google-api-python-client 2.148.0__py2.py3-none-any.whl → 2.149.0__py2.py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {google_api_python_client-2.148.0.dist-info → google_api_python_client-2.149.0.dist-info}/METADATA +1 -1
- {google_api_python_client-2.148.0.dist-info → google_api_python_client-2.149.0.dist-info}/RECORD +79 -79
- googleapiclient/discovery_cache/documents/adexchangebuyer2.v2beta1.json +5 -5
- googleapiclient/discovery_cache/documents/aiplatform.v1.json +4 -4
- googleapiclient/discovery_cache/documents/aiplatform.v1beta1.json +5 -5
- googleapiclient/discovery_cache/documents/analyticsadmin.v1alpha.json +2 -2
- googleapiclient/discovery_cache/documents/androidpublisher.v3.json +1 -16
- googleapiclient/discovery_cache/documents/apigee.v1.json +322 -1
- googleapiclient/discovery_cache/documents/artifactregistry.v1.json +15 -21
- googleapiclient/discovery_cache/documents/artifactregistry.v1beta1.json +2 -2
- googleapiclient/discovery_cache/documents/artifactregistry.v1beta2.json +2 -2
- googleapiclient/discovery_cache/documents/authorizedbuyersmarketplace.v1.json +5 -5
- googleapiclient/discovery_cache/documents/authorizedbuyersmarketplace.v1alpha.json +5 -5
- googleapiclient/discovery_cache/documents/backupdr.v1.json +48 -1
- googleapiclient/discovery_cache/documents/batch.v1.json +2 -2
- googleapiclient/discovery_cache/documents/beyondcorp.v1.json +721 -27
- googleapiclient/discovery_cache/documents/beyondcorp.v1alpha.json +45 -92
- googleapiclient/discovery_cache/documents/bigquery.v2.json +74 -5
- googleapiclient/discovery_cache/documents/businessprofileperformance.v1.json +9 -9
- googleapiclient/discovery_cache/documents/calendar.v3.json +2 -2
- googleapiclient/discovery_cache/documents/chat.v1.json +95 -22
- googleapiclient/discovery_cache/documents/chromemanagement.v1.json +6 -4
- googleapiclient/discovery_cache/documents/chromepolicy.v1.json +3 -3
- googleapiclient/discovery_cache/documents/clouddeploy.v1.json +96 -5
- googleapiclient/discovery_cache/documents/cloudidentity.v1beta1.json +2 -2
- googleapiclient/discovery_cache/documents/cloudkms.v1.json +2 -2
- googleapiclient/discovery_cache/documents/container.v1.json +75 -3
- googleapiclient/discovery_cache/documents/container.v1beta1.json +75 -3
- googleapiclient/discovery_cache/documents/datamigration.v1.json +113 -1
- googleapiclient/discovery_cache/documents/dataplex.v1.json +2 -2
- googleapiclient/discovery_cache/documents/dataproc.v1.json +8950 -3781
- googleapiclient/discovery_cache/documents/developerconnect.v1.json +46 -1
- googleapiclient/discovery_cache/documents/discoveryengine.v1.json +56 -8
- googleapiclient/discovery_cache/documents/discoveryengine.v1alpha.json +56 -8
- googleapiclient/discovery_cache/documents/discoveryengine.v1beta.json +123 -1
- googleapiclient/discovery_cache/documents/displayvideo.v2.json +5 -5
- googleapiclient/discovery_cache/documents/displayvideo.v3.json +6 -6
- googleapiclient/discovery_cache/documents/factchecktools.v1alpha1.json +6 -14
- googleapiclient/discovery_cache/documents/firebaseappcheck.v1.json +9 -9
- googleapiclient/discovery_cache/documents/firebaseappcheck.v1beta.json +8 -8
- googleapiclient/discovery_cache/documents/firebaseappdistribution.v1alpha.json +52 -2
- googleapiclient/discovery_cache/documents/firebaseml.v2beta.json +7 -3
- googleapiclient/discovery_cache/documents/language.v1.json +27 -1
- googleapiclient/discovery_cache/documents/language.v1beta2.json +27 -1
- googleapiclient/discovery_cache/documents/language.v2.json +38 -1
- googleapiclient/discovery_cache/documents/merchantapi.accounts_v1beta.json +8 -22
- googleapiclient/discovery_cache/documents/merchantapi.conversions_v1beta.json +2 -2
- googleapiclient/discovery_cache/documents/merchantapi.notifications_v1beta.json +2 -2
- googleapiclient/discovery_cache/documents/merchantapi.products_v1beta.json +4 -4
- googleapiclient/discovery_cache/documents/migrationcenter.v1.json +4 -3
- googleapiclient/discovery_cache/documents/migrationcenter.v1alpha1.json +5 -4
- googleapiclient/discovery_cache/documents/monitoring.v1.json +8 -6
- googleapiclient/discovery_cache/documents/monitoring.v3.json +153 -1
- googleapiclient/discovery_cache/documents/mybusinessbusinessinformation.v1.json +5 -5
- googleapiclient/discovery_cache/documents/mybusinesslodging.v1.json +5 -5
- googleapiclient/discovery_cache/documents/osconfig.v1.json +5 -5
- googleapiclient/discovery_cache/documents/osconfig.v1beta.json +5 -5
- googleapiclient/discovery_cache/documents/realtimebidding.v1.json +3 -3
- googleapiclient/discovery_cache/documents/run.v1.json +6 -4
- googleapiclient/discovery_cache/documents/run.v2.json +10 -4
- googleapiclient/discovery_cache/documents/searchads360.v0.json +98 -4
- googleapiclient/discovery_cache/documents/securitycenter.v1.json +24 -208
- googleapiclient/discovery_cache/documents/securitycenter.v1beta1.json +24 -1
- googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json +1 -1
- googleapiclient/discovery_cache/documents/serviceconsumermanagement.v1.json +2 -2
- googleapiclient/discovery_cache/documents/serviceconsumermanagement.v1beta1.json +2 -2
- googleapiclient/discovery_cache/documents/servicemanagement.v1.json +2 -2
- googleapiclient/discovery_cache/documents/serviceusage.v1.json +2 -2
- googleapiclient/discovery_cache/documents/serviceusage.v1beta1.json +2 -2
- googleapiclient/discovery_cache/documents/speech.v1.json +5 -3
- googleapiclient/discovery_cache/documents/speech.v1p1beta1.json +5 -3
- googleapiclient/discovery_cache/documents/storagetransfer.v1.json +7 -7
- googleapiclient/discovery_cache/documents/texttospeech.v1.json +178 -1
- googleapiclient/discovery_cache/documents/texttospeech.v1beta1.json +180 -1
- googleapiclient/discovery_cache/documents/workflows.v1.json +2 -2
- googleapiclient/version.py +1 -1
- {google_api_python_client-2.148.0.dist-info → google_api_python_client-2.149.0.dist-info}/LICENSE +0 -0
- {google_api_python_client-2.148.0.dist-info → google_api_python_client-2.149.0.dist-info}/WHEEL +0 -0
- {google_api_python_client-2.148.0.dist-info → google_api_python_client-2.149.0.dist-info}/top_level.txt +0 -0
|
@@ -2614,7 +2614,7 @@
|
|
|
2614
2614
|
}
|
|
2615
2615
|
}
|
|
2616
2616
|
},
|
|
2617
|
-
"revision": "
|
|
2617
|
+
"revision": "20240927",
|
|
2618
2618
|
"rootUrl": "https://run.googleapis.com/",
|
|
2619
2619
|
"schemas": {
|
|
2620
2620
|
"Addressable": {
|
|
@@ -3801,11 +3801,13 @@
|
|
|
3801
3801
|
"description": "Optional. Option to specify how default logs buckets are setup.",
|
|
3802
3802
|
"enum": [
|
|
3803
3803
|
"DEFAULT_LOGS_BUCKET_BEHAVIOR_UNSPECIFIED",
|
|
3804
|
-
"REGIONAL_USER_OWNED_BUCKET"
|
|
3804
|
+
"REGIONAL_USER_OWNED_BUCKET",
|
|
3805
|
+
"LEGACY_BUCKET"
|
|
3805
3806
|
],
|
|
3806
3807
|
"enumDescriptions": [
|
|
3807
3808
|
"Unspecified.",
|
|
3808
|
-
"Bucket is located in user-owned project in the same region as the build. The builder service account must have access to create and write to Cloud Storage buckets in the build project."
