# Cloud Security Command Center API . organizations . sources . findings

## Instance Methods

Creates a finding. The corresponding source must exist for finding creation

Filters an organization or source's findings and groups them by their

Retrieves the next page of results.

Lists an organization or source's findings.

Retrieves the next page of results.

Creates or updates a finding. The corresponding source must exist for a

Updates the state of a finding.

Updates security marks.

### Method Details

`create(parent, body, x__xgafv=None, findingId=None)`

    Creates a finding. The corresponding source must exist for finding creation
    to succeed.

    Args:
      parent: string, Resource name of the new finding's parent. Its format should be
    "organizations/[organization_id]/sources/[source_id]". (required)
      body: object, The request body. (required)
        The object takes the form of:

    { # Cloud Security Command Center (Cloud SCC) finding.
          #
          # A finding is a record of assessment data (security, risk, health or privacy)
          # ingested into Cloud SCC for presentation, notification, analysis,
          # policy testing, and enforcement. For example, an XSS vulnerability in an
          # App Engine application is a finding.
        "category": "A String", # The additional taxonomy group within findings from a given source.
            # This field is immutable after creation time.
            # Example: "XSS_FLASH_INJECTION"
        "eventTime": "A String", # The time at which the event took place. For example, if the finding
            # represents an open firewall it would capture the time the detector believes
            # the firewall became open. The accuracy is determined by the detector.
        "sourceProperties": { # Source specific properties. These properties are managed by the source
            # that writes the finding. The key names in the source_properties map must be
            # between 1 and 255 characters, and must start with a letter and contain
            # alphanumeric characters or underscores only.
          "a_key": "",
        },
        "name": "A String", # The relative resource name of this finding. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # Example:
            # "organizations/123/sources/456/findings/789"
        "parent": "A String", # The relative resource name of the source the finding belongs to. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # This field is immutable after creation time.
            # For example:
            # "organizations/123/sources/456"
        "state": "A String", # The state of the finding.
        "resourceName": "A String", # The full resource name of the Google Cloud Platform (GCP) resource this
            # finding is for. See:
            # https://cloud.google.com/apis/design/resource_names#full_resource_name
            # This field is immutable after creation time.
        "securityMarks": { # User specified security marks that are attached to the parent Cloud Security # Output only. User specified security marks. These marks are entirely
            # managed by the user and come from the SecurityMarks resource that belongs
            # to the finding.
              # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
              # SCC organization -- they can be modified and viewed by all users who have
              # proper permissions on the organization.
            "name": "A String", # The relative resource name of the SecurityMarks. See:
                # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                # Examples:
                # "organizations/123/assets/456/securityMarks"
                # "organizations/123/sources/456/findings/789/securityMarks".
            "marks": { # Mutable user specified security marks belonging to the parent resource.
                # Constraints are as follows:
                #   - Keys and values are treated as case insensitive
                #   - Keys must be between 1 - 256 characters (inclusive)
                #   - Keys must be letters, numbers, underscores, or dashes
                #   - Values have leading and trailing whitespace trimmed, remaining
                #     characters must be between 1 - 4096 characters (inclusive)
              "a_key": "A String",
            },
          },
        "createTime": "A String", # The time at which the finding was created in Cloud SCC.
        "externalUri": "A String", # The URI that, if available, points to a web page outside of Cloud SCC
            # where additional information about the finding can be found. This field is
            # guaranteed to be either empty or a well formed URL.
      }

      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format
      findingId: string, Unique identifier provided by the client within the parent scope.
    It must be alphanumeric and less than or equal to 32 characters and
    greater than 0 characters in length.

    Returns:
      An object of the form:

