google-api-python-client 2.143.0__py2.py3-none-any.whl → 2.145.0__py2.py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {google_api_python_client-2.143.0.dist-info → google_api_python_client-2.145.0.dist-info}/METADATA +1 -1
- {google_api_python_client-2.143.0.dist-info → google_api_python_client-2.145.0.dist-info}/RECORD +127 -127
- googleapiclient/discovery_cache/documents/admin.directory_v1.json +2 -2
- googleapiclient/discovery_cache/documents/admin.directoryv1.json +2 -2
- googleapiclient/discovery_cache/documents/aiplatform.v1.json +945 -25
- googleapiclient/discovery_cache/documents/aiplatform.v1beta1.json +939 -49
- googleapiclient/discovery_cache/documents/airquality.v1.json +4 -4
- googleapiclient/discovery_cache/documents/alloydb.v1.json +117 -6
- googleapiclient/discovery_cache/documents/alloydb.v1alpha.json +36 -6
- googleapiclient/discovery_cache/documents/alloydb.v1beta.json +108 -6
- googleapiclient/discovery_cache/documents/analyticsadmin.v1alpha.json +36 -36
- googleapiclient/discovery_cache/documents/analyticsadmin.v1beta.json +22 -22
- googleapiclient/discovery_cache/documents/analyticsdata.v1beta.json +21 -21
- googleapiclient/discovery_cache/documents/analyticshub.v1.json +2 -2
- googleapiclient/discovery_cache/documents/androidmanagement.v1.json +32 -2
- googleapiclient/discovery_cache/documents/apigee.v1.json +8 -1
- googleapiclient/discovery_cache/documents/appengine.v1.json +26 -1
- googleapiclient/discovery_cache/documents/appengine.v1alpha.json +26 -1
- googleapiclient/discovery_cache/documents/appengine.v1beta.json +26 -1
- googleapiclient/discovery_cache/documents/artifactregistry.v1.json +43 -3
- googleapiclient/discovery_cache/documents/artifactregistry.v1beta1.json +13 -3
- googleapiclient/discovery_cache/documents/artifactregistry.v1beta2.json +13 -3
- googleapiclient/discovery_cache/documents/assuredworkloads.v1.json +14 -6
- googleapiclient/discovery_cache/documents/assuredworkloads.v1beta1.json +14 -6
- googleapiclient/discovery_cache/documents/backupdr.v1.json +8 -1
- googleapiclient/discovery_cache/documents/baremetalsolution.v2.json +6 -2
- googleapiclient/discovery_cache/documents/batch.v1.json +19 -1
- googleapiclient/discovery_cache/documents/bigtableadmin.v2.json +1 -20
- googleapiclient/discovery_cache/documents/chat.v1.json +39 -14
- googleapiclient/discovery_cache/documents/checks.v1alpha.json +31 -1
- googleapiclient/discovery_cache/documents/cloudasset.v1.json +9 -64
- googleapiclient/discovery_cache/documents/cloudbuild.v1.json +2 -2
- googleapiclient/discovery_cache/documents/cloudchannel.v1.json +27 -1
- googleapiclient/discovery_cache/documents/cloudfunctions.v2.json +3 -3
- googleapiclient/discovery_cache/documents/cloudfunctions.v2alpha.json +3 -3
- googleapiclient/discovery_cache/documents/cloudfunctions.v2beta.json +3 -3
- googleapiclient/discovery_cache/documents/cloudidentity.v1.json +3 -1
- googleapiclient/discovery_cache/documents/cloudidentity.v1beta1.json +3 -1
- googleapiclient/discovery_cache/documents/cloudkms.v1.json +16 -1
- googleapiclient/discovery_cache/documents/compute.alpha.json +1186 -775
- googleapiclient/discovery_cache/documents/compute.beta.json +91 -1
- googleapiclient/discovery_cache/documents/compute.v1.json +21 -1
- googleapiclient/discovery_cache/documents/connectors.v1.json +260 -5
- googleapiclient/discovery_cache/documents/contactcenteraiplatform.v1alpha1.json +10 -2
- googleapiclient/discovery_cache/documents/container.v1beta1.json +6 -2
- googleapiclient/discovery_cache/documents/containeranalysis.v1beta1.json +169 -1
- googleapiclient/discovery_cache/documents/content.v2.1.json +4053 -8413
- googleapiclient/discovery_cache/documents/dataform.v1beta1.json +109 -1
- googleapiclient/discovery_cache/documents/datalineage.v1.json +5 -3
- googleapiclient/discovery_cache/documents/datamigration.v1.json +7 -5
- googleapiclient/discovery_cache/documents/dataportability.v1.json +15 -1
- googleapiclient/discovery_cache/documents/dataportability.v1beta.json +15 -1
- googleapiclient/discovery_cache/documents/dataproc.v1.json +22 -3
- googleapiclient/discovery_cache/documents/developerconnect.v1.json +8 -1
- googleapiclient/discovery_cache/documents/dialogflow.v2.json +3 -3
- googleapiclient/discovery_cache/documents/dialogflow.v2beta1.json +3 -3
- googleapiclient/discovery_cache/documents/dialogflow.v3.json +4 -4
- googleapiclient/discovery_cache/documents/dialogflow.v3beta1.json +4 -4
- googleapiclient/discovery_cache/documents/discoveryengine.v1.json +89 -46
- googleapiclient/discovery_cache/documents/discoveryengine.v1alpha.json +79 -40
- googleapiclient/discovery_cache/documents/discoveryengine.v1beta.json +89 -46
- googleapiclient/discovery_cache/documents/dlp.v2.json +23 -3
- googleapiclient/discovery_cache/documents/drive.v3.json +222 -1
- googleapiclient/discovery_cache/documents/file.v1.json +131 -10
- googleapiclient/discovery_cache/documents/file.v1beta1.json +104 -12
- googleapiclient/discovery_cache/documents/firebaseml.v2beta.json +5 -3
