RubyGems - google-cloud-dlp-v2 - Versions diffs - 1.18.0 → 1.19.0 - Mend

google-cloud-dlp-v2 1.18.0 → 1.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (34) hide show

checksums.yaml +4 -4
data/.yardopts +1 -1
data/README.md +2 -6
data/lib/google/cloud/dlp/v2/dlp_service/client.rb +546 -52
data/lib/google/cloud/dlp/v2/dlp_service/credentials.rb +1 -1
data/lib/google/cloud/dlp/v2/dlp_service/paths.rb +20 -1
data/lib/google/cloud/dlp/v2/dlp_service/rest/client.rb +511 -52
data/lib/google/cloud/dlp/v2/dlp_service/rest/service_stub.rb +308 -1
data/lib/google/cloud/dlp/v2/dlp_service/rest.rb +2 -2
data/lib/google/cloud/dlp/v2/dlp_service.rb +2 -2
data/lib/google/cloud/dlp/v2/rest.rb +1 -1
data/lib/google/cloud/dlp/v2/version.rb +1 -1
data/lib/google/cloud/dlp/v2.rb +1 -1
data/lib/google/privacy/dlp/v2/dlp_pb.rb +20 -1
data/lib/google/privacy/dlp/v2/dlp_services_pb.rb +48 -38
data/lib/google/privacy/dlp/v2/storage_pb.rb +5 -1
data/lib/google-cloud-dlp-v2.rb +1 -1
data/proto_docs/README.md +1 -1
data/proto_docs/google/api/client.rb +1 -1
data/proto_docs/google/api/field_behavior.rb +1 -1
data/proto_docs/google/api/launch_stage.rb +1 -1
data/proto_docs/google/api/resource.rb +1 -1
data/proto_docs/google/privacy/dlp/v2/dlp.rb +453 -141
data/proto_docs/google/privacy/dlp/v2/storage.rb +76 -20
data/proto_docs/google/protobuf/any.rb +1 -1
data/proto_docs/google/protobuf/duration.rb +1 -1
data/proto_docs/google/protobuf/empty.rb +1 -1
data/proto_docs/google/protobuf/field_mask.rb +1 -1
data/proto_docs/google/protobuf/timestamp.rb +8 -7
data/proto_docs/google/rpc/status.rb +1 -1
data/proto_docs/google/type/date.rb +1 -1
data/proto_docs/google/type/dayofweek.rb +1 -1
data/proto_docs/google/type/timeofday.rb +1 -1
metadata +6 -5

data/proto_docs/google/privacy/dlp/v2/dlp.rb CHANGED Viewed

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
-# Copyright 2020 Google LLC
+# Copyright 2026 Google LLC
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -62,7 +62,7 @@ module Google
         # @!attribute [rw] info_types
         #   @return [::Array<::Google::Cloud::Dlp::V2::InfoType>]
         #     A list of image-supported infoTypes—excluding [document
-        #      infoTypes](https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference#documents)—to
+        #      infoTypes](https://docs.cloud.google.com/sensitive-data-protection/docs/infotypes-reference#documents)—to
         #      be used as context for the exclusion rule. A finding is excluded if
         #      its bounding box has the specified spatial relationship (defined by
         #      `image_containment_type`) with a finding of an infoType in this list.
@@ -158,7 +158,7 @@ module Google
         # @!attribute [rw] info_types
         #   @return [::Array<::Google::Cloud::Dlp::V2::InfoType>]
         #     A list of image-supported infoTypes—excluding [document
-        #     infoTypes](https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference#documents)—to
+        #     infoTypes](https://docs.cloud.google.com/sensitive-data-protection/docs/infotypes-reference#documents)—to
         #     be used as context for the adjustment rule. Sensitive Data Protection
         #     adjusts the likelihood of an image finding if its bounding box has the
         #     specified spatial relationship (defined by `image_containment_type`) with a
@@ -250,7 +250,7 @@ module Google
         #   @return [::Array<::Google::Cloud::Dlp::V2::InfoType>]
         #     Restricts what info_types to look for. The values must correspond to
         #     InfoType values returned by ListInfoTypes or listed at
-        #     https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference.
+        #     https://docs.cloud.google.com/sensitive-data-protection/docs/infotypes-reference.
