feat(securitycenter): update the API

#### securitycenter:v1beta1 The following keys were added: - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.casePriority.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.casePriority.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.format - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseUri.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseUri.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.ticketInfo.$ref - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.ticketInfo.description - schemas.GoogleCloudSecuritycenterV1ResourceValueConfig.properties.sensitiveDataProtectionMapping.$ref - schemas.GoogleCloudSecuritycenterV1ResourceValueConfig.properties.sensitiveDataProtectionMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.id - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.enum - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.enumDescriptions - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.type - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.enum - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.enumDescriptions - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.type - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.type - schemas.PolicyDriftDetails.description - schemas.PolicyDriftDetails.id - schemas.PolicyDriftDetails.properties.detectedValue.description - schemas.PolicyDriftDetails.properties.detectedValue.type - schemas.PolicyDriftDetails.properties.expectedValue.description - schemas.PolicyDriftDetails.properties.expectedValue.type - schemas.PolicyDriftDetails.properties.field.description - schemas.PolicyDriftDetails.properties.field.type - schemas.PolicyDriftDetails.type - schemas.SecurityPosture.properties.policy.description - schemas.SecurityPosture.properties.policy.type - schemas.SecurityPosture.properties.policyDriftDetails.description - schemas.SecurityPosture.properties.policyDriftDetails.items.$ref - schemas.SecurityPosture.properties.policyDriftDetails.type - schemas.SecurityPosture.properties.policySet.description - schemas.SecurityPosture.properties.policySet.type - schemas.TicketInfo.description - schemas.TicketInfo.id - schemas.TicketInfo.properties.assignee.description - schemas.TicketInfo.properties.assignee.type - schemas.TicketInfo.properties.description.description - schemas.TicketInfo.properties.description.type - schemas.TicketInfo.properties.id.description - schemas.TicketInfo.properties.id.type - schemas.TicketInfo.properties.status.description - schemas.TicketInfo.properties.status.type - schemas.TicketInfo.properties.updateTime.description - schemas.TicketInfo.properties.updateTime.format - schemas.TicketInfo.properties.updateTime.type - schemas.TicketInfo.properties.uri.description - schemas.TicketInfo.properties.uri.type - schemas.TicketInfo.type The following keys were changed: - schemas.AttackExposure.properties.attackExposureResult.description - schemas.Binding.properties.role.description - schemas.Cve.description - schemas.SecurityPosture.properties.changedPolicy.description - schemas.SecurityPosture.properties.name.description - schemas.SecurityPosture.properties.postureDeployment.description - schemas.SecurityPosture.properties.postureDeploymentResource.description #### securitycenter:v1beta2 The following keys were added: - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.casePriority.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.casePriority.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.format - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseUri.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseUri.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.ticketInfo.$ref - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.ticketInfo.description - schemas.GoogleCloudSecuritycenterV1ResourceValueConfig.properties.sensitiveDataProtectionMapping.$ref - schemas.GoogleCloudSecuritycenterV1ResourceValueConfig.properties.sensitiveDataProtectionMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.id - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.enum - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.enumDescriptions - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.highSensitivityMapping.type - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.description - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.enum - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.enumDescriptions - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.properties.mediumSensitivityMapping.type - schemas.GoogleCloudSecuritycenterV1SensitiveDataProtectionMapping.type - schemas.PolicyDriftDetails.description - schemas.PolicyDriftDetails.id - schemas.PolicyDriftDetails.properties.detectedValue.description - schemas.PolicyDriftDetails.properties.detectedValue.type - schemas.PolicyDriftDetails.properties.expectedValue.description - schemas.PolicyDriftDetails.properties.expectedValue.type - schemas.PolicyDriftDetails.properties.field.description - schemas.PolicyDriftDetails.properties.field.type - schemas.PolicyDriftDetails.type - schemas.SecurityPosture.properties.policy.description - schemas.SecurityPosture.properties.policy.type - schemas.SecurityPosture.properties.policyDriftDetails.description - schemas.SecurityPosture.properties.policyDriftDetails.items.