- googleapiclient/discovery_cache/documents/firestore.v1.json +27 -18
- googleapiclient/discovery_cache/documents/firestore.v1beta1.json +12 -3
- googleapiclient/discovery_cache/documents/firestore.v1beta2.json +3 -3
- googleapiclient/discovery_cache/documents/gkehub.v1.json +28 -4
- googleapiclient/discovery_cache/documents/gkehub.v1alpha.json +28 -4
- googleapiclient/discovery_cache/documents/gkehub.v1beta.json +28 -4
- googleapiclient/discovery_cache/documents/healthcare.v1.json +320 -4
- googleapiclient/discovery_cache/documents/healthcare.v1beta1.json +114 -4
- googleapiclient/discovery_cache/documents/integrations.v1.json +50 -3
- googleapiclient/discovery_cache/documents/logging.v2.json +20 -1
- googleapiclient/discovery_cache/documents/merchantapi.accounts_v1beta.json +18 -6
- googleapiclient/discovery_cache/documents/merchantapi.conversions_v1beta.json +9 -3
- googleapiclient/discovery_cache/documents/merchantapi.datasources_v1beta.json +9 -3
- googleapiclient/discovery_cache/documents/merchantapi.inventories_v1beta.json +9 -3
- googleapiclient/discovery_cache/documents/merchantapi.lfp_v1beta.json +9 -3
- googleapiclient/discovery_cache/documents/merchantapi.notifications_v1beta.json +9 -3
- googleapiclient/discovery_cache/documents/merchantapi.products_v1beta.json +25 -7
- googleapiclient/discovery_cache/documents/merchantapi.promotions_v1beta.json +25 -7
- googleapiclient/discovery_cache/documents/merchantapi.quota_v1beta.json +9 -3
- googleapiclient/discovery_cache/documents/merchantapi.reports_v1beta.json +17 -5
- googleapiclient/discovery_cache/documents/migrationcenter.v1.json +51 -8
- googleapiclient/discovery_cache/documents/migrationcenter.v1alpha1.json +109 -19
- googleapiclient/discovery_cache/documents/monitoring.v1.json +28 -1
- googleapiclient/discovery_cache/documents/monitoring.v3.json +23 -4
- googleapiclient/discovery_cache/documents/networkmanagement.v1.json +41 -1
- googleapiclient/discovery_cache/documents/networkmanagement.v1beta1.json +41 -1
- googleapiclient/discovery_cache/documents/networksecurity.v1.json +5 -3
- googleapiclient/discovery_cache/documents/networksecurity.v1beta1.json +1279 -167
- googleapiclient/discovery_cache/documents/osconfig.v1.json +3 -3
- googleapiclient/discovery_cache/documents/osconfig.v1alpha.json +2 -2
- googleapiclient/discovery_cache/documents/pagespeedonline.v5.json +37 -1
- googleapiclient/discovery_cache/documents/places.v1.json +2 -2
- googleapiclient/discovery_cache/documents/recaptchaenterprise.v1.json +12 -2
- googleapiclient/discovery_cache/documents/redis.v1.json +408 -2
- googleapiclient/discovery_cache/documents/redis.v1beta1.json +408 -2
- googleapiclient/discovery_cache/documents/retail.v2.json +3 -3
- googleapiclient/discovery_cache/documents/retail.v2alpha.json +3 -3
- googleapiclient/discovery_cache/documents/retail.v2beta.json +3 -3
- googleapiclient/discovery_cache/documents/run.v2.json +8 -4
- googleapiclient/discovery_cache/documents/securitycenter.v1.json +279 -5
- googleapiclient/discovery_cache/documents/securitycenter.v1beta1.json +229 -5
- googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json +229 -5
- googleapiclient/discovery_cache/documents/servicemanagement.v1.json +35 -1
- googleapiclient/discovery_cache/documents/servicenetworking.v1.json +36 -2
- googleapiclient/discovery_cache/documents/servicenetworking.v1beta.json +36 -2
- googleapiclient/discovery_cache/documents/sheets.v4.json +2 -2
- googleapiclient/discovery_cache/documents/spanner.v1.json +6 -1
- googleapiclient/discovery_cache/documents/sqladmin.v1.json +183 -4
- googleapiclient/discovery_cache/documents/sqladmin.v1beta4.json +183 -4
- googleapiclient/discovery_cache/documents/vision.v1.json +6 -6
- googleapiclient/discovery_cache/documents/vision.v1p1beta1.json +6 -6
- googleapiclient/discovery_cache/documents/vision.v1p2beta1.json +6 -6
- googleapiclient/discovery_cache/documents/vmmigration.v1.json +2 -2
- googleapiclient/discovery_cache/documents/vmmigration.v1alpha1.json +2 -2
- googleapiclient/discovery_cache/documents/workflowexecutions.v1.json +5 -3
- googleapiclient/discovery_cache/documents/workloadmanager.v1.json +2 -1
- googleapiclient/discovery_cache/documents/workspaceevents.v1.json +3 -3
- googleapiclient/version.py +1 -1
- {google_api_python_client-2.143.0.dist-info → google_api_python_client-2.145.0.dist-info}/LICENSE +0 -0
- {google_api_python_client-2.143.0.dist-info → google_api_python_client-2.145.0.dist-info}/WHEEL +0 -0
- {google_api_python_client-2.143.0.dist-info → google_api_python_client-2.145.0.dist-info}/top_level.txt +0 -0
|
@@ -903,7 +903,7 @@
|
|
|
903
903
|
}
|
|
904
904
|
}
|
|
905
905
|
},
|
|
906
|
-
"revision": "
|
|
906
|
+
"revision": "20240827",
|
|
907
907
|
"rootUrl": "https://securitycenter.googleapis.com/",
|
|
908
908
|
"schemas": {
|
|
909
909
|
"Access": {
|
|
@@ -1301,6 +1301,10 @@
|
|
|
1301
1301
|
"subscription": {
|
|
1302
1302
|
"$ref": "AzureSubscription",
|
|
1303
1303
|
"description": "The Azure subscription associated with the resource."