         #
         #     When no InfoTypes or CustomInfoTypes are specified in a request, the
         #     system may automatically choose a default list of detectors to run, which
@@ -267,7 +267,7 @@ module Google
         #     In general, the highest likelihood setting yields the fewest findings in
         #     results and the lowest chance of a false positive. For more information,
         #     see [Match
-        #     likelihood](https://cloud.google.com/sensitive-data-protection/docs/likelihood).
+        #     likelihood](https://docs.cloud.google.com/sensitive-data-protection/docs/likelihood).
         # @!attribute [rw] min_likelihood_per_info_type
         #   @return [::Array<::Google::Cloud::Dlp::V2::InspectConfig::InfoTypeLikelihood>]
         #     Minimum likelihood per infotype. For each infotype, a user can specify a
@@ -304,7 +304,7 @@ module Google
         # @!attribute [rw] custom_info_types
         #   @return [::Array<::Google::Cloud::Dlp::V2::CustomInfoType>]
         #     CustomInfoTypes provided by the user. See
-        #     https://cloud.google.com/sensitive-data-protection/docs/creating-custom-infotypes
+        #     https://docs.cloud.google.com/sensitive-data-protection/docs/creating-custom-infotypes
         #     to learn more.
         # @!attribute [rw] content_options
         #   @return [::Array<::Google::Cloud::Dlp::V2::ContentOption>]
@@ -409,7 +409,7 @@ module Google
           # The type of data being sent for inspection. To learn more, see
           # [Supported file
-          # types](https://cloud.google.com/sensitive-data-protection/docs/supported-file-types).
+          # types](https://docs.cloud.google.com/sensitive-data-protection/docs/supported-file-types).
           #
           # Only the first frame of each multiframe image is inspected. Metadata and
           # other frames aren't inspected.
@@ -479,7 +479,7 @@ module Google
         # @!attribute [rw] table
         #   @return [::Google::Cloud::Dlp::V2::Table]
         #     Structured content for inspection. See
-        #     https://cloud.google.com/sensitive-data-protection/docs/inspecting-text#inspecting_a_table
+        #     https://docs.cloud.google.com/sensitive-data-protection/docs/inspecting-text#inspecting_a_table
         #     to learn more.
         #
         #     Note: The following fields are mutually exclusive: `table`, `value`, `byte_item`, `conversation`, `batch_content_item`. If a field in that set is populated, all other fields in the set will automatically be cleared.
@@ -512,6 +512,9 @@ module Google
         # @!attribute [rw] properties
         #   @return [::Array<::Google::Cloud::Dlp::V2::KeyValueMetadataProperty>]
         #     User provided key-value pairs of content metadata.
+        # @!attribute [rw] file_labels
+        #   @return [::Array<::Google::Cloud::Dlp::V2::FileLabel>]
+        #     Optional. The file labels associated with the content.
         class ContentMetadata
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -584,7 +587,7 @@ module Google
         end
         # Structured content to inspect. Up to 50,000 `Value`s per request allowed. See
-        # https://cloud.google.com/sensitive-data-protection/docs/inspecting-structured-text#inspecting_a_table
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/inspecting-structured-text#inspecting_a_table
         # to learn more.
         # @!attribute [rw] headers
         #   @return [::Array<::Google::Cloud::Dlp::V2::FieldId>]
@@ -618,6 +621,57 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
+        # Represents a file label.
+        # @!attribute [rw] sensitivity_label
+        #   @return [::Google::Cloud::Dlp::V2::FileLabel::SensitivityLabelMetadata]
+        #     Sensitivity labels published by Microsoft.
+        #
+        #     Note: The following fields are mutually exclusive: `sensitivity_label`, `google_drive_label`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+        # @!attribute [rw] google_drive_label
+        #   @return [::Google::Cloud::Dlp::V2::FileLabel::GoogleDriveLabelMetadata]
+        #     Google Drive labels published by Google.
+        #
+        #     Note: The following fields are mutually exclusive: `google_drive_label`, `sensitivity_label`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+        class FileLabel
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+          # Sensitivity labels published by Microsoft.
+          # @!attribute [rw] guid
+          #   @return [::String]
+          #     Required. The GUID of the sensitivity label.
+          class SensitivityLabelMetadata
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+          # Google Drive labels published by Google.
+          # @!attribute [rw] label_id
+          #   @return [::String]
+          #     The [label
+          #     ID](https://developers.google.com/workspace/drive/labels/guides/overview)
+          #     of the Google Drive label.