        { # Cloud Security Command Center (Cloud SCC) finding.
            #
            # A finding is a record of assessment data (security, risk, health or privacy)
            # ingested into Cloud SCC for presentation, notification, analysis,
            # policy testing, and enforcement. For example, an XSS vulnerability in an
            # App Engine application is a finding.
          "category": "A String", # The additional taxonomy group within findings from a given source.
              # This field is immutable after creation time.
              # Example: "XSS_FLASH_INJECTION"
          "eventTime": "A String", # The time at which the event took place. For example, if the finding
              # represents an open firewall it would capture the time the detector believes
              # the firewall became open. The accuracy is determined by the detector.
          "sourceProperties": { # Source specific properties. These properties are managed by the source
              # that writes the finding. The key names in the source_properties map must be
              # between 1 and 255 characters, and must start with a letter and contain
              # alphanumeric characters or underscores only.
            "a_key": "",
          },
          "name": "A String", # The relative resource name of this finding. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Example:
              # "organizations/123/sources/456/findings/789"
          "parent": "A String", # The relative resource name of the source the finding belongs to. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # This field is immutable after creation time.
              # For example:
              # "organizations/123/sources/456"
          "state": "A String", # The state of the finding.
          "resourceName": "A String", # The full resource name of the Google Cloud Platform (GCP) resource this
              # finding is for. See:
              # https://cloud.google.com/apis/design/resource_names#full_resource_name
              # This field is immutable after creation time.
          "securityMarks": { # User specified security marks that are attached to the parent Cloud Security # Output only. User specified security marks. These marks are entirely
              # managed by the user and come from the SecurityMarks resource that belongs
              # to the finding.
                # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
                # SCC organization -- they can be modified and viewed by all users who have
                # proper permissions on the organization.
              "name": "A String", # The relative resource name of the SecurityMarks. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # Examples:
                  # "organizations/123/assets/456/securityMarks"
                  # "organizations/123/sources/456/findings/789/securityMarks".
              "marks": { # Mutable user specified security marks belonging to the parent resource.
                  # Constraints are as follows:
                  #   - Keys and values are treated as case insensitive
                  #   - Keys must be between 1 - 256 characters (inclusive)
                  #   - Keys must be letters, numbers, underscores, or dashes
                  #   - Values have leading and trailing whitespace trimmed, remaining
                  #     characters must be between 1 - 4096 characters (inclusive)
                "a_key": "A String",
              },
            },
          "createTime": "A String", # The time at which the finding was created in Cloud SCC.
          "externalUri": "A String", # The URI that, if available, points to a web page outside of Cloud SCC
              # where additional information about the finding can be found. This field is
              # guaranteed to be either empty or a well formed URL.
        }

`group(parent, body, x__xgafv=None)`

    Filters an organization or source's findings and  groups them by their
    specified properties.

    To group across all sources provide a `-` as the source id.
    Example: /v1beta1/organizations/123/sources/-/findings

    Args:
      parent: string, Name of the source to groupBy. Its format is
    "organizations/[organization_id]/sources/[source_id]". To groupBy across
    all sources provide a source_id of `-`. For example:
    organizations/123/sources/- (required)
      body: object, The request body. (required)
        The object takes the form of:

    { # Request message for grouping by findings.
        "filter": "A String", # Expression that defines the filter to apply across findings.
            # The expression is a list of one or more restrictions combined via logical
            # operators `AND` and `OR`.
            # Parentheses are not supported, and `OR` has higher precedence than `AND`.
            #
            # Restrictions have the form `  ` and may have a `-`
            # character in front of them to indicate negation. Examples include:
            #
            #  * name
            #  * source_properties.a_property
            #  * security_marks.marks.marka
            #
            # The supported operators are:
            #
            # * `=` for all value types.
            # * `>`, `<`, `>=`, `<=` for integer values.
            # * `:`, meaning substring matching, for strings.
            #
            # The supported value types are:
            #
            # * string literals in quotes.
            # * integer literals without quotes.
            # * boolean literals `true` and `false` without quotes.
            #
            # For example, `source_properties.size = 100` is a valid filter string.
        "pageToken": "A String", # The value returned by the last `GroupFindingsResponse`; indicates
            # that this is a continuation of a prior `GroupFindings` call, and
            # that the system should return the next page of data.
        "groupBy": "A String", # Expression that defines what assets fields to use for grouping (including
            # `state`). The string value should follow SQL syntax: comma separated list
            # of fields. For example:
            # "parent,resource_name".
            #
            # The following fields are supported:
            #
            # * resource_name
            # * category
            # * state
            # * parent
        "pageSize": 42, # The maximum number of results to return in a single response. Default is
            # 10, minimum is 1, maximum is 1000.
        "readTime": "A String", # Time used as a reference point when filtering findings. The filter is
            # limited to findings existing at the supplied time and their values are
            # those at that specific time. Absence of this field will default to the
            # API's version of NOW.
      }

      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Response message for group by findings.
        "nextPageToken": "A String", # Token to retrieve the next page of results, or empty if there are no more
            # results.
        "groupByResults": [ # Group results. There exists an element for each existing unique
            # combination of property/values. The element contains a count for the number
            # of times those specific property/values appear.
          { # Result containing the properties and count of a groupBy request.
            "count": "A String", # Total count of resources for the given properties.
            "properties": { # Properties matching the groupBy fields in the request.
              "a_key": "",
            },
          },
        ],
        "readTime": "A String", # Time used for executing the groupBy request.
      }

`group_next(previous_request, previous_response)`

    Retrieves the next page of results.