$ref - schemas.SecurityPosture.properties.policyDriftDetails.type - schemas.SecurityPosture.properties.policySet.description - schemas.SecurityPosture.properties.policySet.type - schemas.TicketInfo.description - schemas.TicketInfo.id - schemas.TicketInfo.properties.assignee.description - schemas.TicketInfo.properties.assignee.type - schemas.TicketInfo.properties.description.description - schemas.TicketInfo.properties.description.type - schemas.TicketInfo.properties.id.description - schemas.TicketInfo.properties.id.type - schemas.TicketInfo.properties.status.description - schemas.TicketInfo.properties.status.type - schemas.TicketInfo.properties.updateTime.description - schemas.TicketInfo.properties.updateTime.format - schemas.TicketInfo.properties.updateTime.type - schemas.TicketInfo.properties.uri.description - schemas.TicketInfo.properties.uri.type - schemas.TicketInfo.type The following keys were changed: - schemas.AttackExposure.properties.attackExposureResult.description - schemas.Cve.description - schemas.SecurityPosture.properties.changedPolicy.description - schemas.SecurityPosture.properties.name.description - schemas.SecurityPosture.properties.postureDeployment.description - schemas.SecurityPosture.properties.postureDeploymentResource.description #### securitycenter:v1 The following keys were added: - resources.organizations.resources.simulations.resources.attackExposureResults.resources.valuedResources.methods.list.parameters.orderBy.description - resources.organizations.resources.simulations.resources.attackExposureResults.resources.valuedResources.methods.list.parameters.orderBy.location - resources.organizations.resources.simulations.resources.attackExposureResults.resources.valuedResources.methods.list.parameters.orderBy.type - resources.organizations.resources.simulations.resources.valuedResources.methods.list.parameters.orderBy.description - resources.organizations.resources.simulations.resources.valuedResources.methods.list.parameters.orderBy.location - resources.organizations.resources.simulations.resources.valuedResources.methods.list.parameters.orderBy.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.casePriority.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.casePriority.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.format - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseSla.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseUri.description - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.caseUri.type - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.ticketInfo.$ref - schemas.GoogleCloudSecuritycenterV1ExternalSystem.properties.ticketInfo.description - schemas.PolicyDriftDetails.description - schemas.PolicyDriftDetails.id - schemas.PolicyDriftDetails.properties.detectedValue.description - schemas.PolicyDriftDetails.properties.detectedValue.type - schemas.PolicyDriftDetails.properties.expectedValue.description - schemas.PolicyDriftDetails.properties.expectedValue.type - schemas.PolicyDriftDetails.properties.field.description - schemas.PolicyDriftDetails.properties.field.type - schemas.PolicyDriftDetails.type - schemas.SecurityPosture.properties.policy.description - schemas.SecurityPosture.properties.policy.type - schemas.SecurityPosture.properties.policyDriftDetails.description - schemas.SecurityPosture.properties.policyDriftDetails.items.$ref - schemas.SecurityPosture.properties.policyDriftDetails.type - schemas.SecurityPosture.properties.policySet.description - schemas.SecurityPosture.properties.policySet.type - schemas.TicketInfo.description - schemas.TicketInfo.id - schemas.TicketInfo.properties.assignee.description - schemas.TicketInfo.properties.assignee.type - schemas.TicketInfo.properties.description.description - schemas.TicketInfo.properties.description.type - schemas.TicketInfo.properties.id.description - schemas.TicketInfo.properties.id.type - schemas.TicketInfo.properties.status.description - schemas.TicketInfo.properties.status.type - schemas.TicketInfo.properties.updateTime.description - schemas.TicketInfo.properties.updateTime.format - schemas.TicketInfo.properties.updateTime.type - schemas.TicketInfo.properties.uri.description - schemas.TicketInfo.properties.uri.type - schemas.TicketInfo.type The following keys were changed: - schemas.AttackExposure.properties.attackExposureResult.description - schemas.Binding.properties.role.description - schemas.SecurityPosture.properties.changedPolicy.description - schemas.SecurityPosture.properties.name.description - schemas.SecurityPosture.properties.postureDeployment.description - schemas.SecurityPosture.properties.postureDeploymentResource.description
googleapis · Feb 2, 2024 · 1f28c20 · 1f28c20
1 parent 74282ab
commit 1f28c20
Show file tree

Hide file tree

Showing 6 changed files with 658 additions and 41 deletions.
