# Security Command Center API . organizations . sources . findings

## Instance Methods

Creates a finding. The corresponding source must exist for finding creation

Filters an organization or source's findings and groups them by their

Retrieves the next page of results.

Lists an organization or source's findings.

Retrieves the next page of results.

Creates or updates a finding. The corresponding source must exist for a

Updates the state of a finding.

Updates security marks.

### Method Details

`create(parent, body=None, findingId=None, x__xgafv=None)`

    Creates a finding. The corresponding source must exist for finding creation
    to succeed.

    Args:
      parent: string, Required. Resource name of the new finding's parent. Its format should be
    "organizations/[organization_id]/sources/[source_id]". (required)
      body: object, The request body.
        The object takes the form of:

    { # Security Command Center finding.
          #
          # A finding is a record of assessment data (security, risk, health or privacy)
          # ingested into Security Command Center for presentation, notification,
          # analysis, policy testing, and enforcement. For example, an XSS vulnerability
          # in an App Engine application is a finding.
        "externalUri": "A String", # The URI that, if available, points to a web page outside of Security
            # Command Center where additional information about the finding can be found.
            # This field is guaranteed to be either empty or a well formed URL.
        "resourceName": "A String", # For findings on Google Cloud resources, the full resource
            # name of the Google Cloud resource this finding is for. See:
            # https://cloud.google.com/apis/design/resource_names#full_resource_name
            # When the finding is for a non-Google Cloud resource, the resourceName can
            # be a customer or partner defined string. This field is immutable after
            # creation time.
        "eventTime": "A String", # The time at which the event took place. For example, if the finding
            # represents an open firewall it would capture the time the detector believes
            # the firewall became open. The accuracy is determined by the detector.
        "sourceProperties": { # Source specific properties. These properties are managed by the source
            # that writes the finding. The key names in the source_properties map must be
            # between 1 and 255 characters, and must start with a letter and contain
            # alphanumeric characters or underscores only.
          "a_key": "",
        },
        "parent": "A String", # Immutable. The relative resource name of the source the finding belongs to. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # This field is immutable after creation time.
            # For example:
            # "organizations/{organization_id}/sources/{source_id}"
        "createTime": "A String", # The time at which the finding was created in Security Command Center.
        "securityMarks": { # User specified security marks that are attached to the parent Security # Output only. User specified security marks. These marks are entirely
            # managed by the user and come from the SecurityMarks resource that belongs
            # to the finding.
            # Command Center resource. Security marks are scoped within a Security Command
            # Center organization -- they can be modified and viewed by all users who have
            # proper permissions on the organization.
          "marks": { # Mutable user specified security marks belonging to the parent resource.
              # Constraints are as follows:
              #
              #   * Keys and values are treated as case insensitive
              #   * Keys must be between 1 - 256 characters (inclusive)
              #   * Keys must be letters, numbers, underscores, or dashes
              #   * Values have leading and trailing whitespace trimmed, remaining
              #     characters must be between 1 - 4096 characters (inclusive)
            "a_key": "A String",
          },
          "name": "A String", # The relative resource name of the SecurityMarks. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Examples:
              # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
              # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
        },
        "state": "A String", # The state of the finding.
        "name": "A String", # The relative resource name of this finding. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # Example:
            # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
        "category": "A String", # The additional taxonomy group within findings from a given source.
            # This field is immutable after creation time.
            # Example: "XSS_FLASH_INJECTION"
      }

