google-api-python-client 2.134.0__py2.py3-none-any.whl → 2.136.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta1.json

@@ -896,7 +896,7 @@
 }
 }
 },
-"revision": "20240531",
+"revision": "20240628",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -1105,7 +1105,7 @@
 "id": "AttackExposure",
 "properties": {
 "attackExposureResult": {
-"description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789",
+"description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`",
 "type": "string"
 },
 "exposedHighValueResourcesCount": {
@@ -1261,6 +1261,69 @@
 },
 "type": "object"
 },
+"AzureManagementGroup": {
+"description": "Represents an Azure management group.",
+"id": "AzureManagementGroup",
+"properties": {
+"displayName": {
+"description": "The display name of the Azure management group.",
+"type": "string"
+},
+"id": {
+"description": "The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"AzureMetadata": {
+"description": "Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.",
+"id": "AzureMetadata",
+"properties": {
+"managementGroups": {
+"description": "A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.",
+"items": {
+"$ref": "AzureManagementGroup"
+},
+"type": "array"
+},
+"resourceGroup": {
+"$ref": "AzureResourceGroup",
+"description": "The Azure resource group associated with the resource."
+},
+"subscription": {
+"$ref": "AzureSubscription",
+"description": "The Azure subscription associated with the resource."
+}
+},
+"type": "object"
+},
+"AzureResourceGroup": {
+"description": "Represents an Azure resource group.",
+"id": "AzureResourceGroup",
+"properties": {
+"name": {
+"description": "The name of the Azure resource group. This is not a UUID.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"AzureSubscription": {
+"description": "Represents an Azure subscription.",
+"id": "AzureSubscription",
+"properties": {
+"displayName": {
+"description": "The display name of the Azure subscription.",
+"type": "string"
+},
+"id": {
+"description": "The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "BackupDisasterRecovery": {
 "description": "Information related to Google Cloud Backup and DR Service findings.",
 "id": "BackupDisasterRecovery",
@@ -2144,7 +2207,8 @@
 "MISCONFIGURATION",
 "OBSERVATION",
 "SCC_ERROR",
-"POSTURE_VIOLATION"
+"POSTURE_VIOLATION",
+"TOXIC_COMBINATION"
 ],
 "enumDescriptions": [
 "Unspecified finding class.",
@@ -2153,10 +2217,18 @@
 "Describes a potential weakness in cloud resource/asset configuration that increases risk.",
 "Describes a security observation that is for informational purposes.",
 "Describes an error that prevents some SCC functionality.",
-"Describes a potential security risk due to a change in the security posture."
+"Describes a potential security risk due to a change in the security posture.",
+"Describes a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination."
 ],
 "type": "string"
 },
+"groupMemberships": {
+"description": "Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.",
+"items": {
+"$ref": "GroupMembership"
+},
+"type": "array"
+},
 "iamBindings": {
 "description": "Represents IAM bindings associated with the finding.",
 "items": {
@@ -2311,6 +2383,10 @@
 ],
 "type": "string"
 },
+"toxicCombination": {
+"$ref": "ToxicCombination",
+"description": "Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests."
+},
 "vulnerability": {
 "$ref": "Vulnerability",
 "description": "Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)"
@@ -2662,7 +2738,7 @@
 "type": "string"
 },
 "name": {
-"description": "This field will be ignored if provided on config creation. Format \"organizations/{organization}/muteConfigs/{mute_config}\" \"folders/{folder}/muteConfigs/{mute_config}\" \"projects/{project}/muteConfigs/{mute_config}\" \"organizations/{organization}/locations/global/muteConfigs/{mute_config}\" \"folders/{folder}/locations/global/muteConfigs/{mute_config}\" \"projects/{project}/locations/global/muteConfigs/{mute_config}\"",
+"description": "This field will be ignored if provided on config creation. Format `organizations/{organization}/muteConfigs/{mute_config}` `folders/{folder}/muteConfigs/{mute_config}` `projects/{project}/muteConfigs/{mute_config}` `organizations/{organization}/locations/global/muteConfigs/{mute_config}` `folders/{folder}/locations/global/muteConfigs/{mute_config}` `projects/{project}/locations/global/muteConfigs/{mute_config}`",
 "type": "string"
 },
 "updateTime": {
@@ -2716,6 +2792,10 @@
 "$ref": "AwsMetadata",
 "description": "The AWS metadata associated with the finding."