|
|
3809
|
+
"Bucket is located in user-owned project in the same region as the build. The builder service account must have access to create and write to Cloud Storage buckets in the build project.",
|
|
3810
|
+
"Bucket is located in a Google-owned project and is not regionalized."
|
|
3809
3811
|
],
|
|
3810
3812
|
"type": "string"
|
|
3811
3813
|
},
|
|
@@ -5381,7 +5383,7 @@ false
|
|
|
5381
5383
|
"additionalProperties": {
|
|
5382
5384
|
"type": "string"
|
|
5383
5385
|
},
|
|
5384
|
-
"description": "Unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. In Cloud Run, annotations with 'run.googleapis.com/' and 'autoscaling.knative.dev' are restricted, and the accepted annotations will be different depending on the resource type. * `autoscaling.knative.dev/maxScale`: Revision. * `autoscaling.knative.dev/minScale`: Revision. * `run.googleapis.com/base-images`: Service, Revision. * `run.googleapis.com/binary-authorization-breakglass`: Service, Job, * `run.googleapis.com/binary-authorization`: Service, Job, Execution. * `run.googleapis.com/build-base-image`: Service. * `run.googleapis.com/build-enable-automatic-updates`: Service. * `run.googleapis.com/build-environment-variables`: Service. * `run.googleapis.com/build-function-target`: Service. * `run.googleapis.com/build-id`: Service. * `run.googleapis.com/build-image-uri`: Service. * `run.googleapis.com/build-name`: Service. * `run.googleapis.com/build-service-account`: Service. * `run.googleapis.com/build-source-location`: Service. * `run.googleapis.com/build-worker-pool`: Service. * `run.googleapis.com/client-name`: All resources. * `run.googleapis.com/cloudsql-instances`: Revision, Execution. * `run.googleapis.com/container-dependencies`: Revision . * `run.googleapis.com/cpu-throttling`: Revision. * `run.googleapis.com/custom-audiences`: Service. * `run.googleapis.com/default-url-disabled`: Service. * `run.googleapis.com/description`: Service. * `run.googleapis.com/encryption-key-shutdown-hours`: Revision * `run.googleapis.com/encryption-key`: Revision, Execution. * `run.googleapis.com/execution-environment`: Revision, Execution. * `run.googleapis.com/gc-traffic-tags`: Service. * `run.googleapis.com/ingress`: Service. * `run.googleapis.com/launch-stage`: Service, Job. * `run.googleapis.com/minScale`: Service
|
|
5386
|
+
"description": "Unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. In Cloud Run, annotations with 'run.googleapis.com/' and 'autoscaling.knative.dev' are restricted, and the accepted annotations will be different depending on the resource type. * `autoscaling.knative.dev/maxScale`: Revision. * `autoscaling.knative.dev/minScale`: Revision. * `run.googleapis.com/base-images`: Service, Revision. * `run.googleapis.com/binary-authorization-breakglass`: Service, Job, * `run.googleapis.com/binary-authorization`: Service, Job, Execution. * `run.googleapis.com/build-base-image`: Service. * `run.googleapis.com/build-enable-automatic-updates`: Service. * `run.googleapis.com/build-environment-variables`: Service. * `run.googleapis.com/build-function-target`: Service. * `run.googleapis.com/build-id`: Service. * `run.googleapis.com/build-image-uri`: Service. * `run.googleapis.com/build-name`: Service. * `run.googleapis.com/build-service-account`: Service. * `run.googleapis.com/build-source-location`: Service. * `run.googleapis.com/build-worker-pool`: Service. * `run.googleapis.com/client-name`: All resources. * `run.googleapis.com/cloudsql-instances`: Revision, Execution. * `run.googleapis.com/container-dependencies`: Revision . * `run.googleapis.com/cpu-throttling`: Revision. * `run.googleapis.com/custom-audiences`: Service. * `run.googleapis.com/default-url-disabled`: Service. * `run.googleapis.com/description`: Service. * `run.googleapis.com/encryption-key-shutdown-hours`: Revision * `run.googleapis.com/encryption-key`: Revision, Execution. * `run.googleapis.com/execution-environment`: Revision, Execution. * `run.googleapis.com/gc-traffic-tags`: Service. * `run.googleapis.com/ingress`: Service. * `run.googleapis.com/launch-stage`: Service, Job. * `run.googleapis.com/minScale`: Service * `run.googleapis.com/network-interfaces`: Revision, Execution. * `run.googleapis.com/post-key-revocation-action-type`: Revision. * `run.googleapis.com/secrets`: Revision, Execution. * `run.googleapis.com/secure-session-agent`: Revision. * `run.googleapis.com/sessionAffinity`: Revision. * `run.googleapis.com/startup-cpu-boost`: Revision. * `run.googleapis.com/vpc-access-connector`: Revision, Execution. * `run.googleapis.com/vpc-access-egress`: Revision, Execution.",
|
|
5385
5387
|
"type": "object"
|
|
5386
5388
|
},
|
|
5387
5389
|
"clusterName": {
|
|
@@ -1526,7 +1526,7 @@
|
|
|
1526
1526
|
}
|
|
1527
1527
|
}
|
|
1528
1528
|
},
|
|
1529
|
-
"revision": "
|
|
1529
|
+
"revision": "20240927",
|
|
1530
1530
|
"rootUrl": "https://run.googleapis.com/",
|
|
1531
1531
|
"schemas": {
|
|
1532
1532
|
"GoogleCloudRunV2BinaryAuthorization": {
|
|
@@ -3258,6 +3258,10 @@
|
|
|
3258
3258
|
],
|
|
3259
3259
|
"type": "string"
|
|
3260
3260
|
},
|
|
3261
|
+
"invokerIamDisabled": {
|
|
3262
|
+
"description": "Optional. Disables IAM permission check for run.routes.invoke for callers of this service. This setting should not be used with external ingress.",
|
|
3263
|
+
"type": "boolean"
|
|
3264
|
+
},
|
|
3261
3265
|
"labels": {
|
|
3262
3266
|
"additionalProperties": {
|
|
3263
3267
|
"type": "string"
|
|
@@ -3395,7 +3399,7 @@
|
|
|
3395
3399
|
"id": "GoogleCloudRunV2ServiceScaling",
|
|
3396
3400
|
"properties": {
|
|
3397
3401
|
"minInstanceCount": {
|
|
3398
|
-
"description": "Optional. total min instances for the service. This number of instances is divided among all revisions with specified traffic based on the percent of traffic they are receiving.
