        | 'ACCOUNT_ACCESS_REMOVAL'
+        | 'TRANSFER_DATA_TO_CLOUD_ACCOUNT'
+        | 'STEAL_WEB_SESSION_COOKIE'
+        | 'CREATE_OR_MODIFY_SYSTEM_PROCESS'
+        | 'EVENT_TRIGGERED_EXECUTION'
+        | 'BOOT_OR_LOGON_AUTOSTART_EXECUTION'
+        | 'KERNEL_MODULES_AND_EXTENSIONS'
+        | 'SHORTCUT_MODIFICATION'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING'
+        | 'UNSECURED_CREDENTIALS'
+        | 'CREDENTIALS_IN_FILES'
+        | 'BASH_HISTORY'
+        | 'PRIVATE_KEYS'
+        | 'SUBVERT_TRUST_CONTROL'
+        | 'INSTALL_ROOT_CERTIFICATE'
+        | 'COMPROMISE_HOST_SOFTWARE_BINARY'
+        | 'CREDENTIALS_FROM_PASSWORD_STORES'
+        | 'MODIFY_AUTHENTICATION_PROCESS'
+        | 'PLUGGABLE_AUTHENTICATION_MODULES'
+        | 'MULTI_FACTOR_AUTHENTICATION'
+        | 'IMPAIR_DEFENSES'
+        | 'DISABLE_OR_MODIFY_TOOLS'
+        | 'INDICATOR_BLOCKING'
+        | 'DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM'
+        | 'HIDE_ARTIFACTS'
+        | 'HIDDEN_FILES_AND_DIRECTORIES'
+        | 'HIDDEN_USERS'
+        | 'EXFILTRATION_OVER_WEB_SERVICE'
+        | 'EXFILTRATION_TO_CLOUD_STORAGE'
+        | 'DYNAMIC_RESOLUTION'
+        | 'LATERAL_TOOL_TRANSFER'
+        | 'HIJACK_EXECUTION_FLOW'
+        | 'HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING'
+        | 'MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE'
+        | 'CREATE_SNAPSHOT'
+        | 'CLOUD_INFRASTRUCTURE_DISCOVERY'
+        | 'DEVELOP_CAPABILITIES'
+        | 'DEVELOP_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES'
+        | 'OBTAIN_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES_VULNERABILITIES'
+        | 'ACTIVE_SCANNING'
+        | 'SCANNING_IP_BLOCKS'
+        | 'STAGE_CAPABILITIES'
+        | 'UPLOAD_MALWARE'
+        | 'CONTAINER_ADMINISTRATION_COMMAND'
+        | 'DEPLOY_CONTAINER'
+        | 'ESCAPE_TO_HOST'
+        | 'CONTAINER_AND_RESOURCE_DISCOVERY'
+        | 'REFLECTIVE_CODE_LOADING'
+        | 'STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES'
+        | 'FINANCIAL_THEFT'[];
       /** The MITRE ATT&CK tactic most closely represented by this finding, if any. */
-      primaryTactic?: string;
+      primaryTactic?:
+        | 'TACTIC_UNSPECIFIED'
+        | 'RECONNAISSANCE'
+        | 'RESOURCE_DEVELOPMENT'
+        | 'INITIAL_ACCESS'
+        | 'EXECUTION'
+        | 'PERSISTENCE'
+        | 'PRIVILEGE_ESCALATION'
+        | 'DEFENSE_EVASION'
+        | 'CREDENTIAL_ACCESS'
+        | 'DISCOVERY'
+        | 'LATERAL_MOVEMENT'
+        | 'COLLECTION'
+        | 'COMMAND_AND_CONTROL'
+        | 'EXFILTRATION'
+        | 'IMPACT';
       /** The MITRE ATT&CK technique most closely represented by this finding, if any. primary_techniques is a repeated field because there are multiple levels of MITRE ATT&CK techniques. If the technique most closely represented by this finding is a sub-technique (e.g. `SCANNING_IP_BLOCKS`), both the sub-technique and its parent technique(s) will be listed (e.g. `SCANNING_IP_BLOCKS`, `ACTIVE_SCANNING`). */
-      primaryTechniques?: string[];
+      primaryTechniques?:
+        | 'TECHNIQUE_UNSPECIFIED'
+        | 'DATA_OBFUSCATION'
+        | 'DATA_OBFUSCATION_STEGANOGRAPHY'
+        | 'OS_CREDENTIAL_DUMPING'
+        | 'OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM'
+        | 'OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW'
+        | 'DATA_FROM_LOCAL_SYSTEM'
+        | 'AUTOMATED_EXFILTRATION'
+        | 'OBFUSCATED_FILES_OR_INFO'
+        | 'STEGANOGRAPHY'
+        | 'COMPILE_AFTER_DELIVERY'
+        | 'COMMAND_OBFUSCATION'
+        | 'SCHEDULED_TRANSFER'
+        | 'SYSTEM_OWNER_USER_DISCOVERY'
+        | 'MASQUERADING'
+        | 'MATCH_LEGITIMATE_NAME_OR_LOCATION'
+        | 'BOOT_OR_LOGON_INITIALIZATION_SCRIPTS'
+        | 'STARTUP_ITEMS'
+        | 'NETWORK_SERVICE_DISCOVERY'
+        | 'SCHEDULED_TASK_JOB'
+        | 'SCHEDULED_TASK_JOB_CRON'
+        | 'CONTAINER_ORCHESTRATION_JOB'
+        | 'PROCESS_INJECTION'
+        | 'INPUT_CAPTURE'
+        | 'INPUT_CAPTURE_KEYLOGGING'
+        | 'PROCESS_DISCOVERY'
+        | 'COMMAND_AND_SCRIPTING_INTERPRETER'
+        | 'UNIX_SHELL'
+        | 'PYTHON'
+        | 'EXPLOITATION_FOR_PRIVILEGE_ESCALATION'
+        | 'PERMISSION_GROUPS_DISCOVERY'
+        | 'CLOUD_GROUPS'
+        | 'INDICATOR_REMOVAL'
+        | 'INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS'
+        | 'INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY'
+        | 'INDICATOR_REMOVAL_FILE_DELETION'
+        | 'INDICATOR_REMOVAL_TIMESTOMP'
+        | 'INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA'
+        | 'APPLICATION_LAYER_PROTOCOL'
+        | 'DNS'
+        | 'SOFTWARE_DEPLOYMENT_TOOLS'
+        | 'VALID_ACCOUNTS'
+        | 'DEFAULT_ACCOUNTS'
+        | 'LOCAL_ACCOUNTS'
+        | 'CLOUD_ACCOUNTS'
+        | 'FILE_AND_DIRECTORY_DISCOVERY'
+        | 'ACCOUNT_DISCOVERY_LOCAL_ACCOUNT'
+        | 'PROXY'
+        | 'EXTERNAL_PROXY'
+        | 'MULTI_HOP_PROXY'
+        | 'ACCOUNT_MANIPULATION'
+        | 'ADDITIONAL_CLOUD_CREDENTIALS'
+        | 'ADDITIONAL_CLOUD_ROLES'
+        | 'SSH_AUTHORIZED_KEYS'
+        | 'ADDITIONAL_CONTAINER_CLUSTER_ROLES'
+        | 'MULTI_STAGE_CHANNELS'
+        | 'INGRESS_TOOL_TRANSFER'
+        | 'NATIVE_API'
+        | 'BRUTE_FORCE'
+        | 'AUTOMATED_COLLECTION'
+        | 'SHARED_MODULES'
+        | 'DATA_ENCODING'
+        | 'STANDARD_ENCODING'
+        | 'ACCESS_TOKEN_MANIPULATION'
+        | 'TOKEN_IMPERSONATION_OR_THEFT'
+        | 'CREATE_ACCOUNT'
+        | 'LOCAL_ACCOUNT'
+        | 'DEOBFUSCATE_DECODE_FILES_OR_INFO'
+        | 'EXPLOIT_PUBLIC_FACING_APPLICATION'
+        | 'SUPPLY_CHAIN_COMPROMISE'
+        | 'COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS'
+        | 'EXPLOITATION_FOR_CLIENT_EXECUTION'
+        | 'USER_EXECUTION'
+        | 'EXPLOITATION_FOR_CREDENTIAL_ACCESS'
+        | 'LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION'
+        | 'DOMAIN_POLICY_MODIFICATION'
+        | 'DATA_DESTRUCTION'
+        | 'DATA_ENCRYPTED_FOR_IMPACT'
+        | 'SERVICE_STOP'
+        | 'INHIBIT_SYSTEM_RECOVERY'
+        | 'FIRMWARE_CORRUPTION'
+        | 'RESOURCE_HIJACKING'
+        | 'NETWORK_DENIAL_OF_SERVICE'
+        | 'CLOUD_SERVICE_DISCOVERY'
+        | 'STEAL_APPLICATION_ACCESS_TOKEN'
+        | 'ACCOUNT_ACCESS_REMOVAL'
+        | 'TRANSFER_DATA_TO_CLOUD_ACCOUNT'
+        | 'STEAL_WEB_SESSION_COOKIE'
+        | 'CREATE_OR_MODIFY_SYSTEM_PROCESS'
+        | 'EVENT_TRIGGERED_EXECUTION'
+        | 'BOOT_OR_LOGON_AUTOSTART_EXECUTION'
+        | 'KERNEL_MODULES_AND_EXTENSIONS'
+        | 'SHORTCUT_MODIFICATION'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING'
+        | 'UNSECURED_CREDENTIALS'
+        | 'CREDENTIALS_IN_FILES'
+        | 'BASH_HISTORY'
+        | 'PRIVATE_KEYS'
+        | 'SUBVERT_TRUST_CONTROL'
+        | 'INSTALL_ROOT_CERTIFICATE'
