google-api-python-client 2.154.0__py2.py3-none-any.whl → 2.156.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1.json

@@ -1971,6 +1971,51 @@
 }
 }
 },
+"attackPaths": {
+"methods": {
+"list": {
+"description": "Lists the attack paths for a set of simulation results or valued resources and filter.",
+"flatPath": "v1/organizations/{organizationsId}/attackPaths",
+"httpMethod": "GET",
+"id": "securitycenter.organizations.attackPaths.list",
+"parameterOrder": [
+"parent"
+],
+"parameters": {
+"filter": {
+"description": "The filter expression that filters the attack path in the response. Supported fields: * `valued_resources` supports =",
+"location": "query",
+"type": "string"
+},
+"pageSize": {
+"description": "The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.",
+"format": "int32",
+"location": "query",
+"type": "integer"
+},
+"pageToken": {
+"description": "The value returned by the last `ListAttackPathsResponse`; indicates that this is a continuation of a prior `ListAttackPaths` call, and that the system should return the next page of data.",
+"location": "query",
+"type": "string"
+},
+"parent": {
+"description": "Required. Name of parent to list attack paths. Valid formats: `organizations/{organization}`, `organizations/{organization}/simulations/{simulation}` `organizations/{organization}/simulations/{simulation}/attackExposureResults/{attack_exposure_result_v2}` `organizations/{organization}/simulations/{simulation}/valuedResources/{valued_resource}`",
+"location": "path",
+"pattern": "^organizations/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+parent}/attackPaths",
+"response": {
+"$ref": "ListAttackPathsResponse"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-platform"
+]
+}
+}
+},
 "bigQueryExports": {
 "methods": {
 "create": {
@@ -2856,7 +2901,7 @@
 "operations": {
 "methods": {
 "cancel": {
-"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of 1, corresponding to `Code.CANCELLED`.",
+"description": "Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the operation, but success is not guaranteed. If the server doesn't support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation or other methods to check whether the cancellation succeeded or whether the operation completed despite cancellation. On successful cancellation, the operation is not deleted; instead, it becomes an operation with an Operation.error value with a google.rpc.Status.code of `1`, corresponding to `Code.CANCELLED`.",
 "flatPath": "v1/organizations/{organizationsId}/operations/{operationsId}:cancel",
 "httpMethod": "POST",
 "id": "securitycenter.organizations.operations.cancel",
@@ -5893,7 +5938,7 @@
 }
 }
 },
-"revision": "20241111",
+"revision": "20241206",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -7243,6 +7288,40 @@
 },
 "type": "object"
 },
+"DataRetentionDeletionEvent": {
+"description": "Details about data retention deletion violations, in which the data is non-compliant based on their retention or deletion time, as defined in the applicable data security policy. The Data Retention Deletion (DRD) control is a control of the DSPM (Data Security Posture Management) suite that enables organizations to manage data retention and deletion policies in compliance with regulations, such as GDPR and CRPA. DRD supports two primary policy types: maximum storage length (max TTL) and minimum storage length (min TTL). Both are aimed at helping organizations meet regulatory and data management commitments.",
+"id": "DataRetentionDeletionEvent",
+"properties": {
+"dataObjectCount": {
+"description": "Number of objects that violated the policy for this resource. If the number is less than 1,000, then the value of this field is the exact number. If the number of objects that violated the policy is greater than or equal to 1,000, then the value of this field is 1000.",
+"format": "int64",
+"type": "string"
+},
+"eventDetectionTime": {
+"description": "Timestamp indicating when the event was detected.",
+"format": "google-datetime",
+"type": "string"
+},
+"eventType": {
+"description": "Type of the DRD event.",
+"enum": [
+"EVENT_TYPE_UNSPECIFIED",
+"EVENT_TYPE_MAX_TTL_EXCEEDED"
+],
+"enumDescriptions": [
+"Unspecified event type.",
+"The maximum retention time has been exceeded."