      findingId: string, Required. Unique identifier provided by the client within the parent scope.
    It must be alphanumeric and less than or equal to 32 characters and
    greater than 0 characters in length.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Security Command Center finding.
            #
            # A finding is a record of assessment data (security, risk, health or privacy)
            # ingested into Security Command Center for presentation, notification,
            # analysis, policy testing, and enforcement. For example, an XSS vulnerability
            # in an App Engine application is a finding.
          "externalUri": "A String", # The URI that, if available, points to a web page outside of Security
              # Command Center where additional information about the finding can be found.
              # This field is guaranteed to be either empty or a well formed URL.
          "resourceName": "A String", # For findings on Google Cloud resources, the full resource
              # name of the Google Cloud resource this finding is for. See:
              # https://cloud.google.com/apis/design/resource_names#full_resource_name
              # When the finding is for a non-Google Cloud resource, the resourceName can
              # be a customer or partner defined string. This field is immutable after
              # creation time.
          "eventTime": "A String", # The time at which the event took place. For example, if the finding
              # represents an open firewall it would capture the time the detector believes
              # the firewall became open. The accuracy is determined by the detector.
          "sourceProperties": { # Source specific properties. These properties are managed by the source
              # that writes the finding. The key names in the source_properties map must be
              # between 1 and 255 characters, and must start with a letter and contain
              # alphanumeric characters or underscores only.
            "a_key": "",
          },
          "parent": "A String", # Immutable. The relative resource name of the source the finding belongs to. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # This field is immutable after creation time.
              # For example:
              # "organizations/{organization_id}/sources/{source_id}"
          "createTime": "A String", # The time at which the finding was created in Security Command Center.
          "securityMarks": { # User specified security marks that are attached to the parent Security # Output only. User specified security marks. These marks are entirely
              # managed by the user and come from the SecurityMarks resource that belongs
              # to the finding.
              # Command Center resource. Security marks are scoped within a Security Command
              # Center organization -- they can be modified and viewed by all users who have
              # proper permissions on the organization.
            "marks": { # Mutable user specified security marks belonging to the parent resource.
                # Constraints are as follows:
                #
                #   * Keys and values are treated as case insensitive
                #   * Keys must be between 1 - 256 characters (inclusive)
                #   * Keys must be letters, numbers, underscores, or dashes
                #   * Values have leading and trailing whitespace trimmed, remaining
                #     characters must be between 1 - 4096 characters (inclusive)
              "a_key": "A String",
            },
            "name": "A String", # The relative resource name of the SecurityMarks. See:
                # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                # Examples:
                # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
                # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
          },
          "state": "A String", # The state of the finding.
          "name": "A String", # The relative resource name of this finding. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Example:
              # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
          "category": "A String", # The additional taxonomy group within findings from a given source.
              # This field is immutable after creation time.
              # Example: "XSS_FLASH_INJECTION"
        }

`group(parent, body=None, x__xgafv=None)`

    Filters an organization or source's findings and  groups them by their
    specified properties.

    To group across all sources provide a `-` as the source id.
    Example: /v1beta1/organizations/{organization_id}/sources/-/findings

    Args:
      parent: string, Required. Name of the source to groupBy. Its format is
    "organizations/[organization_id]/sources/[source_id]". To groupBy across
    all sources provide a source_id of `-`. For example:
    organizations/{organization_id}/sources/- (required)
      body: object, The request body.
        The object takes the form of:

    { # Request message for grouping by findings.
        "groupBy": "A String", # Required. Expression that defines what assets fields to use for grouping (including
            # `state`). The string value should follow SQL syntax: comma separated list
            # of fields. For example:
            # "parent,resource_name".
            #
            # The following fields are supported:
            #
            # * resource_name
            # * category
            # * state
            # * parent
        "filter": "A String", # Expression that defines the filter to apply across findings.
            # The expression is a list of one or more restrictions combined via logical
            # operators `AND` and `OR`.
            # Parentheses are not supported, and `OR` has higher precedence than `AND`.
            #
            # Restrictions have the form `<field> <operator> <value>` and may have a `-`
            # character in front of them to indicate negation. Examples include:
            #
            #  * name
            #  * source_properties.a_property
            #  * security_marks.marks.marka
            #
            # The supported operators are:
            #
            # * `=` for all value types.
            # * `>`, `<`, `>=`, `<=` for integer values.
            # * `:`, meaning substring matching, for strings.
            #
            # The supported value types are:
            #
            # * string literals in quotes.
            # * integer literals without quotes.
            # * boolean literals `true` and `false` without quotes.
            #
            # For example, `source_properties.size = 100` is a valid filter string.
        "readTime": "A String", # Time used as a reference point when filtering findings. The filter is
            # limited to findings existing at the supplied time and their values are
            # those at that specific time. Absence of this field will default to the
            # API's version of NOW.
        "pageToken": "A String", # The value returned by the last `GroupFindingsResponse`; indicates
            # that this is a continuation of a prior `GroupFindings` call, and
            # that the system should return the next page of data.
        "pageSize": 42, # The maximum number of results to return in a single response. Default is
            # 10, minimum is 1, maximum is 1000.
      }

      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Response message for group by findings.
        "readTime": "A String", # Time used for executing the groupBy request.
        "groupByResults": [ # Group results. There exists an element for each existing unique
            # combination of property/values. The element contains a count for the number
            # of times those specific property/values appear.
          { # Result containing the properties and count of a groupBy request.
            "count": "A String", # Total count of resources for the given properties.
            "properties": { # Properties matching the groupBy fields in the request.
              "a_key": "",
            },
          },
        ],
        "nextPageToken": "A String", # Token to retrieve the next page of results, or empty if there are no more
            # results.
      }

`group_next(previous_request, previous_response)`

    Retrieves the next page of results.