+        | 'COMPROMISE_HOST_SOFTWARE_BINARY'
+        | 'CREDENTIALS_FROM_PASSWORD_STORES'
+        | 'MODIFY_AUTHENTICATION_PROCESS'
+        | 'PLUGGABLE_AUTHENTICATION_MODULES'
+        | 'MULTI_FACTOR_AUTHENTICATION'
+        | 'IMPAIR_DEFENSES'
+        | 'DISABLE_OR_MODIFY_TOOLS'
+        | 'INDICATOR_BLOCKING'
+        | 'DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM'
+        | 'HIDE_ARTIFACTS'
+        | 'HIDDEN_FILES_AND_DIRECTORIES'
+        | 'HIDDEN_USERS'
+        | 'EXFILTRATION_OVER_WEB_SERVICE'
+        | 'EXFILTRATION_TO_CLOUD_STORAGE'
+        | 'DYNAMIC_RESOLUTION'
+        | 'LATERAL_TOOL_TRANSFER'
+        | 'HIJACK_EXECUTION_FLOW'
+        | 'HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING'
+        | 'MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE'
+        | 'CREATE_SNAPSHOT'
+        | 'CLOUD_INFRASTRUCTURE_DISCOVERY'
+        | 'DEVELOP_CAPABILITIES'
+        | 'DEVELOP_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES'
+        | 'OBTAIN_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES_VULNERABILITIES'
+        | 'ACTIVE_SCANNING'
+        | 'SCANNING_IP_BLOCKS'
+        | 'STAGE_CAPABILITIES'
+        | 'UPLOAD_MALWARE'
+        | 'CONTAINER_ADMINISTRATION_COMMAND'
+        | 'DEPLOY_CONTAINER'
+        | 'ESCAPE_TO_HOST'
+        | 'CONTAINER_AND_RESOURCE_DISCOVERY'
+        | 'REFLECTIVE_CODE_LOADING'
+        | 'STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES'
+        | 'FINANCIAL_THEFT'[];
       /** The MITRE ATT&CK version referenced by the above fields. E.g. "8". */
       version?: string;
     }
@@ -2155,7 +2751,7 @@ declare namespace gapi.client {
       /** Identifier. This field will be ignored if provided on config creation. The following list shows some examples of the format: + `organizations/{organization}/muteConfigs/{mute_config}` + `organizations/{organization}locations/{location}//muteConfigs/{mute_config}` + `folders/{folder}/muteConfigs/{mute_config}` + `folders/{folder}/locations/{location}/muteConfigs/{mute_config}` + `projects/{project}/muteConfigs/{mute_config}` + `projects/{project}/locations/{location}/muteConfigs/{mute_config}` */
       name?: string;
       /** Required. The type of the mute config, which determines what type of mute state the config affects. Immutable after creation. */
-      type?: string;
+      type?: 'MUTE_CONFIG_TYPE_UNSPECIFIED' | 'STATIC' | 'DYNAMIC';
       /** Output only. The most recent time at which the mute config was updated. This field is set by the server and will be ignored if provided on config creation or update. */
       updateTime?: string;
     }
@@ -2281,7 +2877,10 @@ declare namespace gapi.client {
       /** Signature indicating that a binary family was matched. */
       memoryHashSignature?: GoogleCloudSecuritycenterV2MemoryHashSignature;
       /** Describes the type of resource associated with the signature. */
-      signatureType?: string;
+      signatureType?:
+        | 'SIGNATURE_TYPE_UNSPECIFIED'
+        | 'SIGNATURE_TYPE_PROCESS'
+        | 'SIGNATURE_TYPE_FILE';
       /** Signature indicating that a YARA rule was matched. */
       yaraRuleSignature?: GoogleCloudSecuritycenterV2YaraRuleSignature;
     }
@@ -2315,7 +2914,11 @@ declare namespace gapi.client {
       /** The Azure metadata associated with the finding. */
       azureMetadata?: GoogleCloudSecuritycenterV2AzureMetadata;
       /** Indicates which cloud provider the finding is from. */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** The human readable name of the resource. */
       displayName?: string;
       /** The Google Cloud metadata associated with the finding. */
@@ -2357,11 +2960,21 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2ResourceApplicationAttributesCriticality {
       /** Criticality Type. */
-      type?: string;
+      type?:
+        | 'CRITICALITY_TYPE_UNSPECIFIED'
+        | 'MISSION_CRITICAL'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW';
     }
     interface GoogleCloudSecuritycenterV2ResourceApplicationAttributesEnvironment {
       /** Environment Type. */
-      type?: string;
+      type?:
+        | 'ENVIRONMENT_TYPE_UNSPECIFIED'
+        | 'PRODUCTION'
+        | 'STAGING'
+        | 'TEST'
+        | 'DEVELOPMENT';
     }
     interface GoogleCloudSecuritycenterV2ResourcePath {
       /** The list of nodes that make the up resource path, ordered from lowest level to highest level. */
@@ -2373,11 +2986,25 @@ declare namespace gapi.client {
       /** The ID of the resource this node represents. */
       id?: string;
       /** The type of resource this node represents. */
-      nodeType?: string;
+      nodeType?:
+        | 'RESOURCE_PATH_NODE_TYPE_UNSPECIFIED'
+        | 'GCP_ORGANIZATION'
+        | 'GCP_FOLDER'
+        | 'GCP_PROJECT'
+        | 'AWS_ORGANIZATION'
+        | 'AWS_ORGANIZATIONAL_UNIT'
+        | 'AWS_ACCOUNT'
+        | 'AZURE_MANAGEMENT_GROUP'
+        | 'AZURE_SUBSCRIPTION'
+        | 'AZURE_RESOURCE_GROUP';
     }
     interface GoogleCloudSecuritycenterV2ResourceValueConfig {
       /** Cloud provider this configuration applies to */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** Output only. Timestamp this resource value configuration was created. */
       createTime?: string;
       /** Description of the resource value configuration. */
@@ -2389,7 +3016,12 @@ declare namespace gapi.client {
       /** Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, "storage.googleapis.com/Bucket" with resource_value "HIGH" will apply "HIGH" value only to "storage.googleapis.com/Bucket" resources. */
       resourceType?: string;
       /** Resource value level this expression represents Only required when there is no Sensitive Data Protection mapping in the request */
-      resourceValue?: string;
+      resourceValue?:
+        | 'RESOURCE_VALUE_UNSPECIFIED'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW'
+        | 'NONE';
       /** Project or folder to scope this configuration to. For example, "project/456" would apply this configuration only to resources in "project/456" scope and will be checked with `AND` of other resources. */
       scope?: string;
       /** A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. "bigquery.googleapis.com/Dataset". */
@@ -2401,7 +3033,7 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2Role {
       /** Role type. */
-      kind?: string;
+      kind?: 'KIND_UNSPECIFIED' | 'ROLE' | 'CLUSTER_ROLE';
       /** Role name. */
       name?: string;
       /** Role namespace. */
@@ -2429,7 +3061,12 @@ declare namespace gapi.client {
       /** Time that the secret was found. */
       lastUpdatedTime?: string;
       /** The validity of the secret. */
-      validity?: string;
+      validity?:
+        | 'SECRET_VALIDITY_UNSPECIFIED'
+        | 'SECRET_VALIDITY_UNSUPPORTED'
+        | 'SECRET_VALIDITY_FAILED'
+        | 'SECRET_VALIDITY_INVALID'