    Args:
      previous_request: The request for the previous page. (required)
      previous_response: The response from the request for the previous page. (required)

    Returns:
      A request object that you can call 'execute()' on to request the next
      page. Returns None if there are no more items in the collection.

`list(parent, orderBy=None, pageSize=None, x__xgafv=None, pageToken=None, fieldMask=None, readTime=None, filter=None)`

    Lists an organization or source's findings.

    To list across all sources provide a `-` as the source id.
    Example: /v1beta1/organizations/123/sources/-/findings

    Args:
      parent: string, Name of the source the findings belong to. Its format is
    "organizations/[organization_id]/sources/[source_id]". To list across all
    sources provide a source_id of `-`. For example:
    organizations/123/sources/- (required)
      orderBy: string, Expression that defines what fields and order to use for sorting. The
    string value should follow SQL syntax: comma separated list of fields. For
    example: "name,resource_properties.a_property". The default sorting order
    is ascending. To specify descending order for a field, a suffix " desc"
    should be appended to the field name. For example: "name
    desc,source_properties.a_property". Redundant space characters in the
    syntax are insignificant. "name desc,source_properties.a_property" and "
    name     desc  ,   source_properties.a_property  " are equivalent.
      pageSize: integer, The maximum number of results to return in a single response. Default is
    10, minimum is 1, maximum is 1000.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format
      pageToken: string, The value returned by the last `ListFindingsResponse`; indicates
    that this is a continuation of a prior `ListFindings` call, and
    that the system should return the next page of data.
      fieldMask: string, Optional.

    A field mask to specify the Finding fields to be listed in the response.
    An empty field mask will list all fields.
      readTime: string, Time used as a reference point when filtering findings. The filter is
    limited to findings existing at the supplied time and their values are
    those at that specific time. Absence of this field will default to the
    API's version of NOW.
      filter: string, Expression that defines the filter to apply across findings.
    The expression is a list of one or more restrictions combined via logical
    operators `AND` and `OR`.
    Parentheses are not supported, and `OR` has higher precedence than `AND`.

    Restrictions have the form `  ` and may have a `-`
    character in front of them to indicate negation. Examples include:

     * name
     * source_properties.a_property
     * security_marks.marks.marka

    The supported operators are:

    * `=` for all value types.
    * `>`, `<`, `>=`, `<=` for integer values.
    * `:`, meaning substring matching, for strings.

    The supported value types are:

    * string literals in quotes.
    * integer literals without quotes.
    * boolean literals `true` and `false` without quotes.

    For example, `source_properties.size = 100` is a valid filter string.

    Returns:
      An object of the form:

        { # Response message for listing findings.
        "nextPageToken": "A String", # Token to retrieve the next page of results, or empty if there are no more
            # results.
        "totalSize": 42, # The total number of findings matching the query.
        "findings": [ # Findings matching the list request.
          { # Cloud Security Command Center (Cloud SCC) finding.
                #
                # A finding is a record of assessment data (security, risk, health or privacy)
                # ingested into Cloud SCC for presentation, notification, analysis,
                # policy testing, and enforcement. For example, an XSS vulnerability in an
                # App Engine application is a finding.
              "category": "A String", # The additional taxonomy group within findings from a given source.
                  # This field is immutable after creation time.
                  # Example: "XSS_FLASH_INJECTION"
              "eventTime": "A String", # The time at which the event took place. For example, if the finding
                  # represents an open firewall it would capture the time the detector believes
                  # the firewall became open. The accuracy is determined by the detector.
              "sourceProperties": { # Source specific properties. These properties are managed by the source
                  # that writes the finding. The key names in the source_properties map must be
                  # between 1 and 255 characters, and must start with a letter and contain
                  # alphanumeric characters or underscores only.
                "a_key": "",
              },
              "name": "A String", # The relative resource name of this finding. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # Example:
                  # "organizations/123/sources/456/findings/789"
              "parent": "A String", # The relative resource name of the source the finding belongs to. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # This field is immutable after creation time.
                  # For example:
                  # "organizations/123/sources/456"
              "state": "A String", # The state of the finding.
              "resourceName": "A String", # The full resource name of the Google Cloud Platform (GCP) resource this
                  # finding is for. See:
                  # https://cloud.google.com/apis/design/resource_names#full_resource_name
                  # This field is immutable after creation time.
              "securityMarks": { # User specified security marks that are attached to the parent Cloud Security # Output only. User specified security marks. These marks are entirely
                  # managed by the user and come from the SecurityMarks resource that belongs
                  # to the finding.
                    # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
                    # SCC organization -- they can be modified and viewed by all users who have
                    # proper permissions on the organization.
                  "name": "A String", # The relative resource name of the SecurityMarks. See:
                      # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                      # Examples:
                      # "organizations/123/assets/456/securityMarks"
                      # "organizations/123/sources/456/findings/789/securityMarks".
                  "marks": { # Mutable user specified security marks belonging to the parent resource.
                      # Constraints are as follows:
                      #   - Keys and values are treated as case insensitive
                      #   - Keys must be between 1 - 256 characters (inclusive)
                      #   - Keys must be letters, numbers, underscores, or dashes
                      #   - Values have leading and trailing whitespace trimmed, remaining
                      #     characters must be between 1 - 4096 characters (inclusive)
                    "a_key": "A String",
                  },
                },
              "createTime": "A String", # The time at which the finding was created in Cloud SCC.
              "externalUri": "A String", # The URI that, if available, points to a web page outside of Cloud SCC
                  # where additional information about the finding can be found. This field is
                  # guaranteed to be either empty or a well formed URL.
            },
        ],
        "readTime": "A String", # Time used for executing the list request.
      }

