ecloudPlatformScope _requester organizationsprojects locations operationspostureDeploymentspostureTemplatesposturesreportscanceldeletegetlistcreatepatchextract listRevisionscreateIaCValidationReportasset assetTypetoJsoncontrolstandardorgPolicyConstraintorgPolicyConstraintCustom#securityHealthAnalyticsCustomModulesecurityHealthAnalyticsModuleiac customOutput description predicaterecommendationresourceSelectorseverity properties postureIdworkload actionType condition displayName methodTypesname resourceTypes updateTimeallowAlldenyAllenforce parametersvalues allowedValues deniedValuestfPlan tfPlanAsBytesnote violations nextPageToken unreachable revisionsdoneerrormetadataresponsecannedConstraintId policyRulescustomConstraintcomplianceStandards constraintpolicyIdconstraintTypepolicies policySetId annotations categories createTimeetag policySets reconciling revisionIdstatedesiredPostureIddesiredPostureRevisionIdfailureMessagepostureRevisionIdtargetResource policySetposturepostureDeploymentpostureDeploymentTargetResourcevalueExpressioniacValidationReportincludedconfigidmoduleEnablementState moduleNameassetId nextSteps violatedAssetviolatedPolicyviolatedPosture3SecurityPostureApiOrganizationsResourceOrganizationsLocationsResource(OrganizationsLocationsOperationsResource0OrganizationsLocationsPostureDeploymentsResource.OrganizationsLocationsPostureTemplatesResource&OrganizationsLocationsPosturesResource%OrganizationsLocationsReportsResourceProjectsResourceProjectsLocationsResource AssetDetailsCancelOperationRequestComplianceStandard Constraint CreateIaCValidationReportRequest CustomConfigCustomOutputSpecEmptyExprExtractPostureRequest,GoogleCloudSecuritypostureV1CustomConstraint&GoogleCloudSecuritypostureV1PolicyRule2GoogleCloudSecuritypostureV1PolicyRuleStringValuesIaCIaCValidationReportListLocationsResponseListOperationsResponseListPostureDeploymentsResponseListPostureRevisionsResponseListPostureTemplatesResponseListPosturesResponseListReportsResponseLocation OperationOrgPolicyConstraintOrgPolicyConstraintCustomPolicy PolicyDetails PolicySetPosturePostureDeploymentPostureDetailsPostureTemplatePropertyReportResourceSelector ResourceTypes#SecurityHealthAnalyticsCustomModuleSecurityHealthAnalyticsModuleStatus ViolationApiRequestErrorDetailedApiRequestError ApiRequesterClientStringrootUrl servicePathrequestHeaders$fieldsFuturejsonencodeListUri encodeFullrequestbody queryParamsfromJsonMapdynamicfilterpageSize pageTokenreturnPartialSuccessintboolpostureDeploymentIdetag updateMask revisionId postureIdextraLocationTypesasset assetType$EmptycontrolstandardorgPolicyConstraint containsKeyorgPolicyConstraintCustom#securityHealthAnalyticsCustomModulesecurityHealthAnalyticsModuleiac customOutput description predicaterecommendationresourceSelectorseverity propertiesmapvaluetoList$Exprworkload actionType condition displayName methodTypesname resourceTypes updateTimeObjectallowAlldenyAllenforce parametersvalues allowedValues deniedValuesbase64decode replaceAlltfPlannote violations locations nextPageToken operations unreachablepostureDeployments revisionspostureTemplatesposturesreports $Location00doneerrormetadataresponsecannedConstraintId policyRulescustomConstraintcomplianceStandards constraintpolicyIdconstraintTypepolicies policySetIdAIP annotationsMapEntrykey categories createTime policySets reconcilingstatedesiredPostureIddesiredPostureRevisionIdfailureMessagepostureRevisionIdtargetResource policySetposturepostureDeploymentpostureDeploymentTargetResourcevalueExpressioniacValidationReportincludedconfigidmoduleEnablementState moduleName $Status00assetId nextSteps violatedAssetviolatedPolicyviolatedPosturejԱ3Ҏ - 'B3`ApiRequestErrorDetailedApiRequestError:package:_discoveryapis_commons/_discoveryapis_commons.dartasync dart:async convert dart:convert,/core/ dart:core7z}commons}:package:_discoveryapis_commons/_discoveryapis_commons.darthttppackage:http/http.dart../shared.dart../src/user_agent.dartQN7GHmЀ)[ʂ*`a΃m59W-`υ؅م56Ɇ/bcĈ_z 0hi$%;U 8BDEc>@Ahύ X'`я Idfg %&jp XC Lj7='EiؖMTUɖՖkop9KQҙؚ)6<›Qśƛ3:Ŝ˝@F`fN^dߞCxȠ=DE|}Ơ?CDޡ@¢*0ҤfIO8EKѦ/Gc"`بGNOǩө4lswyzܪݫ-HIū˫.e_ouTʮ $1aۯDKLΰڰ#txy² dвֳ#o AG̴ҵ#06޵ '4tֶݶ޷FRb۷߷ ,2|޸JPݹ4AGͺ &3s$1RYüĽ #)lAݿ*ag@@!@l@|@@@AAA%AvAAABB+BGBaBnBBCC[CCCCCDD&D3DTD[DDDDDEEEUEEF0FFGGNGxG~GGGGH#H0HHHHIJIIIJJ(J.JRJXJJJK KBKcKKKKKLLNLLLLMMM2M>MMM`MMMMMMNN@NANNNNNNOOLOOPPPhPPPQ QQ;QAQQQQR+RPRhRRRRS+S`SgShSSSSST TT6TnTuTyTzTTTTU+UbUUVVLVRVVWW$WnWWWX'X7X=XtXzXXXY/YdYYYYYZZ%ZeZZ[[G[N[O[[[[[\ \\B\z\\\\\\\]']B]C]`]f]]]]]^5^^^^__$_*_N_T___` `>```u````aaBa~aaabbb3b?bMb`bbbbbcccYc_cyccd d*dndtdeeaeeeff*f0fTfZfffggDgfg~ggggh)h^hehfhhhhhi iicigihijj jZjjjjjkkCkzkkll&l,lPlVlllm m@mcmmmmmn7nlnsntnnnooo!oBoIooooooop0p}pppq-qoquqqqqqrOr\rbrrsss:sTsassttttTtUtttttuuuuhuuuuuv)vtvzvwwwhwwwx(xqxwxxxyy y^ykyqyyz"z<zUzmzzzz{#{a{{{{|!|"|R|^|k|||||}}}0}6}P}V}}~~E~K~~n'-djTCDEu '+,]cO76<V\W] &r-=Cgm"Wx6v)01hi@DFGuL8> TdjI~"RGHx"#DJdjU[4AGZ 9@;r[a#)s"28fl!VN078~QX\^_xDFGi -3b 28"q%&Vbo4:%o6<G1RX@PVAv7Q^@|0<Ijq(=,BCrxJKs >dOjCIntAv0467bu 0hi:@P8>?eqL\p3oA~DzL.|(XŸ¦ª¬­ KQamnÞß ]qz{Ĭ(,|Šŵ34ƁƗƝ;RXhDŽDž*0@STȢȸȾ"#`fvɜɝZʂʢ&<Pi˄˗˝˞ 3̥́̑/z͊͞HrήξBnϘϾ"FSxЛк-48:;фѝ>?kwү,=KbklӝAbfԷ%=>ՊՖ՚3ցVנ9؄mٹ 'LRb|}[ۗ۝ۭ3?vܫܴܵ 0mqstݛݟ5{޶,aߌ߮=XYgW 4:g:abUG~?EXst7LRSR>| :b"Px .Cj)agQ/{d8 W;!45ms !ciLioIJ>Dk 5M^de5:FVj)9MVW>l ,SlswyzUN'j0x*W %<BC%a@ # ) r     ! l m        + , | }       7 S       2 3 b n   Qbp=ACDz0NOA/U (Qop;0H]syz/BoPgpq"/Vw lyHop+j8IWn-["ELPRS >?l   X   ! !!)!@!I!J!{!!"""""L"q""""## #6#f#g####$8$|$$%%%%6%?%@%q%%%&&4&;&?&A&B&i&&&&&'''C'c'd'''('(((X(d((())S)d)r)))* ***H*v****++8+?+C+E+F+l++++,,, ,D,b,c,,,-$-%-T-`----.N.\.s...///2/`/////00%0)0+0,0d000001G1M111122 2!2`2f233O3]3c334%4&4s44455,5-5e5k566V667?7E77888W8X8}88889D9T9h999: :P:::::;; ;D;`;;;;;;< <<<<>W>j>>???(?1?2?c???@@&@-@1@3@4@a@@@@@@A+A1AAAAAABBBNBBBC CCWCjCCDDD(D1D2DcDDEEEEEbEqEEEEEF,F2FBF\F]FFFFFFFG,G2GBG[G\GgGGGGGGGGHBHUHHHHHI3IVIIIJJ6J?J@JqJJJK!K.KaKKKKKKKKLLILOLrLLLLM,M{MMMMN6NNNO4OLOOOOP P(P)P;PYPnPPPPPPQ#QVQmQQR"R+R,R]RRRSS&SYSzSSSSSSTTT:T@TPTlTmTTTTUU#U$ULURUbU~UUUUUV.VbVuVVVWW?WHWIWzWWWWX"X?XbXiXmXoXpXXXXY*YkYqYYYZZZZ1ZWZXZZZZZZZZ[[[^[}[[\$\q\\\\\\\]]M]S]c]x]y]]]]]^+^1^D^^^_^^^_ _<_B_`_{_|____`6``a a!a"aXa^aqaaaaaaaab b"b8bMb]brbxbybbbccVcecccd d[dddee-eke|eeeffBf{ffffgg0gZgvgggh h*hRh_hhhhhii2iUiviiiiiij j j^jjkkAkGkkkkl!l"lplllllm mm%m@mAmpmvmmmmmn(n.nAnbncnnnno o2o3ooop'pupppppq qqLqRqeqqqqqr/r5rErZr[rrrrsssNsTsdsssssttt/t5tHtjttu)uguuv5v|vvvvw4wtwzwwwwwxxx x6xLxaxvxxxxxyyy1yGyWypyyyyyyz+zszzz{{={x{{||K|||}7}p}}~~"~#~T~~~~~,p4^|%Fi&Et+B.FGFL Kmn :F} f0f"=l3 %ABTZ\bu\bu"3z+:Odtz{4oRcq+S}5Xm KQavw:@Pij5RP $%^dw!1FG|<H \l!I(=^eikl7=MvwKbklPdz0<p=ACDw39DJZvwWhV|}?KwCl@X'.245l^#)w  Z[(12c .59;<m;MVno6X (AB06)B\bc3h&:vNu%GmERmAHLNm/// Security Posture API - v1 /// /// Defines, assesses, and monitors the overall status of your security in /// Google Cloud. You can use security postures to evaluate your current cloud /// security against defined benchmarks and help maintain the level of security /// that your organization requires. /// /// For more information, see /// /// Create an instance of [SecurityPostureApi] to access these resources: /// /// - [OrganizationsResource] /// - [OrganizationsLocationsResource] /// - [OrganizationsLocationsOperationsResource] /// - [OrganizationsLocationsPostureDeploymentsResource] /// - [OrganizationsLocationsPostureTemplatesResource] /// - [OrganizationsLocationsPosturesResource] /// - [OrganizationsLocationsReportsResource] /// - [ProjectsResource] /// - [ProjectsLocationsResource]/6}3`.'9??KYY?e oΊÊЊ׊؊?