+        | 'SECRET_VALIDITY_VALID';
     }
     interface GoogleCloudSecuritycenterV2SecurityBulletin {
       /** ID of the bulletin corresponding to the vulnerability. */
@@ -2475,13 +3112,28 @@ declare namespace gapi.client {
     }
     interface GoogleCloudSecuritycenterV2SensitiveDataProtectionMapping {
       /** Resource value mapping for high-sensitivity Sensitive Data Protection findings */
-      highSensitivityMapping?: string;
+      highSensitivityMapping?:
+        | 'RESOURCE_VALUE_UNSPECIFIED'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW'
+        | 'NONE';
       /** Resource value mapping for medium-sensitivity Sensitive Data Protection findings */
-      mediumSensitivityMapping?: string;
+      mediumSensitivityMapping?:
+        | 'RESOURCE_VALUE_UNSPECIFIED'
+        | 'HIGH'
+        | 'MEDIUM'
+        | 'LOW'
+        | 'NONE';
     }
     interface GoogleCloudSecuritycenterV2SensitivityScore {
       /** The sensitivity score applied to the resource. */
-      score?: string;
+      score?:
+        | 'SENSITIVITY_SCORE_LEVEL_UNSPECIFIED'
+        | 'SENSITIVITY_LOW'
+        | 'SENSITIVITY_UNKNOWN'
+        | 'SENSITIVITY_MODERATE'
+        | 'SENSITIVITY_HIGH';
     }
     interface GoogleCloudSecuritycenterV2ServiceAccountDelegationInfo {
       /** The email address of a Google account. */
@@ -2493,11 +3145,11 @@ declare namespace gapi.client {
       /** When the static mute was applied. */
       applyTime?: string;
       /** The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value. */
-      state?: string;
+      state?: 'MUTE_UNSPECIFIED' | 'MUTED' | 'UNMUTED' | 'UNDEFINED';
     }
     interface GoogleCloudSecuritycenterV2Subject {
       /** Authentication type for the subject. */
-      kind?: string;
+      kind?: 'AUTH_TYPE_UNSPECIFIED' | 'USER' | 'SERVICEACCOUNT' | 'GROUP';
       /** Name for the subject. */
       name?: string;
       /** Namespace for the subject. */
@@ -2553,11 +3205,14 @@ declare namespace gapi.client {
       /** ID of the group. */
       groupId?: string;
       /** Type of group. */
-      groupType?: string;
+      groupType?:
+        | 'GROUP_TYPE_UNSPECIFIED'
+        | 'GROUP_TYPE_TOXIC_COMBINATION'
+        | 'GROUP_TYPE_CHOKEPOINT';
     }
     interface IamBinding {
       /** The action that was performed on a Binding. */
-      action?: string;
+      action?: 'ACTION_UNSPECIFIED' | 'ADD' | 'REMOVE';
       /** A single identity requesting access for a Cloud Platform resource, for example, "foo@google.com". */
       member?: string;
       /** Role that is assigned to "members". For example, "roles/viewer", "roles/editor", or "roles/owner". */
@@ -2595,7 +3250,7 @@ declare namespace gapi.client {
       /** If destination IP ranges are specified, the firewall rule applies only to traffic that has a destination IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4. */
       destinationIpRanges?: string[];
       /** The direction that the rule is applicable to, one of ingress or egress. */
-      direction?: string;
+      direction?: 'DIRECTION_UNSPECIFIED' | 'INGRESS' | 'EGRESS';
       /** Name of the network protocol service, such as FTP, that is exposed by the open port. Follows the naming convention available at: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml. */
       exposedServices?: string[];
       /** If source IP ranges are specified, the firewall rule applies only to traffic that has a source IP address in these ranges. These ranges must be expressed in CIDR format. Only supports IPv4. */
@@ -2609,7 +3264,12 @@ declare namespace gapi.client {
       /** The fully-qualified name for a job. e.g. `projects//jobs/` */
       name?: string;
       /** Output only. State of the job, such as `RUNNING` or `PENDING`. */
-      state?: string;
+      state?:
+        | 'JOB_STATE_UNSPECIFIED'
+        | 'PENDING'
+        | 'RUNNING'
+        | 'SUCCEEDED'
+        | 'FAILED';
     }
     interface KernelRootkit {
       /** Rootkit name, when available. */
@@ -2669,13 +3329,321 @@ declare namespace gapi.client {
     }
     interface MitreAttack {
       /** Additional MITRE ATT&CK tactics related to this finding, if any. */
-      additionalTactics?: string[];
+      additionalTactics?:
+        | 'TACTIC_UNSPECIFIED'
+        | 'RECONNAISSANCE'
+        | 'RESOURCE_DEVELOPMENT'
+        | 'INITIAL_ACCESS'
+        | 'EXECUTION'
+        | 'PERSISTENCE'
+        | 'PRIVILEGE_ESCALATION'
+        | 'DEFENSE_EVASION'
+        | 'CREDENTIAL_ACCESS'
+        | 'DISCOVERY'
+        | 'LATERAL_MOVEMENT'
+        | 'COLLECTION'
+        | 'COMMAND_AND_CONTROL'
+        | 'EXFILTRATION'
+        | 'IMPACT'[];
       /** Additional MITRE ATT&CK techniques related to this finding, if any, along with any of their respective parent techniques. */
-      additionalTechniques?: string[];
+      additionalTechniques?:
+        | 'TECHNIQUE_UNSPECIFIED'
+        | 'DATA_OBFUSCATION'
+        | 'DATA_OBFUSCATION_STEGANOGRAPHY'
+        | 'OS_CREDENTIAL_DUMPING'
+        | 'OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM'
+        | 'OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW'
+        | 'DATA_FROM_LOCAL_SYSTEM'
+        | 'AUTOMATED_EXFILTRATION'
+        | 'OBFUSCATED_FILES_OR_INFO'
+        | 'STEGANOGRAPHY'
+        | 'COMPILE_AFTER_DELIVERY'
+        | 'COMMAND_OBFUSCATION'
+        | 'SCHEDULED_TRANSFER'
+        | 'SYSTEM_OWNER_USER_DISCOVERY'
+        | 'MASQUERADING'
+        | 'MATCH_LEGITIMATE_NAME_OR_LOCATION'
+        | 'BOOT_OR_LOGON_INITIALIZATION_SCRIPTS'
+        | 'STARTUP_ITEMS'
+        | 'NETWORK_SERVICE_DISCOVERY'
+        | 'SCHEDULED_TASK_JOB'
+        | 'SCHEDULED_TASK_JOB_CRON'
+        | 'CONTAINER_ORCHESTRATION_JOB'
+        | 'PROCESS_INJECTION'
+        | 'INPUT_CAPTURE'
+        | 'INPUT_CAPTURE_KEYLOGGING'
+        | 'PROCESS_DISCOVERY'
+        | 'COMMAND_AND_SCRIPTING_INTERPRETER'
+        | 'UNIX_SHELL'
+        | 'PYTHON'
+        | 'EXPLOITATION_FOR_PRIVILEGE_ESCALATION'
+        | 'PERMISSION_GROUPS_DISCOVERY'
+        | 'CLOUD_GROUPS'
+        | 'INDICATOR_REMOVAL'
+        | 'INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS'
+        | 'INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY'
+        | 'INDICATOR_REMOVAL_FILE_DELETION'
+        | 'INDICATOR_REMOVAL_TIMESTOMP'
+        | 'INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA'
+        | 'APPLICATION_LAYER_PROTOCOL'
+        | 'DNS'
+        | 'SOFTWARE_DEPLOYMENT_TOOLS'
+        | 'VALID_ACCOUNTS'
+        | 'DEFAULT_ACCOUNTS'
+        | 'LOCAL_ACCOUNTS'
+        | 'CLOUD_ACCOUNTS'
+        | 'FILE_AND_DIRECTORY_DISCOVERY'
+        | 'ACCOUNT_DISCOVERY_LOCAL_ACCOUNT'
+        | 'PROXY'
+        | 'EXTERNAL_PROXY'
+        | 'MULTI_HOP_PROXY'
+        | 'ACCOUNT_MANIPULATION'
+        | 'ADDITIONAL_CLOUD_CREDENTIALS'
+        | 'ADDITIONAL_CLOUD_ROLES'
+        | 'SSH_AUTHORIZED_KEYS'
