code: @BetaApi
    public final Operation patchSecurityPolicy(
        ProjectGlobalSecurityPolicyName securityPolicy,
        SecurityPolicy securityPolicyResource,
        List<String> fieldMask) {
  
      PatchSecurityPolicyHttpRequest request =
          PatchSecurityPolicyHttpRequest.newBuilder()
              .setSecurityPolicy(securityPolicy == null ? null : securityPolicy.toString())
              .setSecurityPolicyResource(securityPolicyResource)
              .addAllFieldMask(fieldMask)
              .build();
      return patchSecurityPolicy(request);
    }
docs: Patches the specified policy with the data included in the request.
  
  <p>Sample code:
  
  <pre><code>
  try (SecurityPolicyClient securityPolicyClient = SecurityPolicyClient.create()) {
  ProjectGlobalSecurityPolicyName securityPolicy = ProjectGlobalSecurityPolicyName.of("[PROJECT]", "[SECURITY_POLICY]");
  SecurityPolicy securityPolicyResource = SecurityPolicy.newBuilder().build();
  List&lt;String&gt; fieldMask = new ArrayList&lt;&gt;();
  Operation response = securityPolicyClient.patchSecurityPolicy(securityPolicy, securityPolicyResource, fieldMask);
  }
  </code></pre>
  
  @param securityPolicy Name of the security policy to update.
  @param securityPolicyResource A security policy is comprised of one or more rules. It can also
  be associated with one or more 'targets'. (== resource_for v1.securityPolicies ==) (==
  resource_for beta.securityPolicies ==)
  @param fieldMask The fields that should be serialized (even if they have empty values). If the
  containing message object has a non-null fieldmask, then all the fields in the field mask
  (and only those fields in the field mask) will be serialized. If the containing object does
  not have a fieldmask, then only non-empty fields will be serialized.
  @throws com.google.api.gax.rpc.ApiException if the remote call fails