+          # @!attribute [rw] label_fields
+          #   @return [::Array<::Google::Cloud::Dlp::V2::FileLabel::GoogleDriveLabelMetadata::LabelFieldMetadata>]
+          #     The field values of the Google Drive label
+          class GoogleDriveLabelMetadata
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+            # The field values of the Google Drive label
+            # @!attribute [rw] id
+            #   @return [::String]
+            #     The identifier of the Label Field.
+            # @!attribute [rw] value
+            #   @return [::Google::Cloud::Dlp::V2::Value]
+            #     The value of the Label Field.
+            class LabelFieldMetadata
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+            end
+          end
+        end
         # All the findings for a single scanned item.
         # @!attribute [rw] findings
         #   @return [::Array<::Google::Cloud::Dlp::V2::Finding>]
@@ -979,7 +1033,8 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
-        # Bounding box encompassing detected text within an image.
+        # Bounding box encompassing detected text within an image. Coordinates are in
+        # pixels and strictly within the image or frame bounds.
         # @!attribute [rw] top
         #   @return [::Integer]
         #     Top coordinate of the bounding box. (0,0) is upper left.
@@ -1005,7 +1060,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -1120,7 +1175,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -1193,7 +1248,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -1266,7 +1321,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -1399,18 +1454,18 @@ module Google
         # @!attribute [rw] requested_options
         #   @return [::Google::Cloud::Dlp::V2::InspectDataSourceDetails::RequestedOptions]
         #     The configuration used for this job.
-        # @!attribute [rw] result
+        # @!attribute [r] result
         #   @return [::Google::Cloud::Dlp::V2::InspectDataSourceDetails::Result]
-        #     A summary of the outcome of this inspection job.
+        #     Output only. A summary of the outcome of this inspection job.
         class InspectDataSourceDetails
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
           # Snapshot of the inspection configuration.
-          # @!attribute [rw] snapshot_inspect_template
+          # @!attribute [r] snapshot_inspect_template
           #   @return [::Google::Cloud::Dlp::V2::InspectTemplate]
-          #     If run with an InspectTemplate, a snapshot of its state at the time of
-          #     this run.
+          #     Output only. If run with an InspectTemplate, a snapshot of its state at
+          #     the time of this run.
           # @!attribute [rw] job_config
           #   @return [::Google::Cloud::Dlp::V2::InspectJobConfig]
           #     Inspect config.
@@ -1911,7 +1966,7 @@ module Google
         end
         # Configuration for a risk analysis job. See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-risk-analysis
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-risk-analysis
         # to learn more.
         # @!attribute [rw] privacy_metric
         #   @return [::Google::Cloud::Dlp::V2::PrivacyMetric]
@@ -2216,34 +2271,34 @@ module Google
         # @!attribute [rw] requested_source_table
         #   @return [::Google::Cloud::Dlp::V2::BigQueryTable]
         #     Input dataset to compute metrics over.
-        # @!attribute [rw] numerical_stats_result
+        # @!attribute [r] numerical_stats_result
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails::NumericalStatsResult]
-        #     Numerical stats result
+        #     Output only. Numerical stats result
         #
         #     Note: The following fields are mutually exclusive: `numerical_stats_result`, `categorical_stats_result`, `k_anonymity_result`, `l_diversity_result`, `k_map_estimation_result`, `delta_presence_estimation_result`. If a field in that set is populated, all other fields in the set will automatically be cleared.
-        # @!attribute [rw] categorical_stats_result
+        # @!attribute [r] categorical_stats_result
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails::CategoricalStatsResult]
-        #     Categorical stats result
+        #     Output only. Categorical stats result
         #
         #     Note: The following fields are mutually exclusive: `categorical_stats_result`, `numerical_stats_result`, `k_anonymity_result`, `l_diversity_result`, `k_map_estimation_result`, `delta_presence_estimation_result`. If a field in that set is populated, all other fields in the set will automatically be cleared.
-        # @!attribute [rw] k_anonymity_result
+        # @!attribute [r] k_anonymity_result
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails::KAnonymityResult]
-        #     K-anonymity result
+        #     Output only. K-anonymity result
         #
         #     Note: The following fields are mutually exclusive: `k_anonymity_result`, `numerical_stats_result`, `categorical_stats_result`, `l_diversity_result`, `k_map_estimation_result`, `delta_presence_estimation_result`. If a field in that set is populated, all other fields in the set will automatically be cleared.