+        | 'ADDITIONAL_CONTAINER_CLUSTER_ROLES'
+        | 'MULTI_STAGE_CHANNELS'
+        | 'INGRESS_TOOL_TRANSFER'
+        | 'NATIVE_API'
+        | 'BRUTE_FORCE'
+        | 'AUTOMATED_COLLECTION'
+        | 'SHARED_MODULES'
+        | 'DATA_ENCODING'
+        | 'STANDARD_ENCODING'
+        | 'ACCESS_TOKEN_MANIPULATION'
+        | 'TOKEN_IMPERSONATION_OR_THEFT'
+        | 'CREATE_ACCOUNT'
+        | 'LOCAL_ACCOUNT'
+        | 'DEOBFUSCATE_DECODE_FILES_OR_INFO'
+        | 'EXPLOIT_PUBLIC_FACING_APPLICATION'
+        | 'SUPPLY_CHAIN_COMPROMISE'
+        | 'COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS'
+        | 'EXPLOITATION_FOR_CLIENT_EXECUTION'
+        | 'USER_EXECUTION'
+        | 'EXPLOITATION_FOR_CREDENTIAL_ACCESS'
+        | 'LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION'
+        | 'DOMAIN_POLICY_MODIFICATION'
+        | 'DATA_DESTRUCTION'
+        | 'DATA_ENCRYPTED_FOR_IMPACT'
+        | 'SERVICE_STOP'
+        | 'INHIBIT_SYSTEM_RECOVERY'
+        | 'FIRMWARE_CORRUPTION'
+        | 'RESOURCE_HIJACKING'
+        | 'NETWORK_DENIAL_OF_SERVICE'
+        | 'CLOUD_SERVICE_DISCOVERY'
+        | 'STEAL_APPLICATION_ACCESS_TOKEN'
+        | 'ACCOUNT_ACCESS_REMOVAL'
+        | 'TRANSFER_DATA_TO_CLOUD_ACCOUNT'
+        | 'STEAL_WEB_SESSION_COOKIE'
+        | 'CREATE_OR_MODIFY_SYSTEM_PROCESS'
+        | 'EVENT_TRIGGERED_EXECUTION'
+        | 'BOOT_OR_LOGON_AUTOSTART_EXECUTION'
+        | 'KERNEL_MODULES_AND_EXTENSIONS'
+        | 'SHORTCUT_MODIFICATION'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING'
+        | 'UNSECURED_CREDENTIALS'
+        | 'CREDENTIALS_IN_FILES'
+        | 'BASH_HISTORY'
+        | 'PRIVATE_KEYS'
+        | 'SUBVERT_TRUST_CONTROL'
+        | 'INSTALL_ROOT_CERTIFICATE'
+        | 'COMPROMISE_HOST_SOFTWARE_BINARY'
+        | 'CREDENTIALS_FROM_PASSWORD_STORES'
+        | 'MODIFY_AUTHENTICATION_PROCESS'
+        | 'PLUGGABLE_AUTHENTICATION_MODULES'
+        | 'MULTI_FACTOR_AUTHENTICATION'
+        | 'IMPAIR_DEFENSES'
+        | 'DISABLE_OR_MODIFY_TOOLS'
+        | 'INDICATOR_BLOCKING'
+        | 'DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM'
+        | 'HIDE_ARTIFACTS'
+        | 'HIDDEN_FILES_AND_DIRECTORIES'
+        | 'HIDDEN_USERS'
+        | 'EXFILTRATION_OVER_WEB_SERVICE'
+        | 'EXFILTRATION_TO_CLOUD_STORAGE'
+        | 'DYNAMIC_RESOLUTION'
+        | 'LATERAL_TOOL_TRANSFER'
+        | 'HIJACK_EXECUTION_FLOW'
+        | 'HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING'
+        | 'MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE'
+        | 'CREATE_SNAPSHOT'
+        | 'CLOUD_INFRASTRUCTURE_DISCOVERY'
+        | 'DEVELOP_CAPABILITIES'
+        | 'DEVELOP_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES'
+        | 'OBTAIN_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES_VULNERABILITIES'
+        | 'ACTIVE_SCANNING'
+        | 'SCANNING_IP_BLOCKS'
+        | 'STAGE_CAPABILITIES'
+        | 'UPLOAD_MALWARE'
+        | 'CONTAINER_ADMINISTRATION_COMMAND'
+        | 'DEPLOY_CONTAINER'
+        | 'ESCAPE_TO_HOST'
+        | 'CONTAINER_AND_RESOURCE_DISCOVERY'
+        | 'REFLECTIVE_CODE_LOADING'
+        | 'STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES'
+        | 'FINANCIAL_THEFT'[];
       /** The MITRE ATT&CK tactic most closely represented by this finding, if any. */
-      primaryTactic?: string;
+      primaryTactic?:
+        | 'TACTIC_UNSPECIFIED'
+        | 'RECONNAISSANCE'
+        | 'RESOURCE_DEVELOPMENT'
+        | 'INITIAL_ACCESS'
+        | 'EXECUTION'
+        | 'PERSISTENCE'
+        | 'PRIVILEGE_ESCALATION'
+        | 'DEFENSE_EVASION'
+        | 'CREDENTIAL_ACCESS'
+        | 'DISCOVERY'
+        | 'LATERAL_MOVEMENT'
+        | 'COLLECTION'
+        | 'COMMAND_AND_CONTROL'
+        | 'EXFILTRATION'
+        | 'IMPACT';
       /** The MITRE ATT&CK technique most closely represented by this finding, if any. primary_techniques is a repeated field because there are multiple levels of MITRE ATT&CK techniques. If the technique most closely represented by this finding is a sub-technique (e.g. `SCANNING_IP_BLOCKS`), both the sub-technique and its parent technique(s) will be listed (e.g. `SCANNING_IP_BLOCKS`, `ACTIVE_SCANNING`). */
-      primaryTechniques?: string[];
+      primaryTechniques?:
+        | 'TECHNIQUE_UNSPECIFIED'
+        | 'DATA_OBFUSCATION'
+        | 'DATA_OBFUSCATION_STEGANOGRAPHY'
+        | 'OS_CREDENTIAL_DUMPING'
+        | 'OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM'
+        | 'OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW'
+        | 'DATA_FROM_LOCAL_SYSTEM'
+        | 'AUTOMATED_EXFILTRATION'
+        | 'OBFUSCATED_FILES_OR_INFO'
+        | 'STEGANOGRAPHY'
+        | 'COMPILE_AFTER_DELIVERY'
+        | 'COMMAND_OBFUSCATION'
+        | 'SCHEDULED_TRANSFER'
+        | 'SYSTEM_OWNER_USER_DISCOVERY'
+        | 'MASQUERADING'
+        | 'MATCH_LEGITIMATE_NAME_OR_LOCATION'
+        | 'BOOT_OR_LOGON_INITIALIZATION_SCRIPTS'
+        | 'STARTUP_ITEMS'
+        | 'NETWORK_SERVICE_DISCOVERY'
+        | 'SCHEDULED_TASK_JOB'
+        | 'SCHEDULED_TASK_JOB_CRON'
+        | 'CONTAINER_ORCHESTRATION_JOB'
+        | 'PROCESS_INJECTION'
+        | 'INPUT_CAPTURE'
+        | 'INPUT_CAPTURE_KEYLOGGING'
+        | 'PROCESS_DISCOVERY'
+        | 'COMMAND_AND_SCRIPTING_INTERPRETER'
+        | 'UNIX_SHELL'
+        | 'PYTHON'
+        | 'EXPLOITATION_FOR_PRIVILEGE_ESCALATION'
+        | 'PERMISSION_GROUPS_DISCOVERY'
+        | 'CLOUD_GROUPS'
+        | 'INDICATOR_REMOVAL'
+        | 'INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS'
+        | 'INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY'
+        | 'INDICATOR_REMOVAL_FILE_DELETION'
+        | 'INDICATOR_REMOVAL_TIMESTOMP'
+        | 'INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA'
+        | 'APPLICATION_LAYER_PROTOCOL'
+        | 'DNS'
+        | 'SOFTWARE_DEPLOYMENT_TOOLS'
+        | 'VALID_ACCOUNTS'
+        | 'DEFAULT_ACCOUNTS'
+        | 'LOCAL_ACCOUNTS'
+        | 'CLOUD_ACCOUNTS'
+        | 'FILE_AND_DIRECTORY_DISCOVERY'
+        | 'ACCOUNT_DISCOVERY_LOCAL_ACCOUNT'
+        | 'PROXY'
+        | 'EXTERNAL_PROXY'
+        | 'MULTI_HOP_PROXY'
+        | 'ACCOUNT_MANIPULATION'
+        | 'ADDITIONAL_CLOUD_CREDENTIALS'
+        | 'ADDITIONAL_CLOUD_ROLES'
+        | 'SSH_AUTHORIZED_KEYS'
+        | 'ADDITIONAL_CONTAINER_CLUSTER_ROLES'
+        | 'MULTI_STAGE_CHANNELS'
+        | 'INGRESS_TOOL_TRANSFER'
+        | 'NATIVE_API'
+        | 'BRUTE_FORCE'
+        | 'AUTOMATED_COLLECTION'
+        | 'SHARED_MODULES'
+        | 'DATA_ENCODING'
+        | 'STANDARD_ENCODING'
+        | 'ACCESS_TOKEN_MANIPULATION'
+        | 'TOKEN_IMPERSONATION_OR_THEFT'
+        | 'CREATE_ACCOUNT'
+        | 'LOCAL_ACCOUNT'
+        | 'DEOBFUSCATE_DECODE_FILES_OR_INFO'
+        | 'EXPLOIT_PUBLIC_FACING_APPLICATION'
+        | 'SUPPLY_CHAIN_COMPROMISE'