(''6r/// See, edit, configure, and delete your Google Cloud data and see the email /// address for your Google Account.k%M>cc/// Defines, assesses, and monitors the overall status of your security in /// Google Cloud. /// /// You can use security postures to evaluate your current cloud security /// against defined benchmarks and help maintain the level of security that your /// organization requires.  4)6Ie%aEEK +,,AZO\ Vj%v B))pTmAA$Gď`%II`mmy((F=/// Starts asynchronous cancellation on a long-running operation. /// /// The server makes a best effort to cancel the operation, but success is not /// guaranteed. If the server doesn't support this method, it returns /// `google.rpc.Code.UNIMPLEMENTED`. Clients can use Operations.GetOperation /// or other methods to check whether the cancellation succeeded or whether /// the operation completed despite cancellation. On successful cancellation, /// the operation is not deleted; instead, it becomes an operation with an /// Operation.error value with a google.rpc.Status.code of `1`, corresponding /// to `Code.CANCELLED`. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - The name of the operation resource to be cancelled. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ߚrr؃%/// Deletes a long-running operation. /// /// This method indicates that the client is no longer interested in the /// operation result. It does not cancel the operation. If the server doesn't /// support this method, it returns `google.rpc.Code.UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation resource to be deleted. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Empty]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error./// Gets the latest state of a long-running operation. /// /// Clients can use this method to poll the operation result at intervals as /// recommended by the API service. /// /// Request parameters: /// /// [name] - The name of the operation resource. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/operations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.'33=KKXggrFF0J/// Lists operations that match the specified filter in the request. /// /// If the server doesn't support this method, it returns `UNIMPLEMENTED`. /// /// Request parameters: /// /// [name] - The name of the operation's parent resource. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - The standard list filter. /// /// [pageSize] - The standard list page size. /// /// [pageToken] - The standard list page token. /// /// [returnPartialSuccess] - When set to `true`, operations that are reachable /// are returned as normal, and those that are unreachable are returned in the /// ListOperationsResponse.unreachable field. This can only be `true` when /// reading across collections. For example, when `parent` is set to /// `"projects/example/locations/-"`. This field is not supported by default /// and will result in an `UNIMPLEMENTED` error if set unless explicitly /// documented otherwise in service or product specific documentation. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListOperationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.ggm%>3@ߪhЪ%ή KK,/// Creates a new PostureDeployment in a given project and location. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [postureDeploymentId] - Required. An identifier for the posture /// deployment. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.{{cք/// Deletes a PostureDeployment. /// /// Request parameters: /// /// [name] - Required. The name of the posture deployment, in the format /// `organizations/{organization}/locations/global/postureDeployments/{posture_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postureDeployments/\[^/\]+$`. /// /// [etag] - Optional. An opaque identifier for the current version of the /// posture deployment. If you provide this value, then it must match the /// existing value. If the values don't match, then the request fails with an /// ABORTED error. If you omit this value, then the posture deployment is /// deleted regardless of its current `etag` value. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error./// Gets details for a PostureDeployment. /// /// Request parameters: /// /// [name] - Required. The name of the PostureDeployment, in the format /// `organizations/{organization}/locations/global/postureDeployments/{posture_deployment_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postureDeployments/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [PostureDeployment]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.AAAAAB BBB!B/B/B<BKBKBXƼƈ Aڄ/// Lists every PostureDeployment in a project and location. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. A filter to apply to the list of postures, in the /// format defined in \[AIP-160: Filtering\](https://google.aip.dev/160). /// /// [pageSize] - Optional. The maximum number of posture deployments to /// return. The default value is `500`. If you exceed the maximum value of /// `1000`, then the service uses the maximum value. /// /// [pageToken] - Optional. A pagination token returned from a previous /// request to list posture deployments. Provide this token to retrieve the /// next page of results. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListPostureDeploymentsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.KgKgKyKKKKKKKKKDDՉK\&/// Updates an existing PostureDeployment. /// /// To prevent concurrent updates from overwriting each other, always follow /// the read-modify-write pattern when you update a posture deployment: 1. /// Call GetPostureDeployment to get the current version of the deployment. 2. /// Update the fields in the deployment as needed. 3. Call /// UpdatePostureDeployment to update the deployment. Ensure that your request /// includes the `etag` value from the GetPostureDeployment response. /// **Important:** If you omit the `etag` when you call /// UpdatePostureDeployment, then the updated deployment unconditionally /// overwrites the existing deployment. