google-api-python-client 2.153.0__py2.py3-none-any.whl → 2.155.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json

@@ -2003,7 +2003,7 @@
 }
 }
 },
-"revision": "20241018",
+"revision": "20241205",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -3137,6 +3137,17 @@
 },
 "type": "object"
 },
+"Disk": {
+"description": "Contains information about the disk associated with the finding.",
+"id": "Disk",
+"properties": {
+"name": {
+"description": "The name of the disk, for example, \"https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "DiskPath": {
 "description": "Path of the file in terms of underlying disk/partition identifiers.",
 "id": "DiskPath",
@@ -3423,6 +3434,10 @@
 "description": "Contains more details about the finding.",
 "type": "string"
 },
+"disk": {
+"$ref": "Disk",
+"description": "Disk associated with the finding."
+},
 "eventTime": {
 "description": "The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.",
 "format": "google-datetime",
@@ -3855,6 +3870,22 @@
 "description": "An EffectiveSecurityHealthAnalyticsCustomModule is the representation of a Security Health Analytics custom module at a specified level of the resource hierarchy: organization, folder, or project. If a custom module is inherited from a parent organization or folder, the value of the `enablementState` property in EffectiveSecurityHealthAnalyticsCustomModule is set to the value that is effective in the parent, instead of `INHERITED`. For example, if the module is enabled in a parent organization or folder, the effective enablement_state for the module in all child folders or projects is also `enabled`. EffectiveSecurityHealthAnalyticsCustomModule is read-only.",
 "id": "GoogleCloudSecuritycenterV1EffectiveSecurityHealthAnalyticsCustomModule",
 "properties": {
+"cloudProvider": {
+"description": "The cloud provider of the custom module.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"Unspecified cloud provider.",
+"Google Cloud Platform.",
+"Amazon Web Services.",
+"Microsoft Azure."
+],
+"type": "string"
+},
 "customConfig": {
 "$ref": "GoogleCloudSecuritycenterV1CustomConfig",
 "description": "Output only. The user-specified configuration for the module.",
@@ -4213,7 +4244,7 @@
 "description": "A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. \"bigquery.googleapis.com/Dataset\"."
 },
 "tagValues": {
-"description": "Required. Tag values combined with `AND` to check against. Values in the form \"tagValues/123\" Example: `[ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
+"description": "Required. Tag values combined with `AND` to check against. For Google Cloud resources, they are tag value IDs in the form of \"tagValues/123\". Example: `[ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
 "items": {
 "type": "string"
 },
@@ -4265,6 +4296,22 @@
 "readOnly": true,
 "type": "string"
 },
+"cloudProvider": {
+"description": "The cloud provider of the custom module.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD_PLATFORM",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"Unspecified cloud provider.",
+"Google Cloud.",
+"Amazon Web Services (AWS).",
+"Microsoft Azure."
+],
+"type": "string"
+},
 "customConfig": {
 "$ref": "GoogleCloudSecuritycenterV1CustomConfig",
 "description": "The user specified custom configuration for the module."
@@ -5625,6 +5672,17 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Disk": {
+"description": "Contains information about the disk associated with the finding.",
+"id": "GoogleCloudSecuritycenterV2Disk",
+"properties": {
+"name": {
+"description": "The name of the disk, for example, \"https://www.googleapis.com/compute/v1/projects/project-id/zones/zone-id/disks/disk-id\".",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2DiskPath": {
 "description": "Path of the file in terms of underlying disk/partition identifiers.",
 "id": "GoogleCloudSecuritycenterV2DiskPath",
@@ -5908,6 +5966,10 @@
 "description": "Contains more details about the finding.",
 "type": "string"
 },
+"disk": {
+"$ref": "GoogleCloudSecuritycenterV2Disk",
+"description": "Disk associated with the finding."
+},
 "eventTime": {
 "description": "The time the finding was first detected. If an existing finding is updated, then this is the time the update occurred. For example, if the finding represents an open firewall, this property captures the time the detector believes the firewall became open. The accuracy is determined by the detector. If the finding is later resolved, then this time reflects when the finding was resolved. This must not be set to a value greater than the current timestamp.",
 "format": "google-datetime",
@@ -6253,6 +6315,403 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Issue": {
+"description": "Security Command Center Issue.",
+"id": "GoogleCloudSecuritycenterV2Issue",
+"properties": {
+"createTime": {
+"description": "Output only. The time the issue was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"description": {
+"description": "The description of the issue in Markdown format.",
+"type": "string"
+},
+"detection": {
+"description": "The finding category or rule name that generated the issue.",
+"type": "string"
+},
+"domains": {
+"description": "The domains of the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueDomain"
+},
+"type": "array"
+},
+"exposureScore": {
+"description": "The exposure score of the issue.",
+"format": "double",
+"type": "number"
+},
+"issueType": {
+"description": "The type of the issue.",
+"enum": [
+"ISSUE_TYPE_UNSPECIFIED",
+"CHOKEPOINT",
+"TOXIC_COMBINATION",
+"INSIGHT"
+],
+"enumDescriptions": [
+"Unspecified issue type.",
+"Chokepoint issue type.",
+"Toxic combination issue type.",
+"Insight issue type."