|
|
1304
|
+
},
|
|
1305
|
+
"tenant": {
|
|
1306
|
+
"$ref": "AzureTenant",
|
|
1307
|
+
"description": "The Azure Entra tenant associated with the resource."
|
|
1304
1308
|
}
|
|
1305
1309
|
},
|
|
1306
1310
|
"type": "object"
|
|
@@ -1331,6 +1335,17 @@
|
|
|
1331
1335
|
},
|
|
1332
1336
|
"type": "object"
|
|
1333
1337
|
},
|
|
1338
|
+
"AzureTenant": {
|
|
1339
|
+
"description": "Represents a Microsoft Entra tenant.",
|
|
1340
|
+
"id": "AzureTenant",
|
|
1341
|
+
"properties": {
|
|
1342
|
+
"id": {
|
|
1343
|
+
"description": "The ID of the Microsoft Entra tenant, for example, \"a11aaa11-aa11-1aa1-11aa-1aaa11a\".",
|
|
1344
|
+
"type": "string"
|
|
1345
|
+
}
|
|
1346
|
+
},
|
|
1347
|
+
"type": "object"
|
|
1348
|
+
},
|
|
1334
1349
|
"BackupDisasterRecovery": {
|
|
1335
1350
|
"description": "Information related to Google Cloud Backup and DR Service findings.",
|
|
1336
1351
|
"id": "BackupDisasterRecovery",
|
|
@@ -1730,6 +1745,11 @@
|
|
|
1730
1745
|
],
|
|
1731
1746
|
"type": "string"
|
|
1732
1747
|
},
|
|
1748
|
+
"firstExploitationDate": {
|
|
1749
|
+
"description": "Date of the earliest known exploitation.",
|
|
1750
|
+
"format": "google-datetime",
|
|
1751
|
+
"type": "string"
|
|
1752
|
+
},
|
|
1733
1753
|
"id": {
|
|
1734
1754
|
"description": "The unique identifier for the vulnerability. e.g. CVE-2021-34527",
|
|
1735
1755
|
"type": "string"
|
|
@@ -1910,6 +1930,82 @@
|
|
|
1910
1930
|
},
|
|
1911
1931
|
"type": "object"
|
|
1912
1932
|
},
|
|
1933
|
+
"DataAccessEvent": {
|
|
1934
|
+
"description": "Details about a data access attempt made by a principal not authorized under applicable data security policy.",
|
|
1935
|
+
"id": "DataAccessEvent",
|
|
1936
|
+
"properties": {
|
|
1937
|
+
"eventId": {
|
|
1938
|
+
"description": "Unique identifier for data access event.",
|
|
1939
|
+
"type": "string"
|
|
1940
|
+
},
|
|
1941
|
+
"eventTime": {
|
|
1942
|
+
"description": "Timestamp of data access event.",
|
|
1943
|
+
"format": "google-datetime",
|
|
1944
|
+
"type": "string"
|
|
1945
|
+
},
|
|
1946
|
+
"operation": {
|
|
1947
|
+
"description": "The operation performed by the principal to access the data.",
|
|
1948
|
+
"enum": [
|
|
1949
|
+
"OPERATION_UNSPECIFIED",
|
|
1950
|
+
"READ",
|
|
1951
|
+
"MOVE",
|
|
1952
|
+
"COPY"
|
|
1953
|
+
],
|
|
1954
|
+
"enumDescriptions": [
|
|
1955
|
+
"The operation is unspecified.",
|
|
1956
|
+
"Represents a read operation.",
|
|
1957
|
+
"Represents a move operation.",
|
|
1958
|
+
"Represents a copy operation."
|
|
1959
|
+
],
|
|
1960
|
+
"type": "string"
|
|
1961
|
+
},
|
|
1962
|
+
"principalEmail": {
|
|
1963
|
+
"description": "The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.",
|
|
1964
|
+
"type": "string"
|
|
1965
|
+
}
|
|
1966
|
+
},
|
|
1967
|
+
"type": "object"
|
|
1968
|
+
},
|
|
1969
|
+
"DataFlowEvent": {
|
|
1970
|
+
"description": "Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.",
|
|
1971
|
+
"id": "DataFlowEvent",
|
|
1972
|
+
"properties": {
|
|
1973
|
+
"eventId": {
|
|
1974
|
+
"description": "Unique identifier for data flow event.",
|
|
1975
|
+
"type": "string"
|
|
1976
|
+
},
|
|
1977
|
+
"eventTime": {
|
|
1978
|
+
"description": "Timestamp of data flow event.",
|
|
1979
|
+
"format": "google-datetime",
|
|
1980
|
+
"type": "string"
|
|
1981
|
+
},
|
|
1982
|
+
"operation": {
|
|
1983
|
+
"description": "The operation performed by the principal for the data flow event.",
|
|
1984
|
+
"enum": [
|
|
1985
|
+
"OPERATION_UNSPECIFIED",
|
|
1986
|
+
"READ",
|
|
1987
|
+
"MOVE",
|
|
1988
|
+
"COPY"
|
|
1989
|
+
],
|
|
1990
|
+
"enumDescriptions": [
|
|
1991
|
+
"The operation is unspecified.",
|
|
1992
|
+
"Represents a read operation.",
|
|
1993
|
+
"Represents a move operation.",
|
|
1994
|
+
"Represents a copy operation."
