google-api-python-client 2.124.0__py2.py3-none-any.whl → 2.126.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json

@@ -1906,7 +1906,7 @@
 }
 }
 },
-"revision": "20240325",
+"revision": "20240415",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -1998,6 +1998,18 @@
 },
 "type": "object"
 },
+"AdaptiveProtection": {
+"description": "Information about [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/cloud-armor-overview#google-cloud-armor-adaptive-protection).",
+"id": "AdaptiveProtection",
+"properties": {
+"confidence": {
+"description": "A score of 0 means that there is low confidence that the detected event is an actual attack. A score of 1 means that there is high confidence that the detected event is an attack. See the [Adaptive Protection documentation](https://cloud.google.com/armor/docs/adaptive-protection-overview#configure-alert-tuning) for further explanation.",
+"format": "double",
+"type": "number"
+}
+},
+"type": "object"
+},
 "Application": {
 "description": "Represents an application associated with a finding.",
 "id": "Application",
@@ -2013,6 +2025,27 @@
 },
 "type": "object"
 },
+"Attack": {
+"description": "Information about DDoS attack volume and classification.",
+"id": "Attack",
+"properties": {
+"classification": {
+"description": "Type of attack, for example, \u2018SYN-flood\u2019, \u2018NTP-udp\u2019, or \u2018CHARGEN-udp\u2019.",
+"type": "string"
+},
+"volumeBps": {
+"description": "Total BPS (bytes per second) volume of attack.",
+"format": "int32",
+"type": "integer"
+},
+"volumePps": {
+"description": "Total PPS (packets per second) volume of attack.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "AttackExposure": {
 "description": "An attack exposure contains the results of an attack path simulation run.",
 "id": "AttackExposure",
@@ -2063,6 +2096,69 @@
 },
 "type": "object"
 },
+"AwsAccount": {
+"description": "An AWS account that is a member of an organization.",
+"id": "AwsAccount",
+"properties": {
+"id": {
+"description": "The unique identifier (ID) of the account, containing exactly 12 digits.",
+"type": "string"
+},
+"name": {
+"description": "The friendly name of this account.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"AwsMetadata": {
+"description": "AWS metadata associated with the resource, only applicable if the finding's cloud provider is Amazon Web Services.",
+"id": "AwsMetadata",
+"properties": {
+"account": {
+"$ref": "AwsAccount",
+"description": "The AWS account associated with the resource."
+},
+"organization": {
+"$ref": "AwsOrganization",
+"description": "The AWS organization associated with the resource."
+},
+"organizationalUnits": {
+"description": "A list of AWS organizational units associated with the resource, ordered from lowest level (closest to the account) to highest level.",
+"items": {
+"$ref": "AwsOrganizationalUnit"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"AwsOrganization": {
+"description": "An organization is a collection of accounts that are centrally managed together using consolidated billing, organized hierarchically with organizational units (OUs), and controlled with policies.",
+"id": "AwsOrganization",
+"properties": {
+"id": {
+"description": "The unique identifier (ID) for the organization. The regex pattern for an organization ID string requires \"o-\" followed by from 10 to 32 lowercase letters or digits.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"AwsOrganizationalUnit": {
+"description": "An Organizational Unit (OU) is a container of AWS accounts within a root of an organization. Policies that are attached to an OU apply to all accounts contained in that OU and in any child OUs.",
+"id": "AwsOrganizationalUnit",
+"properties": {
+"id": {
+"description": "The unique identifier (ID) associated with this OU. The regex pattern for an organizational unit ID string requires \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that contains the OU). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits. For example, \"ou-ab12-cd34ef56\".",
+"type": "string"
+},
+"name": {
+"description": "The friendly name of the OU.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "BackupDisasterRecovery": {
 "description": "Information related to Google Cloud Backup and DR Service findings.",
 "id": "BackupDisasterRecovery",
@@ -2120,6 +2216,38 @@
 },
 "type": "object"
 },
+"CloudArmor": {
+"description": "Fields related to Google Cloud Armor findings.",
+"id": "CloudArmor",
+"properties": {
+"adaptiveProtection": {
+"$ref": "AdaptiveProtection",
+"description": "Information about potential Layer 7 DDoS attacks identified by [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/adaptive-protection-overview)."