    Args:
      previous_request: The request for the previous page. (required)
      previous_response: The response from the request for the previous page. (required)

    Returns:
      A request object that you can call 'execute()' on to request the next
      page. Returns None if there are no more items in the collection.

`list(parent, filter=None, pageToken=None, fieldMask=None, pageSize=None, readTime=None, orderBy=None, x__xgafv=None)`

    Lists an organization or source's findings.

    To list across all sources provide a `-` as the source id.
    Example: /v1beta1/organizations/{organization_id}/sources/-/findings

    Args:
      parent: string, Required. Name of the source the findings belong to. Its format is
    "organizations/[organization_id]/sources/[source_id]". To list across all
    sources provide a source_id of `-`. For example:
    organizations/{organization_id}/sources/- (required)
      filter: string, Expression that defines the filter to apply across findings.
    The expression is a list of one or more restrictions combined via logical
    operators `AND` and `OR`.
    Parentheses are not supported, and `OR` has higher precedence than `AND`.

    Restrictions have the form `<field> <operator> <value>` and may have a `-`
    character in front of them to indicate negation. Examples include:

     * name
     * source_properties.a_property
     * security_marks.marks.marka

    The supported operators are:

    * `=` for all value types.
    * `>`, `<`, `>=`, `<=` for integer values.
    * `:`, meaning substring matching, for strings.

    The supported value types are:

    * string literals in quotes.
    * integer literals without quotes.
    * boolean literals `true` and `false` without quotes.

    For example, `source_properties.size = 100` is a valid filter string.
      pageToken: string, The value returned by the last `ListFindingsResponse`; indicates
    that this is a continuation of a prior `ListFindings` call, and
    that the system should return the next page of data.
      fieldMask: string, Optional. A field mask to specify the Finding fields to be listed in the response.
    An empty field mask will list all fields.
      pageSize: integer, The maximum number of results to return in a single response. Default is
    10, minimum is 1, maximum is 1000.
      readTime: string, Time used as a reference point when filtering findings. The filter is
    limited to findings existing at the supplied time and their values are
    those at that specific time. Absence of this field will default to the
    API's version of NOW.
      orderBy: string, Expression that defines what fields and order to use for sorting. The
    string value should follow SQL syntax: comma separated list of fields. For
    example: "name,resource_properties.a_property". The default sorting order
    is ascending. To specify descending order for a field, a suffix " desc"
    should be appended to the field name. For example: "name
    desc,source_properties.a_property". Redundant space characters in the
    syntax are insignificant. "name desc,source_properties.a_property" and "
    name     desc  ,   source_properties.a_property  " are equivalent.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Response message for listing findings.
        "nextPageToken": "A String", # Token to retrieve the next page of results, or empty if there are no more
            # results.
        "readTime": "A String", # Time used for executing the list request.
        "totalSize": 42, # The total number of findings matching the query.
        "findings": [ # Findings matching the list request.
          { # Security Command Center finding.
                #
                # A finding is a record of assessment data (security, risk, health or privacy)
                # ingested into Security Command Center for presentation, notification,
                # analysis, policy testing, and enforcement. For example, an XSS vulnerability
                # in an App Engine application is a finding.
              "externalUri": "A String", # The URI that, if available, points to a web page outside of Security
                  # Command Center where additional information about the finding can be found.
                  # This field is guaranteed to be either empty or a well formed URL.
              "resourceName": "A String", # For findings on Google Cloud resources, the full resource
                  # name of the Google Cloud resource this finding is for. See:
                  # https://cloud.google.com/apis/design/resource_names#full_resource_name
                  # When the finding is for a non-Google Cloud resource, the resourceName can
                  # be a customer or partner defined string. This field is immutable after
                  # creation time.
              "eventTime": "A String", # The time at which the event took place. For example, if the finding
                  # represents an open firewall it would capture the time the detector believes
                  # the firewall became open. The accuracy is determined by the detector.
              "sourceProperties": { # Source specific properties. These properties are managed by the source
                  # that writes the finding. The key names in the source_properties map must be
                  # between 1 and 255 characters, and must start with a letter and contain
                  # alphanumeric characters or underscores only.
                "a_key": "",
              },
              "parent": "A String", # Immutable. The relative resource name of the source the finding belongs to. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # This field is immutable after creation time.
                  # For example:
                  # "organizations/{organization_id}/sources/{source_id}"
              "createTime": "A String", # The time at which the finding was created in Security Command Center.
              "securityMarks": { # User specified security marks that are attached to the parent Security # Output only. User specified security marks. These marks are entirely
                  # managed by the user and come from the SecurityMarks resource that belongs
                  # to the finding.
                  # Command Center resource. Security marks are scoped within a Security Command
                  # Center organization -- they can be modified and viewed by all users who have
                  # proper permissions on the organization.
                "marks": { # Mutable user specified security marks belonging to the parent resource.
                    # Constraints are as follows:
                    #
                    #   * Keys and values are treated as case insensitive
                    #   * Keys must be between 1 - 256 characters (inclusive)
                    #   * Keys must be letters, numbers, underscores, or dashes
                    #   * Values have leading and trailing whitespace trimmed, remaining
                    #     characters must be between 1 - 4096 characters (inclusive)
                  "a_key": "A String",
                },
                "name": "A String", # The relative resource name of the SecurityMarks. See:
                    # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                    # Examples:
                    # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
                    # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
              },
              "state": "A String", # The state of the finding.
              "name": "A String", # The relative resource name of this finding. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # Example:
                  # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
              "category": "A String", # The additional taxonomy group within findings from a given source.
                  # This field is immutable after creation time.
                  # Example: "XSS_FLASH_INJECTION"
            },
        ],
      }