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Identifier. The name of the posture deployment, in the /// format /// `organizations/{organization}/locations/global/postureDeployments/{deployment_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postureDeployments/\[^/\]+$`. /// /// [updateMask] - Required. The fields in the PostureDeployment to update. /// You can update only the following fields: * PostureDeployment.posture_id * /// PostureDeployment.posture_revision_id /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.zzdNCNqNrNrNNNNNCNCfN4N%N4RTRTR`RlRlRyRRRNNRKS/// Gets a single revision of a PostureTemplate. /// /// Request parameters: /// /// [name] - Required. The name of the PostureTemplate, in the format /// `organizations/{organization}/locations/global/postureTemplates/{posture_template}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postureTemplates/\[^/\]+$`. /// /// [revisionId] - Optional. The posture template revision to retrieve. If not /// specified, the most recently updated revision is retrieved. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [PostureTemplate]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.YYYYYYYYYYYYZZZT|T|Y/// Lists every PostureTemplate in a given organization and location. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. A filter to apply to the list of postures, in the /// format defined in \[AIP-160: Filtering\](https://google.aip.dev/160). /// /// [pageSize] - Optional. The maximum number of posture templates to return. /// The default value is `500`. If you exceed the maximum value of `1000`, /// then the service uses the maximum value. /// /// [pageToken] - Optional. A pagination token returned from a previous /// request to list posture templates. Provide this token to retrieve the next /// page of results. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListPostureTemplatesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.MMM\] ] ] ]]8]-]:\\^\\%\`d`d`l`y`y```````]E]E`X/// Creates a new Posture. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [postureId] - Required. An identifier for the posture. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.gjgjgvggggggbbg^//// Deletes all revisions of a Posture. /// /// You can only delete a posture if none of its revisions are deployed. /// /// Request parameters: /// /// [name] - Required. The name of the Posture, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postures/\[^/\]+$`. /// /// [etag] - Optional. An opaque identifier for the current version of the /// posture. If you provide this value, then it must match the existing value. /// If the values don't match, then the request fails with an ABORTED error. /// If you omit this value, then the posture is deleted regardless of its /// current `etag` value. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.mgmgm}mmmmmmijij3mZ/// Extracts existing policies from an organization, folder, or project, and /// applies them to another organization, folder, or project as a Posture. /// /// If the other organization, folder, or project already has a posture, then /// the result of the long-running operation is an ALREADY_EXISTS error. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.s s ss!s!s.s>s>sKoows/// Gets a single revision of a Posture. /// /// Request parameters: /// /// [name] - Required. The name of the Posture, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postures/\[^/\]+$`. /// /// [revisionId] - Optional. The posture revision to retrieve. If not /// specified, the most recently updated revision is retrieved. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Posture]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.z&z&z2z@z@zMzYzYzczqzqz~zzzuuz/// Lists the most recent revisions of all Posture resources in a specified /// organization and location. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. A filter to apply to the list of postures, in the /// format defined in \[AIP-160: Filtering\](https://google.aip.dev/160). /// /// [pageSize] - The maximum number of postures to return. The default value /// is `500`. If you exceed the maximum value of `1000`, then the service uses /// the maximum value. /// /// [pageToken] - A pagination token returned from a previous request to list /// postures. Provide this token to retrieve the next page of results. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListPosturesResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.}}'/// Lists all revisions of a single Posture. /// /// Request parameters: /// /// [name] - Required. The name of the Posture, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postures/\[^/\]+$`. /// /// [pageSize] - Optional. The maximum number of posture revisions to return. /// The default value is `500`. If you exceed the maximum value of `1000`, /// then the service uses the maximum value. /// /// [pageToken] - Optional. A pagination token from a previous request to list /// posture revisions. Provide this token to retrieve the next page of /// results. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListPostureRevisionsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.||..q/// Updates a revision of an existing Posture. /// /// If the posture revision that you update is currently deployed, then a new /// revision of the posture is created. To prevent concurrent updates from /// overwriting each other, always follow the read-modify-write pattern when /// you update a posture: 1. Call GetPosture to get the current version of the /// posture. 2. Update the fields in the posture as needed. 3. Call /// UpdatePosture to update the posture. Ensure that your request includes the /// `etag` value from the GetPosture response. **Important:** If you omit the /// `etag` when you call UpdatePosture, then the updated posture /// unconditionally overwrites the existing posture. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [name] - Required. Identifier. The name of the posture, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/postures/\[^/\]+$`. /// /// [revisionId] - Required. The revision ID of the posture to update. If the /// posture revision that you update is currently deployed, then a new /// revision of the posture is created. /// /// [updateMask] - Required. The fields in the Posture to update. You can /// update only the following fields: * Posture.description * /// Posture.policy_sets * Posture.state /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.\\\]w%( M/// Validates a specified infrastructure-as-code (IaC) configuration, and /// creates a Report with the validation results. /// /// Only Terraform configurations are supported. Only modified assets are /// validated. /// /// [request] - The metadata request object. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Operation]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.