+],
+"type": "string"
+},
+"maxRetentionAllowed": {
+"description": "Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
 "Database": {
 "description": "Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.",
 "id": "Database",
@@ -7694,6 +7773,13 @@
 },
 "type": "array"
 },
+"dataRetentionDeletionEvents": {
+"description": "Data retention deletion events associated with the finding.",
+"items": {
+"$ref": "DataRetentionDeletionEvent"
+},
+"type": "array"
+},
 "database": {
 "$ref": "Database",
 "description": "Database associated with the finding."
@@ -9913,6 +9999,40 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2DataRetentionDeletionEvent": {
+"description": "Details about data retention deletion violations, in which the data is non-compliant based on their retention or deletion time, as defined in the applicable data security policy. The Data Retention Deletion (DRD) control is a control of the DSPM (Data Security Posture Management) suite that enables organizations to manage data retention and deletion policies in compliance with regulations, such as GDPR and CRPA. DRD supports two primary policy types: maximum storage length (max TTL) and minimum storage length (min TTL). Both are aimed at helping organizations meet regulatory and data management commitments.",
+"id": "GoogleCloudSecuritycenterV2DataRetentionDeletionEvent",
+"properties": {
+"dataObjectCount": {
+"description": "Number of objects that violated the policy for this resource. If the number is less than 1,000, then the value of this field is the exact number. If the number of objects that violated the policy is greater than or equal to 1,000, then the value of this field is 1000.",
+"format": "int64",
+"type": "string"
+},
+"eventDetectionTime": {
+"description": "Timestamp indicating when the event was detected.",
+"format": "google-datetime",
+"type": "string"
+},
+"eventType": {
+"description": "Type of the DRD event.",
+"enum": [
+"EVENT_TYPE_UNSPECIFIED",
+"EVENT_TYPE_MAX_TTL_EXCEEDED"
+],
+"enumDescriptions": [
+"Unspecified event type.",
+"The maximum retention time has been exceeded."
+],
+"type": "string"
+},
+"maxRetentionAllowed": {
+"description": "Maximum duration of retention allowed from the DRD control. This comes from the DRD control where users set a max TTL for their data. For example, suppose that a user set the max TTL for a Cloud Storage bucket to 90 days. However, an object in that bucket is 100 days old. In this case, a DataRetentionDeletionEvent will be generated for that Cloud Storage bucket, and the max_retention_allowed is 90 days.",
+"format": "google-duration",
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Database": {
 "description": "Represents database access information, such as queries. A database may be a sub-resource of an instance (as in the case of Cloud SQL instances or Cloud Spanner instances), or the database instance itself. Some database resources might not have the [full resource name](https://google.aip.dev/122#full-resource-names) populated because these resource types, such as Cloud SQL databases, are not yet supported by Cloud Asset Inventory. In these cases only the display name is provided.",
 "id": "GoogleCloudSecuritycenterV2Database",
@@ -10249,6 +10369,13 @@
 },
 "type": "array"
 },
+"dataRetentionDeletionEvents": {
+"description": "Data retention deletion events associated with the finding.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2DataRetentionDeletionEvent"
+},
+"type": "array"
+},
 "database": {
 "$ref": "GoogleCloudSecuritycenterV2Database",
 "description": "Database associated with the finding."
@@ -10606,6 +10733,403 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2Issue": {
+"description": "Security Command Center Issue.",
+"id": "GoogleCloudSecuritycenterV2Issue",
+"properties": {
+"createTime": {
+"description": "Output only. The time the issue was created.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+},
+"description": {
+"description": "The description of the issue in Markdown format.",
+"type": "string"
+},
+"detection": {
+"description": "The finding category or rule name that generated the issue.",
+"type": "string"
+},
+"domains": {
+"description": "The domains of the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueDomain"
+},
+"type": "array"
+},
+"exposureScore": {
+"description": "The exposure score of the issue.",
+"format": "double",
+"type": "number"
+},
+"issueType": {
+"description": "The type of the issue.",
+"enum": [
+"ISSUE_TYPE_UNSPECIFIED",
+"CHOKEPOINT",
+"TOXIC_COMBINATION",
+"INSIGHT"
+],
+"enumDescriptions": [
+"Unspecified issue type.",
+"Chokepoint issue type.",
+"Toxic combination issue type.",
+"Insight issue type."