diff --git a/discovery/securitycenter-v1.json b/discovery/securitycenter-v1.json
@@ -3483,6 +3483,11 @@
                           "location": "query",
                           "type": "string"
                         },
+                        "orderBy": {
+                          "description": "Optional. The fields by which to order the valued resources response. Supported fields: * `exposed_score` * `resource_value` * `resource_type` * `resource` * `display_name` Values should be a comma separated list of fields. For example: `exposed_score,resource_value`. The default sorting order is descending. To specify ascending or descending order for a field, append a \" ASC\" or a \" DESC\" suffix, respectively; for example: `exposed_score DESC`.",
+                          "location": "query",
+                          "type": "string"
+                        },
                         "pageSize": {
                           "description": "The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.",
                           "format": "int32",
@@ -3600,6 +3605,11 @@
                       "location": "query",
                       "type": "string"
                     },
+                    "orderBy": {
+                      "description": "Optional. The fields by which to order the valued resources response. Supported fields: * `exposed_score` * `resource_value` * `resource_type` * `resource` * `display_name` Values should be a comma separated list of fields. For example: `exposed_score,resource_value`. The default sorting order is descending. To specify ascending or descending order for a field, append a \" ASC\" or a \" DESC\" suffix, respectively; for example: `exposed_score DESC`.",
+                      "location": "query",
+                      "type": "string"
+                    },
                     "pageSize": {
                       "description": "The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000.",
                       "format": "int32",
@@ -5810,7 +5820,7 @@
       }
     }
   },
-  "revision": "20231218",
+  "revision": "20240124",
   "rootUrl": "https://securitycenter.googleapis.com/",
   "schemas": {
     "Access": {
@@ -6001,7 +6011,7 @@
       "id": "AttackExposure",
       "properties": {
         "attackExposureResult": {
-          "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/attackExposureResults/456",
+          "description": "The resource name of the attack path simulation result that contains the details regarding this attack exposure score. Example: organizations/123/simulations/456/attackExposureResults/789",
           "type": "string"
         },
         "exposedHighValueResourcesCount": {
@@ -6316,7 +6326,7 @@
           "type": "array"
         },
         "role": {
-          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`.",
+          "description": "Role that is assigned to the list of `members`, or principals. For example, `roles/viewer`, `roles/editor`, or `roles/owner`. For an overview of the IAM roles and permissions, see the [IAM documentation](https://cloud.google.com/iam/docs/roles-overview). For a list of the available pre-defined roles, see [here](https://cloud.google.com/iam/docs/understanding-roles).",
           "type": "string"
         }
       },
@@ -7569,6 +7579,19 @@
           },
           "type": "array"
         },
+        "casePriority": {
+          "description": "The priority of the finding's corresponding case in the external system.",
+          "type": "string"
+        },
+        "caseSla": {
+          "description": "The SLA of the finding's corresponding case in the external system.",
+          "format": "google-datetime",
+          "type": "string"
+        },
+        "caseUri": {
+          "description": "The link to the finding's corresponding case in the external system.",
+          "type": "string"
+        },
         "externalSystemUpdateTime": {
           "description": "The time when the case was last updated, as reported by the external system.",
           "format": "google-datetime",
@@ -7585,6 +7608,10 @@
         "status": {
           "description": "The most recent status of the finding's corresponding case, as reported by the external system.",
           "type": "string"
+        },
+        "ticketInfo": {
+          "$ref": "TicketInfo",
+          "description": "Information about the ticket, if any, that is being used to track the resolution of the issue that is identified by this finding."