%%l䂃/// Gets details for a Report. /// /// Request parameters: /// /// [name] - Required. The name of the report, in the format /// `organizations/{organization}/locations/global/reports/{report_id}`. /// Value must have pattern /// `^organizations/\[^/\]+/locations/\[^/\]+/reports/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Report]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.z/// Lists every Report in a given organization and location. /// /// Request parameters: /// /// [parent] - Required. The parent resource name, in the format /// `organizations/{organization}/locations/global`. /// Value must have pattern `^organizations/\[^/\]+/locations/\[^/\]+$`. /// /// [filter] - Optional. A filter to apply to the list of reports, in the /// format defined in \[AIP-160: Filtering\](https://google.aip.dev/160). /// /// [pageSize] - Optional. The maximum number of reports to return. The /// default value is `500`. If you exceed the maximum value of `1000`, then /// the service uses the maximum value. /// /// [pageToken] - Optional. A pagination token returned from a previous /// request to list reports. Provide this token to retrieve the next page of /// results. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListReportsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.GGM%:/<Dz%W__eMk%??KRR_;/// Gets information about a location. /// /// Request parameters: /// /// [name] - Resource name for the location. /// Value must have pattern `^projects/\[^/\]+/locations/\[^/\]+$`. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [Location]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.*,;;H?/// Lists information about the supported locations for this service. /// /// This method can be called in two ways: * **List all public locations:** /// Use the path `GET /v1/locations`. * **List project-visible locations:** /// Use the path `GET /v1/projects/{project_id}/locations`. This may include /// public locations as well as private or other locations specifically /// visible to the project. /// /// Request parameters: /// /// [name] - The resource that owns the locations collection, if applicable. /// Value must have pattern `^projects/\[^/\]+$`. /// /// [extraLocationTypes] - Optional. Do not use this field. It is unsupported /// and is ignored unless explicitly documented otherwise. This is primarily /// for internal usage. /// /// [filter] - A filter to narrow down results to a preferred subset. The /// filtering language accepts strings like `"displayName=tokyo"`, and is /// documented in more detail in \[AIP-160\](https://google.aip.dev/160). /// /// [pageSize] - The maximum number of results to return. If not set, the /// service selects a default. /// /// [pageToken] - A page token received from the `next_page_token` field in /// the response. Send that page token to receive the subsequent page. /// /// [$fields] - Selector specifying which fields to include in a partial /// response. /// /// Completes with a [ListLocationsResponse]. /// /// Completes with a [commons.ApiRequestError] if the API endpoint returned an /// error. /// /// If the used [http.Client] completes with an error when making a REST call, /// this method will complete with the same error.GGM*,, 188=+MYbccly}MMZ;?;/// Information about the Cloud Asset Inventory asset that violated a policy. /// /// The format of this information can change at any time without prior /// notice. Your application must not depend on this information in any way.E/// The type of Cloud Asset Inventory asset. /// /// For a list of asset types, see /// [Supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types).⃾.E/// Details of a Cloud Asset Inventory asset that caused a violation.  2 |0$.%378>QIeXcSYhlmsրlx/// The control in the compliance standard that the policy helps enforce. /// /// For example, `AC-3`. /// /// Optional.s/// The compliance standard that the policy helps enforce. /// /// For example, `NIST SP 800-53`. /// /// Optional.1UJ/// Information about a compliance standard that the policy helps enforce.("AKTUU^koyhZ$'+,/I045=ABjx}G1JNORlSWX`de67?V|QWP "B#Ropx AALwqB/// A predefined organization policy constraint. /// /// Optional.MyM>/// A custom organization policy constraint. /// /// Optional.kD/// A custom module for Security Health Analytics. /// /// Optional.qqH/// A built-in detector for Security Health Analytics. /// /// Optional.A77th*/// Metadata for a constraint in a Policy.pÐÒÒ×pp-á#wi '[5-3(.8<=@ZAEFNRSkááh `hQ/// The infrastructure-as-code (IaC) configuration to validate. /// /// Required.}}fġ­­82/// Request message for CreateIaCValidationReport. **/@@ETTYmmrˈˈ ˍˠˬ˵˶˶˿ ̝()1̏YHWCI\`ad~eijrvw̸̟̭̺͖̿ $%-͈RDP?EUYZ]w^bckop͘ʹͦͻͶͼ+  -=>FμΆ]pX^Ή΍ΎΑΫΒΖΗΟΣΤˠˠo˭%ŷz%U/// Definitions of custom source properties to include in findings. /// /// Optional.w6Lw#/// A description of the vulnerability or misconfiguration that the custom /// module detects. /// /// The description appears in each finding. Provide enough information to /// help an investigator understand the finding. The value must be enclosed in /// quotation marks. /// /// Optional.HLJH/// The Common Expression Language (CEL) expression to evaluate. /// /// When the expression evaluates to `true` for a resource, a finding is /// generated. /// /// Required.V/// An explanation of the steps that security teams can take to resolve the /// detected issue. /// /// The explanation appears in each finding. /// /// Required.Ɋ%uɊL/// The resource types that the custom module operates on. /// /// Required.ɟ\4/// The severity of findings generated by the custom module. /// /// Required. /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Default value. This value is unused. /// - "CRITICAL" : Critical severity. /// - "HIGH" : High severity. /// - "MEDIUM" : Medium severity. /// - "LOW" : Low severity.$7RŦ/// A custom module configuration for Security Health Analytics. /// /// Use `CustomConfig` to create custom detectors that generate custom findings /// for resources that you specify.)++0$AQZ[[dquh҉ҋҭҠґҞҌҒңҧҨҬһҽI:WX^_AA)R џu O/// The custom source properties that can appear in findings. /// /// Optional.nnӒ;;ъH/// Definitions of custom source properties that can appear in findings. 7"##,9=ܱPGeWcRXhlms܆~ܚ܍ܘ܈܎ܝܡܢܨq)Qq4/// An identifier for the posture. /// /// Required.ۼEۼ!/// The organization, folder, or project from which policies are extracted. /// /// Must be within the organization defined in parent. Use one of the /// following formats: * `organization/{organization_number}` * /// `folder/{folder_number}` * `project/{project_number}` /// /// Required.ܷܷბ'/// Request message for ExtractPosture.v ##(;;@vvUs *A1?,2DHIOeZ|lzgm -$+%045;SFUzm[kV\ptuyUULcL/// Whether to allow or deny the action. /// Possible string values are: /// - "ACTION_TYPE_UNSPECIFIED" : Default value. This value is unused. /// - "ALLOW" : Allow the action. /// - "DENY" : Deny the action.[/// A Common Expression Language (CEL) condition expression that must evaluate /// to `true` for the constraint to be enforced. /// /// The maximum length is 1000 characters. For example: + /// `resource.instanceName.matches('(production|test)_(.+_)?