+],
+"type": "string"
+},
+"lastObservationTime": {
+"description": "The time the issue was last observed.",
+"format": "google-datetime",
+"type": "string"
+},
+"mute": {
+"$ref": "GoogleCloudSecuritycenterV2IssueMute",
+"description": "The mute information of the issue."
+},
+"name": {
+"description": "Identifier. The name of the issue. Format: organizations/{organization}/locations/{location}/issues/{issue}",
+"type": "string"
+},
+"primaryResource": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResource",
+"description": "The primary resource associated with the issue."
+},
+"relatedFindings": {
+"description": "The findings related to the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueFinding"
+},
+"type": "array"
+},
+"remediations": {
+"description": "Approaches to remediate the issue in Markdown format.",
+"items": {
+"type": "string"
+},
+"type": "array"
+},
+"secondaryResources": {
+"description": "Additional resources associated with the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResource"
+},
+"type": "array"
+},
+"securityContexts": {
+"description": "The security context of the issue.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2IssueSecurityContext"
+},
+"type": "array"
+},
+"severity": {
+"description": "The severity of the issue.",
+"enum": [
+"SEVERITY_UNSPECIFIED",
+"CRITICAL",
+"HIGH",
+"MEDIUM",
+"LOW"
+],
+"enumDescriptions": [
+"Unspecified severity.",
+"Critical severity.",
+"High severity.",
+"Medium severity.",
+"Low severity."
+],
+"type": "string"
+},
+"state": {
+"description": "Output only. The state of the issue.",
+"enum": [
+"STATE_UNSPECIFIED",
+"ACTIVE",
+"INACTIVE"
+],
+"enumDescriptions": [
+"Unspecified state.",
+"Active state.",
+"Inactive state."
+],
+"readOnly": true,
+"type": "string"
+},
+"updateTime": {
+"description": "Output only. The time the issue was last updated.",
+"format": "google-datetime",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueDomain": {
+"description": "The domains of an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueDomain",
+"properties": {
+"domainCategory": {
+"description": "The domain category of the issue.",
+"enum": [
+"DOMAIN_CATEGORY_UNSPECIFIED",
+"AI",
+"CODE",
+"CONTAINER",
+"DATA",
+"IDENTITY_AND_ACCESS",
+"VULNERABILITY"
+],
+"enumDescriptions": [
+"Unspecified domain category.",
+"Issues in the AI domain.",
+"Issues in the code domain.",
+"Issues in the container domain.",
+"Issues in the data domain.",
+"Issues in the identity and access domain.",
+"Issues in the vulnerability domain."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueFinding": {
+"description": "Finding related to an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueFinding",
+"properties": {
+"cve": {
+"$ref": "GoogleCloudSecuritycenterV2IssueFindingCve",
+"description": "The CVE of the finding."
+},
+"name": {
+"description": "The name of the finding.",
+"type": "string"
+},
+"securityBulletin": {
+"$ref": "GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin",
+"description": "The security bulletin of the finding."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueFindingCve": {
+"description": "The CVE of the finding.",
+"id": "GoogleCloudSecuritycenterV2IssueFindingCve",
+"properties": {
+"name": {
+"description": "The CVE name.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin": {
+"description": "The security bulletin of the finding.",
+"id": "GoogleCloudSecuritycenterV2IssueFindingSecurityBulletin",
+"properties": {
+"name": {
+"description": "The security bulletin name.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueMute": {
+"description": "The mute information of the issue.",
+"id": "GoogleCloudSecuritycenterV2IssueMute",
+"properties": {
+"muteInitiator": {
+"description": "The email address of the user who last changed the mute state of the issue.",
+"type": "string"
+},
+"muteReason": {
+"description": "The user-provided reason for muting the issue.",
+"type": "string"
+},
+"muteState": {
+"description": "Output only. The mute state of the issue.",
+"enum": [
+"MUTE_STATE_UNSPECIFIED",
+"NOT_MUTED",
+"MUTED"
+],
+"enumDescriptions": [
+"Unspecified mute state.",
+"Not muted.",
+"Muted."