+],
+"type": "string"
+},
+"lastObservationTime": {
+"description": "The time the issue was last observed.",
+"format": "google-datetime",
+"type": "string"
+},
+"mute": {
+"$ref": "GoogleCloudSecuritycenterV2IssueMute",
+"description": "The mute information of the issue."
+},
+"name": {
+"description": "Identifier. The name of the issue. Format: organizations/{organization}/locations/{location}/issues/{issue}",
+"type": "string"
+},
+"primaryResource": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResource",
+"description": "The primary resource associated with the issue."
+},
+"relatedFindings": {
+"description": "The findings related to the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueFinding"
+},
+"type": "array"
+},
+"remediations": {
+"description": "Approaches to remediate the issue in Markdown format.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"secondaryResources": {
+"description": "Additional resources associated with the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResource"
+},
+"type": "array"
+},
+"securityContexts": {
+"description": "The security context of the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueSecurityContext"
+},
+"type": "array"
+},
+"severity": {
+"description": "The severity of the issue.",
+"enum": [
+"SEVERITY_UNSPECIFIED",
+"CRITICAL",
+"HIGH",
+"MEDIUM",
+"LOW"
+],
+"enumDescriptions": [
+"Unspecified severity.",
+"Critical severity.",
+"High severity.",
+"Medium severity.",
+"Low severity."
+],
+"type": "string"
+},
+"state": {
+"description": "Output only. The state of the issue.",
+"enum": [
+"STATE_UNSPECIFIED",
+"ACTIVE",
+"INACTIVE"
+],
+"enumDescriptions": [
+"Unspecified state.",
+"Active state.",
+"Inactive state."
+],
+"readOnly": true,
+"type": "string"
+},
+"updateTime": {
+"description": "Output only. The time the issue was last updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueDomain": {
+"description": "The domains of an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueDomain",
+"properties": {
+"domainCategory": {
+"description": "The domain category of the issue.",
+"enum": [
+"DOMAIN_CATEGORY_UNSPECIFIED",
+"AI",
+"CODE",
+"CONTAINER",
+"DATA",
+"IDENTITY_AND_ACCESS",
+"VULNERABILITY"
+],
+"enumDescriptions": [
+"Unspecified domain category.",
+"Issues in the AI domain.",
+"Issues in the code domain.",
+"Issues in the container domain.",
+"Issues in the data domain.",
+"Issues in the identity and access domain.",
+"Issues in the vulnerability domain."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueFinding": {
+"description": "Finding related to an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueFinding",
+"properties": {
+"cve": {
+"$ref": "GoogleCloudSecuritycenterV2IssueFindingCve",
+"description": "The CVE of the finding."
+},
+"name": {
+"description": "The name of the finding.",
+"type": "string"
+},
+"securityBulletin": {
+"$ref": "GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin",
+"description": "The security bulletin of the finding."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueFindingCve": {
+"description": "The CVE of the finding.",
+"id": "GoogleCloudSecuritycenterV2IssueFindingCve",
+"properties": {
+"name": {
+"description": "The CVE name.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin": {
+"description": "The security bulletin of the finding.",
+"id": "GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin",
+"properties": {
+"name": {
+"description": "The security bulletin name.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueMute": {
+"description": "The mute information of the issue.",
+"id": "GoogleCloudSecuritycenterV2IssueMute",
+"properties": {
+"muteInitiator": {
+"description": "The email address of the user who last changed the mute state of the issue.",
+"type": "string"
+},
+"muteReason": {
+"description": "The user-provided reason for muting the issue.",
+"type": "string"
+},
+"muteState": {
+"description": "Output only. The mute state of the issue.",
+"enum": [
+"MUTE_STATE_UNSPECIFIED",
+"NOT_MUTED",
+"MUTED"
+],
+"enumDescriptions": [
+"Unspecified mute state.",
+"Not muted.",
+"Muted."
+],
+"readOnly": true,
+"type": "string"
+},
+"muteUpdateTime": {
+"description": "The time the issue was muted.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResource": {
+"description": "A resource associated with the an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResource",
+"properties": {
+"awsMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadata",
+"description": "The AWS metadata of the resource associated with the issue. Only populated for AWS resources."
+},
+"azureMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadata",
+"description": "The Azure metadata of the resource associated with the issue. Only populated for Azure resources."