-        # @!attribute [rw] l_diversity_result
+        # @!attribute [r] l_diversity_result
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails::LDiversityResult]
-        #     L-divesity result
+        #     Output only. L-divesity result
         #
         #     Note: The following fields are mutually exclusive: `l_diversity_result`, `numerical_stats_result`, `categorical_stats_result`, `k_anonymity_result`, `k_map_estimation_result`, `delta_presence_estimation_result`. If a field in that set is populated, all other fields in the set will automatically be cleared.
-        # @!attribute [rw] k_map_estimation_result
+        # @!attribute [r] k_map_estimation_result
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails::KMapEstimationResult]
-        #     K-map result
+        #     Output only. K-map result
         #
         #     Note: The following fields are mutually exclusive: `k_map_estimation_result`, `numerical_stats_result`, `categorical_stats_result`, `k_anonymity_result`, `l_diversity_result`, `delta_presence_estimation_result`. If a field in that set is populated, all other fields in the set will automatically be cleared.
-        # @!attribute [rw] delta_presence_estimation_result
+        # @!attribute [r] delta_presence_estimation_result
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails::DeltaPresenceEstimationResult]
-        #     Delta-presence result
+        #     Output only. Delta-presence result
         #
         #     Note: The following fields are mutually exclusive: `delta_presence_estimation_result`, `numerical_stats_result`, `categorical_stats_result`, `k_anonymity_result`, `l_diversity_result`, `k_map_estimation_result`. If a field in that set is populated, all other fields in the set will automatically be cleared.
         # @!attribute [rw] requested_options
@@ -2866,7 +2921,8 @@ module Google
         # Outputs a base64 encoded representation of the hashed output
         # (for example, L7k0BHmF1ha5U3NfGykjro4xWi1MPVQPjhMAZbSV9mM=).
         # Currently, only string and integer values can be hashed.
-        # See https://cloud.google.com/sensitive-data-protection/docs/pseudonymization
+        # See
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/pseudonymization
         # to learn more.
         # @!attribute [rw] crypto_key
         #   @return [::Google::Cloud::Dlp::V2::CryptoKey]
@@ -2956,8 +3012,8 @@ module Google
         # @!attribute [rw] word_list
         #   @return [::Google::Cloud::Dlp::V2::CustomInfoType::Dictionary::WordList]
         #     A list of words to select from for random replacement. The
-        #     [limits](https://cloud.google.com/sensitive-data-protection/limits) page
-        #     contains details about the size limits of dictionaries.
+        #     [limits](https://docs.cloud.google.com/sensitive-data-protection/limits)
+        #     page contains details about the size limits of dictionaries.
         class ReplaceDictionaryConfig
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -3081,8 +3137,8 @@ module Google
         # be transformed to match the type of the bound before comparing.
         #
         # See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-bucketing to
-        # learn more.
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-bucketing
+        # to learn more.
         # @!attribute [rw] lower_bound
         #   @return [::Google::Cloud::Dlp::V2::Value]
         #     Required. Lower bound value of buckets. All values less than `lower_bound`
@@ -3114,8 +3170,8 @@ module Google
         # will first attempt converting the type of the data to be transformed to match
         # the type of the bound before comparing.
         # See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-bucketing to
-        # learn more.
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-bucketing
+        # to learn more.
         # @!attribute [rw] buckets
         #   @return [::Array<::Google::Cloud::Dlp::V2::BucketingConfig::Bucket>]
         #     Set of buckets. Ranges must be non-overlapping.
@@ -3148,8 +3204,8 @@ module Google
         # will be replaced with the same surrogate. Identifiers must be at least two
         # characters long. In the case that the identifier is the empty string, it will
         # be skipped. See
-        # https://cloud.google.com/sensitive-data-protection/docs/pseudonymization to
-        # learn more.
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/pseudonymization
+        # to learn more.
         #
         # Note: We recommend using  CryptoDeterministicConfig for all use cases which
         # do not require preserving the input alphabet space and size, plus warrant
@@ -3216,7 +3272,7 @@ module Google
         #
         #     This annotation identifies the surrogate when inspecting content using the
         #     custom infoType
-        #     [`SurrogateType`](https://cloud.google.com/sensitive-data-protection/docs/reference/rest/v2/InspectConfig#surrogatetype).