+},
+"attack": {
+"$ref": "Attack",
+"description": "Information about DDoS attack volume and classification."
+},
+"duration": {
+"description": "Duration of attack from the start until the current moment (updated every 5 minutes).",
+"format": "google-duration",
+"type": "string"
+},
+"requests": {
+"$ref": "Requests",
+"description": "Information about incoming requests evaluated by [Google Cloud Armor security policies](https://cloud.google.com/armor/docs/security-policy-overview)."
+},
+"securityPolicy": {
+"$ref": "SecurityPolicy",
+"description": "Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding."
+},
+"threatVector": {
+"description": "Distinguish between volumetric & protocol DDoS attack and application layer attacks. For example, \u201cL3_4\u201d for Layer 3 and Layer 4 DDoS attacks, or \u201cL_7\u201d for Layer 7 DDoS attacks.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "CloudDlpDataProfile": {
 "description": "The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.",
 "id": "CloudDlpDataProfile",
@@ -2223,6 +2351,22 @@
 "description": "The category of Findings matching.",
 "type": "string"
 },
+"cloudProvider": {
+"description": "The cloud provider for the compliance snapshot.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"The cloud provider is unspecified.",
+"The cloud provider is Google Cloud Platform.",
+"The cloud provider is Amazon Web Services.",
+"The cloud provider is Microsoft Azure."
+],
+"type": "string"
+},
 "complianceStandard": {
 "description": "The compliance standard (ie CIS).",
 "type": "string"
@@ -2244,10 +2388,6 @@
 "description": "The compliance snapshot name. Format: //sources//complianceSnapshots/",
 "type": "string"
 },
-"projectDisplayName": {
-"description": "The CRM resource display name that is closest to the snapshot the Findings belong to.",
-"type": "string"
-},
 "snapshotTime": {
 "description": "The snapshot time of the snapshot.",
 "format": "google-datetime",
@@ -2930,6 +3070,10 @@
 "description": "The additional taxonomy group within findings from a given source. This field is immutable after creation time. Example: \"XSS_FLASH_INJECTION\"",
 "type": "string"
 },
+"cloudArmor": {
+"$ref": "CloudArmor",
+"description": "Fields related to Cloud Armor findings."
+},
 "cloudDlpDataProfile": {
 "$ref": "CloudDlpDataProfile",
 "description": "Cloud DLP data profile that is associated with the finding."
@@ -3105,6 +3249,10 @@
 "description": "Steps to address the finding.",
 "type": "string"
 },
+"notebook": {
+"$ref": "Notebook",
+"description": "Notebook associated with the finding."
+},
 "orgPolicies": {
 "description": "Contains information about the org policies associated with the finding.",
 "items": {
@@ -3202,6 +3350,41 @@
 },
 "type": "object"
 },
+"GcpMetadata": {
+"description": "GCP metadata associated with the resource, only applicable if the finding's cloud provider is Google Cloud Platform.",
+"id": "GcpMetadata",
+"properties": {
+"folders": {
+"description": "Output only. Contains a Folder message for each folder in the assets ancestry. The first folder is the deepest nested folder, and the last folder is the folder directly under the Organization.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2Folder"
+},
+"readOnly": true,
+"type": "array"
+},
+"organization": {
+"description": "The name of the organization that the resource belongs to.",
+"type": "string"
+},
+"parent": {
+"description": "The full resource name of resource's parent.",
+"type": "string"
+},
+"parentDisplayName": {
+"description": "The human readable name of resource's parent.",
+"type": "string"
+},
+"project": {
+"description": "The full resource name of project that the resource belongs to.",
+"type": "string"
+},
+"projectDisplayName": {
+"description": "The project ID that the resource belongs to.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Geolocation": {
 "description": "Represents a geographical location for a given access.",
 "id": "Geolocation",
@@ -3523,6 +3706,26 @@
 "description": "Information related to the Google Cloud resource.",
 "id": "GoogleCloudSecuritycenterV1Resource",
 "properties": {
+"awsMetadata": {
+"$ref": "AwsMetadata",
+"description": "The AWS metadata associated with the finding."