+},
+"cloudProvider": {
+"description": "The cloud provider of the resource associated with the issue.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"Unspecified cloud provider.",
+"Google Cloud.",
+"Amazon Web Services.",
+"Microsoft Azure."
+],
+"type": "string"
+},
+"displayName": {
+"description": "The resource-type specific display name of the resource associated with the issue.",
+"type": "string"
+},
+"googleCloudMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata",
+"description": "The Google Cloud metadata of the resource associated with the issue. Only populated for Google Cloud resources."
+},
+"name": {
+"description": "The full resource name of the resource associated with the issue.",
+"type": "string"
+},
+"type": {
+"description": "The type of the resource associated with the issue.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAwsMetadata": {
+"description": "The AWS metadata of a resource associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadata",
+"properties": {
+"account": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount",
+"description": "The AWS account of the resource associated with the issue."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount": {
+"description": "The AWS account of the resource associated with the issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount",
+"properties": {
+"id": {
+"description": "The AWS account ID of the resource associated with the issue.",
+"type": "string"
+},
+"name": {
+"description": "The AWS account name of the resource associated with the issue.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAzureMetadata": {
+"description": "The Azure metadata of a resource associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadata",
+"properties": {
+"subscription": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription",
+"description": "The Azure subscription of the resource associated with the issue."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription": {
+"description": "The Azure subscription of the resource associated with the issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription",
+"properties": {
+"displayName": {
+"description": "The Azure subscription display name of the resource associated with the issue.",
+"type": "string"
+},
+"id": {
+"description": "The Azure subscription ID of the resource associated with the issue.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata": {
+"description": "Google Cloud metadata of a resource associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata",
+"properties": {
+"projectId": {
+"description": "The project ID that the resource associated with the issue belongs to.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueSecurityContext": {
+"description": "Security context associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueSecurityContext",
+"properties": {
+"aggregatedCount": {
+"$ref": "GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount",
+"description": "The aggregated count of the security context."
+},
+"context": {
+"$ref": "GoogleCloudSecuritycenterV2IssueSecurityContextContext",
+"description": "The context of the security context."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount": {
+"description": "Aggregated count of a security context.",
+"id": "GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount",
+"properties": {
+"key": {
+"description": "Aggregation key.",
+"type": "string"
+},
+"value": {
+"description": "Aggregation value.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueSecurityContextContext": {
+"description": "Context of a security context.",
+"id": "GoogleCloudSecuritycenterV2IssueSecurityContextContext",
+"properties": {
+"type": {
+"description": "Context type.",
+"type": "string"
+},
+"values": {
+"description": "Context values.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2KernelRootkit": {
 "description": "Kernel mode rootkit signatures.",
 "id": "GoogleCloudSecuritycenterV2KernelRootkit",
@@ -7365,7 +7824,7 @@
 "description": "A mapping of the sensitivity on Sensitive Data Protection finding to resource values. This mapping can only be used in combination with a resource_type that is related to BigQuery, e.g. \"bigquery.googleapis.com/Dataset\"."
 },
 "tagValues": {
-"description": "Tag values combined with `AND` to check against. Values in the form \"tagValues/123\" Example: `[ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
+"description": "Tag values combined with `AND` to check against. For Google Cloud resources, they are tag value IDs in the form of \"tagValues/123\". Example: `[ \"tagValues/123\", \"tagValues/456\", \"tagValues/789\" ]` https://cloud.google.com/resource-manager/docs/tags/tags-creating-and-managing",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/serviceconsumermanagement.v1.json

@@ -108,7 +108,7 @@
 "operations": {
 "methods": {
 "cancel": {
-"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.",
+"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.",
 "flatPath": "v1/operations/{operationsId}:cancel",
 "httpMethod": "POST",
 "id": "serviceconsumermanagement.operations.cancel",
@@ -542,7 +542,7 @@
 }
 }
 },
-"revision": "20240929",
+"revision": "20241115",
 "rootUrl": "https://serviceconsumermanagement.googleapis.com/",
 "schemas": {
 "AddTenantProjectRequest": {
@@ -1348,6 +1348,10 @@
 "description": "Experimental features to be included during client library generation. These fields will be deprecated once the feature graduates and is enabled by default.",
 "id": "ExperimentalFeatures",
 "properties": {
+"protobufPythonicTypesEnabled": {
+"description": "Enables generation of protobuf code using new types that are more Pythonic which are included in `protobuf>=5.29.x`. This feature will be enabled by default 1 month after launching the feature in preview packages.",
+"type": "boolean"
+},
 "restAsyncIoEnabled": {
 "description": "Enables generation of asynchronous REST clients if `rest` transport is enabled. By default, asynchronous REST clients will not be generated. This feature will be enabled by default 1 month after launching the feature in preview packages.",
 "type": "boolean"
@@ -1487,6 +1491,13 @@
 "common": {
 "$ref": "CommonLanguageSettings",
 "description": "Some settings."
