Updates the Event Threat Detection custom module with the given name based on the given update mask. Updating the enablement state is supported for both resident and inherited modules (though resident modules cannot have an enablement state of "inherited"). Updating the display name or configuration of a module is supported for resident modules only. The type of a module cannot be changed.
Required. The fields to update. If omitted, then all fields are updated.
This is a comma-separated list of fully qualified names of fields. Example: "user.displayName,photo".
validateOnly
boolean
Optional. When set to true, the request will be validated (including IAM checks), but no module will be updated. An OK response indicates that the request is valid, while an error response indicates that the request is invalid.
If the request is valid, a subsequent request to update the module could still fail for one of the following reasons:
The state of your cloud resources changed; for example, you lost a required IAM permission
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-07-01 UTC."],[],[],null,["# Method: folders.locations.eventThreatDetectionCustomModules.patch\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [IAM Permissions](#body.aspect_1)\n- [Try it!](#try-it)\n\nUpdates the Event Threat Detection custom module with the given name based on the given update mask. Updating the enablement state is supported for both resident and inherited modules (though resident modules cannot have an enablement state of \"inherited\"). Updating the display name or configuration of a module is supported for resident modules only. The type of a module cannot be changed.\n\n### HTTP request\n\n`PATCH https://securitycentermanagement.googleapis.com/v1/{eventThreatDetectionCustomModule.name=folders/*/locations/*/eventThreatDetectionCustomModules/*}`\n\nThe URL uses [gRPC Transcoding](https://google.aip.dev/127) syntax.\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body contains an instance of [EventThreatDetectionCustomModule](/security-command-center/docs/reference/security-center-management/rest/v1/folders.locations.eventThreatDetectionCustomModules#EventThreatDetectionCustomModule).\n\n### Response body\n\nIf successful, the response body contains an instance of [EventThreatDetectionCustomModule](/security-command-center/docs/reference/security-center-management/rest/v1/folders.locations.eventThreatDetectionCustomModules#EventThreatDetectionCustomModule).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp).\n\n### IAM Permissions\n\nRequires the following [IAM](https://cloud.google.com/iam/docs) permission on the `name` resource:\n\n- `securitycentermanagement.eventThreatDetectionCustomModules.update`\n\nFor more information, see the [IAM documentation](https://cloud.google.com/iam/docs)."]]