|
|
3402
|
+
"description": "Optional. total min instances for the service. This number of instances is divided among all revisions with specified traffic based on the percent of traffic they are receiving.",
|
|
3399
3403
|
"format": "int32",
|
|
3400
3404
|
"type": "integer"
|
|
3401
3405
|
},
|
|
@@ -4309,11 +4313,13 @@
|
|
|
4309
4313
|
"description": "Optional. Option to specify how default logs buckets are setup.",
|
|
4310
4314
|
"enum": [
|
|
4311
4315
|
"DEFAULT_LOGS_BUCKET_BEHAVIOR_UNSPECIFIED",
|
|
4312
|
-
"REGIONAL_USER_OWNED_BUCKET"
|
|
4316
|
+
"REGIONAL_USER_OWNED_BUCKET",
|
|
4317
|
+
"LEGACY_BUCKET"
|
|
4313
4318
|
],
|
|
4314
4319
|
"enumDescriptions": [
|
|
4315
4320
|
"Unspecified.",
|
|
4316
|
-
"Bucket is located in user-owned project in the same region as the build. The builder service account must have access to create and write to Cloud Storage buckets in the build project."
|
|
4321
|
+
"Bucket is located in user-owned project in the same region as the build. The builder service account must have access to create and write to Cloud Storage buckets in the build project.",
|
|
4322
|
+
"Bucket is located in a Google-owned project and is not regionalized."
|
|
4317
4323
|
],
|
|
4318
4324
|
"type": "string"
|
|
4319
4325
|
},
|
|
@@ -260,7 +260,7 @@
|
|
|
260
260
|
}
|
|
261
261
|
}
|
|
262
262
|
},
|
|
263
|
-
"revision": "
|
|
263
|
+
"revision": "20241002",
|
|
264
264
|
"rootUrl": "https://searchads360.googleapis.com/",
|
|
265
265
|
"schemas": {
|
|
266
266
|
"GoogleAdsSearchads360V0Common__AdScheduleInfo": {
|
|
@@ -1170,11 +1170,21 @@
|
|
|
1170
1170
|
"format": "double",
|
|
1171
1171
|
"type": "number"
|
|
1172
1172
|
},
|
|
1173
|
+
"crossDeviceConversionsByConversionDate": {
|
|
1174
|
+
"description": "The number of cross-device conversions by conversion date. Details for the by_conversion_date columns are available at https://support.google.com/sa360/answer/9250611.",
|
|
1175
|
+
"format": "double",
|
|
1176
|
+
"type": "number"
|
|
1177
|
+
},
|
|
1173
1178
|
"crossDeviceConversionsValue": {
|
|
1174
1179
|
"description": "The sum of the value of cross-device conversions.",
|
|
1175
1180
|
"format": "double",
|
|
1176
1181
|
"type": "number"
|
|
1177
1182
|
},
|
|
1183
|
+
"crossDeviceConversionsValueByConversionDate": {
|
|
1184
|
+
"description": "The sum of cross-device conversions value by conversion date. Details for the by_conversion_date columns are available at https://support.google.com/sa360/answer/9250611.",
|
|
1185
|
+
"format": "double",
|
|
1186
|
+
"type": "number"
|
|
1187
|
+
},
|
|
1178
1188
|
"crossSellCostOfGoodsSoldMicros": {
|
|
1179
1189
|
"description": "Cross-sell cost of goods sold (COGS) is the total cost of products sold as a result of advertising a different product. How it works: You report conversions with cart data for completed purchases on your website. If the ad that was interacted with before the purchase has an associated product (see Shopping Ads) then this product is considered the advertised product. Any product included in the order the customer places is a sold product. If these products don't match then this is considered cross-sell. Cross-sell cost of goods sold is the total cost of the products sold that weren't advertised. Example: Someone clicked on a Shopping ad for a hat then bought the same hat and a shirt. The hat has a cost of goods sold value of $3, the shirt has a cost of goods sold value of $5. The cross-sell cost of goods sold for this order is $5. This metric is only available if you report conversions with cart data. This metric is a monetary value and returned in the customer's currency by default. See the metrics_currency parameter at https://developers.google.com/search-ads/reporting/query/query-structure#parameters_clause",
|
|
1180
1190
|
"format": "int64",
|
|
@@ -1200,6 +1210,16 @@
|
|
|
1200
1210
|
"format": "double",
|
|
1201
1211
|
"type": "number"
|
|
1202
1212
|
},
|
|
1213
|
+
"generalInvalidClickRate": {
|
|
1214
|
+
"description": "The percentage of clicks that have been filtered out of your total number of clicks (filtered + non-filtered clicks) due to being general invalid clicks. These are clicks Google considers illegitimate that are detected through routine means of filtration (that is, known invalid data-center traffic, bots and spiders or other crawlers, irregular patterns, etc). You're not charged for them, and they don't affect your account statistics. See the help page at https://support.google.com/campaignmanager/answer/6076504 for details.",
|
|
1215
|
+
"format": "double",
|
|
1216
|
+
"type": "number"
|
|
1217
|
+
},
|
|
1218
|