+},
+"cloudProvider": {
+"description": "Indicates which cloud provider the resource resides in.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"The cloud provider is unspecified.",
+"The cloud provider is Google Cloud Platform.",
+"The cloud provider is Amazon Web Services.",
+"The cloud provider is Microsoft Azure."
+],
+"type": "string"
+},
 "displayName": {
 "description": "The human readable name of the resource.",
 "type": "string"
@@ -3535,10 +3738,18 @@
 "readOnly": true,
 "type": "array"
 },
+"location": {
+"description": "The region or location of the service (if applicable).",
+"type": "string"
+},
 "name": {
 "description": "The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name",
 "type": "string"
 },
+"organization": {
+"description": "Indicates which organization or tenant in the cloud provider the finding applies to.",
+"type": "string"
+},
 "parent": {
 "description": "The full resource name of resource's parent.",
 "type": "string"
@@ -3555,6 +3766,18 @@
 "description": "The project ID that the resource belongs to.",
 "type": "string"
 },
+"resourcePath": {
+"$ref": "ResourcePath",
+"description": "Provides the path to the resource within the resource hierarchy."
+},
+"resourcePathString": {
+"description": "A string representation of the resource path. For GCP, it has the format of: organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id} where there can be any number of folders. For AWS, it has the format of: org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id} where there can be any number of organizational units. For Azure, it has the format of: mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name} where there can be any number of management groups.",
+"type": "string"
+},
+"service": {
+"description": "The parent service or product from which the resource is provided, for example, GKE or SNS.",
+"type": "string"
+},
 "type": {
 "description": "The full resource type of the resource.",
 "type": "string"
@@ -3580,6 +3803,22 @@
 "description": "A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.",
 "id": "GoogleCloudSecuritycenterV1ResourceValueConfig",
 "properties": {
+"cloudProvider": {
+"description": "Cloud provider this configuration applies to",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"The cloud provider is unspecified.",
+"The cloud provider is Google Cloud Platform.",
+"The cloud provider is Amazon Web Services.",
+"The cloud provider is Microsoft Azure."
+],
+"type": "string"
+},
 "createTime": {
 "description": "Output only. Timestamp this resource value config was created.",
 "format": "google-datetime",
@@ -4090,6 +4329,18 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2AdaptiveProtection": {
+"description": "Information about [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/cloud-armor-overview#google-cloud-armor-adaptive-protection).",
+"id": "GoogleCloudSecuritycenterV2AdaptiveProtection",
+"properties": {
+"confidence": {
+"description": "A score of 0 means that there is low confidence that the detected event is an actual attack. A score of 1 means that there is high confidence that the detected event is an attack. See the [Adaptive Protection documentation](https://cloud.google.com/armor/docs/adaptive-protection-overview#configure-alert-tuning) for further explanation.",
+"format": "double",
+"type": "number"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Application": {
 "description": "Represents an application associated with a finding.",
 "id": "GoogleCloudSecuritycenterV2Application",
@@ -4105,6 +4356,27 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Attack": {
+"description": "Information about DDoS attack volume and classification.",
+"id": "GoogleCloudSecuritycenterV2Attack",
+"properties": {
+"classification": {
+"description": "Type of attack, for example, \u2018SYN-flood\u2019, \u2018NTP-udp\u2019, or \u2018CHARGEN-udp\u2019.",
+"type": "string"
+},
+"volumeBps": {
+"description": "Total BPS (bytes per second) volume of attack.",
+"format": "int32",
+"type": "integer"
+},
+"volumePps": {
+"description": "Total PPS (packets per second) volume of attack.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2AttackExposure": {
 "description": "An attack exposure contains the results of an attack path simulation run.",
 "id": "GoogleCloudSecuritycenterV2AttackExposure",
@@ -4156,6 +4428,69 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2AwsAccount": {
+"description": "An AWS account that is a member of an organization.",
+"id": "GoogleCloudSecuritycenterV2AwsAccount",
+"properties": {
+"id": {
+"description": "The unique identifier (ID) of the account, containing exactly 12 digits.",
+"type": "string"
+},
+"name": {
+"description": "The friendly name of this account.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2AwsMetadata": {
+"description": "AWS metadata associated with the resource, only applicable if the finding's cloud provider is Amazon Web Services.",
+"id": "GoogleCloudSecuritycenterV2AwsMetadata",
+"properties": {
+"account": {
+"$ref": "GoogleCloudSecuritycenterV2AwsAccount",
+"description": "The AWS account associated with the resource."