[\d]+')`: /// Evaluates to `true` if the resource's `instanceName` attribute contains /// the following: + The prefix `production` or `test` + An underscore (`_`) + /// Optional: One or more characters, followed by an underscore (`_`) + One or /// more digits + `resource.management.auto_upgrade == true`: Evaluates to /// `true` if the resource's `management.auto_upgrade` attribute is `true`.vrvS/// A description of the constraint. /// /// The maximum length is 2000 characters.sT/// A display name for the constraint. /// /// The maximum length is 200 characters.TaT;/// The types of operations that the constraint applies to.dv/// The name of the constraint, in the format /// `organizations/{organization_id}/customConstraints/custom.{custom_constraint_id}`. /// /// For example, /// `organizations/123456789012/customConstraints/custom.createOnlyE2TypeVms`. /// Must contain 1 to 62 characters, excluding the prefix /// `organizations/{organization_id}/customConstraints/custom.`. /// /// Immutable./// The resource type that the constraint applies to, in the format /// `{canonical_service_name}/{resource_type_name}`. /// /// For example, `compute.googleapis.com/Instance`. /// /// Immutable.gtgV/// The last time at which the constraint was updated or created. /// /// Output only. /tt#2/// A custom, user-defined constraint. /// /// You can apply the constraint only to the resource types specified in the /// constraint, and only within the organization where the constraint is /// defined. _When you create a custom constraint, it is not enforced /// automatically._ You must use an organization policy to /// [enforce the constraint](https://cloud.google.com/resource-manager/help/organization-policy/constraints/enforce).   $$)99>QQ VgS$  &*+3XJVEK[_`c}dhiquvF +8,\MZHN_cdghlmuyzbT  !%&)C*./7;<dxrEz7 & Ggg+x^/// Whether to allow any value for a list constraint. /// /// Valid only for list constraints.))H/// A condition that determines whether this rule is used to evaluate the /// policy. /// /// When set, the google.type.Expr.expression field must contain 1 to 10 /// subexpressions, joined by the `||` or `&&` operators. Each subexpression /// must use the `resource.matchTag()`, `resource.matchTagId()`, /// `resource.hasTagKey()`, or `resource.hasTagKeyId()` Common Expression /// Language (CEL) function. The `resource.matchTag()` function takes the /// following arguments: * `key_name`: the namespaced name of the tag key, /// with the organization ID and a slash (`/`) as a prefix; for example, /// `123456789012/environment` * `value_name`: the short name of the tag value /// For example: `resource.matchTag('123456789012/environment, 'prod')` The /// `resource.matchTagId()` function takes the following arguments: * /// `key_id`: the permanent ID of the tag key; for example, /// `tagKeys/123456789012` * `value_id`: the permanent ID of the tag value; /// for example, `tagValues/567890123456` For example: /// `resource.matchTagId('tagKeys/123456789012', 'tagValues/567890123456')` /// The `resource.hasTagKey()` function takes the following argument: * /// `key_name`: the namespaced name of the tag key, with the organization ID /// and a slash (`/`) as a prefix; for example, `123456789012/environment` For /// example: `resource.hasTagKey('123456789012/environment')` The /// `resource.hasTagKeyId()` function takes the following arguments: * /// `key_id`: the permanent ID of the tag key; for example, /// `tagKeys/123456789012` For example: /// `resource.hasTagKeyId('tagKeys/123456789012')`7w^/// Whether to deny all values for a list constraint. /// /// Valid only for list constraints.kR/// Whether to enforce the constraint. /// /// Valid only for boolean constraints.=#$=/// Required for managed constraints if parameters are defined. /// /// Passes parameter values when policy enforcement is enabled. Ensure that /// parameter value types match those defined in the constraint definition. /// For example: ``` { "allowedLocations": ["us-east1", "us-west1"], /// "allowAll": true } ``` /// /// Optional. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.L/// The resource types policies can support, only used for managed /// constraints. /// /// Method type is `GOVERN_TAGS`. /// /// Optional.a/// The allowed and denied values for a list constraint. /// /// Valid only for list constraints.YY}홒`/// A rule that defines the allowed and denied values for an organization policy /// constraint. )).iEw1  !"9-;_RAP<BUYZ^morsEEnxq,Rq*/// The allowed values for the constraint.P)/// The denied values for the constraint.zzt/// The allowed and denied values for a list constraint. /// /// For all constraints, these fields can contain literal values. Optionally, /// you can add the `is:` prefix to these values. If the value contains a colon /// (`:`), then the `is:` prefix is required. Some constraints allow you to /// specify a portion of the resource hierarchy, known as a /// [_hierarchy subtree_](https://cloud.google.com/resource-manager/help/organization-policy/hierarchy-subtree), /// that the constraint applies to. To specify a hierarchy subtree, use the /// `under:` prefix, followed by a value with one of these formats: - /// `projects/{project_id}` (for example, `projects/tokyo-rain-123`) - /// `folders/{folder_id}` (for example, `folders/1234567890123`) - /// `organizations/{organization_id}` (for example, /// `organizations/123456789012`) A constraint's `supports_under` field /// indicates whether you can specify a hierarchy subtree. To learn which /// predefined constraints let you specify a hierarchy subtree, see the /// [constraints reference](https://cloud.google.com/resource-manager/help/organization-policy/constraints/reference).      !   . 1 : ; ; D M Q y X R j _ h Z ` m q r x . .M 2 ? /// A Terraform plan file, formatted as a stringified JSON object. /// /// To learn how to generate a Terraform plan file in JSON format, see /// [JSON output format](https://developer.hashicorp.com/terraform/internals/json-format) /// in the Terraform documentation. /// /// Optional. # #H ;    o o s  r _=/// Details of an infrastructure-as-code (IaC) configuration.         $  2 5 H Q R R [% h l z v    |                     n _|} 5 5Z I  U@ ,/// Additional information about the report.  ` =/// A list of every Violation found in the IaC configuration.  M =A/// Details of an infrastructure-as-code (IaC) validation report.Qfhhmxx}QQ<%#kjI/// A list of locations that matches the specified filter in the request.? C?&/// The standard List next-page token.$DD5/// The response message for Locations.ListLocations.-449LLQaafa|<m  -  #'(,;=@P )+.N/M\]cd||`*C`&/// The standard List next-page token.rmJ/// A list of operations that matches the specified filter in the request../// Unordered list. /// /// Unreachable resources. Populated when the request sets /// `ListOperationsRequest.return_partial_success` and reads across /// collections. For example, when attempting to list all resources across all /// supported locations.ss1х7/// The response message for Operations.ListOperations.rrrq<%)@3YGWBH\`agrUFcdjkvp/// A pagination token. /// /// To retrieve the next page of results, call the method again with this /// token._,/// The list of PostureDeployment resources.bobI/// Locations that were temporarily unavailable and could not be reached.Q"0/// Response message for ListPostureDeployments.C %  !F . ! G 5 E 0 6 J N O U i ` k   q } l r       !' !!5!6!