+        #     [`SurrogateType`](https://docs.cloud.google.com/sensitive-data-protection/docs/reference/rest/v2/InspectConfig#surrogatetype).
         #     This facilitates reversal of the surrogate when it occurs in free text.
         #
         #     In order for inspection to work properly, the name of this infoType must
@@ -3312,7 +3368,7 @@ module Google
         # dlp.kms.encrypt
         #
         # For more information, see [Creating a wrapped key]
-        # (https://cloud.google.com/sensitive-data-protection/docs/create-wrapped-key).
+        # (https://docs.cloud.google.com/sensitive-data-protection/docs/create-wrapped-key).
         #
         # Note: When you use Cloud KMS for cryptographic operations,
         # [charges apply](https://cloud.google.com/kms/pricing).
@@ -3329,7 +3385,7 @@ module Google
         # Shifts dates by random number of days, with option to be consistent for the
         # same context. See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-date-shifting
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-date-shifting
         # to learn more.
         # @!attribute [rw] upper_bound_days
         #   @return [::Integer]
@@ -3749,8 +3805,8 @@ module Google
         # The inspectTemplate contains a configuration (set of types of sensitive data
         # to be detected) to be used anywhere you otherwise would normally specify
         # InspectConfig. See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-templates to
-        # learn more.
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-templates
+        # to learn more.
         # @!attribute [r] name
         #   @return [::String]
         #     Output only. The template name.
@@ -3773,6 +3829,12 @@ module Google
         # @!attribute [rw] inspect_config
         #   @return [::Google::Cloud::Dlp::V2::InspectConfig]
         #     The core content of the template. Configuration of the scanning process.
+        # @!attribute [rw] allow_limited_availability_info_types
+        #   @return [::Boolean]
+        #     Optional. Enables the use of [limited-availability built-in
+        #     infoTypes](https://docs.cloud.google.com/sensitive-data-protection/docs/infotypes-reference#limited-availability-infotypes)
+        #     in inspect_config. These infoTypes are supported only in specific regions
+        #     and can cause scanning errors if used elsewhere.
         class InspectTemplate
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -3780,8 +3842,8 @@ module Google
         # DeidentifyTemplates contains instructions on how to de-identify content.
         # See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-templates to
-        # learn more.
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-templates
+        # to learn more.
         # @!attribute [r] name
         #   @return [::String]
         #     Output only. The template name.
@@ -3840,12 +3902,12 @@ module Google
         # Contains a configuration to make API calls on a repeating basis.
         # See
-        # https://cloud.google.com/sensitive-data-protection/docs/concepts-job-triggers
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-job-triggers
         # to learn more.
-        # @!attribute [rw] name
+        # @!attribute [r] name
         #   @return [::String]
-        #     Unique resource name for the triggeredJob, assigned by the service when the
-        #     triggeredJob is created, for example
+        #     Output only. Unique resource name for the triggeredJob, assigned by the
+        #     service when the triggeredJob is created, for example
         #     `projects/dlp-test-project/jobTriggers/53234423`.
         # @!attribute [rw] display_name
         #   @return [::String]
@@ -3919,7 +3981,8 @@ module Google
         end
         # A task to execute on the completion of a job.
-        # See https://cloud.google.com/sensitive-data-protection/docs/concepts-actions
+        # See
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/concepts-actions
         # to learn more.
         # @!attribute [rw] save_findings
         #   @return [::Google::Cloud::Dlp::V2::Action::SaveFindings]
@@ -3958,7 +4021,7 @@ module Google
         #   @return [::Google::Cloud::Dlp::V2::Action::JobNotificationEmails]
         #     Sends an email when the job completes. The email goes to IAM project
         #     owners and technical [Essential
-        #     Contacts](https://cloud.google.com/resource-manager/docs/managing-notification-contacts).
+        #     Contacts](https://docs.cloud.google.com/resource-manager/docs/managing-notification-contacts).
         #
         #     Note: The following fields are mutually exclusive: `job_notification_emails`, `save_findings`, `pub_sub`, `publish_summary_to_cscc`, `publish_findings_to_cloud_data_catalog`, `publish_findings_to_dataplex_catalog`, `deidentify`, `publish_to_stackdriver`. If a field in that set is populated, all other fields in the set will automatically be cleared.