+},
+"organization": {
+"$ref": "GoogleCloudSecuritycenterV2AwsOrganization",
+"description": "The AWS organization associated with the resource."
+},
+"organizationalUnits": {
+"description": "A list of AWS organizational units associated with the resource, ordered from lowest level (closest to the account) to highest level.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2AwsOrganizationalUnit"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2AwsOrganization": {
+"description": "An organization is a collection of accounts that are centrally managed together using consolidated billing, organized hierarchically with organizational units (OUs), and controlled with policies.",
+"id": "GoogleCloudSecuritycenterV2AwsOrganization",
+"properties": {
+"id": {
+"description": "The unique identifier (ID) for the organization. The regex pattern for an organization ID string requires \"o-\" followed by from 10 to 32 lowercase letters or digits.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2AwsOrganizationalUnit": {
+"description": "An Organizational Unit (OU) is a container of AWS accounts within a root of an organization. Policies that are attached to an OU apply to all accounts contained in that OU and in any child OUs.",
+"id": "GoogleCloudSecuritycenterV2AwsOrganizationalUnit",
+"properties": {
+"id": {
+"description": "The unique identifier (ID) associated with this OU. The regex pattern for an organizational unit ID string requires \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that contains the OU). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits. For example, \"ou-ab12-cd34ef56\".",
+"type": "string"
+},
+"name": {
+"description": "The friendly name of the OU.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2BackupDisasterRecovery": {
 "description": "Information related to Google Cloud Backup and DR Service findings.",
 "id": "GoogleCloudSecuritycenterV2BackupDisasterRecovery",
@@ -4290,6 +4625,38 @@
 "properties": {},
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2CloudArmor": {
+"description": "Fields related to Google Cloud Armor findings.",
+"id": "GoogleCloudSecuritycenterV2CloudArmor",
+"properties": {
+"adaptiveProtection": {
+"$ref": "GoogleCloudSecuritycenterV2AdaptiveProtection",
+"description": "Information about potential Layer 7 DDoS attacks identified by [Google Cloud Armor Adaptive Protection](https://cloud.google.com/armor/docs/adaptive-protection-overview)."
+},
+"attack": {
+"$ref": "GoogleCloudSecuritycenterV2Attack",
+"description": "Information about DDoS attack volume and classification."
+},
+"duration": {
+"description": "Duration of attack from the start until the current moment (updated every 5 minutes).",
+"format": "google-duration",
+"type": "string"
+},
+"requests": {
+"$ref": "GoogleCloudSecuritycenterV2Requests",
+"description": "Information about incoming requests evaluated by [Google Cloud Armor security policies](https://cloud.google.com/armor/docs/security-policy-overview)."
+},
+"securityPolicy": {
+"$ref": "GoogleCloudSecuritycenterV2SecurityPolicy",
+"description": "Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding."
+},
+"threatVector": {
+"description": "Distinguish between volumetric & protocol DDoS attack and application layer attacks. For example, \u201cL3_4\u201d for Layer 3 and Layer 4 DDoS attacks, or \u201cL_7\u201d for Layer 7 DDoS attacks.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2CloudDlpDataProfile": {
 "description": "The [data profile](https://cloud.google.com/dlp/docs/data-profiles) associated with the finding.",
 "id": "GoogleCloudSecuritycenterV2CloudDlpDataProfile",
@@ -4942,6 +5309,10 @@
 "description": "Immutable. The additional taxonomy group within findings from a given source. Example: \"XSS_FLASH_INJECTION\"",
 "type": "string"
 },
+"cloudArmor": {
+"$ref": "GoogleCloudSecuritycenterV2CloudArmor",
+"description": "Fields related to Cloud Armor findings."
+},
 "cloudDlpDataProfile": {
 "$ref": "GoogleCloudSecuritycenterV2CloudDlpDataProfile",
 "description": "Cloud DLP data profile that is associated with the finding."