|
|
1995
|
+
],
|
|
1996
|
+
"type": "string"
|
|
1997
|
+
},
|
|
1998
|
+
"principalEmail": {
|
|
1999
|
+
"description": "The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.",
|
|
2000
|
+
"type": "string"
|
|
2001
|
+
},
|
|
2002
|
+
"violatedLocation": {
|
|
2003
|
+
"description": "Non-compliant location of the principal or the data destination.",
|
|
2004
|
+
"type": "string"
|
|
2005
|
+
}
|
|
2006
|
+
},
|
|
2007
|
+
"type": "object"
|
|
2008
|
+
},
|
|
1913
2009
|
"Database": {
|
|
1914
2010
|
"description": "Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.",
|
|
1915
2011
|
"id": "Database",
|
|
@@ -2190,6 +2286,20 @@
|
|
|
2190
2286
|
"format": "google-datetime",
|
|
2191
2287
|
"type": "string"
|
|
2192
2288
|
},
|
|
2289
|
+
"dataAccessEvents": {
|
|
2290
|
+
"description": "Data access events associated with the finding.",
|
|
2291
|
+
"items": {
|
|
2292
|
+
"$ref": "DataAccessEvent"
|
|
2293
|
+
},
|
|
2294
|
+
"type": "array"
|
|
2295
|
+
},
|
|
2296
|
+
"dataFlowEvents": {
|
|
2297
|
+
"description": "Data flow events associated with the finding.",
|
|
2298
|
+
"items": {
|
|
2299
|
+
"$ref": "DataFlowEvent"
|
|
2300
|
+
},
|
|
2301
|
+
"type": "array"
|
|
2302
|
+
},
|
|
2193
2303
|
"database": {
|
|
2194
2304
|
"$ref": "Database",
|
|
2195
2305
|
"description": "Database associated with the finding."
|
|
@@ -2236,7 +2346,8 @@
|
|
|
2236
2346
|
"OBSERVATION",
|
|
2237
2347
|
"SCC_ERROR",
|
|
2238
2348
|
"POSTURE_VIOLATION",
|
|
2239
|
-
"TOXIC_COMBINATION"
|
|
2349
|
+
"TOXIC_COMBINATION",
|
|
2350
|
+
"SENSITIVE_DATA_RISK"
|
|
2240
2351
|
],
|
|
2241
2352
|
"enumDescriptions": [
|
|
2242
2353
|
"Unspecified finding class.",
|
|
@@ -2246,7 +2357,8 @@
|
|
|
2246
2357
|
"Describes a security observation that is for informational purposes.",
|
|
2247
2358
|
"Describes an error that prevents some SCC functionality.",
|
|
2248
2359
|
"Describes a potential security risk due to a change in the security posture.",
|
|
2249
|
-
"Describes a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination."
|
|
2360
|
+
"Describes a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.",
|
|
2361
|
+
"Describes a potential security risk to data assets that contain sensitive data."
|
|
2250
2362
|
],
|
|
2251
2363
|
"type": "string"
|
|
2252
2364
|
},
|
|
@@ -3743,6 +3855,10 @@
|
|
|
3743
3855
|
"subscription": {
|
|
3744
3856
|
"$ref": "GoogleCloudSecuritycenterV2AzureSubscription",
|
|
3745
3857
|
"description": "The Azure subscription associated with the resource."
|
|
3858
|
+
},
|
|
3859
|
+
"tenant": {
|
|
3860
|
+
"$ref": "GoogleCloudSecuritycenterV2AzureTenant",
|
|
3861
|
+
"description": "The Azure Entra tenant associated with the resource."
|
|
3746
3862
|
}
|
|
3747
3863
|
},
|
|
3748
3864
|
"type": "object"
|
|
@@ -3773,6 +3889,17 @@
|
|
|
3773
3889
|
},
|
|
3774
3890
|
"type": "object"
|
|
3775
3891
|
},
|
|
3892
|
+
"GoogleCloudSecuritycenterV2AzureTenant": {
|
|
3893
|
+
"description": "Represents a Microsoft Entra tenant.",
|
|
3894
|
+
"id": "GoogleCloudSecuritycenterV2AzureTenant",
|
|
3895
|
+
"properties": {
|
|
3896
|
+
"id": {
|
|
3897
|
+
"description": "The ID of the Microsoft Entra tenant, for example, \"a11aaa11-aa11-1aa1-11aa-1aaa11a\".",
|
|
3898
|
+
"type": "string"
|
|
3899
|
+
}
|
|
3900
|
+
},
|
|
3901
|
+
"type": "object"
|
|
3902
|
+
},
|
|
3776
3903
|
"GoogleCloudSecuritycenterV2BackupDisasterRecovery": {
|
|
3777
3904
|
"description": "Information related to Google Cloud Backup and DR Service findings.",
|
|
3778
3905
|
"id": "GoogleCloudSecuritycenterV2BackupDisasterRecovery",
|
|
@@ -4168,6 +4295,11 @@
|
|
|
4168
4295
|
],
|
|
4169
4296
|
"type": "string"
|
|
4170
4297
|
},
|
|
4298
|
+
"firstExploitationDate": {
|
|
4299
|
+
"description": "Date of the earliest known exploitation.",
|
|
4300
|
+
"format": "google-datetime",
|
|
4301
|
+
"type": "string"
|
|
4302
|
+
},
|
|
4171
4303
|
"id": {
|
|
4172
4304
|
"description": "The unique identifier for the vulnerability. e.g. CVE-2021-34527",
|
|
4173
4305
|
"type": "string"
|
|
@@ -4348,6 +4480,82 @@
|
|
|
4348
4480
|
},
|
|
4349
4481
|
"type": "object"
|
|
4350
4482
|
},
|
|
4483
|
+
"GoogleCloudSecuritycenterV2DataAccessEvent": {
|
|
4484
|
+
"description": "Details about a data access attempt made by a principal not authorized under applicable data security policy.",
|
|
4485
|
+
"id": "GoogleCloudSecuritycenterV2DataAccessEvent",
|
|
4486
|
+
"properties": {
|
|
4487
|
+
"eventId": {
|
|
4488
|
+
"description": "Unique identifier for data access event.",
|
|
4489
|
+
"type": "string"
|
|
4490
|
+
},
|
|
4491
|
+
"eventTime": {
|
|
4492
|
+
"description": "Timestamp of data access event.",
|
|
4493
|
+
"format": "google-datetime",
|
|
4494
|
+
"type": "string"
|
|
4495
|
+
},
|
|
4496
|
+
"operation": {
|
|
4497
|
+
"description": "The operation performed by the principal to access the data.",
|
|
4498
|
+
"enum": [
|
|
4499
|
+
"OPERATION_UNSPECIFIED",
|
|
4500
|
+
"READ",
|
|
4501
|
+
"MOVE",
|
|
4502
|
+
"COPY"
|
|
4503
|
+
],
|
|
4504
|
+
"enumDescriptions": [
|
|
4505
|
+
"The operation is unspecified.",
|
|
4506
|
+
"Represents a read operation.",
|
|
4507
|
+
"Represents a move operation.",
|
|
4508
|
+
"Represents a copy operation."