 },
+"azureMetadata": {
+"$ref": "AzureMetadata",
+"description": "The Azure metadata associated with the finding."
+},
 "cloudProvider": {
 "description": "Indicates which cloud provider the resource resides in.",
 "enum": [
@@ -2777,7 +2857,7 @@
 "description": "Provides the path to the resource within the resource hierarchy."
 },
 "resourcePathString": {
-"description": "A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id} where there can be any number of folders. For AWS, it has the format of org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name} where there can be any number of management groups.",
+"description": "A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name}` where there can be any number of management groups.",
 "type": "string"
 },
 "service": {
@@ -2843,11 +2923,11 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "List of resource labels to search for, evaluated with AND. For example, \"resource_labels_selector\": {\"key\": \"value\", \"env\": \"prod\"} will match resources with labels \"key\": \"value\" AND \"env\": \"prod\" https://cloud.google.com/resource-manager/docs/creating-managing-labels",
+"description": "List of resource labels to search for, evaluated with `AND`. For example, `\"resource_labels_selector\": {\"key\": \"value\", \"env\": \"prod\"}` will match resources with labels \"key\": \"value\" `AND` \"env\": \"prod\" https://cloud.google.com/resource-manager/docs/creating-managing-labels",
 "type": "object"
 },
 "resourceType": {
-"description": "Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, \"storage.googleapis.com/Bucket\" with resource_value \"HIGH\" will apply \"HIGH\" value only to \"storage.googleapis.com/Bucket\" resources.",
+"description": "Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, \"storage.googleapis.com/Bucket\" with resource_value \"HIGH\" will apply \"HIGH\" value only to \"storage.googleapis.com/Bucket\" resources.",
 "type": "string"
 },
 "resourceValue": {
@@ -2869,7 +2949,7 @@
 "type": "string"
 },
 "scope": {
-"description": "Project or folder to scope this configuration to. For example, \"project/456\" would apply this configuration only to resources in \"project/456\" scope will be checked with AND of other resources.",
+"description": "Project or folder to scope this configuration to. For example, \"project/456\" would apply this configuration only to resources in \"project/456\" scope will be checked with `AND` of other resources.",
 "type": "string"
 },
 "sensitiveDataProtectionMapping": {
@@ -2877,7 +2957,7 @@
 "description": "A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. \"bigquery.googleapis.com/Dataset\"."
 },
 "tagValues": {
-"description": "Required. Tag values combined with AND to check against. Values in the form \"tagValues/123\" Example: [ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
+"description": "Required. Tag values combined with `AND` to check against. Values in the form \"tagValues/123\" Example: `[ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
 "items": {
 "type": "string"
 },
@@ -3469,7 +3549,7 @@
 "id": "GoogleCloudSecuritycenterV2AttackExposure",
 "properties": {
 "attackExposureResult": {
-"description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789",
+"description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: `organizations/123/simulations/456/attackExposureResults/789`",
 "type": "string"
 },
 "exposedHighValueResourcesCount": {
@@ -3578,6 +3658,69 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2AzureManagementGroup": {
+"description": "Represents an Azure management group.",
+"id": "GoogleCloudSecuritycenterV2AzureManagementGroup",
+"properties": {
+"displayName": {
+"description": "The display name of the Azure management group.",
+"type": "string"
+},
+"id": {
+"description": "The UUID of the Azure management group, for example, `20000000-0001-0000-0000-000000000000`.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2AzureMetadata": {
+"description": "Azure metadata associated with the resource, only applicable if the finding's cloud provider is Microsoft Azure.",
+"id": "GoogleCloudSecuritycenterV2AzureMetadata",
+"properties": {
+"managementGroups": {
+"description": "A list of Azure management groups associated with the resource, ordered from lowest level (closest to the subscription) to highest level.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2AzureManagementGroup"
+},
+"type": "array"
+},
+"resourceGroup": {
+"$ref": "GoogleCloudSecuritycenterV2AzureResourceGroup",
+"description": "The Azure resource group associated with the resource."