@@ -5118,6 +5489,10 @@
 "description": "Steps to address the finding.",
 "type": "string"
 },
+"notebook": {
+"$ref": "GoogleCloudSecuritycenterV2Notebook",
+"description": "Notebook associated with the finding."
+},
 "orgPolicies": {
 "description": "Contains information about the org policies associated with the finding.",
 "items": {
@@ -5201,6 +5576,21 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Folder": {
+"description": "Message that contains the resource name and display name of a folder resource.",
+"id": "GoogleCloudSecuritycenterV2Folder",
+"properties": {
+"resourceFolder": {
+"description": "Full resource name of this folder. See: https://cloud.google.com/apis/design/resource_names#full_resource_name",
+"type": "string"
+},
+"resourceFolderDisplayName": {
+"description": "The user defined display name for this folder.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Geolocation": {
 "description": "Represents a geographical location for a given access.",
 "id": "GoogleCloudSecuritycenterV2Geolocation",
@@ -5488,6 +5878,7 @@
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
+"PYTHON",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
 "APPLICATION_LAYER_PROTOCOL",
@@ -5549,6 +5940,7 @@
 "T1057",
 "T1059",
 "T1059.004",
+"T1059.006",
 "T1069",
 "T1069.003",
 "T1071",
@@ -5655,6 +6047,7 @@
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
+"PYTHON",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
 "APPLICATION_LAYER_PROTOCOL",
@@ -5716,6 +6109,7 @@
 "T1057",
 "T1059",
 "T1059.004",
+"T1059.006",
 "T1069",
 "T1069.003",
 "T1071",
@@ -5855,6 +6249,30 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Notebook": {
+"description": "Represents a Jupyter notebook IPYNB file, such as a [Colab Enterprise notebook](https://cloud.google.com/colab/docs/introduction) file, that is associated with a finding.",
+"id": "GoogleCloudSecuritycenterV2Notebook",
+"properties": {
+"lastAuthor": {
+"description": "The user ID of the latest author to modify the notebook.",
+"type": "string"
+},
+"name": {
+"description": "The name of the notebook.",
+"type": "string"
+},
+"notebookUpdateTime": {
+"description": "The most recent time the notebook was updated.",
+"format": "google-datetime",
+"type": "string"
+},
+"service": {
+"description": "The source notebook service, for example, \"Colab Enterprise\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2NotificationMessage": {
 "description": "Cloud SCC's Notification",
 "id": "GoogleCloudSecuritycenterV2NotificationMessage",
@@ -6088,18 +6506,85 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Requests": {
+"description": "Information about the requests relevant to the finding.",
+"id": "GoogleCloudSecuritycenterV2Requests",
+"properties": {
+"longTermAllowed": {
+"description": "Allowed RPS (requests per second) over the long term.",
+"format": "int32",
+"type": "integer"
+},
+"longTermDenied": {
+"description": "Denied RPS (requests per second) over the long term.",
+"format": "int32",
+"type": "integer"
+},
+"ratio": {
+"description": "For 'Increasing deny ratio', the ratio is the denied traffic divided by the allowed traffic. For 'Allowed traffic spike', the ratio is the allowed traffic in the short term divided by allowed traffic in the long term.",
+"format": "double",
+"type": "number"
+},
+"shortTermAllowed": {
+"description": "Allowed RPS (requests per second) in the short term.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Resource": {
 "description": "Information related to the Google Cloud resource.",
 "id": "GoogleCloudSecuritycenterV2Resource",
 "properties": {
+"awsMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2AwsMetadata",
+"description": "The AWS metadata associated with the finding."
+},
+"cloudProvider": {
+"description": "Indicates which cloud provider the finding is from.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"The cloud provider is unspecified.",
+"The cloud provider is Google Cloud Platform.",
+"The cloud provider is Amazon Web Services.",
+"The cloud provider is Microsoft Azure."
+],
+"type": "string"
+},
 "displayName": {
 "description": "The human readable name of the resource.",
 "type": "string"
 },
+"gcpMetadata": {
+"$ref": "GcpMetadata",
+"description": "The GCP metadata associated with the finding."