+
"generalInvalidClicks": {
|
|
1219
|
+
"description": "Number of general invalid clicks. These are a subset of your invalid clicks that are detected through routine means of filtration (such as known invalid data-center traffic, bots and spiders or other crawlers, irregular patterns, etc.). You're not charged for them, and they don't affect your account statistics. See the help page at https://support.google.com/campaignmanager/answer/6076504 for details.",
|
|
1220
|
+
"format": "int64",
|
|
1221
|
+
"type": "string"
|
|
1222
|
+
},
|
|
1203
1223
|
"historicalCreativeQualityScore": {
|
|
1204
1224
|
"description": "The creative historical quality score.",
|
|
1205
1225
|
"enum": [
|
|
@@ -3384,7 +3404,7 @@
|
|
|
3384
3404
|
"id": "GoogleAdsSearchads360V0Resources_Campaign_SelectiveOptimization",
|
|
3385
3405
|
"properties": {
|
|
3386
3406
|
"conversionActions": {
|
|
3387
|
-
"description": "The selected set of conversion actions for optimizing this campaign.",
|
|
3407
|
+
"description": "The selected set of resource names for conversion actions for optimizing this campaign.",
|
|
3388
3408
|
"items": {
|
|
3389
3409
|
"type": "string"
|
|
3390
3410
|
},
|
|
@@ -4020,6 +4040,14 @@
|
|
|
4020
4040
|
"readOnly": true,
|
|
4021
4041
|
"type": "string"
|
|
4022
4042
|
},
|
|
4043
|
+
"effectiveLabels": {
|
|
4044
|
+
"description": "Output only. The resource names of effective labels attached to this ad group. An effective label is a label inherited or directly assigned to this ad group.",
|
|
4045
|
+
"items": {
|
|
4046
|
+
"type": "string"
|
|
4047
|
+
},
|
|
4048
|
+
"readOnly": true,
|
|
4049
|
+
"type": "array"
|
|
4050
|
+
},
|
|
4023
4051
|
"endDate": {
|
|
4024
4052
|
"description": "Output only. Date when the ad group ends serving ads. By default, the ad group ends on the ad group's end date. If this field is set, then the ad group ends at the end of the specified date in the customer's time zone. This field is only available for Microsoft Advertising and Facebook gateway accounts. Format: YYYY-MM-DD Example: 2019-03-14",
|
|
4025
4053
|
"readOnly": true,
|
|
@@ -4761,6 +4789,31 @@ false
|
|
|
4761
4789
|
},
|
|
4762
4790
|
"type": "object"
|
|
4763
4791
|
},
|
|
4792
|
+
"GoogleAdsSearchads360V0Resources__AdGroupEffectiveLabel": {
|
|
4793
|
+
"description": "A relationship between an ad group and an effective label. An effective label is a label inherited or directly assigned to this ad group.",
|
|
4794
|
+
"id": "GoogleAdsSearchads360V0Resources__AdGroupEffectiveLabel",
|
|
4795
|
+
"properties": {
|
|
4796
|
+
"adGroup": {
|
|
4797
|
+
"description": "Immutable. The ad group to which the effective label is attached.",
|
|
4798
|
+
"type": "string"
|
|
4799
|
+
},
|
|
4800
|
+
"label": {
|
|
4801
|
+
"description": "Immutable. The effective label assigned to the ad group.",
|
|
4802
|
+
"type": "string"
|
|
4803
|
+
},
|
|
4804
|
+
"ownerCustomerId": {
|
|
4805
|
+
"description": "Output only. The ID of the Customer which owns the effective label.",
|
|
4806
|
+
"format": "int64",
|
|
4807
|
+
"readOnly": true,
|
|
4808
|
+
"type": "string"
|
|
4809
|
+
},
|
|
4810
|
+
"resourceName": {
|
|
4811
|
+
"description": "Immutable. The resource name of the ad group effective label. Ad group effective label resource names have the form: `customers/{customer_id}/adGroupEffectiveLabels/{ad_group_id}~{label_id}`",
|
|
4812
|
+
"type": "string"
|
|
4813
|
+
}
|
|
4814
|
+
},
|
|
4815
|
+
"type": "object"
|
|
4816
|
+
},
|
|
4764
4817
|
"GoogleAdsSearchads360V0Resources__AdGroupLabel": {
|
|
4765
4818
|
"description": "A relationship between an ad group and a label.",
|
|
4766
4819
|
"id": "GoogleAdsSearchads360V0Resources__AdGroupLabel",
|
|
@@ -5651,7 +5704,7 @@ false
|
|
|
5651
5704
|
"type": "string"
|
|
5652
5705
|
},
|
|
5653
5706
|
"biddingStrategy": {
|
|
5654
|
-
"description": "
|
|
5707
|
+
"description": "The resource name of the portfolio bidding strategy used by the campaign.",
|
|
5655
5708
|
"type": "string"
|
|
5656
5709
|
},
|
|
5657
5710
|
"biddingStrategySystemStatus": {
|
|
@@ -5765,7 +5818,7 @@ false
|
|
|
5765
5818
|
"type": "string"
|
|
5766
5819
|
},
|
|
5767
5820
|
"campaignBudget": {
|
|
5768
|
-
"description": "The budget of the campaign.",
|
|
5821
|
+
"description": "The resource name of the campaign budget of the campaign.",
|
|
5769
5822
|
"type": "string"
|
|
5770
5823
|
},
|
|
5771
5824
|
"createTime": {
|
|
@@ -5782,6 +5835,14 @@ false
|
|
|
5782
5835
|
"$ref": "GoogleAdsSearchads360V0Resources_Campaign_DynamicSearchAdsSetting",
|
|
5783
5836
|
"description": "The setting for controlling Dynamic Search Ads (DSA)."