`list_next(previous_request, previous_response)`

    Retrieves the next page of results.

    Args:
      previous_request: The request for the previous page. (required)
      previous_response: The response from the request for the previous page. (required)

    Returns:
      A request object that you can call 'execute()' on to request the next
      page. Returns None if there are no more items in the collection.

`patch(name, body=None, updateMask=None, x__xgafv=None)`

    Creates or updates a finding. The corresponding source must exist for a
    finding creation to succeed.

    Args:
      name: string, The relative resource name of this finding. See:
    https://cloud.google.com/apis/design/resource_names#relative_resource_name
    Example:
    "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}" (required)
      body: object, The request body.
        The object takes the form of:

    { # Security Command Center finding.
          #
          # A finding is a record of assessment data (security, risk, health or privacy)
          # ingested into Security Command Center for presentation, notification,
          # analysis, policy testing, and enforcement. For example, an XSS vulnerability
          # in an App Engine application is a finding.
        "externalUri": "A String", # The URI that, if available, points to a web page outside of Security
            # Command Center where additional information about the finding can be found.
            # This field is guaranteed to be either empty or a well formed URL.
        "resourceName": "A String", # For findings on Google Cloud resources, the full resource
            # name of the Google Cloud resource this finding is for. See:
            # https://cloud.google.com/apis/design/resource_names#full_resource_name
            # When the finding is for a non-Google Cloud resource, the resourceName can
            # be a customer or partner defined string. This field is immutable after
            # creation time.
        "eventTime": "A String", # The time at which the event took place. For example, if the finding
            # represents an open firewall it would capture the time the detector believes
            # the firewall became open. The accuracy is determined by the detector.
        "sourceProperties": { # Source specific properties. These properties are managed by the source
            # that writes the finding. The key names in the source_properties map must be
            # between 1 and 255 characters, and must start with a letter and contain
            # alphanumeric characters or underscores only.
          "a_key": "",
        },
        "parent": "A String", # Immutable. The relative resource name of the source the finding belongs to. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # This field is immutable after creation time.
            # For example:
            # "organizations/{organization_id}/sources/{source_id}"
        "createTime": "A String", # The time at which the finding was created in Security Command Center.
        "securityMarks": { # User specified security marks that are attached to the parent Security # Output only. User specified security marks. These marks are entirely
            # managed by the user and come from the SecurityMarks resource that belongs
            # to the finding.
            # Command Center resource. Security marks are scoped within a Security Command
            # Center organization -- they can be modified and viewed by all users who have
            # proper permissions on the organization.
          "marks": { # Mutable user specified security marks belonging to the parent resource.
              # Constraints are as follows:
              #
              #   * Keys and values are treated as case insensitive
              #   * Keys must be between 1 - 256 characters (inclusive)
              #   * Keys must be letters, numbers, underscores, or dashes
              #   * Values have leading and trailing whitespace trimmed, remaining
              #     characters must be between 1 - 4096 characters (inclusive)
            "a_key": "A String",
          },
          "name": "A String", # The relative resource name of the SecurityMarks. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Examples:
              # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
              # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
        },
        "state": "A String", # The state of the finding.
        "name": "A String", # The relative resource name of this finding. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # Example:
            # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
        "category": "A String", # The additional taxonomy group within findings from a given source.
            # This field is immutable after creation time.
            # Example: "XSS_FLASH_INJECTION"
      }