+},
+"renamedServices": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Map of service names to renamed services. Keys are the package relative service names and values are the name to be used for the service client and call options. publishing: go_settings: renamed_services: Publisher: TopicAdmin",
+"type": "object"
 }
 },
 "type": "object"
@@ -2427,7 +2438,7 @@
 "type": "string"
 },
 "unit": {
-"description": "Specify the unit of the quota limit. It uses the same syntax as Metric.unit. The supported unit kinds are determined by the quota backend system. Here are some examples: * \"1/min/{project}\" for quota per minute per project. Note: the order of unit components is insignificant. The \"1\" at the beginning is required to follow the metric unit syntax.",
+"description": "Specify the unit of the quota limit. It uses the same syntax as MetricDescriptor.unit. The supported unit kinds are determined by the quota backend system. Here are some examples: * \"1/min/{project}\" for quota per minute per project. Note: the order of unit components is insignificant. The \"1\" at the beginning is required to follow the metric unit syntax.",
 "type": "string"
 },
 "values": {

googleapiclient/discovery_cache/documents/serviceconsumermanagement.v1beta1.json

@@ -715,7 +715,7 @@
 }
 }
 },
-"revision": "20240929",
+"revision": "20241115",
 "rootUrl": "https://serviceconsumermanagement.googleapis.com/",
 "schemas": {
 "Api": {
@@ -1433,6 +1433,10 @@
 "description": "Experimental features to be included during client library generation. These fields will be deprecated once the feature graduates and is enabled by default.",
 "id": "ExperimentalFeatures",
 "properties": {
+"protobufPythonicTypesEnabled": {
+"description": "Enables generation of protobuf code using new types that are more Pythonic which are included in `protobuf>=5.29.x`. This feature will be enabled by default 1 month after launching the feature in preview packages.",
+"type": "boolean"
+},
 "restAsyncIoEnabled": {
 "description": "Enables generation of asynchronous REST clients if `rest` transport is enabled. By default, asynchronous REST clients will not be generated. This feature will be enabled by default 1 month after launching the feature in preview packages.",
 "type": "boolean"
@@ -1572,6 +1576,13 @@
 "common": {
 "$ref": "CommonLanguageSettings",
 "description": "Some settings."
+},
+"renamedServices": {
+"additionalProperties": {
+"type": "string"
+},
+"description": "Map of service names to renamed services. Keys are the package relative service names and values are the name to be used for the service client and call options. publishing: go_settings: renamed_services: Publisher: TopicAdmin",
+"type": "object"
 }
 },
 "type": "object"
@@ -2458,7 +2469,7 @@
 "type": "string"
 },
 "unit": {
-"description": "Specify the unit of the quota limit. It uses the same syntax as Metric.unit. The supported unit kinds are determined by the quota backend system. Here are some examples: * \"1/min/{project}\" for quota per minute per project. Note: the order of unit components is insignificant. The \"1\" at the beginning is required to follow the metric unit syntax.",
+"description": "Specify the unit of the quota limit. It uses the same syntax as MetricDescriptor.unit. The supported unit kinds are determined by the quota backend system. Here are some examples: * \"1/min/{project}\" for quota per minute per project. Note: the order of unit components is insignificant. The \"1\" at the beginning is required to follow the metric unit syntax.",
 "type": "string"
 },
 "values": {
@@ -3012,13 +3023,17 @@
 "id": "V1Beta1ImportProducerQuotaPoliciesRequest",
 "properties": {
 "force": {
-"description": "Whether to force the import of the quota policies. If the policy import would decrease the default limit of any consumer tier by more than 10 percent, the call is rejected, as a safety measure to avoid accidentally decreasing quota too quickly. Setting the force parameter to true ignores this restriction.",
+"description": "Whether quota policy can result in a decrease of effective limit. Don't allow any decreases if force is not specified. If force is specified, then don't allow any decreases below 120% of the 7d quota usage, or for cases where usage cannot be examined (custom dimensions/ per user/per resource), only allow a 10% decrease.",
 "type": "boolean"
 },
 "forceJustification": {
-"description": "If force option is set to true, force_justification is suggested to be set to log the reason in audit logs.",
+"description": "If force or force_skip_quota_usage_check option is set to true, force_justification is suggested to be set to log the reason in audit logs.",
 "type": "string"
 },
+"forceSkipQuotaUsageCheck": {
+"description": "If set to true, skip the quota usage check. This field is only used when the effective limit can be decreased. If the force field is not set, this field will be ignored.",
+"type": "boolean"
+},
 "inlineSource": {
 "$ref": "V1Beta1PolicyInlineSource",
 "description": "The import data is specified in the request message itself"