|
|
4509
|
+
],
|
|
4510
|
+
"type": "string"
|
|
4511
|
+
},
|
|
4512
|
+
"principalEmail": {
|
|
4513
|
+
"description": "The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.",
|
|
4514
|
+
"type": "string"
|
|
4515
|
+
}
|
|
4516
|
+
},
|
|
4517
|
+
"type": "object"
|
|
4518
|
+
},
|
|
4519
|
+
"GoogleCloudSecuritycenterV2DataFlowEvent": {
|
|
4520
|
+
"description": "Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.",
|
|
4521
|
+
"id": "GoogleCloudSecuritycenterV2DataFlowEvent",
|
|
4522
|
+
"properties": {
|
|
4523
|
+
"eventId": {
|
|
4524
|
+
"description": "Unique identifier for data flow event.",
|
|
4525
|
+
"type": "string"
|
|
4526
|
+
},
|
|
4527
|
+
"eventTime": {
|
|
4528
|
+
"description": "Timestamp of data flow event.",
|
|
4529
|
+
"format": "google-datetime",
|
|
4530
|
+
"type": "string"
|
|
4531
|
+
},
|
|
4532
|
+
"operation": {
|
|
4533
|
+
"description": "The operation performed by the principal for the data flow event.",
|
|
4534
|
+
"enum": [
|
|
4535
|
+
"OPERATION_UNSPECIFIED",
|
|
4536
|
+
"READ",
|
|
4537
|
+
"MOVE",
|
|
4538
|
+
"COPY"
|
|
4539
|
+
],
|
|
4540
|
+
"enumDescriptions": [
|
|
4541
|
+
"The operation is unspecified.",
|
|
4542
|
+
"Represents a read operation.",
|
|
4543
|
+
"Represents a move operation.",
|
|
4544
|
+
"Represents a copy operation."
|
|
4545
|
+
],
|
|
4546
|
+
"type": "string"
|
|
4547
|
+
},
|
|
4548
|
+
"principalEmail": {
|
|
4549
|
+
"description": "The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.",
|
|
4550
|
+
"type": "string"
|
|
4551
|
+
},
|
|
4552
|
+
"violatedLocation": {
|
|
4553
|
+
"description": "Non-compliant location of the principal or the data destination.",
|
|
4554
|
+
"type": "string"
|
|
4555
|
+
}
|
|
4556
|
+
},
|
|
4557
|
+
"type": "object"
|
|
4558
|
+
},
|
|
4351
4559
|
"GoogleCloudSecuritycenterV2Database": {
|
|
4352
4560
|
"description": "Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.",
|
|
4353
4561
|
"id": "GoogleCloudSecuritycenterV2Database",
|
|
@@ -4659,6 +4867,20 @@
|
|
|
4659
4867
|
"readOnly": true,
|
|
4660
4868
|
"type": "string"
|
|
4661
4869
|
},
|
|
4870
|
+
"dataAccessEvents": {
|
|
4871
|
+
"description": "Data access events associated with the finding.",
|
|
4872
|
+
"items": {
|
|
4873
|
+
"$ref": "GoogleCloudSecuritycenterV2DataAccessEvent"
|
|
4874
|
+
},
|
|
4875
|
+
"type": "array"
|
|
4876
|
+
},
|
|
4877
|
+
"dataFlowEvents": {
|
|
4878
|
+
"description": "Data flow events associated with the finding.",
|
|
4879
|
+
"items": {
|
|
4880
|
+
"$ref": "GoogleCloudSecuritycenterV2DataFlowEvent"
|
|
4881
|
+
},
|
|
4882
|
+
"type": "array"
|
|
4883
|
+
},
|
|
4662
4884
|
"database": {
|
|
4663
4885
|
"$ref": "GoogleCloudSecuritycenterV2Database",
|
|
4664
4886
|
"description": "Database associated with the finding."
|
|
@@ -4705,7 +4927,8 @@
|
|
|
4705
4927
|
"OBSERVATION",
|
|
4706
4928
|
"SCC_ERROR",
|
|
4707
4929
|
"POSTURE_VIOLATION",
|
|
4708
|
-
"TOXIC_COMBINATION"
|
|
4930
|
+
"TOXIC_COMBINATION",
|
|
4931
|
+
"SENSITIVE_DATA_RISK"
|
|
4709
4932
|
],
|
|
4710
4933
|
"enumDescriptions": [
|
|
4711
4934
|
"Unspecified finding class.",
|
|
@@ -4715,7 +4938,8 @@
|
|
|
4715
4938
|
"Describes a security observation that is for informational purposes.",
|
|
4716
4939
|
"Describes an error that prevents some SCC functionality.",
|
|
4717
4940
|
"Describes a potential security risk due to a change in the security posture.",
|
|
4718
|
-
"Describes a combination of security issues that represent a more severe security problem when taken together."
|
|
4941
|
+
"Describes a combination of security issues that represent a more severe security problem when taken together.",
|
|
4942
|
+
"Describes a potential security risk to data assets that contain sensitive data."
|
|
4719
4943
|
],
|
|
4720
4944
|
"type": "string"
|
|
4721
4945
|
},
|
|
@@ -1913,7 +1913,7 @@
|
|
|
1913
1913
|
}
|
|
1914
1914
|
}
|
|
1915
1915
|
},
|
|
1916
|
-
"revision": "
|
|
1916
|
+
"revision": "20240827",
|
|
1917
1917
|
"rootUrl": "https://securitycenter.googleapis.com/",
|
|
1918
1918
|
"schemas": {
|
|
1919
1919
|
"Access": {
|
|
@@ -2199,6 +2199,10 @@
|
|
|
2199
2199
|
"subscription": {
|
|
2200
2200
|
"$ref": "AzureSubscription",
|
|
2201
2201
|
"description": "The Azure subscription associated with the resource."
