google-api-python-client 2.150.0__py2.py3-none-any.whl → 2.152.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta1.json

@@ -20,6 +20,16 @@
 "description": "Regional Endpoint",
 "endpointUrl": "https://securitycenter.me-central2.rep.googleapis.com/",
 "location": "me-central2"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://securitycenter.us.rep.googleapis.com/",
+"location": "us"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://securitycenter.eu.rep.googleapis.com/",
+"location": "eu"
 }
 ],
 "fullyEncodeReservedExpansion": true,
@@ -903,7 +913,7 @@
 }
 }
 },
-"revision": "20240926",
+"revision": "20241026",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -1439,17 +1449,6 @@
 "properties": {},
 "type": "object"
 },
-"CelPolicySpec": {
-"description": "YAML-based rule that uses CEL, which supports the declaration of variables and a filtering predicate. A vulnerable resource is emitted if the evaluation is false. Given: 1) the resource types as: - resource_types: \"compute.googleapis.com/Instance\" - resource_types: \"compute.googleapis.com/Firewall\" 2) the CEL policy spec as: name: bad_instance resource_filters: - name: instance resource_type: compute.googleapis.com/Instance filter: > instance.status == 'RUNNING' && 'public' in instance.tags.items - name: firewall resource_type: compute.googleapis.com/Firewall filter: > firewall.direction == 'INGRESS' && !firewall.disabled && firewall.allowed.exists(rule, rule.IPProtocol.upperAscii() in ['TCP', 'ALL'] && rule.ports.exists(port, network.portsInRange(port, '11-256'))) rule: match: - predicate: > instance.networkInterfaces.exists(net, firewall.network == net.network) output: > {'message': 'Compute instance with publicly accessible ports', 'instance': instance.name} Users are able to join resource types together using the exact format as Kubernetes Validating Admission policies.",
-"id": "CelPolicySpec",
-"properties": {
-"spec": {
-"description": "The CEL policy to evaluate to produce findings. A finding is generated when the policy validation evaluates to false.",
-"type": "string"
-}
-},
-"type": "object"
-},
 "CloudArmor": {
 "description": "Fields related to Google Cloud Armor findings.",
 "id": "CloudArmor",
@@ -2723,10 +2722,6 @@
 "description": "Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.",
 "id": "GoogleCloudSecuritycenterV1CustomConfig",
 "properties": {
-"celPolicy": {
-"$ref": "CelPolicySpec",
-"description": "The CEL policy spec attached to the custom module."
-},
 "customOutput": {
 "$ref": "GoogleCloudSecuritycenterV1CustomOutputSpec",
 "description": "Custom output properties."
@@ -5514,6 +5509,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -5530,6 +5526,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -5581,6 +5578,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -5597,6 +5595,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -5693,6 +5692,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -5709,6 +5709,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -5760,6 +5761,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -5776,6 +5778,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -7303,6 +7306,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -7319,6 +7323,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -7370,6 +7375,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -7386,6 +7392,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -7482,6 +7489,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -7498,6 +7506,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -7549,6 +7558,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -7565,6 +7575,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -8222,7 +8233,7 @@
 "id": "SetFindingStateRequest",
 "properties": {
 "startTime": {
-"description": "Required. The time at which the updated state takes effect.",
+"description": "Optional. The time at which the updated state takes effect. If not set uses the current time.",
 "format": "google-datetime",
 "type": "string"
 },

googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json

@@ -20,6 +20,16 @@
 "description": "Regional Endpoint",
 "endpointUrl": "https://securitycenter.me-central2.rep.googleapis.com/",
 "location": "me-central2"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://securitycenter.us.rep.googleapis.com/",
+"location": "us"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://securitycenter.eu.rep.googleapis.com/",
+"location": "eu"
 }
 ],
 "fullyEncodeReservedExpansion": true,
@@ -1993,7 +2003,7 @@
 }
 }
 },
-"revision": "20241004",
+"revision": "20241018",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -2389,17 +2399,6 @@
 },
 "type": "object"
 },
-"CelPolicySpec": {
-"description": "YAML-based rule that uses CEL, which supports the declaration of variables and a filtering predicate. A vulnerable resource is emitted if the evaluation is false. Given: 1) the resource types as: - resource_types: \"compute.googleapis.com/Instance\" - resource_types: \"compute.googleapis.com/Firewall\" 2) the CEL policy spec as: name: bad_instance resource_filters: - name: instance resource_type: compute.googleapis.com/Instance filter: > instance.status == 'RUNNING' && 'public' in instance.tags.items - name: firewall resource_type: compute.googleapis.com/Firewall filter: > firewall.direction == 'INGRESS' && !firewall.disabled && firewall.allowed.exists(rule, rule.IPProtocol.upperAscii() in ['TCP', 'ALL'] && rule.ports.exists(port, network.portsInRange(port, '11-256'))) rule: match: - predicate: > instance.networkInterfaces.exists(net, firewall.network == net.network) output: > {'message': 'Compute instance with publicly accessible ports', 'instance': instance.name} Users are able to join resource types together using the exact format as Kubernetes Validating Admission policies.",
-"id": "CelPolicySpec",
-"properties": {
-"spec": {
-"description": "The CEL policy to evaluate to produce findings. A finding is generated when the policy validation evaluates to false.",
-"type": "string"
-}
-},
-"type": "object"
-},
 "CloudArmor": {
 "description": "Fields related to Google Cloud Armor findings.",
 "id": "CloudArmor",
@@ -3797,10 +3796,6 @@
 "description": "Defines the properties in a custom module configuration for Security Health Analytics. Use the custom module configuration to create custom detectors that generate custom findings for resources that you specify.",
 "id": "GoogleCloudSecuritycenterV1CustomConfig",
 "properties": {
-"celPolicy": {
-"$ref": "CelPolicySpec",
-"description": "The CEL policy spec attached to the custom module."
-},
 "customOutput": {
 "$ref": "GoogleCloudSecuritycenterV1CustomOutputSpec",
 "description": "Custom output properties."
@@ -6507,6 +6502,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -6523,6 +6519,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -6574,6 +6571,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -6590,6 +6588,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -6686,6 +6685,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -6702,6 +6702,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -6753,6 +6754,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -6769,6 +6771,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -8047,6 +8050,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -8063,6 +8067,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -8114,6 +8119,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -8130,6 +8136,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"
@@ -8226,6 +8233,7 @@
 "ACCOUNT_ACCESS_REMOVAL",
 "STEAL_WEB_SESSION_COOKIE",
 "CREATE_OR_MODIFY_SYSTEM_PROCESS",
+"EVENT_TRIGGERED_EXECUTION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
 "UNSECURED_CREDENTIALS",
 "MODIFY_AUTHENTICATION_PROCESS",
@@ -8242,6 +8250,7 @@
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "CONTAINER_ADMINISTRATION_COMMAND",
+"DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
@@ -8293,6 +8302,7 @@
 "T1531",
 "T1539",
 "T1543",
+"T1546",
 "T1548",
 "T1552",
 "T1556",
@@ -8309,6 +8319,7 @@
 "T1595",
 "T1595.001",
 "T1609",
+"T1610",
 "T1611",
 "T1613",
 "T1649"