+        | 'COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS'
+        | 'EXPLOITATION_FOR_CLIENT_EXECUTION'
+        | 'USER_EXECUTION'
+        | 'EXPLOITATION_FOR_CREDENTIAL_ACCESS'
+        | 'LINUX_AND_MAC_FILE_AND_DIRECTORY_PERMISSIONS_MODIFICATION'
+        | 'DOMAIN_POLICY_MODIFICATION'
+        | 'DATA_DESTRUCTION'
+        | 'DATA_ENCRYPTED_FOR_IMPACT'
+        | 'SERVICE_STOP'
+        | 'INHIBIT_SYSTEM_RECOVERY'
+        | 'FIRMWARE_CORRUPTION'
+        | 'RESOURCE_HIJACKING'
+        | 'NETWORK_DENIAL_OF_SERVICE'
+        | 'CLOUD_SERVICE_DISCOVERY'
+        | 'STEAL_APPLICATION_ACCESS_TOKEN'
+        | 'ACCOUNT_ACCESS_REMOVAL'
+        | 'TRANSFER_DATA_TO_CLOUD_ACCOUNT'
+        | 'STEAL_WEB_SESSION_COOKIE'
+        | 'CREATE_OR_MODIFY_SYSTEM_PROCESS'
+        | 'EVENT_TRIGGERED_EXECUTION'
+        | 'BOOT_OR_LOGON_AUTOSTART_EXECUTION'
+        | 'KERNEL_MODULES_AND_EXTENSIONS'
+        | 'SHORTCUT_MODIFICATION'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SETUID_AND_SETGID'
+        | 'ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING'
+        | 'UNSECURED_CREDENTIALS'
+        | 'CREDENTIALS_IN_FILES'
+        | 'BASH_HISTORY'
+        | 'PRIVATE_KEYS'
+        | 'SUBVERT_TRUST_CONTROL'
+        | 'INSTALL_ROOT_CERTIFICATE'
+        | 'COMPROMISE_HOST_SOFTWARE_BINARY'
+        | 'CREDENTIALS_FROM_PASSWORD_STORES'
+        | 'MODIFY_AUTHENTICATION_PROCESS'
+        | 'PLUGGABLE_AUTHENTICATION_MODULES'
+        | 'MULTI_FACTOR_AUTHENTICATION'
+        | 'IMPAIR_DEFENSES'
+        | 'DISABLE_OR_MODIFY_TOOLS'
+        | 'INDICATOR_BLOCKING'
+        | 'DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM'
+        | 'HIDE_ARTIFACTS'
+        | 'HIDDEN_FILES_AND_DIRECTORIES'
+        | 'HIDDEN_USERS'
+        | 'EXFILTRATION_OVER_WEB_SERVICE'
+        | 'EXFILTRATION_TO_CLOUD_STORAGE'
+        | 'DYNAMIC_RESOLUTION'
+        | 'LATERAL_TOOL_TRANSFER'
+        | 'HIJACK_EXECUTION_FLOW'
+        | 'HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING'
+        | 'MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE'
+        | 'CREATE_SNAPSHOT'
+        | 'CLOUD_INFRASTRUCTURE_DISCOVERY'
+        | 'DEVELOP_CAPABILITIES'
+        | 'DEVELOP_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES'
+        | 'OBTAIN_CAPABILITIES_MALWARE'
+        | 'OBTAIN_CAPABILITIES_VULNERABILITIES'
+        | 'ACTIVE_SCANNING'
+        | 'SCANNING_IP_BLOCKS'
+        | 'STAGE_CAPABILITIES'
+        | 'UPLOAD_MALWARE'
+        | 'CONTAINER_ADMINISTRATION_COMMAND'
+        | 'DEPLOY_CONTAINER'
+        | 'ESCAPE_TO_HOST'
+        | 'CONTAINER_AND_RESOURCE_DISCOVERY'
+        | 'REFLECTIVE_CODE_LOADING'
+        | 'STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES'
+        | 'FINANCIAL_THEFT'[];
       /** The MITRE ATT&CK version referenced by the above fields. E.g. "8". */
       version?: string;
     }
@@ -2793,7 +3761,10 @@ declare namespace gapi.client {
       /** Signature indicating that a binary family was matched. */
       memoryHashSignature?: MemoryHashSignature;
       /** Describes the type of resource associated with the signature. */
-      signatureType?: string;
+      signatureType?:
+        | 'SIGNATURE_TYPE_UNSPECIFIED'
+        | 'SIGNATURE_TYPE_PROCESS'
+        | 'SIGNATURE_TYPE_FILE';
       /** Signature indicating that a YARA rule was matched. */
       yaraRuleSignature?: YaraRuleSignature;
     }
@@ -2803,7 +3774,11 @@ declare namespace gapi.client {
       /** The resource name of the RapidVulnerabilityDetectionSettings. Formats: * organizations/{organization}/rapidVulnerabilityDetectionSettings * folders/{folder}/rapidVulnerabilityDetectionSettings * projects/{project}/rapidVulnerabilityDetectionSettings */
       name?: string;
       /** The state of enablement for the service at its level of the resource hierarchy. A DISABLED state will override all module enablement_states to DISABLED. */
-      serviceEnablementState?: string;
+      serviceEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** Output only. The time the settings were last updated. */
       updateTime?: string;
     }
@@ -2833,11 +3808,21 @@ declare namespace gapi.client {
       /** The ID of the resource this node represents. */
       id?: string;
       /** The type of resource this node represents. */
-      nodeType?: string;
+      nodeType?:
+        | 'RESOURCE_PATH_NODE_TYPE_UNSPECIFIED'
+        | 'GCP_ORGANIZATION'
+        | 'GCP_FOLDER'
+        | 'GCP_PROJECT'
+        | 'AWS_ORGANIZATION'
+        | 'AWS_ORGANIZATIONAL_UNIT'
+        | 'AWS_ACCOUNT'
+        | 'AZURE_MANAGEMENT_GROUP'
+        | 'AZURE_SUBSCRIPTION'
+        | 'AZURE_RESOURCE_GROUP';
     }
     interface Role {
       /** Role type. */
-      kind?: string;
+      kind?: 'KIND_UNSPECIFIED' | 'ROLE' | 'CLUSTER_ROLE';
       /** Role name. */
       name?: string;
       /** Role namespace. */
@@ -2865,7 +3850,12 @@ declare namespace gapi.client {
       /** Time that the secret was found. */
       lastUpdatedTime?: string;
       /** The validity of the secret. */
-      validity?: string;
+      validity?:
+        | 'SECRET_VALIDITY_UNSPECIFIED'
+        | 'SECRET_VALIDITY_UNSUPPORTED'
+        | 'SECRET_VALIDITY_FAILED'
+        | 'SECRET_VALIDITY_INVALID'
+        | 'SECRET_VALIDITY_VALID';
     }
     interface SecurityBulletin {
       /** ID of the bulletin corresponding to the vulnerability. */
@@ -2895,7 +3885,11 @@ declare namespace gapi.client {
       /** Output only. The service account used by Security Health Analytics detectors. */
       serviceAccount?: string;
       /** The state of enablement for the service at its level of the resource hierarchy. A DISABLED state will override all module enablement_states to DISABLED. */
-      serviceEnablementState?: string;
+      serviceEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** Output only. The time the settings were last updated. */
       updateTime?: string;
     }
@@ -2935,7 +3929,12 @@ declare namespace gapi.client {
     }
     interface SensitivityScore {
       /** The sensitivity score applied to the resource. */
-      score?: string;
+      score?:
+        | 'SENSITIVITY_SCORE_LEVEL_UNSPECIFIED'
+        | 'SENSITIVITY_LOW'
+        | 'SENSITIVITY_UNKNOWN'
+        | 'SENSITIVITY_MODERATE'
+        | 'SENSITIVITY_HIGH';
     }
     interface ServiceAccountDelegationInfo {
       /** The email address of a Google account. */
@@ -2947,11 +3946,11 @@ declare namespace gapi.client {
       /** When the static mute was applied. */
       applyTime?: string;
       /** The static mute state. If the value is `MUTED` or `UNMUTED`, then the finding's overall mute state will have the same value. */
-      state?: string;
+      state?: 'MUTE_UNSPECIFIED' | 'MUTED' | 'UNMUTED' | 'UNDEFINED';
     }
     interface Subject {
       /** Authentication type for the subject. */
-      kind?: string;