|
|
2202
|
+
},
|
|
2203
|
+
"tenant": {
|
|
2204
|
+
"$ref": "AzureTenant",
|
|
2205
|
+
"description": "The Azure Entra tenant associated with the resource."
|
|
2202
2206
|
}
|
|
2203
2207
|
},
|
|
2204
2208
|
"type": "object"
|
|
@@ -2229,6 +2233,17 @@
|
|
|
2229
2233
|
},
|
|
2230
2234
|
"type": "object"
|
|
2231
2235
|
},
|
|
2236
|
+
"AzureTenant": {
|
|
2237
|
+
"description": "Represents a Microsoft Entra tenant.",
|
|
2238
|
+
"id": "AzureTenant",
|
|
2239
|
+
"properties": {
|
|
2240
|
+
"id": {
|
|
2241
|
+
"description": "The ID of the Microsoft Entra tenant, for example, \"a11aaa11-aa11-1aa1-11aa-1aaa11a\".",
|
|
2242
|
+
"type": "string"
|
|
2243
|
+
}
|
|
2244
|
+
},
|
|
2245
|
+
"type": "object"
|
|
2246
|
+
},
|
|
2232
2247
|
"BackupDisasterRecovery": {
|
|
2233
2248
|
"description": "Information related to Google Cloud Backup and DR Service findings.",
|
|
2234
2249
|
"id": "BackupDisasterRecovery",
|
|
@@ -2676,6 +2691,11 @@
|
|
|
2676
2691
|
],
|
|
2677
2692
|
"type": "string"
|
|
2678
2693
|
},
|
|
2694
|
+
"firstExploitationDate": {
|
|
2695
|
+
"description": "Date of the earliest known exploitation.",
|
|
2696
|
+
"format": "google-datetime",
|
|
2697
|
+
"type": "string"
|
|
2698
|
+
},
|
|
2679
2699
|
"id": {
|
|
2680
2700
|
"description": "The unique identifier for the vulnerability. e.g. CVE-2021-34527",
|
|
2681
2701
|
"type": "string"
|
|
@@ -2856,6 +2876,82 @@
|
|
|
2856
2876
|
},
|
|
2857
2877
|
"type": "object"
|
|
2858
2878
|
},
|
|
2879
|
+
"DataAccessEvent": {
|
|
2880
|
+
"description": "Details about a data access attempt made by a principal not authorized under applicable data security policy.",
|
|
2881
|
+
"id": "DataAccessEvent",
|
|
2882
|
+
"properties": {
|
|
2883
|
+
"eventId": {
|
|
2884
|
+
"description": "Unique identifier for data access event.",
|
|
2885
|
+
"type": "string"
|
|
2886
|
+
},
|
|
2887
|
+
"eventTime": {
|
|
2888
|
+
"description": "Timestamp of data access event.",
|
|
2889
|
+
"format": "google-datetime",
|
|
2890
|
+
"type": "string"
|
|
2891
|
+
},
|
|
2892
|
+
"operation": {
|
|
2893
|
+
"description": "The operation performed by the principal to access the data.",
|
|
2894
|
+
"enum": [
|
|
2895
|
+
"OPERATION_UNSPECIFIED",
|
|
2896
|
+
"READ",
|
|
2897
|
+
"MOVE",
|
|
2898
|
+
"COPY"
|
|
2899
|
+
],
|
|
2900
|
+
"enumDescriptions": [
|
|
2901
|
+
"The operation is unspecified.",
|
|
2902
|
+
"Represents a read operation.",
|
|
2903
|
+
"Represents a move operation.",
|
|
2904
|
+
"Represents a copy operation."
|
|
2905
|
+
],
|
|
2906
|
+
"type": "string"
|
|
2907
|
+
},
|
|
2908
|
+
"principalEmail": {
|
|
2909
|
+
"description": "The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.",
|
|
2910
|
+
"type": "string"
|
|
2911
|
+
}
|
|
2912
|
+
},
|
|
2913
|
+
"type": "object"
|
|
2914
|
+
},
|
|
2915
|
+
"DataFlowEvent": {
|
|
2916
|
+
"description": "Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.",
|
|
2917
|
+
"id": "DataFlowEvent",
|
|
2918
|
+
"properties": {
|
|
2919
|
+
"eventId": {
|
|
2920
|
+
"description": "Unique identifier for data flow event.",
|
|
2921
|
+
"type": "string"
|
|
2922
|
+
},
|
|
2923
|
+
"eventTime": {
|
|
2924
|
+
"description": "Timestamp of data flow event.",
|
|
2925
|
+
"format": "google-datetime",
|
|
2926
|
+
"type": "string"
|
|
2927
|
+
},
|
|
2928
|
+
"operation": {
|
|
2929
|
+
"description": "The operation performed by the principal for the data flow event.",
|
|
2930
|
+
"enum": [
|
|
2931
|
+
"OPERATION_UNSPECIFIED",
|
|
2932
|
+
"READ",
|
|
2933
|
+
"MOVE",
|
|
2934
|
+
"COPY"
|
|
2935
|
+
],
|
|
2936
|
+
"enumDescriptions": [
|
|
2937
|
+
"The operation is unspecified.",
|
|
2938
|
+
"Represents a read operation.",
|
|
2939
|
+
"Represents a move operation.",
|
|
2940
|
+
"Represents a copy operation."