+},
+"location": {
+"description": "The region or location of the service (if applicable).",
+"type": "string"
+},
 "name": {
 "description": "The full resource name of the resource. See: https://cloud.google.com/apis/design/resource_names#full_resource_name",
 "type": "string"
 },
+"resourcePath": {
+"$ref": "GoogleCloudSecuritycenterV2ResourcePath",
+"description": "Provides the path to the resource within the resource hierarchy."
+},
+"resourcePathString": {
+"description": "A string representation of the resource path. For GCP, it has the format of: organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id} where there can be any number of folders. For AWS, it has the format of: org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id} where there can be any number of organizational units. For Azure, it has the format of: mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name} where there can be any number of management groups.",
+"type": "string"
+},
+"service": {
+"description": "The service or resource provider associated with the resource.",
+"type": "string"
+},
 "type": {
 "description": "The full resource type of the resource.",
 "type": "string"
@@ -6107,10 +6592,83 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2ResourcePath": {
+"description": "Represents the path of resources leading up to the resource this finding is about.",
+"id": "GoogleCloudSecuritycenterV2ResourcePath",
+"properties": {
+"nodes": {
+"description": "The list of nodes that make the up resource path, ordered from lowest level to highest level.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2ResourcePathNode"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2ResourcePathNode": {
+"description": "A node within the resource path. Each node represents a resource within the resource hierarchy.",
+"id": "GoogleCloudSecuritycenterV2ResourcePathNode",
+"properties": {
+"displayName": {
+"description": "The display name of the resource this node represents.",
+"type": "string"
+},
+"id": {
+"description": "The ID of the resource this node represents.",
+"type": "string"
+},
+"nodeType": {
+"description": "The type of resource this node represents.",
+"enum": [
+"RESOURCE_PATH_NODE_TYPE_UNSPECIFIED",
+"GCP_ORGANIZATION",
+"GCP_FOLDER",
+"GCP_PROJECT",
+"AWS_ORGANIZATION",
+"AWS_ORGANIZATIONAL_UNIT",
+"AWS_ACCOUNT",
+"AZURE_MANAGEMENT_GROUP",
+"AZURE_SUBSCRIPTION",
+"AZURE_RESOURCE_GROUP"
+],
+"enumDescriptions": [
+"Node type is unspecified.",
+"The node represents a GCP organization.",
+"The node represents a GCP folder.",
+"The node represents a GCP project.",
+"The node represents an AWS organization.",
+"The node represents an AWS organizational unit.",
+"The node represents an AWS account.",
+"The node represents an Azure management group.",
+"The node represents an Azure subscription.",
+"The node represents an Azure resource group."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2ResourceValueConfig": {
 "description": "A resource value config (RVC) is a mapping configuration of user's resources to resource values. Used in Attack path simulations.",
 "id": "GoogleCloudSecuritycenterV2ResourceValueConfig",
 "properties": {
+"cloudProvider": {
+"description": "Cloud provider this configuration applies to",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"The cloud provider is unspecified.",
+"The cloud provider is Google Cloud Platform.",
+"The cloud provider is Amazon Web Services.",
+"The cloud provider is Microsoft Azure."