<!=ׁq//p/// A pagination token. /// /// To retrieve the next page of results, call the method again with this /// token.AJ*/// The list of revisions for the Posture.!L!L!pSS./// Response message for ListPostureRevisions.#i########i#iJ######%##%<$$$'$$%$$$*$.$/$5$P$@$R$z$m$X$k$S$Y$p$t$u$y$$$%$%%+%,%2%3###""s"p/// A pagination token. /// /// To retrieve the next page of results, call the method again with this /// token.#T# Y#T*/// The list of PostureTemplate resources.%B%B%f""#"R./// Response message for ListPostureTemplates.'''''(( ( (((''L(*(>(G(H(H(Q<(^(b*(y(l(((({((((((((((((((((((((()p()a)~))))))))))))))))))))))*** * (*(*(?'&'p/// A pagination token. /// /// To retrieve the next page of results, call the method again with this /// token.'Y' A'Y"/// The list of Posture resources.''fo'I/// Locations that were temporarily unavailable and could not be reached.**)*=&B&B&o&/// Response message for ListPostures.,,,,,-- ----,,J-'-:-C-D-D-M<-Z-^.-u-h--|--w-}--------------------.Z-.K.h.i.o.p..{.....................-'-'-;,+,p/// A pagination token. /// /// To retrieve the next page of results, call the method again with this /// token.,Y,">,Y!/// The list of Report resources.,,eo,I/// Locations that were temporarily unavailable and could not be reached.//%/'+F+F+r%/// Response message for ListReports.8 888 88 8 8%8,8, 818;8; 8@8F8F 8K8 8 L8Z8c8l8m8m8vo88:888888888888889`88888888889R9999 999#9$9'9A9(9,9-95999:9b9x9p999z999999999999999999999999::: :::::::0:(:\::2:7:8:C:N:D:p:c:n:^:d:s:w:x:{::|::::::8Z8ZY8d101/// If the value is `false`, it means the operation is still in progress. /// /// If `true`, the operation is completed, and either `error` or `response` is /// available.21Y2I/// The error result of the operation in case of failure or cancellation.42#4/// Service-specific metadata associated with the operation. /// /// It typically contains progress information and common metadata such as /// create time. Some services might not provide such metadata. Any method /// that returns a long-running operation should document the metadata type, /// if any. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.5&4(5&/// The server-assigned name, which is only unique within the same service /// that originally returns it. /// /// If you use the default HTTP mapping, the `name` should be a resource name /// ending with `operations/{unique_id}`.75/7/// The normal, successful response of the operation. /// /// If the original method returns no data on success, such as `Delete`, the /// response is `google.protobuf.Empty`. If the original method is standard /// `Get`/`Create`/`Update`, the response should be the resource. For other /// methods, the response should have the type `XxxResponse`, where `Xxx` is /// the original method name. For example, if the original method name is /// `TakeSnapshot()`, the inferred response type is `TakeSnapshotResponse`. /// /// The values for Object must be JSON objects. It can consist of `num`, /// `String`, `bool` and `null` as well as `Map` and `List` values.::_:000c/// This resource represents a long-running operation that is the result of a /// network API call.=V=i=k=k=p====V=VA======%==?.==> => ==>>>>>0>%>2>U>H>8>F>3>9>K>O>P>T>c>e>h?>x????$?%===<V6V@V`VSVFVQVAVGVVVZV[V_VnVpVsVVVVVWWWW W.WW,WWW1W5W6W<UUāUT_TUT_6/// A description of the policy set. /// /// Optional.UToU/// The Policy resources in the policy set. /// /// Each policy must have a policy_id that's unique within the policy set. /// /// Required.UqU&VUq7/// An identifier for the policy set. /// /// Required.WKWK!WoSSԄT,/// A group of one or more Policy resources.aa aaaaaaaaaaaaaa abb bbbbb&b&b+b<b<bAbQbQ bVbababfaab{bbbbbbbfbbbcbbbbbbbbbcbbbbbbccc c cbccScwcmcyccccczcccccccccccccccccddd cdddddd3d(dJd:dHd5d;dMdQdRdXdgdcdwdndudidodzd~dddddddddddddddddddddddddddddeeeyeeeeeeeeeeeeeeeeefefeeff f ff ff1f'f/f"f(f4f8f9f?fTfJfjf[fhfVf\fmfqfrfxb{b{b YXY/// The user-specified annotations for the posture. /// /// For details about the values you can use in an annotation, see \[AIP-148: /// Standard fields\](https://google.aip.dev/148#annotations). /// /// Optional.ZKYZKs/// The categories that the posture belongs to, as determined by the Security /// Posture API. /// /// Output only.ZZZaZC/// The time at which the posture was created. /// /// Output only.[ZR[3/// A description of the posture. /// /// Optional.\[\}/// An opaque identifier for the current version of the posture at the /// specified `revision_id`. /// /// To prevent concurrent updates from overwriting each other, always provide /// the `etag` when you update a posture. You can also provide the `etag` when /// you delete a posture, to help ensure that you're deleting the intended /// version of the posture. /// /// Optional.]r\]r/// Identifier. /// /// The name of the posture, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`. /// /// Required.]]{o]H/// The PolicySet resources that the posture includes. /// /// Required.^Q]m^QP/// Whether the posture is in the process of being updated. /// /// Output only._o^a_o/// An opaque eight-character string that identifies the revision of the /// posture. /// /// A posture can have multiple revisions; when you deploy a posture, you /// deploy a specific revision of the posture. /// /// Output only. Immutable.a_~a~/// The state of the posture at the specified `revision_id`. /// /// Required. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Default value. This value is unused. /// - "DEPRECATED" : The posture is deprecated and can no longer be deployed. /// - "DRAFT" : The posture is a draft and is not ready to deploy. /// - "ACTIVE" : The posture is complete and ready to deploy.aa$faH/// The time at which the posture was last updated. /// /// Output only.ff1fXpXpJX/// The details of a posture.x"x3x:x:x?xPxPxUxexexjxzxzxxxxxxxxx xxxxxx xyyy yyyy5y5y:yKyK yPy[y[y`ytytyyx"x"hyyyyyyyy~yyyz#yyyyyyzzzz!zz z zzzz"z$z&z)zz9zpzzzzzzzzzzzzzzzzzzzzz{{{{ {,{{*{{{/{3{4{:{P{E{g{W{e{R{X{j{n{o{u{{{{{{{{{{{{{| {| {{|||||*|&|:|1|8|,|2|=|A|B|H|a|S|{|h|y|c|i|~|||||||||||||||||||||||||} |}&}}$} }})}-}.}4}J}?