|
|
5784
5837
|
},
|
|
5838
|
+
"effectiveLabels": {
|
|
5839
|
+
"description": "Output only. The resource names of effective labels attached to this campaign. An effective label is a label inherited or directly assigned to this campaign.",
|
|
5840
|
+
"items": {
|
|
5841
|
+
"type": "string"
|
|
5842
|
+
},
|
|
5843
|
+
"readOnly": true,
|
|
5844
|
+
"type": "array"
|
|
5845
|
+
},
|
|
5785
5846
|
"endDate": {
|
|
5786
5847
|
"description": "The last day of the campaign in serving customer's timezone in YYYY-MM-DD format. On create, defaults to 2037-12-30, which means the campaign will run indefinitely. To set an existing campaign to run indefinitely, set this field to 2037-12-30.",
|
|
5787
5848
|
"type": "string"
|
|
@@ -6351,6 +6412,31 @@ false
|
|
|
6351
6412
|
},
|
|
6352
6413
|
"type": "object"
|
|
6353
6414
|
},
|
|
6415
|
+
"GoogleAdsSearchads360V0Resources__CampaignEffectiveLabel": {
|
|
6416
|
+
"description": "Represents a relationship between a campaign and an effective label. An effective label is a label inherited or directly assigned to this campaign.",
|
|
6417
|
+
"id": "GoogleAdsSearchads360V0Resources__CampaignEffectiveLabel",
|
|
6418
|
+
"properties": {
|
|
6419
|
+
"campaign": {
|
|
6420
|
+
"description": "Immutable. The campaign to which the effective label is attached.",
|
|
6421
|
+
"type": "string"
|
|
6422
|
+
},
|
|
6423
|
+
"label": {
|
|
6424
|
+
"description": "Immutable. The effective label assigned to the campaign.",
|
|
6425
|
+
"type": "string"
|
|
6426
|
+
},
|
|
6427
|
+
"ownerCustomerId": {
|
|
6428
|
+
"description": "Output only. The ID of the Customer which owns the effective label.",
|
|
6429
|
+
"format": "int64",
|
|
6430
|
+
"readOnly": true,
|
|
6431
|
+
"type": "string"
|
|
6432
|
+
},
|
|
6433
|
+
"resourceName": {
|
|
6434
|
+
"description": "Immutable. Name of the resource. CampaignEffectivelabel resource names have the form: `customers/{customer_id}/campaignEffectiveLabels/{campaign_id}~{label_id}`",
|
|
6435
|
+
"type": "string"
|
|
6436
|
+
}
|
|
6437
|
+
},
|
|
6438
|
+
"type": "object"
|
|
6439
|
+
},
|
|
6354
6440
|
"GoogleAdsSearchads360V0Resources__CampaignLabel": {
|
|
6355
6441
|
"description": "Represents a relationship between a campaign and a label.",
|
|
6356
6442
|
"id": "GoogleAdsSearchads360V0Resources__CampaignLabel",
|
|
@@ -8339,6 +8425,10 @@ false
|
|
|
8339
8425
|
"$ref": "GoogleAdsSearchads360V0Resources__AdGroupCriterionLabel",
|
|
8340
8426
|
"description": "The ad group criterion label referenced in the query."
|
|
8341
8427
|
},
|
|
8428
|
+
"adGroupEffectiveLabel": {
|
|
8429
|
+
"$ref": "GoogleAdsSearchads360V0Resources__AdGroupEffectiveLabel",
|
|
8430
|
+
"description": "The ad group effective label referenced in the query."
|
|
8431
|
+
},
|
|
8342
8432
|
"adGroupLabel": {
|
|
8343
8433
|
"$ref": "GoogleAdsSearchads360V0Resources__AdGroupLabel",
|
|
8344
8434
|
"description": "The ad group label referenced in the query."
|
|
@@ -8411,6 +8501,10 @@ false
|
|
|
8411
8501
|
"$ref": "GoogleAdsSearchads360V0Resources__CampaignCriterion",
|
|
8412
8502
|
"description": "The campaign criterion referenced in the query."
|
|
8413
8503
|
},
|
|
8504
|
+
"campaignEffectiveLabel": {
|
|
8505
|
+
"$ref": "GoogleAdsSearchads360V0Resources__CampaignEffectiveLabel",
|
|
8506
|
+
"description": "The campaign effective label referenced in the query."
|
|
8507
|
+
},
|
|
8414
8508
|
"campaignLabel": {
|
|
8415
8509
|
"$ref": "GoogleAdsSearchads360V0Resources__CampaignLabel",
|
|
8416
8510
|
"description": "The campaign label referenced in the query."
|
|
@@ -732,39 +732,6 @@
|
|
|
732
732
|
"resources": {
|
|
733
733
|
"muteConfigs": {
|
|
734
734
|
"methods": {
|
|
735
|
-
"create": {
|
|
736
|
-
"description": "Creates a mute config.",
|
|
737
|
-
"flatPath": "v1/folders/{foldersId}/locations/{locationsId}/muteConfigs",
|
|
738
|
-
"httpMethod": "POST",
|
|
739
|
-
"id": "securitycenter.folders.locations.muteConfigs.create",
|
|
740
|
-
"parameterOrder": [
|
|
741
|
-
"parent"
|
|
742
|
-
],
|
|
743
|
-
"parameters": {
|
|
744
|
-
"muteConfigId": {
|
|
745
|
-
"description": "Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.",
|
|
746
|
-
"location": "query",
|
|
747
|
-
"type": "string"
|
|
748
|
-
},
|
|
749
|
-
"parent": {
|
|
750
|
-
"description": "Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.",
|
|
751
|
-
"location": "path",
|
|
752
|
-
"pattern": "^folders/[^/]+/locations/[^/]+$",
|
|
753
|
-
"required": true,
|
|
754
|
-
"type": "string"
|
|
755
|
-
}
|
|
756
|
-
},
|
|
757
|
-
"path": "v1/{+parent}/muteConfigs",
|
|
758
|
-
"request": {
|
|
759
|
-
"$ref": "GoogleCloudSecuritycenterV1MuteConfig"
|
|
760
|
-
},
|
|
761
|
-
"response": {
|
|
762
|
-
"$ref": "GoogleCloudSecuritycenterV1MuteConfig"
|
|
763
|
-
},
|
|
764
|
-
"scopes": [
|
|
765
|
-
"https://www.googleapis.com/auth/cloud-platform"
|
|
766
|
-
]
|
|
767
|
-
},
|
|
768
735
|
"delete": {
|
|
769
736
|
"description": "Deletes an existing mute config.",
|
|
770
737
|
"flatPath": "v1/folders/{foldersId}/locations/{locationsId}/muteConfigs/{muteConfigsId}",
|
|
@@ -815,42 +782,6 @@
|
|
|
815
782
|
"https://www.googleapis.com/auth/cloud-platform"
|
|
816
783
|
]
|
|
817
784
|
},
|
|
818
|
-
"list": {
|
|
819
|
-
"description": "Lists mute configs.",
|
|
820
|
-
"flatPath": "v1/folders/{foldersId}/locations/{locationsId}/muteConfigs",
|
|
821
|
-
"httpMethod": "GET",
|
|
822
|
-
"id": "securitycenter.folders.locations.muteConfigs.list",
|
|
823
|
-
"parameterOrder": [
|
|
824
|
-
"parent"
|