      updateMask: string, The FieldMask to use when updating the finding resource. This field should
    not be specified when creating a finding.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Security Command Center finding.
            #
            # A finding is a record of assessment data (security, risk, health or privacy)
            # ingested into Security Command Center for presentation, notification,
            # analysis, policy testing, and enforcement. For example, an XSS vulnerability
            # in an App Engine application is a finding.
          "externalUri": "A String", # The URI that, if available, points to a web page outside of Security
              # Command Center where additional information about the finding can be found.
              # This field is guaranteed to be either empty or a well formed URL.
          "resourceName": "A String", # For findings on Google Cloud resources, the full resource
              # name of the Google Cloud resource this finding is for. See:
              # https://cloud.google.com/apis/design/resource_names#full_resource_name
              # When the finding is for a non-Google Cloud resource, the resourceName can
              # be a customer or partner defined string. This field is immutable after
              # creation time.
          "eventTime": "A String", # The time at which the event took place. For example, if the finding
              # represents an open firewall it would capture the time the detector believes
              # the firewall became open. The accuracy is determined by the detector.
          "sourceProperties": { # Source specific properties. These properties are managed by the source
              # that writes the finding. The key names in the source_properties map must be
              # between 1 and 255 characters, and must start with a letter and contain
              # alphanumeric characters or underscores only.
            "a_key": "",
          },
          "parent": "A String", # Immutable. The relative resource name of the source the finding belongs to. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # This field is immutable after creation time.
              # For example:
              # "organizations/{organization_id}/sources/{source_id}"
          "createTime": "A String", # The time at which the finding was created in Security Command Center.
          "securityMarks": { # User specified security marks that are attached to the parent Security # Output only. User specified security marks. These marks are entirely
              # managed by the user and come from the SecurityMarks resource that belongs
              # to the finding.
              # Command Center resource. Security marks are scoped within a Security Command
              # Center organization -- they can be modified and viewed by all users who have
              # proper permissions on the organization.
            "marks": { # Mutable user specified security marks belonging to the parent resource.
                # Constraints are as follows:
                #
                #   * Keys and values are treated as case insensitive
                #   * Keys must be between 1 - 256 characters (inclusive)
                #   * Keys must be letters, numbers, underscores, or dashes
                #   * Values have leading and trailing whitespace trimmed, remaining
                #     characters must be between 1 - 4096 characters (inclusive)
              "a_key": "A String",
            },
            "name": "A String", # The relative resource name of the SecurityMarks. See:
                # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                # Examples:
                # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
                # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
          },
          "state": "A String", # The state of the finding.
          "name": "A String", # The relative resource name of this finding. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Example:
              # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
          "category": "A String", # The additional taxonomy group within findings from a given source.
              # This field is immutable after creation time.
              # Example: "XSS_FLASH_INJECTION"
        }

`setState(name, body=None, x__xgafv=None)`

    Updates the state of a finding.

    Args:
      name: string, Required. The relative resource name of the finding. See:
    https://cloud.google.com/apis/design/resource_names#relative_resource_name
    Example:
    "organizations/{organization_id}/sources/{source_id}/finding/{finding_id}". (required)
      body: object, The request body.
        The object takes the form of:

    { # Request message for updating a finding's state.
        "startTime": "A String", # Required. The time at which the updated state takes effect.
        "state": "A String", # Required. The desired State of the finding.
      }