+},
+"subscription": {
+"$ref": "GoogleCloudSecuritycenterV2AzureSubscription",
+"description": "The Azure subscription associated with the resource."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2AzureResourceGroup": {
+"description": "Represents an Azure resource group.",
+"id": "GoogleCloudSecuritycenterV2AzureResourceGroup",
+"properties": {
+"name": {
+"description": "The name of the Azure resource group. This is not a UUID.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2AzureSubscription": {
+"description": "Represents an Azure subscription.",
+"id": "GoogleCloudSecuritycenterV2AzureSubscription",
+"properties": {
+"displayName": {
+"description": "The display name of the Azure subscription.",
+"type": "string"
+},
+"id": {
+"description": "The UUID of the Azure subscription, for example, `291bba3f-e0a5-47bc-a099-3bdcb2a50a05`.",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2BackupDisasterRecovery": {
 "description": "Information related to Google Cloud Backup and DR Service findings.",
 "id": "GoogleCloudSecuritycenterV2BackupDisasterRecovery",
@@ -4488,7 +4631,8 @@
 "MISCONFIGURATION",
 "OBSERVATION",
 "SCC_ERROR",
-"POSTURE_VIOLATION"
+"POSTURE_VIOLATION",
+"TOXIC_COMBINATION"
 ],
 "enumDescriptions": [
 "Unspecified finding class.",
@@ -4497,10 +4641,18 @@
 "Describes a potential weakness in cloud resource/asset configuration that increases risk.",
 "Describes a security observation that is for informational purposes.",
 "Describes an error that prevents some SCC functionality.",
-"Describes a potential security risk due to a change in the security posture."
+"Describes a potential security risk due to a change in the security posture.",
+"Describes a combination of security issues that represent a more severe security problem when taken together."
 ],
 "type": "string"
 },
+"groupMemberships": {
+"description": "Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way. This field cannot be updated. Its value is ignored in all update requests.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2GroupMembership"
+},
+"type": "array"
+},
 "iamBindings": {
 "description": "Represents IAM bindings associated with the finding.",
 "items": {
@@ -4656,6 +4808,10 @@
 "readOnly": true,
 "type": "string"
 },
+"toxicCombination": {
+"$ref": "GoogleCloudSecuritycenterV2ToxicCombination",
+"description": "Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination. This field cannot be updated. Its value is ignored in all update requests."