googleapiclient/discovery_cache/documents/serviceusage.v1.json

@@ -426,7 +426,7 @@
 }
 }
 },
-"revision": "20240929",
+"revision": "20241025",
 "rootUrl": "https://serviceusage.googleapis.com/",
 "schemas": {
 "AddEnableRulesMetadata": {
@@ -2044,6 +2044,171 @@
 "properties": {},
 "type": "object"
 },
+"GoogleApiServiceusageV2betaAnalysis": {
+"description": "A message to group the analysis information.",
+"id": "GoogleApiServiceusageV2betaAnalysis",
+"properties": {
+"analysis": {
+"$ref": "GoogleApiServiceusageV2betaAnalysisResult",
+"description": "Output only. Analysis result of updating a policy.",
+"readOnly": true
+},
+"analysisType": {
+"description": "Output only. The type of analysis.",
+"enum": [
+"ANALYSIS_TYPE_UNSPECIFIED",
+"ANALYSIS_TYPE_DEPENDENCY",
+"ANALYSIS_TYPE_RESOURCE_USAGE"
+],
+"enumDescriptions": [
+"Unspecified analysis type. Do not use.",
+"The analysis of service dependencies.",
+"The analysis of service resource usage."
+],
+"readOnly": true,
+"type": "string"
+},
+"displayName": {
+"description": "Output only. The user friendly display name of the analysis type. E.g. service dependency analysis, service resource usage analysis, etc.",
+"readOnly": true,
+"type": "string"
+},
+"service": {
+"description": "The names of the service that has analysis result of warnings or blockers. Example: `services/storage.googleapis.com`.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaAnalysisResult": {
+"description": "An analysis result including blockers and warnings.",
+"id": "GoogleApiServiceusageV2betaAnalysisResult",
+"properties": {
+"blockers": {
+"description": "Blocking information that would prevent the policy changes at runtime.",
+"items": {
+"$ref": "GoogleApiServiceusageV2betaImpact"
+},
+"type": "array"
+},
+"warnings": {
+"description": "Warning information indicating that the policy changes might be unsafe, but will not block the changes at runtime.",
+"items": {
+"$ref": "GoogleApiServiceusageV2betaImpact"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaAnalyzeConsumerPolicyMetadata": {
+"description": "Metadata for the `AnalyzeConsumerPolicy` method.",
+"id": "GoogleApiServiceusageV2betaAnalyzeConsumerPolicyMetadata",
+"properties": {},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaAnalyzeConsumerPolicyResponse": {
+"description": "The response of analyzing a consumer policy update.",
+"id": "GoogleApiServiceusageV2betaAnalyzeConsumerPolicyResponse",
+"properties": {
+"analysis": {
+"description": "The list of analyses returned from performing the intended policy update analysis. The analysis is grouped by service name and different analysis types. The empty analysis list means that the consumer policy can be updated without any warnings or blockers.",
+"items": {
+"$ref": "GoogleApiServiceusageV2betaAnalysis"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaConsumerPolicy": {
+"description": "Consumer Policy is a set of rules that define what services or service groups can be used for a cloud resource hierarchy.",
+"id": "GoogleApiServiceusageV2betaConsumerPolicy",
+"properties": {
+"annotations": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Optional. Annotations is an unstructured key-value map stored with a policy that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. [AIP-128](https://google.aip.dev/128#annotations)",
+"type": "object"
+},
+"createTime": {
+"description": "Output only. The time the policy was created. For singleton policies, this is the first touch of the policy.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"enableRules": {
+"description": "Enable rules define usable services, groups, and categories. There can currently be at most one `EnableRule`. This restriction will be lifted in later releases.",
+"items": {
+"$ref": "GoogleApiServiceusageV2betaEnableRule"
+},
+"type": "array"
+},
+"etag": {
+"description": "Output only. An opaque tag indicating the current version of the policy, used for concurrency control.",
+"readOnly": true,
+"type": "string"
+},
+"name": {
+"description": "Output only. The resource name of the policy. Only the `default` policy is supported: `projects/12345/consumerPolicies/default`, `folders/12345/consumerPolicies/default`, `organizations/12345/consumerPolicies/default`.",
+"readOnly": true,
+"type": "string"
+},
+"updateTime": {
+"description": "Output only. The time the policy was last updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaEnableRule": {
+"description": "The consumer policy rule that defines enabled services, groups, and categories.",
+"id": "GoogleApiServiceusageV2betaEnableRule",
+"properties": {
+"services": {
+"description": "The names of the services that are enabled. Example: `services/storage.googleapis.com`.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaImpact": {
+"description": "A message to group impacts of updating a policy.",
+"id": "GoogleApiServiceusageV2betaImpact",
+"properties": {
+"detail": {
+"description": "Output only. User friendly impact detail in a free form message.",
+"readOnly": true,
+"type": "string"
+},
+"impactType": {
+"description": "Output only. The type of impact.",
+"enum": [
+"IMPACT_TYPE_UNSPECIFIED",
+"DEPENDENCY_MISSING_DEPENDENCIES"
+],
+"enumDescriptions": [
+"Reserved Blocks (Block n contains codes from 100n to 100(n+1) -1 Block 0 - Special/Admin codes Block 1 - Impact Type of ANALYSIS_TYPE_DEPENDENCY Block 2 - Impact Type of ANALYSIS_TYPE_RESOURCE_USAGE ...",
+"Block 1 - Impact Type of ANALYSIS_TYPE_DEPENDENCY"
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleApiServiceusageV2betaUpdateConsumerPolicyMetadata": {
+"description": "Metadata for the `UpdateConsumerPolicy` method.",
+"id": "GoogleApiServiceusageV2betaUpdateConsumerPolicyMetadata",
+"properties": {},
+"type": "object"
+},
 "Http": {
 "description": "Defines the HTTP configuration for an API service. It contains a list of HttpRule, each specifying the mapping of an RPC method to one or more HTTP REST API methods.",
 "id": "Http",