|
825
|
-
],
|
|
826
|
-
"parameters": {
|
|
827
|
-
"pageSize": {
|
|
828
|
-
"description": "The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.",
|
|
829
|
-
"format": "int32",
|
|
830
|
-
"location": "query",
|
|
831
|
-
"type": "integer"
|
|
832
|
-
},
|
|
833
|
-
"pageToken": {
|
|
834
|
-
"description": "A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.",
|
|
835
|
-
"location": "query",
|
|
836
|
-
"type": "string"
|
|
837
|
-
},
|
|
838
|
-
"parent": {
|
|
839
|
-
"description": "Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.",
|
|
840
|
-
"location": "path",
|
|
841
|
-
"pattern": "^folders/[^/]+/locations/[^/]+/muteConfigs$",
|
|
842
|
-
"required": true,
|
|
843
|
-
"type": "string"
|
|
844
|
-
}
|
|
845
|
-
},
|
|
846
|
-
"path": "v1/{+parent}",
|
|
847
|
-
"response": {
|
|
848
|
-
"$ref": "ListMuteConfigsResponse"
|
|
849
|
-
},
|
|
850
|
-
"scopes": [
|
|
851
|
-
"https://www.googleapis.com/auth/cloud-platform"
|
|
852
|
-
]
|
|
853
|
-
},
|
|
854
785
|
"patch": {
|
|
855
786
|
"description": "Updates a mute config.",
|
|
856
787
|
"flatPath": "v1/folders/{foldersId}/locations/{locationsId}/muteConfigs/{muteConfigsId}",
|
|
@@ -2508,39 +2439,6 @@
|
|
|
2508
2439
|
"resources": {
|
|
2509
2440
|
"muteConfigs": {
|
|
2510
2441
|
"methods": {
|
|
2511
|
-
"create": {
|
|
2512
|
-
"description": "Creates a mute config.",
|
|
2513
|
-
"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/muteConfigs",
|
|
2514
|
-
"httpMethod": "POST",
|
|
2515
|
-
"id": "securitycenter.organizations.locations.muteConfigs.create",
|
|
2516
|
-
"parameterOrder": [
|
|
2517
|
-
"parent"
|
|
2518
|
-
],
|
|
2519
|
-
"parameters": {
|
|
2520
|
-
"muteConfigId": {
|
|
2521
|
-
"description": "Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.",
|
|
2522
|
-
"location": "query",
|
|
2523
|
-
"type": "string"
|
|
2524
|
-
},
|
|
2525
|
-
"parent": {
|
|
2526
|
-
"description": "Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.",
|
|
2527
|
-
"location": "path",
|
|
2528
|
-
"pattern": "^organizations/[^/]+/locations/[^/]+$",
|
|
2529
|
-
"required": true,
|
|
2530
|
-
"type": "string"
|
|
2531
|
-
}
|
|
2532
|
-
},
|
|
2533
|
-
"path": "v1/{+parent}/muteConfigs",
|
|
2534
|
-
"request": {
|
|
2535
|
-
"$ref": "GoogleCloudSecuritycenterV1MuteConfig"
|
|
2536
|
-
},
|
|
2537
|
-
"response": {
|
|
2538
|
-
"$ref": "GoogleCloudSecuritycenterV1MuteConfig"
|
|
2539
|
-
},
|
|
2540
|
-
"scopes": [
|
|
2541
|
-
"https://www.googleapis.com/auth/cloud-platform"
|
|
2542
|
-
]
|
|
2543
|
-
},
|
|
2544
2442
|
"delete": {
|
|
2545
2443
|
"description": "Deletes an existing mute config.",
|
|
2546
2444
|
"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/muteConfigs/{muteConfigsId}",
|
|
@@ -2591,42 +2489,6 @@
|
|
|
2591
2489
|
"https://www.googleapis.com/auth/cloud-platform"
|
|
2592
2490
|
]
|
|
2593
2491
|
},
|
|
2594
|
-
"list": {
|
|
2595
|
-
"description": "Lists mute configs.",
|
|
2596
|
-
"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/muteConfigs",
|
|
2597
|
-
"httpMethod": "GET",
|
|
2598
|
-
"id": "securitycenter.organizations.locations.muteConfigs.list",
|
|
2599
|
-
"parameterOrder": [
|
|
2600
|
-
"parent"
|
|
2601
|
-
],
|
|
2602
|
-
"parameters": {
|
|
2603
|
-
"pageSize": {
|
|
2604
|
-
"description": "The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.",
|
|
2605
|
-
"format": "int32",
|
|
2606
|
-
"location": "query",
|
|
2607
|
-
"type": "integer"
|
|
2608
|
-
},
|
|
2609
|
-
"pageToken": {
|
|
2610
|
-
"description": "A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.",
|
|
2611
|
-
"location": "query",
|
|
2612
|
-
"type": "string"
|
|
2613
|
-
},
|
|
2614
|
-
"parent": {
|
|
2615
|
-
"description": "Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.",
|
|
2616
|
-
"location": "path",
|
|
2617
|
-
"pattern": "^organizations/[^/]+/locations/[^/]+/muteConfigs$",
|
|
2618
|
-
"required": true,
|
|
2619
|
-
"type": "string"
|
|
2620
|
-
}
|
|
2621
|
-
},
|
|
2622
|
-
"path": "v1/{+parent}",
|
|
2623
|
-
"response": {
|
|
2624
|
-
"$ref": "ListMuteConfigsResponse"
|
|
2625
|
-
},
|
|
2626
|
-
"scopes": [
|
|
2627
|
-
"https://www.googleapis.com/auth/cloud-platform"
|
|
2628
|
-
]
|
|
2629
|
-
},
|
|
2630
2492
|
"patch": {
|
|
2631
2493
|
"description": "Updates a mute config.",
|
|
2632
2494
|
"flatPath": "v1/organizations/{organizationsId}/locations/{locationsId}/muteConfigs/{muteConfigsId}",
|
|
@@ -5017,39 +4879,6 @@
|
|
|
5017
4879
|
"resources": {
|
|
5018
4880
|
"muteConfigs": {
|
|
5019
4881
|
"methods": {
|
|
5020
|
-
"create": {
|
|
5021
|
-
"description": "Creates a mute config.",
|
|
5022
|
-
"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/muteConfigs",
|
|
5023
|
-
"httpMethod": "POST",
|
|
5024
|
-
"id": "securitycenter.projects.locations.muteConfigs.create",
|
|
5025
|
-
"parameterOrder": [
|
|
5026
|
-
"parent"
|
|
5027
|
-
],
|
|
5028
|
-
"parameters": {
|
|
5029
|
-
"muteConfigId": {
|
|
5030
|
-
"description": "Required. Unique identifier provided by the client within the parent scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a letter, must end with either a letter or a number, and must be 63 characters or less.",
|
|
5031
|
-
"location": "query",
|
|
5032
|
-
"type": "string"
|
|
5033
|
-
},
|
|
5034
|
-
"parent": {
|
|
5035
|
-
"description": "Required. Resource name of the new mute configs's parent. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, or `projects/[project_id]`.",
|
|
5036
|
-
"location": "path",
|
|
5037
|
-
"pattern": "^projects/[^/]+/locations/[^/]+$",