+],
+"type": "string"
+},
 "createTime": {
 "description": "Output only. Timestamp this resource value config was created.",
 "format": "google-datetime",
@@ -6232,7 +6790,7 @@
 "id": "GoogleCloudSecuritycenterV2SecurityMarks",
 "properties": {
 "canonicalName": {
-"description": "The canonical name of the marks. The following list shows some examples: + `organizations/{organization_id}/assets/{asset_id}/securityMarks\" + `organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks\" + `organizations/{organization_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks\" + `folders/{folder_id}/assets/{asset_id}/securityMarks\" + `folders/{folder_id}/sources/{source_id}/findings/{finding_id}/securityMarks\" + `folders/{folder_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks\" + `projects/{project_number}/assets/{asset_id}/securityMarks\" + `projects/{project_number}/sources/{source_id}/findings/{finding_id}/securityMarks\" + `projects/{project_number}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks\"",
+"description": "The canonical name of the marks. The following list shows some examples: + `organizations/{organization_id}/assets/{asset_id}/securityMarks` + `organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks` + `organizations/{organization_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks` + `folders/{folder_id}/assets/{asset_id}/securityMarks` + `folders/{folder_id}/sources/{source_id}/findings/{finding_id}/securityMarks` + `folders/{folder_id}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks` + `projects/{project_number}/assets/{asset_id}/securityMarks` + `projects/{project_number}/sources/{source_id}/findings/{finding_id}/securityMarks` + `projects/{project_number}/sources/{source_id}/locations/{location}/findings/{finding_id}/securityMarks`",
 "type": "string"
 },
 "marks": {
@@ -6249,6 +6807,25 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2SecurityPolicy": {
+"description": "Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding.",
+"id": "GoogleCloudSecuritycenterV2SecurityPolicy",
+"properties": {
+"name": {
+"description": "The name of the Google Cloud Armor security policy, for example, \"my-security-policy\".",
+"type": "string"
+},
+"preview": {
+"description": "Whether or not the associated rule or policy is in preview mode.",
+"type": "boolean"
+},
+"type": {
+"description": "The type of Google Cloud Armor security policy for example, \u2018backend security policy\u2019, \u2018edge security policy\u2019, \u2018network edge security policy\u2019, or \u2018always-on DDoS protection\u2019.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2SecurityPosture": {
 "description": "Represents a posture that is deployed on Google Cloud by the Security Command Center Posture Management service. A posture contains one or more policy sets. A policy set is a group of policies that enforce a set of security rules on Google Cloud.",
 "id": "GoogleCloudSecuritycenterV2SecurityPosture",
@@ -6722,6 +7299,7 @@
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
+"PYTHON",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
 "APPLICATION_LAYER_PROTOCOL",
@@ -6783,6 +7361,7 @@
 "T1057",
 "T1059",
 "T1059.004",
+"T1059.006",
 "T1069",
 "T1069.003",
 "T1071",
@@ -6889,6 +7468,7 @@
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
+"PYTHON",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
 "APPLICATION_LAYER_PROTOCOL",
@@ -6950,6 +7530,7 @@
 "T1057",
 "T1059",
 "T1059.004",
+"T1059.006",
 "T1069",
 "T1069.003",
 "T1071",
@@ -7041,6 +7622,30 @@
 },
 "type": "object"
 },
+"Notebook": {
+"description": "Represents a Jupyter notebook IPYNB file, such as a [Colab Enterprise notebook](https://cloud.google.com/colab/docs/introduction) file, that is associated with a finding.",
+"id": "Notebook",
+"properties": {
+"lastAuthor": {
+"description": "The user ID of the latest author to modify the notebook.",
+"type": "string"
+},
+"name": {
+"description": "The name of the notebook.",
+"type": "string"
+},
+"notebookUpdateTime": {
+"description": "The most recent time the notebook was updated.",
+"format": "google-datetime",
+"type": "string"
+},
+"service": {
+"description": "The source notebook service, for example, \"Colab Enterprise\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Object": {
 "description": "Kubernetes object related to the finding, uniquely identified by GKNN. Used if the object Kind is not one of Pod, Node, NodePool, Binding, or AccessReview.",
 "id": "Object",
@@ -7295,6 +7900,90 @@
 },
 "type": "object"
 },
+"Requests": {
+"description": "Information about the requests relevant to the finding.",
+"id": "Requests",
+"properties": {
+"longTermAllowed": {
+"description": "Allowed RPS (requests per second) over the long term.",
+"format": "int32",
+"type": "integer"
+},