`list_next(previous_request, previous_response)`

    Retrieves the next page of results.

    Args:
      previous_request: The request for the previous page. (required)
      previous_response: The response from the request for the previous page. (required)

    Returns:
      A request object that you can call 'execute()' on to request the next
      page. Returns None if there are no more items in the collection.

`patch(name, body, updateMask=None, x__xgafv=None)`

    Creates or updates a finding. The corresponding source must exist for a
    finding creation to succeed.

    Args:
      name: string, The relative resource name of this finding. See:
    https://cloud.google.com/apis/design/resource_names#relative_resource_name
    Example:
    "organizations/123/sources/456/findings/789" (required)
      body: object, The request body. (required)
        The object takes the form of:

    { # Cloud Security Command Center (Cloud SCC) finding.
          #
          # A finding is a record of assessment data (security, risk, health or privacy)
          # ingested into Cloud SCC for presentation, notification, analysis,
          # policy testing, and enforcement. For example, an XSS vulnerability in an
          # App Engine application is a finding.
        "category": "A String", # The additional taxonomy group within findings from a given source.
            # This field is immutable after creation time.
            # Example: "XSS_FLASH_INJECTION"
        "eventTime": "A String", # The time at which the event took place. For example, if the finding
            # represents an open firewall it would capture the time the detector believes
            # the firewall became open. The accuracy is determined by the detector.
        "sourceProperties": { # Source specific properties. These properties are managed by the source
            # that writes the finding. The key names in the source_properties map must be
            # between 1 and 255 characters, and must start with a letter and contain
            # alphanumeric characters or underscores only.
          "a_key": "",
        },
        "name": "A String", # The relative resource name of this finding. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # Example:
            # "organizations/123/sources/456/findings/789"
        "parent": "A String", # The relative resource name of the source the finding belongs to. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # This field is immutable after creation time.
            # For example:
            # "organizations/123/sources/456"
        "state": "A String", # The state of the finding.
        "resourceName": "A String", # The full resource name of the Google Cloud Platform (GCP) resource this
            # finding is for. See:
            # https://cloud.google.com/apis/design/resource_names#full_resource_name
            # This field is immutable after creation time.
        "securityMarks": { # User specified security marks that are attached to the parent Cloud Security # Output only. User specified security marks. These marks are entirely
            # managed by the user and come from the SecurityMarks resource that belongs
            # to the finding.
              # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
              # SCC organization -- they can be modified and viewed by all users who have
              # proper permissions on the organization.
            "name": "A String", # The relative resource name of the SecurityMarks. See:
                # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                # Examples:
                # "organizations/123/assets/456/securityMarks"
                # "organizations/123/sources/456/findings/789/securityMarks".
            "marks": { # Mutable user specified security marks belonging to the parent resource.
                # Constraints are as follows:
                #   - Keys and values are treated as case insensitive
                #   - Keys must be between 1 - 256 characters (inclusive)
                #   - Keys must be letters, numbers, underscores, or dashes
                #   - Values have leading and trailing whitespace trimmed, remaining
                #     characters must be between 1 - 4096 characters (inclusive)
              "a_key": "A String",
            },
          },
        "createTime": "A String", # The time at which the finding was created in Cloud SCC.
        "externalUri": "A String", # The URI that, if available, points to a web page outside of Cloud SCC
            # where additional information about the finding can be found. This field is
            # guaranteed to be either empty or a well formed URL.
      }