+      kind?: 'AUTH_TYPE_UNSPECIFIED' | 'USER' | 'SERVICEACCOUNT' | 'GROUP';
       /** Name for the subject. */
       name?: string;
       /** Namespace for the subject. */
@@ -2963,7 +3962,12 @@ declare namespace gapi.client {
       /** The resource name of the subscription. Format: organizations/{organization}/subscription */
       name?: string;
       /** The tier of SCC features this organization currently has access to. */
-      tier?: string;
+      tier?:
+        | 'TIER_UNSPECIFIED'
+        | 'STANDARD'
+        | 'PREMIUM'
+        | 'ENTERPRISE'
+        | 'ENTERPRISE_MC';
     }
     interface TicketInfo {
       /** The assignee of the ticket in the ticket system. */
@@ -2999,7 +4003,11 @@ declare namespace gapi.client {
       /** Output only. The service account used by Virtual Machine Threat Detection detectors. */
       serviceAccount?: string;
       /** The state of enablement for the service at its level of the resource hierarchy. A DISABLED state will override all module enablement_states to DISABLED. */
-      serviceEnablementState?: string;
+      serviceEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** Output only. The time the settings were last updated. */
       updateTime?: string;
     }
@@ -3025,7 +4033,11 @@ declare namespace gapi.client {
     }
     interface VulnerabilitySnapshot {
       /** The cloud provider for the vulnerability snapshot. */
-      cloudProvider?: string;
+      cloudProvider?:
+        | 'CLOUD_PROVIDER_UNSPECIFIED'
+        | 'GOOGLE_CLOUD_PLATFORM'
+        | 'AMAZON_WEB_SERVICES'
+        | 'MICROSOFT_AZURE';
       /** The vulnerability count by severity. */
       findingCount?: VulnerabilityCountBySeverity;
       /** Identifier. The vulnerability snapshot name. Format: //locations//vulnerabilitySnapshots/ */
@@ -3039,7 +4051,11 @@ declare namespace gapi.client {
       /** Identifier. The resource name of the WebSecurityScannerSettings. Formats: * organizations/{organization}/webSecurityScannerSettings * folders/{folder}/webSecurityScannerSettings * projects/{project}/webSecurityScannerSettings */
       name?: string;
       /** The state of enablement for the service at its level of the resource hierarchy. A DISABLED state will override all module enablement_states to DISABLED. */
-      serviceEnablementState?: string;
+      serviceEnablementState?:
+        | 'ENABLEMENT_STATE_UNSPECIFIED'
+        | 'INHERITED'
+        | 'ENABLED'
+        | 'DISABLED';
       /** Output only. The time the settings were last updated. */
       updateTime?: string;
     }
@@ -3051,11 +4067,11 @@ declare namespace gapi.client {
       /** Calculates the effective ContainerThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3082,11 +4098,11 @@ declare namespace gapi.client {
       /** Calculates the effective EventThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3113,11 +4129,11 @@ declare namespace gapi.client {
       /** Calculates the effective RapidVulnerabilityDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3142,11 +4158,11 @@ declare namespace gapi.client {
       /** Calculates the effective SecurityHealthAnalyticsSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3173,11 +4189,11 @@ declare namespace gapi.client {
       /** Calculates the effective VirtualMachineThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3204,11 +4220,11 @@ declare namespace gapi.client {
       /** Calculates the effective WebSecurityScannerSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3235,11 +4251,11 @@ declare namespace gapi.client {
       /** Get the ContainerThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetContainerThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateContainerThreatDetectionSettings for this purpose. */
       getContainerThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3262,11 +4278,11 @@ declare namespace gapi.client {
       /** Get the EventThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetEventThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateEventThreatDetectionSettings for this purpose. */
       getEventThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3289,11 +4305,11 @@ declare namespace gapi.client {
       /** Get the RapidVulnerabilityDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetRapidVulnerabilityDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateRapidVulnerabilityDetectionSettings for this purpose. */
       getRapidVulnerabilityDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3316,11 +4332,11 @@ declare namespace gapi.client {
       /** Get the SecurityCenterSettings resource. */
       getSecurityCenterSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3343,11 +4359,11 @@ declare namespace gapi.client {
       /** Get the SecurityHealthAnalyticsSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetSecurityHealthAnalyticsSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateSecurityHealthAnalyticsSettings for this purpose. */
       getSecurityHealthAnalyticsSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3370,11 +4386,11 @@ declare namespace gapi.client {
       /** Get the VirtualMachineThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetVirtualMachineThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateVirtualMachineThreatDetectionSettings for this purpose. */
       getVirtualMachineThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3397,11 +4413,11 @@ declare namespace gapi.client {
       /** Get the WebSecurityScannerSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetWebSecurityScannerSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateWebSecurityScannerSettings for this purpose. */
       getWebSecurityScannerSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3424,11 +4440,11 @@ declare namespace gapi.client {
       /** Update the ContainerThreatDetectionSettings resource. */
       updateContainerThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3455,11 +4471,11 @@ declare namespace gapi.client {
       updateContainerThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3486,11 +4502,11 @@ declare namespace gapi.client {
       /** Update the EventThreatDetectionSettings resource. */
       updateEventThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3517,11 +4533,11 @@ declare namespace gapi.client {
       updateEventThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3548,11 +4564,11 @@ declare namespace gapi.client {
       /** Update the RapidVulnerabilityDetectionSettings resource. */
       updateRapidVulnerabilityDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3579,11 +4595,11 @@ declare namespace gapi.client {
       updateRapidVulnerabilityDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3610,11 +4626,11 @@ declare namespace gapi.client {
       /** Update the SecurityHealthAnalyticsSettings resource. */
       updateSecurityHealthAnalyticsSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3641,11 +4657,11 @@ declare namespace gapi.client {
       updateSecurityHealthAnalyticsSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3672,11 +4688,11 @@ declare namespace gapi.client {
       /** Update the VirtualMachineThreatDetectionSettings resource. */
       updateVirtualMachineThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3703,11 +4719,11 @@ declare namespace gapi.client {
       updateVirtualMachineThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3734,11 +4750,11 @@ declare namespace gapi.client {
       /** Update the WebSecurityScannerSettings resource. */
       updateWebSecurityScannerSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3765,11 +4781,11 @@ declare namespace gapi.client {
       updateWebSecurityScannerSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -3804,11 +4820,11 @@ declare namespace gapi.client {
       /** Calculates the effective ContainerThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3835,11 +4851,11 @@ declare namespace gapi.client {
       /** Calculates the effective EventThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3866,11 +4882,11 @@ declare namespace gapi.client {
       /** Calculates the effective RapidVulnerabilityDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3895,11 +4911,11 @@ declare namespace gapi.client {
       /** Calculates the effective SecurityHealthAnalyticsSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3926,11 +4942,11 @@ declare namespace gapi.client {
       /** Calculates the effective VirtualMachineThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3957,11 +4973,11 @@ declare namespace gapi.client {
       /** Calculates the effective WebSecurityScannerSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -3988,11 +5004,11 @@ declare namespace gapi.client {
       /** Get the ContainerThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetContainerThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateContainerThreatDetectionSettings for this purpose. */
       getContainerThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4015,11 +5031,11 @@ declare namespace gapi.client {
       /** Get the EventThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetEventThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateEventThreatDetectionSettings for this purpose. */
       getEventThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4042,11 +5058,11 @@ declare namespace gapi.client {
       /** Get the RapidVulnerabilityDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetRapidVulnerabilityDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateRapidVulnerabilityDetectionSettings for this purpose. */
       getRapidVulnerabilityDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4069,11 +5085,11 @@ declare namespace gapi.client {
       /** Get the SecurityCenterSettings resource. */
       getSecurityCenterSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4096,11 +5112,11 @@ declare namespace gapi.client {
       /** Get the SecurityHealthAnalyticsSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetSecurityHealthAnalyticsSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateSecurityHealthAnalyticsSettings for this purpose. */
       getSecurityHealthAnalyticsSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4123,11 +5139,11 @@ declare namespace gapi.client {
       /** Get the Subscription resource. */
       getSubscription(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4150,11 +5166,11 @@ declare namespace gapi.client {
       /** Get the VirtualMachineThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetVirtualMachineThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateVirtualMachineThreatDetectionSettings for this purpose. */
       getVirtualMachineThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4177,11 +5193,11 @@ declare namespace gapi.client {
       /** Get the WebSecurityScannerSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetWebSecurityScannerSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateWebSecurityScannerSettings for this purpose. */
       getWebSecurityScannerSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4204,11 +5220,11 @@ declare namespace gapi.client {
       /** Update the ContainerThreatDetectionSettings resource. */
       updateContainerThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4235,11 +5251,11 @@ declare namespace gapi.client {
       updateContainerThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4266,11 +5282,11 @@ declare namespace gapi.client {
       /** Update the EventThreatDetectionSettings resource. */
       updateEventThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4297,11 +5313,11 @@ declare namespace gapi.client {
       updateEventThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4328,11 +5344,11 @@ declare namespace gapi.client {
       /** Update the RapidVulnerabilityDetectionSettings resource. */
       updateRapidVulnerabilityDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4359,11 +5375,11 @@ declare namespace gapi.client {
       updateRapidVulnerabilityDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4390,11 +5406,11 @@ declare namespace gapi.client {
       /** Update the SecurityHealthAnalyticsSettings resource. */
       updateSecurityHealthAnalyticsSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4421,11 +5437,11 @@ declare namespace gapi.client {
       updateSecurityHealthAnalyticsSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4452,11 +5468,11 @@ declare namespace gapi.client {
       /** Update the VirtualMachineThreatDetectionSettings resource. */
       updateVirtualMachineThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4483,11 +5499,11 @@ declare namespace gapi.client {
       updateVirtualMachineThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4514,11 +5530,11 @@ declare namespace gapi.client {
       /** Update the WebSecurityScannerSettings resource. */
       updateWebSecurityScannerSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4545,11 +5561,11 @@ declare namespace gapi.client {
       updateWebSecurityScannerSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4584,11 +5600,11 @@ declare namespace gapi.client {
       /** Calculates the effective ContainerThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4615,11 +5631,11 @@ declare namespace gapi.client {
       /** Calculates the effective EventThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4646,11 +5662,11 @@ declare namespace gapi.client {
       /** Calculates the effective ContainerThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4677,11 +5693,11 @@ declare namespace gapi.client {
       /** Get the ContainerThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetContainerThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateContainerThreatDetectionSettings for this purpose. */
       getContainerThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4704,11 +5720,11 @@ declare namespace gapi.client {
       /** Update the ContainerThreatDetectionSettings resource. */
       updateContainerThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4735,11 +5751,11 @@ declare namespace gapi.client {
       updateContainerThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -4772,11 +5788,11 @@ declare namespace gapi.client {
       /** Calculates the effective RapidVulnerabilityDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4801,11 +5817,11 @@ declare namespace gapi.client {
       /** Calculates the effective SecurityHealthAnalyticsSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4832,11 +5848,11 @@ declare namespace gapi.client {
       /** Calculates the effective VirtualMachineThreatDetectionSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4863,11 +5879,11 @@ declare namespace gapi.client {
       /** Calculates the effective WebSecurityScannerSettings based on its level in the resource hierarchy and its settings. Settings provided closer to the target resource take precedence over those further away (e.g. folder will override organization level settings). The default SCC setting for the detector service defaults can be overridden at organization, folder and project levels. No assumptions should be made about the SCC defaults as it is considered an internal implementation detail. */
       calculate(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4894,11 +5910,11 @@ declare namespace gapi.client {
       /** Get the ContainerThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetContainerThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateContainerThreatDetectionSettings for this purpose. */
       getContainerThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4921,11 +5937,11 @@ declare namespace gapi.client {
       /** Get the EventThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetEventThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateEventThreatDetectionSettings for this purpose. */
       getEventThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4948,11 +5964,11 @@ declare namespace gapi.client {
       /** Get the RapidVulnerabilityDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetRapidVulnerabilityDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateRapidVulnerabilityDetectionSettings for this purpose. */
       getRapidVulnerabilityDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -4975,11 +5991,11 @@ declare namespace gapi.client {
       /** Get the SecurityCenterSettings resource. */
       getSecurityCenterSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5002,11 +6018,11 @@ declare namespace gapi.client {
       /** Get the SecurityHealthAnalyticsSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetSecurityHealthAnalyticsSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateSecurityHealthAnalyticsSettings for this purpose. */
       getSecurityHealthAnalyticsSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5029,11 +6045,11 @@ declare namespace gapi.client {
       /** Get the VirtualMachineThreatDetectionSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetVirtualMachineThreatDetectionSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateVirtualMachineThreatDetectionSettings for this purpose. */
       getVirtualMachineThreatDetectionSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5056,11 +6072,11 @@ declare namespace gapi.client {
       /** Get the WebSecurityScannerSettings resource. In the returned settings response, a missing field only indicates that it was not explicitly set, so no assumption should be made about these fields. In other words, GetWebSecurityScannerSettings does not calculate the effective service settings for the resource, which accounts for inherited settings and defaults. Instead, use CalculateWebSecurityScannerSettings for this purpose. */
       getWebSecurityScannerSettings(request?: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5083,11 +6099,11 @@ declare namespace gapi.client {
       /** Update the ContainerThreatDetectionSettings resource. */
       updateContainerThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5114,11 +6130,11 @@ declare namespace gapi.client {
       updateContainerThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -5145,11 +6161,11 @@ declare namespace gapi.client {
       /** Update the EventThreatDetectionSettings resource. */
       updateEventThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5176,11 +6192,11 @@ declare namespace gapi.client {
       updateEventThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -5207,11 +6223,11 @@ declare namespace gapi.client {
       /** Update the RapidVulnerabilityDetectionSettings resource. */
       updateRapidVulnerabilityDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5238,11 +6254,11 @@ declare namespace gapi.client {
       updateRapidVulnerabilityDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -5269,11 +6285,11 @@ declare namespace gapi.client {
       /** Update the SecurityHealthAnalyticsSettings resource. */
       updateSecurityHealthAnalyticsSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5300,11 +6316,11 @@ declare namespace gapi.client {
       updateSecurityHealthAnalyticsSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -5331,11 +6347,11 @@ declare namespace gapi.client {
       /** Update the VirtualMachineThreatDetectionSettings resource. */
       updateVirtualMachineThreatDetectionSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5362,11 +6378,11 @@ declare namespace gapi.client {
       updateVirtualMachineThreatDetectionSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */
@@ -5393,11 +6409,11 @@ declare namespace gapi.client {
       /** Update the WebSecurityScannerSettings resource. */
       updateWebSecurityScannerSettings(request: {
         /** V1 error format. */
-        '$.xgafv'?: string;
+        '$.xgafv'?: '1' | '2';
         /** OAuth access token. */
         access_token?: string;
         /** Data format for response. */
-        alt?: string;
+        alt?: 'json' | 'media' | 'proto';
         /** JSONP */
         callback?: string;
         /** Selector specifying which fields to include in a partial response. */
@@ -5424,11 +6440,11 @@ declare namespace gapi.client {
       updateWebSecurityScannerSettings(
         request: {
           /** V1 error format. */
-          '$.xgafv'?: string;
+          '$.xgafv'?: '1' | '2';
           /** OAuth access token. */
           access_token?: string;
           /** Data format for response. */
-          alt?: string;
+          alt?: 'json' | 'media' | 'proto';
           /** JSONP */
           callback?: string;
           /** Selector specifying which fields to include in a partial response. */