|
|
2941
|
+
],
|
|
2942
|
+
"type": "string"
|
|
2943
|
+
},
|
|
2944
|
+
"principalEmail": {
|
|
2945
|
+
"description": "The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.",
|
|
2946
|
+
"type": "string"
|
|
2947
|
+
},
|
|
2948
|
+
"violatedLocation": {
|
|
2949
|
+
"description": "Non-compliant location of the principal or the data destination.",
|
|
2950
|
+
"type": "string"
|
|
2951
|
+
}
|
|
2952
|
+
},
|
|
2953
|
+
"type": "object"
|
|
2954
|
+
},
|
|
2859
2955
|
"Database": {
|
|
2860
2956
|
"description": "Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.",
|
|
2861
2957
|
"id": "Database",
|
|
@@ -3207,6 +3303,20 @@
|
|
|
3207
3303
|
"format": "google-datetime",
|
|
3208
3304
|
"type": "string"
|
|
3209
3305
|
},
|
|
3306
|
+
"dataAccessEvents": {
|
|
3307
|
+
"description": "Data access events associated with the finding.",
|
|
3308
|
+
"items": {
|
|
3309
|
+
"$ref": "DataAccessEvent"
|
|
3310
|
+
},
|
|
3311
|
+
"type": "array"
|
|
3312
|
+
},
|
|
3313
|
+
"dataFlowEvents": {
|
|
3314
|
+
"description": "Data flow events associated with the finding.",
|
|
3315
|
+
"items": {
|
|
3316
|
+
"$ref": "DataFlowEvent"
|
|
3317
|
+
},
|
|
3318
|
+
"type": "array"
|
|
3319
|
+
},
|
|
3210
3320
|
"database": {
|
|
3211
3321
|
"$ref": "Database",
|
|
3212
3322
|
"description": "Database associated with the finding."
|
|
@@ -3253,7 +3363,8 @@
|
|
|
3253
3363
|
"OBSERVATION",
|
|
3254
3364
|
"SCC_ERROR",
|
|
3255
3365
|
"POSTURE_VIOLATION",
|
|
3256
|
-
"TOXIC_COMBINATION"
|
|
3366
|
+
"TOXIC_COMBINATION",
|
|
3367
|
+
"SENSITIVE_DATA_RISK"
|
|
3257
3368
|
],
|
|
3258
3369
|
"enumDescriptions": [
|
|
3259
3370
|
"Unspecified finding class.",
|
|
@@ -3263,7 +3374,8 @@
|
|
|
3263
3374
|
"Describes a security observation that is for informational purposes.",
|
|
3264
3375
|
"Describes an error that prevents some SCC functionality.",
|
|
3265
3376
|
"Describes a potential security risk due to a change in the security posture.",
|
|
3266
|
-
"Describes a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination."
|
|
3377
|
+
"Describes a group of security issues that, when the issues occur together, represent a greater risk than when the issues occur independently. A group of such issues is referred to as a toxic combination.",
|
|
3378
|
+
"Describes a potential security risk to data assets that contain sensitive data."
|
|
3267
3379
|
],
|
|
3268
3380
|
"type": "string"
|
|
3269
3381
|
},
|
|
@@ -4656,6 +4768,10 @@
|
|
|
4656
4768
|
"subscription": {
|
|
4657
4769
|
"$ref": "GoogleCloudSecuritycenterV2AzureSubscription",
|
|
4658
4770
|
"description": "The Azure subscription associated with the resource."
|
|
4771
|
+
},
|
|
4772
|
+
"tenant": {
|
|
4773
|
+
"$ref": "GoogleCloudSecuritycenterV2AzureTenant",
|
|
4774
|
+
"description": "The Azure Entra tenant associated with the resource."
|
|
4659
4775
|
}
|
|
4660
4776
|
},
|
|
4661
4777
|
"type": "object"
|
|
@@ -4686,6 +4802,17 @@
|
|
|
4686
4802
|
},
|
|
4687
4803
|
"type": "object"
|
|
4688
4804
|
},
|
|
4805
|
+
"GoogleCloudSecuritycenterV2AzureTenant": {
|
|
4806
|
+
"description": "Represents a Microsoft Entra tenant.",
|
|
4807
|
+
"id": "GoogleCloudSecuritycenterV2AzureTenant",
|
|
4808
|
+
"properties": {
|
|
4809
|
+
"id": {
|
|
4810
|
+
"description": "The ID of the Microsoft Entra tenant, for example, \"a11aaa11-aa11-1aa1-11aa-1aaa11a\".",
|
|
4811
|
+
"type": "string"
|
|
4812
|
+
}
|
|
4813
|
+
},
|
|
4814
|
+
"type": "object"
|
|
4815
|
+
},
|
|
4689
4816
|
"GoogleCloudSecuritycenterV2BackupDisasterRecovery": {
|
|
4690
4817
|
"description": "Information related to Google Cloud Backup and DR Service findings.",
|
|
4691
4818
|
"id": "GoogleCloudSecuritycenterV2BackupDisasterRecovery",
|
|
@@ -5081,6 +5208,11 @@
|
|
|
5081
5208
|
],
|
|
5082
5209
|
"type": "string"
|
|
5083
5210
|
},
|
|
5211
|
+
"firstExploitationDate": {
|
|
5212
|
+
"description": "Date of the earliest known exploitation.",
|
|
5213
|
+
"format": "google-datetime",
|
|
5214
|
+
"type": "string"
|
|
5215
|
+
},
|
|
5084
5216
|
"id": {
|
|
5085
5217
|
"description": "The unique identifier for the vulnerability. e.g. CVE-2021-34527",
|
|
5086
5218
|
"type": "string"
|
|
@@ -5261,6 +5393,82 @@
|
|
|
5261
5393
|
},
|
|
5262
5394
|
"type": "object"
|
|
5263
5395
|
},
|
|
5396
|
+
"GoogleCloudSecuritycenterV2DataAccessEvent": {
|
|
5397
|
+
"description": "Details about a data access attempt made by a principal not authorized under applicable data security policy.",
|
|
5398
|
+
"id": "GoogleCloudSecuritycenterV2DataAccessEvent",
|
|
5399
|
+
"properties": {
|
|
5400
|
+
"eventId": {
|
|
5401
|
+
"description": "Unique identifier for data access event.",
|
|
5402
|
+
"type": "string"
|
|
5403
|
+
},
|
|
5404
|
+
"eventTime": {
|
|
5405
|
+
"description": "Timestamp of data access event.",
|
|
5406
|
+
"format": "google-datetime",
|
|
5407
|
+
"type": "string"
|
|
5408
|
+
},
|
|
5409
|
+
"operation": {
|
|
5410
|
+
"description": "The operation performed by the principal to access the data.",
|
|
5411
|
+
"enum": [
|
|
5412
|
+
"OPERATION_UNSPECIFIED",
|
|
5413
|
+
"READ",
|
|
5414
|
+
"MOVE",
|
|
5415
|
+
"COPY"
|
|
5416
|
+
],
|
|
5417
|
+
"enumDescriptions": [
|
|
5418
|
+
"The operation is unspecified.",
|
|
5419
|
+
"Represents a read operation.",
|
|
5420
|
+
"Represents a move operation.",
|
|
5421
|
+
"Represents a copy operation."