}a}Q}_}L}R}d}h}i}m}}}x}}}}}}}}}}}}}}}}}}}}}}~}~}}~ ~~~yyylkl/// The user-specified annotations for the posture deployment. /// /// For details about the values you can use in an annotation, see \[AIP-148: /// Standard fields\](https://google.aip.dev/148#annotations). /// /// Optional.ll$l~/// The categories that the posture deployment belongs to, as determined by /// the Security Posture API. /// /// Output only.m4llm4N/// The time at which the posture deployment was created. /// /// Output only.mmC]m>/// A description of the posture deployment. /// /// Optional.nPmnP/// The posture ID that was specified for the deployment. /// /// Present only if the posture deployment is in a failed state. /// /// Output only.oneo/// The revision ID of the posture that was specified for the deployment. /// /// Present only if the deployment is in a failed state. /// /// Output only.po5pʁw/// An opaque identifier for the current version of the posture deployment. /// /// To prevent concurrent updates from overwriting each other, always provide /// the `etag` when you update a posture deployment. You can also provide the /// `etag` when you delete a posture deployment, to help ensure that you're /// deleting the intended posture deployment. /// /// Optional.qtpӀqt/// A description of why the posture deployment failed. /// /// Present only if the deployment is in a failed state. /// /// Output only.rTqrT/// Identifier. /// /// The name of the posture deployment, in the format /// `organizations/{organization}/locations/global/postureDeployments/{deployment_id}`. /// /// Required.sr]s/// The posture used in the deployment, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`. /// /// Required.sssqssL/// The revision ID of the posture used in the deployment. /// /// Required.ssxs[/// Whether the posture deployment is in the process of being updated. /// /// Output only.vtv_/// The state of the posture deployment. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Default value. This value is unused. /// - "CREATING" : The posture deployment is being created. /// - "DELETING" : The posture deployment is being deleted. /// - "UPDATING" : The posture deployment is being updated. /// - "ACTIVE" : The posture deployment is active and in use. /// - "CREATE_FAILED" : The posture deployment could not be created. /// - "UPDATE_FAILED" : The posture deployment could not be updated. /// - "DELETE_FAILED" : The posture deployment could not be deleted.wvw/// The organization, folder, or project where the posture is deployed. /// /// Uses one of the following formats: * `organizations/{organization_number}` /// * `folders/{folder_number}` * `projects/{project_number}` /// /// Required.xwqxS/// The time at which the posture deployment was last updated. /// /// Output only.~%~%~IiiHj)/// Details for a Posture deployment on an organization, folder, or project. /// /// You can deploy at most one posture to each organization, folder, or project. /// The parent resource for a posture deployment is always the organization, /// even if the deployment applies to a folder or project.p~ $pp )**3:@DWNl^jY_ostzU1S,2X\]cn!DbI/// The identifier for the PolicySet that the relevant policy belongs to.==/// The posture used in the deployment, in the format /// `organizations/{organization}/locations/global/postures/{posture_id}`.I耍/// The name of the posture deployment, in the format /// `organizations/{organization}/locations/global/postureDeployments/{deployment_id}`. /// The organization, folder, or project where the posture is deployed. /// /// Uses one of the following formats: * `organizations/{organization_number}` /// * `folders/{folder_number}` * `projects/{project_number}`Z[Z:/// The revision ID of the posture used in the deployment.71$/// Details of a posture deployment. // 4>>CSSXhh m}])*01G<^N\IOaefl{w}o`}~}}{5|/// The categories that the posture template belongs to, as determined by the /// Security Posture API. /// /// Output only.4^4?/// A description of the posture template. /// /// Output only.D/// Identifier. /// /// The name of the posture template, in the format /// `organizations/{organization}/locations/global/postureTemplates/{posture_template}`. /// /// Output only.{T/// The PolicySet resources that the posture template includes. /// /// Output only.uW/// A string that identifies the revision of the posture template. /// /// Output only.䁬/// The state of the posture template at the specified `revision_id`. /// /// Output only. /// Possible string values are: /// - "STATE_UNSPECIFIED" : Default value. This value is unused. /// - "ACTIVE" : The posture template follows the latest controls and /// standards. /// - "DEPRECATED" : The posture template uses outdated controls and /// standards. We recommend that you use a newer revision of the posture /// template. !&/// The details of a posture template.ltvv {ll,.A!3"CGHP{gybh~3pUp=/// The name of the custom source property. /// /// Required.XyX/// The CEL expression for the value of the custom source property. /// /// For resource properties, you can return the value of the property or a /// string enclosed in quotation marks. /// /// Optional.Ӏԃ7/// A name-value pair used as a custom source property. e"+,,5DBFZPpan\bswx~xj4 7;<?Y@DEMQRz#`B/// The time at which the report was created. /// /// Output only.'zK/// An infrastructure-as-code (IaC) validation report. /// /// Output only.@@/// The name of the report, in the format /// `organizations/{organization}/locations/global/reports/{report_id}`. /// /// Required.IeG/// The time at which the report was last updated. /// /// Output only.v/// Details of a report.yyy'h  $&)I*HWX^_gŀg/// The resource types to run the detector on. /// /// Each custom module can specify up to 5 resource types. /// /// Required.nnll=/// A selector for the resource types to run the detector on.    )6:LDNnaT_OUdhim|~  |e>/// The resource types we currently support. /// /// Optional.zBjc/// Set multiple resource types for one policy, for example: ``` resourceTypes: /// included: - compute.googleapis.com/Instance - compute.googleapis.com/Disk /// ``` Constraint definition contains an empty resource type in order to /// support multiple resource types in the policy. /// /// Only supports managed constraints. Method type is `GOVERN_TAGS`. %.//8DEIYS[`alum2"0#59:@MK[TYOU^bcit&^C/// Configuration settings for the custom module. /// /// Required.iliC/// The display name of the custom module. /// /// This value is used as the finding category for all the asset violation /// findings that the custom module returns. The display name must contain /// between 1 and 128 alphanumeric characters or underscores, and it must /// start with a lowercase letter. /// /// Optional.yq/// The unique identifier for the custom module. /// /// Contains 1 to 20 digits. /// /// Output only. Immutable.e qeB/// Whether the custom module is enabled at a specified level of the resource /// hierarchy. /// Possible string values are: /// - "ENABLEMENT_STATE_UNSPECIFIED" : Default value. This value is unused. /// - "ENABLED" : The detector or custom module is enabled. /// - "DISABLED" : The detector or custom module is disabled.ǁjDD}2/// A custom module for Security Health Analytics. )++0GGL  M]z. %]]{l=/// Whether the detector is enabled at a specified level of the resource /// hierarchy. /// Possible string values are: /// - "ENABLEMENT_STATE_UNSPECIFIED" : Default value. This value is unused. /// - "ENABLED" : The detector or custom module is enabled. /// - "DISABLED" : The detector or custom module is disabled./// The name of the detector. /// /// For example, `BIGQUERY_TABLE_CMEK_DISABLED`. This field is also used as /// the finding category for all the asset violation findings that the /// detector returns. /// /// Required.44X55r6/// A built-in detector for Security Health Analytics.   --2FFKenwxx" %)*0C;WJUEKZ^_e}p2$  4PBRWXctd 'Z)./:L;\jkseeoeOe/// The full resource name of the asset that caused the violation. /// /// For details about the format of the full resource name for each asset /// type, see /// [Resource name format](https://cloud.google.com/asset-inventory/docs/resource-name-format).q_F/// A description of the steps that you can take to fix the violation.9!/// The policy that was violated.7,7/// The severity of the violation. /// Possible string values are: /// - "SEVERITY_UNSPECIFIED" : Default value. This value is unused. /// - "CRITICAL" : Critical severity. /// - "HIGH" : High severity. /// - "MEDIUM" : Medium severity. /// - "LOW" : Low severity.DgI/// Details of the Cloud Asset Inventory asset that caused the violation.L,/// Details of the policy that was violated./// Details for the posture that was violated. /// /// This field is present only if the violated policy belongs to a deployed /// posture.U.A/// Details of a violation.`7/// The request message for Operations.CancelOperation.H-0/// A generic empty message that you can re-use to avoid defining duplicated /// empty messages in your APIs. /// /// A typical example is to use it as the request or the response type of an API /// method. For instance: service Foo { rpc Bar(google.protobuf.Empty) returns /// (google.protobuf.Empty); }>>҄/// Represents a textual expression in the Common Expression Language (CEL) /// syntax. /// /// CEL is a C-like expression language. The syntax and semantics of CEL are /// documented at https://github.com/google/cel-spec. Example (Comparison): /// title: "Summary size limit" description: "Determines if a summary is less /// than 100 chars" expression: "document.summary.size() \< 100" Example /// (Equality): title: "Requestor is owner" description: "Determines if /// requestor is the document owner" expression: "document.owner == /// request.auth.claims.email" Example (Logic): title: "Public documents" /// description: "Determine whether the document should be publicly visible" /// expression: "document.type != 'private' && document.type != 'internal'" /// Example (Data Manipulation): title: "Notification string" description: /// "Create a notification string with a timestamp." expression: "'New message /// received at ' + string(document.create_time)" The exact variables and /// functions that may be referenced within an expression are determined by the /// service that evaluates it. See the service documentation for additional /// information.0,0,W0l7/// A resource that represents a Google Cloud location.<< /// The `Status` type defines a logical error model that is suitable for /// different programming environments, including REST APIs and RPC APIs. /// /// It is used by [gRPC](https://github.com/grpc). Each `Status` message /// contains three pieces of data: error code, error message, and error details. /// You can find out more about this error model and how to work with it in the /// [API Design Guide](https://cloud.google.com/apis/design/errors).7GHmЀ)[ʂ*`a΃m59W-`υ؅م56Ɇ/bcĈ_z 0hi$%;U 8BDEc>@Ahύ X'`я Idfg %&jp XC Lj7='EiؖMTUɖՖkop9KQҙؚ)6<›Qśƛ3:Ŝ˝@F`fN^dߞCxȠ=DE|}Ơ?CDޡ@¢*0ҤfIO8EKѦ/Gc"`بGNOǩө4lswyzܪݫ-HIū˫.e_ouTʮ $1aۯDKLΰڰ#txy² dвֳ#o AG̴ҵ#06޵ '4tֶݶ޷FRb۷߷ ,2|޸JPݹ4AGͺ &3s$1RYüĽ #)lAݿ*ag@@!@l@|@@@AAA%AvAAABB+BGBaBnBBCC[CCCCCDD&D3DTD[DDDDDEEEUEEF0FFGGNGxG~GGGGH#H0HHHHIJIIIJJ(J.JRJXJJJK KBKcKKKKKLLNLLLLMMM2M>MMM`MMMMMMNN@NANNNNNNOOLOOPPPhPPPQ QQ;QAQQQQR+RPRhRRRRS+S`SgShSSSSST TT6TnTuTyTzTTTTU+UbUUVVLVRVVWW$WnWWWX'X7X=XtXzXXXY/YdYYYYYZZ%ZeZZ[[G[N[O[[[[[\ \\B\z\\\\\\\]']B]C]`]f]]]]]^5^^^^__$_*_N_T___` `>```u````aaBa~aaabbb3b?bMb`bbbbbcccYc_cyccd d*dndtdeeaeeeff*f0fTfZfffggDgfg~ggggh)h^hehfhhhhhi iicigihijj jZjjjjjkkCkzkkll&l,lPlVlllm m@mcmmmmmn7nlnsntnnnooo!oBoIooooooop0p}pppq-qoquqqqqqrOr\rbrrsss:sTsassttttTtUtttttuuuuhuuuuuv)vtvzvwwwhwwwx(xqxwxxxyy y^ykyqyyz"z<zUzmzzzz{#{a{{{{|!|"|R|^|k|||||}}}0}6}P}V}}~~E~K~~n'-djTCDEu '+,]cO76<V\W] &r-=Cgm"Wx6v)01hi@DFGuL8> TdjI~"RGHx"#DJdjU[4AGZ 9@;r[a#)s"28fl!VN078~QX\^_xDFGi -3b 28"q%&Vbo4:%o6<G1RX@PVAv7Q^@|0<Ijq(=,BCrxJKs >dOjCIntAv0467bu 0hi:@P8>?eqL\p3oA~DzL.|(XŸ¦ª¬­ KQamnÞß ]qz{Ĭ(,|Šŵ34ƁƗƝ;RXhDŽDž*0@STȢȸȾ"#`fvɜɝZʂʢ&<Pi˄˗˝˞ 3̥́̑/z͊͞HrήξBnϘϾ"FSxЛк-48:;фѝ>?kwү,=KbklӝAbfԷ%=>ՊՖ՚3ցVנ9؄mٹ 'LRb|}[ۗ۝ۭ3?vܫܴܵ 0mqstݛݟ5{޶,aߌ߮=XYgW 4:g:abUG~?EXst7LRSR>| :b"Px .Cj)agQ/{d8 W;!45ms !ciLioIJ>Dk 5M^de5:FVj)9MVW>l ,SlswyzUN'j0x*W %<BC%a@ # ) r     ! l m        + , | }       7 S       2 3 b n   Qbp=ACDz0NOA/U (Qop;0H]syz/BoPgpq"/Vw lyHop+j8IWn-["ELPRS >?l   X   ! !!)!@!I!J!{!!"""""L"q""""## #6#f#g####$8$|$$%%%%6%?%@%q%%%&&4&;&?&A&B&i&&&&&'''C'c'd'''('(((X(d((())S)d)r)))* ***H*v****++8+?+C+E+F+l++++,,, ,D,b,c,,,-$-%-T-`----.N.\.s...///2/`/////00%0)0+0,0d000001G1M111122 2!2`2f233O3]3c334%4&4s44455,5-5e5k566V667?7E77888W8X8}88889D9T9h999: :P:::::;; ;D;`;;;;;;< <<<<>W>j>>???(?1?2?c???@@&@-@1@3@4@a@@@@@@A+A1AAAAAABBBNBBBC CCWCjCCDDD(D1D2DcDDEEEEEbEqEEEEEF,F2FBF\F]FFFFFFFG,G2GBG[G\GgGGGGGGGGHBHUHHHHHI3IVIIIJJ6J?J@JqJJJK!K.KaKKKKKKKKLLILOLrLLLLM,M{MMMMN6NNNO4OLOOOOP P(P)P;PYPnPPPPPPQ#QVQmQQR"R+R,R]RRRSS&SYSzSSSSSSTTT:T@TPTlTmTTTTUU#U$ULURUbU~UUUUUV.VbVuVVVWW?WHWIWzWWWWX"X?XbXiXmXoXpXXXXY*YkYqYYYZZZZ1ZWZXZZZZZZZZ[[[^[}[[\$\q\\\\\\\]]M]S]c]x]y]]]]]^+^1^D^^^_^^^_ _<_B_`_{_|____`6``a a!a"aXa^aqaaaaaaaab b"b8bMb]brbxbybbbccVcecccd d[dddee-eke|eeeffBf{ffffgg0gZgvgggh h*hRh_hhhhhii2iUiviiiiiij j j^jjkkAkGkkkkl!l"lplllllm mm%m@mAmpmvmmmmmn(n.nAnbncnnnno o2o3ooop'pupppppq qqLqRqeqqqqqr/r5rErZr[rrrrsssNsTsdsssssttt/t5tHtjttu)uguuv5v|vvvvw4wtwzwwwwwxxx x6xLxaxvxxxxxyyy1yGyWypyyyyyyz+zszzz{{={x{{||K|||}7}p}}~~"~#~T~~~~~,p4^|%Fi&Et+B.FGFL Kmn :F} f0f"=l3 %ABTZ\bu\bu"3z+:Odtz{4oRcq+S}5Xm KQavw:@Pij5RP $%^dw!1FG|<H \l!I(=^eikl7=MvwKbklPdz0<p=ACDw39DJZvwWhV|}?KwCl@X'.245l^#)w  Z[(12c .59;<m;MVno6X (AB06)B\bc3h&:vNu%GmERmAHLN.SecurityPostureApiOrganizationsResourceOrganizationsLocationsResource(OrganizationsLocationsOperationsResource0OrganizationsLocationsPostureDeploymentsResource.OrganizationsLocationsPostureTemplatesResource&OrganizationsLocationsPosturesResource%OrganizationsLocationsReportsResourceProjectsResourceProjectsLocationsResource AssetDetailsComplianceStandard Constraint CreateIaCValidationReportRequest CustomConfigCustomOutputSpecExtractPostureRequest,GoogleCloudSecuritypostureV1CustomConstraint&GoogleCloudSecuritypostureV1PolicyRule2GoogleCloudSecuritypostureV1PolicyRuleStringValuesIaCIaCValidationReportListLocationsResponseListOperationsResponseListPostureDeploymentsResponseListPostureRevisionsResponseListPostureTemplatesResponseListPosturesResponseListReportsResponse OperationOrgPolicyConstraintOrgPolicyConstraintCustomPolicy PolicyDetails PolicySetPosturePostureDeploymentPostureDetailsPostureTemplatePropertyReportResourceSelector ResourceTypes#SecurityHealthAnalyticsCustomModuleSecurityHealthAnalyticsModule Violation