+},
 "vulnerability": {
 "$ref": "GoogleCloudSecuritycenterV2Vulnerability",
 "description": "Represents vulnerability-specific fields like CVE and CVSS scores. CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)"
@@ -4689,6 +4845,29 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2GroupMembership": {
+"description": "Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.",
+"id": "GoogleCloudSecuritycenterV2GroupMembership",
+"properties": {
+"groupId": {
+"description": "ID of the group.",
+"type": "string"
+},
+"groupType": {
+"description": "Type of group.",
+"enum": [
+"GROUP_TYPE_UNSPECIFIED",
+"GROUP_TYPE_TOXIC_COMBINATION"
+],
+"enumDescriptions": [
+"Default value.",
+"Group represents a toxic combination."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2IamBinding": {
 "description": "Represents a particular IAM binding, which captures a member's role addition, removal, or state.",
 "id": "GoogleCloudSecuritycenterV2IamBinding",
@@ -5015,7 +5194,10 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
-"CONTAINER_AND_RESOURCE_DISCOVERY"
+"CONTAINER_ADMINISTRATION_COMMAND",
+"ESCAPE_TO_HOST",
+"CONTAINER_AND_RESOURCE_DISCOVERY",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
 ],
 "enumDescriptions": [
 "Unspecified value.",
@@ -5077,7 +5259,10 @@
 "T1588",
 "T1595",
 "T1595.001",
-"T1613"
+"T1613",
+"T1611",
+"T1613",
+"T1649"
 ],
 "type": "string"
 },
@@ -5184,7 +5369,10 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
-"CONTAINER_AND_RESOURCE_DISCOVERY"
+"CONTAINER_ADMINISTRATION_COMMAND",
+"ESCAPE_TO_HOST",
+"CONTAINER_AND_RESOURCE_DISCOVERY",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
 ],
 "enumDescriptions": [
 "Unspecified value.",
@@ -5246,7 +5434,10 @@
 "T1588",
 "T1595",
 "T1595.001",
-"T1613"
+"T1613",
+"T1611",
+"T1613",
+"T1649"
 ],
 "type": "string"
 },
@@ -5628,6 +5819,10 @@
 "$ref": "GoogleCloudSecuritycenterV2AwsMetadata",
 "description": "The AWS metadata associated with the finding."
 },
+"azureMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2AzureMetadata",
+"description": "The Azure metadata associated with the finding."
+},
 "cloudProvider": {
 "description": "Indicates which cloud provider the finding is from.",
 "enum": [
@@ -5665,7 +5860,7 @@
 "description": "Provides the path to the resource within the resource hierarchy."
 },
 "resourcePathString": {
-"description": "A string representation of the resource path. For Google Cloud, it has the format of organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id} where there can be any number of folders. For AWS, it has the format of org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id} where there can be any number of organizational units. For Azure, it has the format of mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name} where there can be any number of management groups.",
+"description": "A string representation of the resource path. For Google Cloud, it has the format of `organizations/{organization_id}/folders/{folder_id}/folders/{folder_id}/projects/{project_id}` where there can be any number of folders. For AWS, it has the format of `org/{organization_id}/ou/{organizational_unit_id}/ou/{organizational_unit_id}/account/{account_id}` where there can be any number of organizational units. For Azure, it has the format of `mg/{management_group_id}/mg/{management_group_id}/subscription/{subscription_id}/rg/{resource_group_name}` where there can be any number of management groups.",
 "type": "string"
 },
 "service": {
@@ -5774,11 +5969,11 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "List of resource labels to search for, evaluated with AND. For example, \"resource_labels_selector\": {\"key\": \"value\", \"env\": \"prod\"} will match resources with labels \"key\": \"value\" AND \"env\": \"prod\" https://cloud.google.com/resource-manager/docs/creating-managing-labels",
+"description": "List of resource labels to search for, evaluated with `AND`. For example, \"resource_labels_selector\": {\"key\": \"value\", \"env\": \"prod\"} will match resources with labels \"key\": \"value\" `AND` \"env\": \"prod\" https://cloud.google.com/resource-manager/docs/creating-managing-labels",
 "type": "object"
 },
 "resourceType": {
-"description": "Apply resource_value only to resources that match resource_type. resource_type will be checked with AND of other resources. For example, \"storage.googleapis.com/Bucket\" with resource_value \"HIGH\" will apply \"HIGH\" value only to \"storage.googleapis.com/Bucket\" resources.",
+"description": "Apply resource_value only to resources that match resource_type. resource_type will be checked with `AND` of other resources. For example, \"storage.googleapis.com/Bucket\" with resource_value \"HIGH\" will apply \"HIGH\" value only to \"storage.googleapis.com/Bucket\" resources.",
 "type": "string"
 },
 "resourceValue": {
@@ -5800,7 +5995,7 @@
 "type": "string"
 },
 "scope": {
-"description": "Project or folder to scope this configuration to. For example, \"project/456\" would apply this configuration only to resources in \"project/456\" scope will be checked with AND of other resources.",
+"description": "Project or folder to scope this configuration to. For example, \"project/456\" would apply this configuration only to resources in \"project/456\" scope will be checked with `AND` of other resources.",
 "type": "string"
 },
 "sensitiveDataProtectionMapping": {
@@ -5808,7 +6003,7 @@
 "description": "A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. \"bigquery.googleapis.com/Dataset\"."