|
|
5422
|
+
],
|
|
5423
|
+
"type": "string"
|
|
5424
|
+
},
|
|
5425
|
+
"principalEmail": {
|
|
5426
|
+
"description": "The email address of the principal that accessed the data. The principal could be a user account, service account, Google group, or other.",
|
|
5427
|
+
"type": "string"
|
|
5428
|
+
}
|
|
5429
|
+
},
|
|
5430
|
+
"type": "object"
|
|
5431
|
+
},
|
|
5432
|
+
"GoogleCloudSecuritycenterV2DataFlowEvent": {
|
|
5433
|
+
"description": "Details about a data flow event, in which either the data is moved to or is accessed from a non-compliant geo-location, as defined in the applicable data security policy.",
|
|
5434
|
+
"id": "GoogleCloudSecuritycenterV2DataFlowEvent",
|
|
5435
|
+
"properties": {
|
|
5436
|
+
"eventId": {
|
|
5437
|
+
"description": "Unique identifier for data flow event.",
|
|
5438
|
+
"type": "string"
|
|
5439
|
+
},
|
|
5440
|
+
"eventTime": {
|
|
5441
|
+
"description": "Timestamp of data flow event.",
|
|
5442
|
+
"format": "google-datetime",
|
|
5443
|
+
"type": "string"
|
|
5444
|
+
},
|
|
5445
|
+
"operation": {
|
|
5446
|
+
"description": "The operation performed by the principal for the data flow event.",
|
|
5447
|
+
"enum": [
|
|
5448
|
+
"OPERATION_UNSPECIFIED",
|
|
5449
|
+
"READ",
|
|
5450
|
+
"MOVE",
|
|
5451
|
+
"COPY"
|
|
5452
|
+
],
|
|
5453
|
+
"enumDescriptions": [
|
|
5454
|
+
"The operation is unspecified.",
|
|
5455
|
+
"Represents a read operation.",
|
|
5456
|
+
"Represents a move operation.",
|
|
5457
|
+
"Represents a copy operation."
|
|
5458
|
+
],
|
|
5459
|
+
"type": "string"
|
|
5460
|
+
},
|
|
5461
|
+
"principalEmail": {
|
|
5462
|
+
"description": "The email address of the principal that initiated the data flow event. The principal could be a user account, service account, Google group, or other.",
|
|
5463
|
+
"type": "string"
|
|
5464
|
+
},
|
|
5465
|
+
"violatedLocation": {
|
|
5466
|
+
"description": "Non-compliant location of the principal or the data destination.",
|
|
5467
|
+
"type": "string"
|
|
5468
|
+
}
|
|
5469
|
+
},
|
|
5470
|
+
"type": "object"
|
|
5471
|
+
},
|
|
5264
5472
|
"GoogleCloudSecuritycenterV2Database": {
|
|
5265
5473
|
"description": "Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.",
|
|
5266
5474
|
"id": "GoogleCloudSecuritycenterV2Database",
|
|
@@ -5572,6 +5780,20 @@
|
|
|
5572
5780
|
"readOnly": true,
|
|
5573
5781
|
"type": "string"
|
|
5574
5782
|
},
|
|
5783
|
+
"dataAccessEvents": {
|
|
5784
|
+
"description": "Data access events associated with the finding.",
|
|
5785
|
+
"items": {
|
|
5786
|
+
"$ref": "GoogleCloudSecuritycenterV2DataAccessEvent"
|
|
5787
|
+
},
|
|
5788
|
+
"type": "array"
|
|
5789
|
+
},
|
|
5790
|
+
"dataFlowEvents": {
|
|
5791
|
+
"description": "Data flow events associated with the finding.",
|
|
5792
|
+
"items": {
|
|
5793
|
+
"$ref": "GoogleCloudSecuritycenterV2DataFlowEvent"
|
|
5794
|
+
},
|
|
5795
|
+
"type": "array"
|
|
5796
|
+
},
|
|
5575
5797
|
"database": {
|
|
5576
5798
|
"$ref": "GoogleCloudSecuritycenterV2Database",
|
|
5577
5799
|
"description": "Database associated with the finding."
|
|
@@ -5618,7 +5840,8 @@
|
|
|
5618
5840
|
"OBSERVATION",
|
|
5619
5841
|
"SCC_ERROR",
|
|
5620
5842
|
"POSTURE_VIOLATION",
|
|
5621
|
-
"TOXIC_COMBINATION"
|
|
5843
|
+
"TOXIC_COMBINATION",
|
|
5844
|
+
"SENSITIVE_DATA_RISK"
|
|
5622
5845
|
],
|
|
5623
5846
|
"enumDescriptions": [
|
|
5624
5847
|
"Unspecified finding class.",
|
|
@@ -5628,7 +5851,8 @@
|
|
|
5628
5851
|
"Describes a security observation that is for informational purposes.",
|
|
5629
5852
|
"Describes an error that prevents some SCC functionality.",
|
|
5630
5853
|
"Describes a potential security risk due to a change in the security posture.",
|
|
5631
|
-
"Describes a combination of security issues that represent a more severe security problem when taken together."
|
|
5854
|
+
"Describes a combination of security issues that represent a more severe security problem when taken together.",
|
|
5855
|
+
"Describes a potential security risk to data assets that contain sensitive data."
|
|
5632
5856
|
],
|
|
5633
5857
|
"type": "string"
|
|
5634
5858
|
},
|