|
|
5038
|
-
"required": true,
|
|
5039
|
-
"type": "string"
|
|
5040
|
-
}
|
|
5041
|
-
},
|
|
5042
|
-
"path": "v1/{+parent}/muteConfigs",
|
|
5043
|
-
"request": {
|
|
5044
|
-
"$ref": "GoogleCloudSecuritycenterV1MuteConfig"
|
|
5045
|
-
},
|
|
5046
|
-
"response": {
|
|
5047
|
-
"$ref": "GoogleCloudSecuritycenterV1MuteConfig"
|
|
5048
|
-
},
|
|
5049
|
-
"scopes": [
|
|
5050
|
-
"https://www.googleapis.com/auth/cloud-platform"
|
|
5051
|
-
]
|
|
5052
|
-
},
|
|
5053
4882
|
"delete": {
|
|
5054
4883
|
"description": "Deletes an existing mute config.",
|
|
5055
4884
|
"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/muteConfigs/{muteConfigsId}",
|
|
@@ -5100,42 +4929,6 @@
|
|
|
5100
4929
|
"https://www.googleapis.com/auth/cloud-platform"
|
|
5101
4930
|
]
|
|
5102
4931
|
},
|
|
5103
|
-
"list": {
|
|
5104
|
-
"description": "Lists mute configs.",
|
|
5105
|
-
"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/muteConfigs",
|
|
5106
|
-
"httpMethod": "GET",
|
|
5107
|
-
"id": "securitycenter.projects.locations.muteConfigs.list",
|
|
5108
|
-
"parameterOrder": [
|
|
5109
|
-
"parent"
|
|
5110
|
-
],
|
|
5111
|
-
"parameters": {
|
|
5112
|
-
"pageSize": {
|
|
5113
|
-
"description": "The maximum number of configs to return. The service may return fewer than this value. If unspecified, at most 10 configs will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.",
|
|
5114
|
-
"format": "int32",
|
|
5115
|
-
"location": "query",
|
|
5116
|
-
"type": "integer"
|
|
5117
|
-
},
|
|
5118
|
-
"pageToken": {
|
|
5119
|
-
"description": "A page token, received from a previous `ListMuteConfigs` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMuteConfigs` must match the call that provided the page token.",
|
|
5120
|
-
"location": "query",
|
|
5121
|
-
"type": "string"
|
|
5122
|
-
},
|
|
5123
|
-
"parent": {
|
|
5124
|
-
"description": "Required. The parent, which owns the collection of mute configs. Its format is `organizations/[organization_id]`, `folders/[folder_id]`, `projects/[project_id]`.",
|
|
5125
|
-
"location": "path",
|
|
5126
|
-
"pattern": "^projects/[^/]+/locations/[^/]+/muteConfigs$",
|
|
5127
|
-
"required": true,
|
|
5128
|
-
"type": "string"
|
|
5129
|
-
}
|
|
5130
|
-
},
|
|
5131
|
-
"path": "v1/{+parent}",
|
|
5132
|
-
"response": {
|
|
5133
|
-
"$ref": "ListMuteConfigsResponse"
|
|
5134
|
-
},
|
|
5135
|
-
"scopes": [
|
|
5136
|
-
"https://www.googleapis.com/auth/cloud-platform"
|
|
5137
|
-
]
|
|
5138
|
-
},
|
|
5139
4932
|
"patch": {
|
|
5140
4933
|
"description": "Updates a mute config.",
|
|
5141
4934
|
"flatPath": "v1/projects/{projectsId}/locations/{locationsId}/muteConfigs/{muteConfigsId}",
|
|
@@ -6084,7 +5877,7 @@
|
|
|
6084
5877
|
}
|
|
6085
5878
|
}
|
|
6086
5879
|
},
|
|
6087
|
-
"revision": "
|
|
5880
|
+
"revision": "20240926",
|
|
6088
5881
|
"rootUrl": "https://securitycenter.googleapis.com/",
|
|
6089
5882
|
"schemas": {
|
|
6090
5883
|
"Access": {
|
|
@@ -6630,6 +6423,10 @@
|
|
|
6630
6423
|
"description": "Represents an Azure resource group.",
|
|
6631
6424
|
"id": "AzureResourceGroup",
|
|
6632
6425
|
"properties": {
|
|
6426
|
+
"id": {
|
|
6427
|
+
"description": "The ID of the Azure resource group.",
|
|
6428
|
+
"type": "string"
|
|
6429
|
+
},
|
|
6633
6430
|
"name": {
|
|
6634
6431
|
"description": "The name of the Azure resource group. This is not a UUID.",
|
|
6635
6432
|
"type": "string"
|
|
@@ -6804,6 +6601,17 @@
|
|
|
6804
6601
|
},
|
|
6805
6602
|
"type": "object"
|
|
6806
6603
|
},
|
|
6604
|
+
"CelPolicySpec": {
|
|
6605
|
+
"description": "YAML-based rule that uses CEL, which supports the declaration of variables and a filtering predicate. A vulnerable resource is emitted if the evaluation is false. Given: 1) the resource types as: - resource_types: \"compute.googleapis.com/Instance\" - resource_types: \"compute.googleapis.com/Firewall\" 2) the CEL policy spec as: name: bad_instance resource_filters: - name: instance resource_type: compute.googleapis.com/Instance filter: > instance.status == 'RUNNING' && 'public' in instance.tags.items - name: firewall resource_type: compute.googleapis.com/Firewall filter: > firewall.direction == 'INGRESS' && !firewall.disabled && firewall.allowed.exists(rule, rule.IPProtocol.upperAscii() in ['TCP', 'ALL'] && rule.ports.exists(port, network.portsInRange(port, '11-256'))) rule: match: - predicate: > instance.networkInterfaces.exists(net, firewall.network == net.network) output: > {'message': 'Compute instance with publicly accessible ports', 'instance': instance.name} Users are able to join resource types together using the exact format as Kubernetes Validating Admission policies.",
|
|
6606
|
+
"id": "CelPolicySpec",
|
|
6607
|
+
"properties": {
|
|
6608
|
+
"spec": {
|
|
6609
|
+
"description": "The CEL policy to evaluate to produce findings. A finding is generated when the policy validation evaluates to false.",
|
|
6610
|
+
"type": "string"
|
|
6611
|
+
}
|
|
6612
|
+
},
|
|
6613
|
+
"type": "object"
|
|
6614
|
+
},
|
|
6807
6615
|
"CloudArmor": {
|
|
6808
6616
|
"description": "Fields related to Google Cloud Armor findings.",
|
|
6809
6617
|
"id": "CloudArmor",
|
|
@@ -8242,6 +8050,10 @@
|
|
|
8242
8050
|
"description": "Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.",
|
|
8243
8051
|
"id": "GoogleCloudSecuritycenterV1CustomConfig",
|
|
8244
8052
|
"properties": {
|
|
8053
|
+
"celPolicy": {
|
|
8054
|
+
"$ref": "CelPolicySpec",
|
|
8055
|
+
"description": "The CEL policy spec attached to the custom module."