      updateMask: string, The FieldMask to use when updating the finding resource. This field should
    not be specified when creating a finding.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Cloud Security Command Center (Cloud SCC) finding.
            #
            # A finding is a record of assessment data (security, risk, health or privacy)
            # ingested into Cloud SCC for presentation, notification, analysis,
            # policy testing, and enforcement. For example, an XSS vulnerability in an
            # App Engine application is a finding.
          "category": "A String", # The additional taxonomy group within findings from a given source.
              # This field is immutable after creation time.
              # Example: "XSS_FLASH_INJECTION"
          "eventTime": "A String", # The time at which the event took place. For example, if the finding
              # represents an open firewall it would capture the time the detector believes
              # the firewall became open. The accuracy is determined by the detector.
          "sourceProperties": { # Source specific properties. These properties are managed by the source
              # that writes the finding. The key names in the source_properties map must be
              # between 1 and 255 characters, and must start with a letter and contain
              # alphanumeric characters or underscores only.
            "a_key": "",
          },
          "name": "A String", # The relative resource name of this finding. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Example:
              # "organizations/123/sources/456/findings/789"
          "parent": "A String", # The relative resource name of the source the finding belongs to. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # This field is immutable after creation time.
              # For example:
              # "organizations/123/sources/456"
          "state": "A String", # The state of the finding.
          "resourceName": "A String", # The full resource name of the Google Cloud Platform (GCP) resource this
              # finding is for. See:
              # https://cloud.google.com/apis/design/resource_names#full_resource_name
              # This field is immutable after creation time.
          "securityMarks": { # User specified security marks that are attached to the parent Cloud Security # Output only. User specified security marks. These marks are entirely
              # managed by the user and come from the SecurityMarks resource that belongs
              # to the finding.
                # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
                # SCC organization -- they can be modified and viewed by all users who have
                # proper permissions on the organization.
              "name": "A String", # The relative resource name of the SecurityMarks. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # Examples:
                  # "organizations/123/assets/456/securityMarks"
                  # "organizations/123/sources/456/findings/789/securityMarks".
              "marks": { # Mutable user specified security marks belonging to the parent resource.
                  # Constraints are as follows:
                  #   - Keys and values are treated as case insensitive
                  #   - Keys must be between 1 - 256 characters (inclusive)
                  #   - Keys must be letters, numbers, underscores, or dashes
                  #   - Values have leading and trailing whitespace trimmed, remaining
                  #     characters must be between 1 - 4096 characters (inclusive)
                "a_key": "A String",
              },
            },
          "createTime": "A String", # The time at which the finding was created in Cloud SCC.
          "externalUri": "A String", # The URI that, if available, points to a web page outside of Cloud SCC
              # where additional information about the finding can be found. This field is
              # guaranteed to be either empty or a well formed URL.
        }

`setState(name, body, x__xgafv=None)`

    Updates the state of a finding.

    Args:
      name: string, The relative resource name of the finding. See:
    https://cloud.google.com/apis/design/resource_names#relative_resource_name
    Example:
    "organizations/123/sources/456/finding/789". (required)
      body: object, The request body. (required)
        The object takes the form of:

    { # Request message for updating a finding's state.
        "state": "A String", # The desired State of the finding.
        "startTime": "A String", # The time at which the updated state takes effect.
      }