+],
+"readOnly": true,
+"type": "string"
+},
+"muteUpdateTime": {
+"description": "The time the issue was muted.",
+"format": "google-datetime",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResource": {
+"description": "A resource associated with the an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResource",
+"properties": {
+"awsMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadata",
+"description": "The AWS metadata of the resource associated with the issue. Only populated for AWS resources."
+},
+"azureMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadata",
+"description": "The Azure metadata of the resource associated with the issue. Only populated for Azure resources."
+},
+"cloudProvider": {
+"description": "The cloud provider of the resource associated with the issue.",
+"enum": [
+"CLOUD_PROVIDER_UNSPECIFIED",
+"GOOGLE_CLOUD",
+"AMAZON_WEB_SERVICES",
+"MICROSOFT_AZURE"
+],
+"enumDescriptions": [
+"Unspecified cloud provider.",
+"Google Cloud.",
+"Amazon Web Services.",
+"Microsoft Azure."
+],
+"type": "string"
+},
+"displayName": {
+"description": "The resource-type specific display name of the resource associated with the issue.",
+"type": "string"
+},
+"googleCloudMetadata": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata",
+"description": "The Google Cloud metadata of the resource associated with the issue. Only populated for Google Cloud resources."
+},
+"name": {
+"description": "The full resource name of the resource associated with the issue.",
+"type": "string"
+},
+"type": {
+"description": "The type of the resource associated with the issue.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAwsMetadata": {
+"description": "The AWS metadata of a resource associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadata",
+"properties": {
+"account": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount",
+"description": "The AWS account of the resource associated with the issue."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount": {
+"description": "The AWS account of the resource associated with the issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAwsMetadataAwsAccount",
+"properties": {
+"id": {
+"description": "The AWS account ID of the resource associated with the issue.",
+"type": "string"
+},
+"name": {
+"description": "The AWS account name of the resource associated with the issue.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAzureMetadata": {
+"description": "The Azure metadata of a resource associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadata",
+"properties": {
+"subscription": {
+"$ref": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription",
+"description": "The Azure subscription of the resource associated with the issue."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription": {
+"description": "The Azure subscription of the resource associated with the issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceAzureMetadataAzureSubscription",
+"properties": {
+"displayName": {
+"description": "The Azure subscription display name of the resource associated with the issue.",
+"type": "string"
+},
+"id": {
+"description": "The Azure subscription ID of the resource associated with the issue.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata": {
+"description": "Google Cloud metadata of a resource associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueResourceGoogleCloudMetadata",
+"properties": {
+"projectId": {
+"description": "The project ID that the resource associated with the issue belongs to.",
+"type": "string"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueSecurityContext": {
+"description": "Security context associated with an issue.",
+"id": "GoogleCloudSecuritycenterV2IssueSecurityContext",
+"properties": {
+"aggregatedCount": {
+"$ref": "GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount",
+"description": "The aggregated count of the security context."
+},
+"context": {
+"$ref": "GoogleCloudSecuritycenterV2IssueSecurityContextContext",
+"description": "The context of the security context."
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount": {
+"description": "Aggregated count of a security context.",
+"id": "GoogleCloudSecuritycenterV2IssueSecurityContextAggregatedCount",
+"properties": {
+"key": {
+"description": "Aggregation key.",
+"type": "string"
+},
+"value": {
+"description": "Aggregation value.",
+"format": "int32",
+"type": "integer"
+}
+},
+"type": "object"
+},
+"GoogleCloudSecuritycenterV2IssueSecurityContextContext": {
+"description": "Context of a security context.",
+"id": "GoogleCloudSecuritycenterV2IssueSecurityContextContext",
+"properties": {
+"type": {
+"description": "Context type.",
+"type": "string"
+},
+"values": {
+"description": "Context values.",
+"items": {
+"type": "string"
+},
+"type": "array"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2KernelRootkit": {
 "description": "Kernel mode rootkit signatures.",
 "id": "GoogleCloudSecuritycenterV2KernelRootkit",