|
|
8056
|
+
},
|
|
8245
8057
|
"customOutput": {
|
|
8246
8058
|
"$ref": "GoogleCloudSecuritycenterV1CustomOutputSpec",
|
|
8247
8059
|
"description": "Custom output properties."
|
|
@@ -9324,6 +9136,10 @@
|
|
|
9324
9136
|
"description": "Represents an Azure resource group.",
|
|
9325
9137
|
"id": "GoogleCloudSecuritycenterV2AzureResourceGroup",
|
|
9326
9138
|
"properties": {
|
|
9139
|
+
"id": {
|
|
9140
|
+
"description": "The ID of the Azure resource group.",
|
|
9141
|
+
"type": "string"
|
|
9142
|
+
},
|
|
9327
9143
|
"name": {
|
|
9328
9144
|
"description": "The name of the Azure resource group. This is not a UUID.",
|
|
9329
9145
|
"type": "string"
|
|
@@ -903,7 +903,7 @@
|
|
|
903
903
|
}
|
|
904
904
|
}
|
|
905
905
|
},
|
|
906
|
-
"revision": "
|
|
906
|
+
"revision": "20240926",
|
|
907
907
|
"rootUrl": "https://securitycenter.googleapis.com/",
|
|
908
908
|
"schemas": {
|
|
909
909
|
"Access": {
|
|
@@ -1313,6 +1313,10 @@
|
|
|
1313
1313
|
"description": "Represents an Azure resource group.",
|
|
1314
1314
|
"id": "AzureResourceGroup",
|
|
1315
1315
|
"properties": {
|
|
1316
|
+
"id": {
|
|
1317
|
+
"description": "The ID of the Azure resource group.",
|
|
1318
|
+
"type": "string"
|
|
1319
|
+
},
|
|
1316
1320
|
"name": {
|
|
1317
1321
|
"description": "The name of the Azure resource group. This is not a UUID.",
|
|
1318
1322
|
"type": "string"
|
|
@@ -1435,6 +1439,17 @@
|
|
|
1435
1439
|
"properties": {},
|
|
1436
1440
|
"type": "object"
|
|
1437
1441
|
},
|
|
1442
|
+
"CelPolicySpec": {
|
|
1443
|
+
"description": "YAML-based rule that uses CEL, which supports the declaration of variables and a filtering predicate. A vulnerable resource is emitted if the evaluation is false. Given: 1) the resource types as: - resource_types: \"compute.googleapis.com/Instance\" - resource_types: \"compute.googleapis.com/Firewall\" 2) the CEL policy spec as: name: bad_instance resource_filters: - name: instance resource_type: compute.googleapis.com/Instance filter: > instance.status == 'RUNNING' && 'public' in instance.tags.items - name: firewall resource_type: compute.googleapis.com/Firewall filter: > firewall.direction == 'INGRESS' && !firewall.disabled && firewall.allowed.exists(rule, rule.IPProtocol.upperAscii() in ['TCP', 'ALL'] && rule.ports.exists(port, network.portsInRange(port, '11-256'))) rule: match: - predicate: > instance.networkInterfaces.exists(net, firewall.network == net.network) output: > {'message': 'Compute instance with publicly accessible ports', 'instance': instance.name} Users are able to join resource types together using the exact format as Kubernetes Validating Admission policies.",
|
|
1444
|
+
"id": "CelPolicySpec",
|
|
1445
|
+
"properties": {
|
|
1446
|
+
"spec": {
|
|
1447
|
+
"description": "The CEL policy to evaluate to produce findings. A finding is generated when the policy validation evaluates to false.",
|
|
1448
|
+
"type": "string"
|
|
1449
|
+
}
|
|
1450
|
+
},
|
|
1451
|
+
"type": "object"
|
|
1452
|
+
},
|
|
1438
1453
|
"CloudArmor": {
|
|
1439
1454
|
"description": "Fields related to Google Cloud Armor findings.",
|
|
1440
1455
|
"id": "CloudArmor",
|
|
@@ -2708,6 +2723,10 @@
|
|
|
2708
2723
|
"description": "Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.",
|
|
2709
2724
|
"id": "GoogleCloudSecuritycenterV1CustomConfig",
|
|
2710
2725
|
"properties": {
|
|
2726
|
+
"celPolicy": {
|
|
2727
|
+
"$ref": "CelPolicySpec",
|
|
2728
|
+
"description": "The CEL policy spec attached to the custom module."
|
|
2729
|
+
},
|
|
2711
2730
|
"customOutput": {
|
|
2712
2731
|
"$ref": "GoogleCloudSecuritycenterV1CustomOutputSpec",
|
|
2713
2732
|
"description": "Custom output properties."
|
|
@@ -3871,6 +3890,10 @@
|
|
|
3871
3890
|
"description": "Represents an Azure resource group.",
|
|
3872
3891
|
"id": "GoogleCloudSecuritycenterV2AzureResourceGroup",
|
|
3873
3892
|
"properties": {
|
|
3893
|
+
"id": {
|
|
3894
|
+
"description": "The ID of the Azure resource group.",
|
|
3895
|
+
"type": "string"
|
|
3896
|
+
},
|
|
3874
3897
|
"name": {
|
|
3875
3898
|
"description": "The name of the Azure resource group. This is not a UUID.",
|
|
3876
3899
|
"type": "string"
|