      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Security Command Center finding.
            #
            # A finding is a record of assessment data (security, risk, health or privacy)
            # ingested into Security Command Center for presentation, notification,
            # analysis, policy testing, and enforcement. For example, an XSS vulnerability
            # in an App Engine application is a finding.
          "externalUri": "A String", # The URI that, if available, points to a web page outside of Security
              # Command Center where additional information about the finding can be found.
              # This field is guaranteed to be either empty or a well formed URL.
          "resourceName": "A String", # For findings on Google Cloud resources, the full resource
              # name of the Google Cloud resource this finding is for. See:
              # https://cloud.google.com/apis/design/resource_names#full_resource_name
              # When the finding is for a non-Google Cloud resource, the resourceName can
              # be a customer or partner defined string. This field is immutable after
              # creation time.
          "eventTime": "A String", # The time at which the event took place. For example, if the finding
              # represents an open firewall it would capture the time the detector believes
              # the firewall became open. The accuracy is determined by the detector.
          "sourceProperties": { # Source specific properties. These properties are managed by the source
              # that writes the finding. The key names in the source_properties map must be
              # between 1 and 255 characters, and must start with a letter and contain
              # alphanumeric characters or underscores only.
            "a_key": "",
          },
          "parent": "A String", # Immutable. The relative resource name of the source the finding belongs to. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # This field is immutable after creation time.
              # For example:
              # "organizations/{organization_id}/sources/{source_id}"
          "createTime": "A String", # The time at which the finding was created in Security Command Center.
          "securityMarks": { # User specified security marks that are attached to the parent Security # Output only. User specified security marks. These marks are entirely
              # managed by the user and come from the SecurityMarks resource that belongs
              # to the finding.
              # Command Center resource. Security marks are scoped within a Security Command
              # Center organization -- they can be modified and viewed by all users who have
              # proper permissions on the organization.
            "marks": { # Mutable user specified security marks belonging to the parent resource.
                # Constraints are as follows:
                #
                #   * Keys and values are treated as case insensitive
                #   * Keys must be between 1 - 256 characters (inclusive)
                #   * Keys must be letters, numbers, underscores, or dashes
                #   * Values have leading and trailing whitespace trimmed, remaining
                #     characters must be between 1 - 4096 characters (inclusive)
              "a_key": "A String",
            },
            "name": "A String", # The relative resource name of the SecurityMarks. See:
                # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                # Examples:
                # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
                # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
          },
          "state": "A String", # The state of the finding.
          "name": "A String", # The relative resource name of this finding. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Example:
              # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}"
          "category": "A String", # The additional taxonomy group within findings from a given source.
              # This field is immutable after creation time.
              # Example: "XSS_FLASH_INJECTION"
        }

`updateSecurityMarks(name, body=None, updateMask=None, startTime=None, x__xgafv=None)`

    Updates security marks.

    Args:
      name: string, The relative resource name of the SecurityMarks. See:
    https://cloud.google.com/apis/design/resource_names#relative_resource_name
    Examples:
    "organizations/{organization_id}/assets/{asset_id}/securityMarks"
    "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks". (required)
      body: object, The request body.
        The object takes the form of:

    { # User specified security marks that are attached to the parent Security
        # Command Center resource. Security marks are scoped within a Security Command
        # Center organization -- they can be modified and viewed by all users who have
        # proper permissions on the organization.
      "marks": { # Mutable user specified security marks belonging to the parent resource.
          # Constraints are as follows:
          #
          #   * Keys and values are treated as case insensitive
          #   * Keys must be between 1 - 256 characters (inclusive)
          #   * Keys must be letters, numbers, underscores, or dashes
          #   * Values have leading and trailing whitespace trimmed, remaining
          #     characters must be between 1 - 4096 characters (inclusive)
        "a_key": "A String",
      },
      "name": "A String", # The relative resource name of the SecurityMarks. See:
          # https://cloud.google.com/apis/design/resource_names#relative_resource_name
          # Examples:
          # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
          # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
    }

      updateMask: string, The FieldMask to use when updating the security marks resource.
      startTime: string, The time at which the updated SecurityMarks take effect.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # User specified security marks that are attached to the parent Security
          # Command Center resource. Security marks are scoped within a Security Command
          # Center organization -- they can be modified and viewed by all users who have
          # proper permissions on the organization.
        "marks": { # Mutable user specified security marks belonging to the parent resource.
            # Constraints are as follows:
            #
            #   * Keys and values are treated as case insensitive
            #   * Keys must be between 1 - 256 characters (inclusive)
            #   * Keys must be letters, numbers, underscores, or dashes
            #   * Values have leading and trailing whitespace trimmed, remaining
            #     characters must be between 1 - 4096 characters (inclusive)
          "a_key": "A String",
        },
        "name": "A String", # The relative resource name of the SecurityMarks. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # Examples:
            # "organizations/{organization_id}/assets/{asset_id}/securityMarks"
            # "organizations/{organization_id}/sources/{source_id}/findings/{finding_id}/securityMarks".
      }