      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # Cloud Security Command Center (Cloud SCC) finding.
            #
            # A finding is a record of assessment data (security, risk, health or privacy)
            # ingested into Cloud SCC for presentation, notification, analysis,
            # policy testing, and enforcement. For example, an XSS vulnerability in an
            # App Engine application is a finding.
          "category": "A String", # The additional taxonomy group within findings from a given source.
              # This field is immutable after creation time.
              # Example: "XSS_FLASH_INJECTION"
          "eventTime": "A String", # The time at which the event took place. For example, if the finding
              # represents an open firewall it would capture the time the detector believes
              # the firewall became open. The accuracy is determined by the detector.
          "sourceProperties": { # Source specific properties. These properties are managed by the source
              # that writes the finding. The key names in the source_properties map must be
              # between 1 and 255 characters, and must start with a letter and contain
              # alphanumeric characters or underscores only.
            "a_key": "",
          },
          "name": "A String", # The relative resource name of this finding. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Example:
              # "organizations/123/sources/456/findings/789"
          "parent": "A String", # The relative resource name of the source the finding belongs to. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # This field is immutable after creation time.
              # For example:
              # "organizations/123/sources/456"
          "state": "A String", # The state of the finding.
          "resourceName": "A String", # The full resource name of the Google Cloud Platform (GCP) resource this
              # finding is for. See:
              # https://cloud.google.com/apis/design/resource_names#full_resource_name
              # This field is immutable after creation time.
          "securityMarks": { # User specified security marks that are attached to the parent Cloud Security # Output only. User specified security marks. These marks are entirely
              # managed by the user and come from the SecurityMarks resource that belongs
              # to the finding.
                # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
                # SCC organization -- they can be modified and viewed by all users who have
                # proper permissions on the organization.
              "name": "A String", # The relative resource name of the SecurityMarks. See:
                  # https://cloud.google.com/apis/design/resource_names#relative_resource_name
                  # Examples:
                  # "organizations/123/assets/456/securityMarks"
                  # "organizations/123/sources/456/findings/789/securityMarks".
              "marks": { # Mutable user specified security marks belonging to the parent resource.
                  # Constraints are as follows:
                  #   - Keys and values are treated as case insensitive
                  #   - Keys must be between 1 - 256 characters (inclusive)
                  #   - Keys must be letters, numbers, underscores, or dashes
                  #   - Values have leading and trailing whitespace trimmed, remaining
                  #     characters must be between 1 - 4096 characters (inclusive)
                "a_key": "A String",
              },
            },
          "createTime": "A String", # The time at which the finding was created in Cloud SCC.
          "externalUri": "A String", # The URI that, if available, points to a web page outside of Cloud SCC
              # where additional information about the finding can be found. This field is
              # guaranteed to be either empty or a well formed URL.
        }

`updateSecurityMarks(name, body, startTime=None, updateMask=None, x__xgafv=None)`

    Updates security marks.

    Args:
      name: string, The relative resource name of the SecurityMarks. See:
    https://cloud.google.com/apis/design/resource_names#relative_resource_name
    Examples:
    "organizations/123/assets/456/securityMarks"
    "organizations/123/sources/456/findings/789/securityMarks". (required)
      body: object, The request body. (required)
        The object takes the form of:

    { # User specified security marks that are attached to the parent Cloud Security
          # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
          # SCC organization -- they can be modified and viewed by all users who have
          # proper permissions on the organization.
        "name": "A String", # The relative resource name of the SecurityMarks. See:
            # https://cloud.google.com/apis/design/resource_names#relative_resource_name
            # Examples:
            # "organizations/123/assets/456/securityMarks"
            # "organizations/123/sources/456/findings/789/securityMarks".
        "marks": { # Mutable user specified security marks belonging to the parent resource.
            # Constraints are as follows:
            #   - Keys and values are treated as case insensitive
            #   - Keys must be between 1 - 256 characters (inclusive)
            #   - Keys must be letters, numbers, underscores, or dashes
            #   - Values have leading and trailing whitespace trimmed, remaining
            #     characters must be between 1 - 4096 characters (inclusive)
          "a_key": "A String",
        },
      }

      startTime: string, The time at which the updated SecurityMarks take effect.
      updateMask: string, The FieldMask to use when updating the security marks resource.
      x__xgafv: string, V1 error format.
        Allowed values
          1 - v1 error format
          2 - v2 error format

    Returns:
      An object of the form:

        { # User specified security marks that are attached to the parent Cloud Security
            # Command Center (Cloud SCC) resource. Security marks are scoped within a Cloud
            # SCC organization -- they can be modified and viewed by all users who have
            # proper permissions on the organization.
          "name": "A String", # The relative resource name of the SecurityMarks. See:
              # https://cloud.google.com/apis/design/resource_names#relative_resource_name
              # Examples:
              # "organizations/123/assets/456/securityMarks"
              # "organizations/123/sources/456/findings/789/securityMarks".
          "marks": { # Mutable user specified security marks belonging to the parent resource.
              # Constraints are as follows:
              #   - Keys and values are treated as case insensitive
              #   - Keys must be between 1 - 256 characters (inclusive)
              #   - Keys must be letters, numbers, underscores, or dashes
              #   - Values have leading and trailing whitespace trimmed, remaining
              #     characters must be between 1 - 4096 characters (inclusive)
            "a_key": "A String",
          },
        }