 },
 "tagValues": {
-"description": "Required. Tag values combined with AND to check against. Values in the form \"tagValues/123\" Example: [ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ] https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
+"description": "Required. Tag values combined with `AND` to check against. Values in the form \"tagValues/123\" Example: `[ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
 "items": {
 "type": "string"
 },
@@ -6076,6 +6271,25 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2ToxicCombination": {
+"description": "Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.",
+"id": "GoogleCloudSecuritycenterV2ToxicCombination",
+"properties": {
+"attackExposureScore": {
+"description": "The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.",
+"format": "double",
+"type": "number"
+},
+"relatedFindings": {
+"description": "List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Vulnerability": {
 "description": "Refers to common vulnerability fields e.g. cve, cvss, cwe etc.",
 "id": "GoogleCloudSecuritycenterV2Vulnerability",
@@ -6219,6 +6433,29 @@
 },
 "type": "object"
 },
+"GroupMembership": {
+"description": "Contains details about groups of which this finding is a member. A group is a collection of findings that are related in some way.",
+"id": "GroupMembership",
+"properties": {
+"groupId": {
+"description": "ID of the group.",
+"type": "string"
+},
+"groupType": {
+"description": "Type of group.",
+"enum": [
+"GROUP_TYPE_UNSPECIFIED",
+"GROUP_TYPE_TOXIC_COMBINATION"
+],
+"enumDescriptions": [
+"Default value.",
+"Group represents a toxic combination."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GroupResult": {
 "description": "Result containing the properties and count of a groupBy request.",
 "id": "GroupResult",
@@ -6685,7 +6922,10 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
-"CONTAINER_AND_RESOURCE_DISCOVERY"
+"CONTAINER_ADMINISTRATION_COMMAND",
+"ESCAPE_TO_HOST",
+"CONTAINER_AND_RESOURCE_DISCOVERY",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
 ],
 "enumDescriptions": [
 "Unspecified value.",
@@ -6747,7 +6987,10 @@
 "T1588",
 "T1595",
 "T1595.001",
-"T1613"
+"T1609",
+"T1611",
+"T1613",
+"T1649"
 ],
 "type": "string"
 },
@@ -6854,7 +7097,10 @@
 "OBTAIN_CAPABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
-"CONTAINER_AND_RESOURCE_DISCOVERY"
+"CONTAINER_ADMINISTRATION_COMMAND",
+"ESCAPE_TO_HOST",
+"CONTAINER_AND_RESOURCE_DISCOVERY",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
 ],
 "enumDescriptions": [
 "Unspecified value.",
@@ -6916,7 +7162,10 @@
 "T1588",
 "T1595",
 "T1595.001",
-"T1613"
+"T1609",
+"T1611",
+"T1613",
+"T1649"
 ],
 "type": "string"
 },
@@ -7727,6 +7976,25 @@
 },
 "type": "object"
 },
+"ToxicCombination": {
+"description": "Contains details about a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.",
+"id": "ToxicCombination",
+"properties": {
+"attackExposureScore": {
+"description": "The [Attack exposure score](https://cloud.google.com/security-command-center/docs/attack-exposure-learn#attack_exposure_scores) of this toxic combination. The score is a measure of how much this toxic combination exposes one or more high-value resources to potential attack.",
+"format": "double",
+"type": "number"
+},
+"relatedFindings": {
+"description": "List of resource names of findings associated with this toxic combination. For example, `organizations/123/sources/456/findings/789`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "Vulnerability": {
 "description": "Refers to common vulnerability fields e.g. cve, cvss, cwe etc.",
 "id": "Vulnerability",