+"longTermDenied": {
+"description": "Denied RPS (requests per second) over the long term.",
+"format": "int32",
+"type": "integer"
+},
+"ratio": {
+"description": "For 'Increasing deny ratio', the ratio is the denied traffic divided by the allowed traffic. For 'Allowed traffic spike', the ratio is the allowed traffic in the short term divided by allowed traffic in the long term.",
+"format": "double",
+"type": "number"
+},
+"shortTermAllowed": {
+"description": "Allowed RPS (requests per second) in the short term.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
+"ResourcePath": {
+"description": "Represents the path of resources leading up to the resource this finding is about.",
+"id": "ResourcePath",
+"properties": {
+"nodes": {
+"description": "The list of nodes that make the up resource path, ordered from lowest level to highest level.",
+"items": {
+"$ref": "ResourcePathNode"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"ResourcePathNode": {
+"description": "A node within the resource path. Each node represents a resource within the resource hierarchy.",
+"id": "ResourcePathNode",
+"properties": {
+"displayName": {
+"description": "The display name of the resource this node represents.",
+"type": "string"
+},
+"id": {
+"description": "The ID of the resource this node represents.",
+"type": "string"
+},
+"nodeType": {
+"description": "The type of resource this node represents.",
+"enum": [
+"RESOURCE_PATH_NODE_TYPE_UNSPECIFIED",
+"GCP_ORGANIZATION",
+"GCP_FOLDER",
+"GCP_PROJECT",
+"AWS_ORGANIZATION",
+"AWS_ORGANIZATIONAL_UNIT",
+"AWS_ACCOUNT",
+"AZURE_MANAGEMENT_GROUP",
+"AZURE_SUBSCRIPTION",
+"AZURE_RESOURCE_GROUP"
+],
+"enumDescriptions": [
+"Node type is unspecified.",
+"The node represents a GCP organization.",
+"The node represents a GCP folder.",
+"The node represents a GCP project.",
+"The node represents an AWS organization.",
+"The node represents an AWS organizational unit.",
+"The node represents an AWS account.",
+"The node represents an Azure management group.",
+"The node represents an Azure subscription.",
+"The node represents an Azure resource group."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Role": {
 "description": "Kubernetes Role or ClusterRole.",
 "id": "Role",
@@ -7437,6 +8126,25 @@
 },
 "type": "object"
 },
+"SecurityPolicy": {
+"description": "Information about the [Google Cloud Armor security policy](https://cloud.google.com/armor/docs/security-policy-overview) relevant to the finding.",
+"id": "SecurityPolicy",
+"properties": {
+"name": {
+"description": "The name of the Google Cloud Armor security policy, for example, \"my-security-policy\".",
+"type": "string"
+},
+"preview": {
+"description": "Whether or not the associated rule or policy is in preview mode.",
+"type": "boolean"
+},
+"type": {
+"description": "The type of Google Cloud Armor security policy for example, \u2018backend security policy\u2019, \u2018edge security policy\u2019, \u2018network edge security policy\u2019, or \u2018always-on DDoS protection\u2019.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "SecurityPosture": {
 "description": "Represents a posture that is deployed on Google Cloud by the Security Command Center Posture Management service. A posture contains one or more policy sets. A policy set is a group of policies that enforce a set of security rules on Google Cloud.",
 "id": "SecurityPosture",
@@ -7658,6 +8366,57 @@
 },
 "type": "object"
 },
+"VulnerabilityCountBySeverity": {
+"description": "Vulnerability count by severity.",
+"id": "VulnerabilityCountBySeverity",
+"properties": {
+"severityToFindingCount": {
+"additionalProperties": {
+"format": "int64",
+"type": "string"
+},
+"description": "Key is the Severity enum.",
+"type": "object"
+}
+},
+"type": "object"
+},
+"VulnerabilitySnapshot": {
+"description": "Result containing the properties and count of a VulnerabilitySnapshot request.",
+"id": "VulnerabilitySnapshot",
+"properties": {
+"cloudProvider": {
+"description": "The cloud provider for the vulnerability snapshot.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"The cloud provider is unspecified.",
+"The cloud provider is Google Cloud Platform.",
+"The cloud provider is Amazon Web Services.",
+"The cloud provider is Microsoft Azure."
+],
+"type": "string"
+},
+"findingCount": {
+"$ref": "VulnerabilityCountBySeverity",
+"description": "The vulnerability count by severity."
+},
+"name": {
+"description": "Identifier. The vulnerability snapshot name. Format: //locations//vulnerabilitySnapshots/",
+"type": "string"
+},
+"snapshotTime": {
+"description": "The time that the snapshot was taken.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
 "WebSecurityScannerSettings": {
 "description": "Resource capturing the settings for the Web Security Scanner service.",
 "id": "WebSecurityScannerSettings",