         }
       },
       "type": "object"
@@ -9359,6 +9386,25 @@
       },
       "type": "object"
     },
+    "PolicyDriftDetails": {
+      "description": "The policy field that violates the deployed posture and its expected and and detected values.",
+      "id": "PolicyDriftDetails",
+      "properties": {
+        "detectedValue": {
+          "description": "The detected value that violates the deployed posture, for example, `false` or `allowed_values={\"projects/22831892”}`.",
+          "type": "string"
+        },
+        "expectedValue": {
+          "description": "The value of this field that was configured in a posture, for example, `true` or `allowed_values={\"projects/29831892”}`.",
+          "type": "string"
+        },
+        "field": {
+          "description": "The name of the updated field, for example constraint.implementation.policy_rules[0].enforce",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "Position": {
       "description": "A position in the uploaded text version of a module.",
       "id": "Position",
@@ -9660,19 +9706,34 @@
       "id": "SecurityPosture",
       "properties": {
         "changedPolicy": {
-          "description": "The name of the policy that has been updated, for example, `projects/{project_id}/policies/{constraint_name}`.",
+          "description": "The name of the updated policy, for example, `projects/{project_id}/policies/{constraint_name}`.",
           "type": "string"
         },
         "name": {
-          "description": "Name of the posture, for example, `organizations/{org_id}/locations/{location}/postures/{posture_name}`.",
+          "description": "Name of the posture, for example, `CIS-Posture`.",
+          "type": "string"
+        },
+        "policy": {
+          "description": "The ID of the updated policy, for example, `compute-policy-1`.",
+          "type": "string"
+        },
+        "policyDriftDetails": {
+          "description": "The details about a change in an updated policy that violates the deployed posture.",
+          "items": {
+            "$ref": "PolicyDriftDetails"
+          },
+          "type": "array"
+        },
+        "policySet": {
+          "description": "The name of the updated policyset, for example, `cis-policyset`.",
           "type": "string"
         },
         "postureDeployment": {
-          "description": "The name of the posture deployment, for example, `projects/{project_id}/posturedeployments/{posture_deployment_id}`.",
+          "description": "The name of the posture deployment, for example, `organizations/{org_id}/posturedeployments/{posture_deployment_id}`.",
           "type": "string"
         },
         "postureDeploymentResource": {
-          "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_id}`.",
+          "description": "The project, folder, or organization on which the posture is deployed, for example, `projects/{project_number}`.",
           "type": "string"
         },
         "revisionId": {
@@ -9974,6 +10035,38 @@
       },
       "type": "object"
     },
+    "TicketInfo": {
+      "description": "Information about the ticket, if any, that is being used to track the resolution of the issue that is identified by this finding.",
+      "id": "TicketInfo",
+      "properties": {
+        "assignee": {
+          "description": "The assignee of the ticket in the ticket system.",
+          "type": "string"
+        },
+        "description": {
+          "description": "The description of the ticket in the ticket system.",
+          "type": "string"
+        },
+        "id": {
+          "description": "The identifier of the ticket in the ticket system.",
+          "type": "string"
+        },
+        "status": {
+          "description": "The latest status of the ticket, as reported by the ticket system.",
+          "type": "string"
+        },
+        "updateTime": {
+          "description": "The time when the ticket was last updated, as reported by the ticket system.",
+          "format": "google-datetime",
+          "type": "string"
+        },
+        "uri": {
+          "description": "The link to the ticket in the ticket system.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ValidateEventThreatDetectionCustomModuleRequest": {
       "description": "Request to validate an Event Threat Detection custom module.",
       "id": "ValidateEventThreatDetectionCustomModuleRequest",