         # @!attribute [rw] publish_to_stackdriver
@@ -3985,7 +4048,7 @@ module Google
           # Publish a message into a given Pub/Sub topic when DlpJob has completed. The
           # message contains a single field, `DlpJobName`, which is equal to the
           # finished job's
-          # [`DlpJob.name`](https://cloud.google.com/sensitive-data-protection/docs/reference/rest/v2/projects.dlpJobs#DlpJob).
+          # [`DlpJob.name`](https://docs.cloud.google.com/sensitive-data-protection/docs/reference/rest/v2/projects.dlpJobs#DlpJob).
           # Compatible with: Inspect, Risk
           # @!attribute [rw] topic
           #   @return [::String]
@@ -4037,7 +4100,7 @@ module Google
           # Publish findings of a DlpJob to Dataplex Universal Catalog as a
           # `sensitive-data-protection-job-result` aspect. For more information,
           # see [Send inspection results to Dataplex Universal Catalog as
-          # aspects](https://cloud.google.com/sensitive-data-protection/docs/add-aspects-inspection-job).
+          # aspects](https://docs.cloud.google.com/sensitive-data-protection/docs/add-aspects-inspection-job).
           #
           # Aspects are stored in Dataplex Universal Catalog storage and are
           # governed by service-specific policies for Dataplex Universal Catalog. For
@@ -4150,7 +4213,7 @@ module Google
           # Sends an email when the job completes. The email goes to IAM project owners
           # and technical [Essential
-          # Contacts](https://cloud.google.com/resource-manager/docs/managing-notification-contacts).
+          # Contacts](https://docs.cloud.google.com/resource-manager/docs/managing-notification-contacts).
           class JobNotificationEmails
             include ::Google::Protobuf::MessageExts
             extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -4204,7 +4267,7 @@ module Google
         #
         #     The format of this value varies depending on the scope of the request
         #     (project or organization) and whether you have [specified a processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -4272,7 +4335,7 @@ module Google
         #
         #     The format of this value varies depending on the scope of the request
         #     (project or organization) and whether you have [specified a processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -4350,7 +4413,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -4545,7 +4608,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -4589,7 +4652,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -4724,7 +4787,7 @@ module Google
         #     Publishes generated data profiles to Google Security Operations.
         #     For more information, see [Use Sensitive Data Protection data in
         #     context-aware
-        #     analytics](https://cloud.google.com/chronicle/docs/detection/usecase-dlp-high-risk-user-download).
+        #     analytics](https://docs.cloud.google.com/chronicle/docs/detection/usecase-dlp-high-risk-user-download).
         #
         #     Note: The following fields are mutually exclusive: `publish_to_chronicle`, `export_data`, `pub_sub_notification`, `publish_to_scc`, `tag_resources`, `publish_to_dataplex_catalog`. If a field in that set is populated, all other fields in the set will automatically be cleared.
         # @!attribute [rw] publish_to_scc
@@ -4761,9 +4824,9 @@ module Google
           #       generated and the dataset and table are created, the discovery scan
           #       configuration will be updated with the dataset and table names.
           #     * See [Analyze data profiles stored in
-          #     BigQuery](https://cloud.google.com/sensitive-data-protection/docs/analyze-data-profiles).
+          #     BigQuery](https://docs.cloud.google.com/sensitive-data-protection/docs/analyze-data-profiles).
           #     * See [Sample queries for your BigQuery
-          #     table](https://cloud.google.com/sensitive-data-protection/docs/analyze-data-profiles#sample_sql_queries).
+          #     table](https://docs.cloud.google.com/sensitive-data-protection/docs/analyze-data-profiles#sample_sql_queries).
           #     *  Data is inserted using [streaming
           #        insert](https://cloud.google.com/blog/products/bigquery/life-of-a-bigquery-streaming-insert)
           #        and so data may be in the buffer for a period of time after the
@@ -4774,7 +4837,7 @@ module Google
           #        notification.
           #      * The best practice is to use the same table for an entire organization
           #        so that you can take advantage of the [provided Data Studio
-          #        reports](https://cloud.google.com/sensitive-data-protection/docs/analyze-data-profiles#use_a_premade_report).
+          #        reports](https://docs.cloud.google.com/sensitive-data-protection/docs/analyze-data-profiles#use_a_premade_report).
           #        If you use VPC Service Controls to define security perimeters, then
           #        you must use a separate table for each boundary.
           # @!attribute [rw] sample_findings_table
@@ -4846,7 +4909,8 @@ module Google
           # Create Dataplex Universal Catalog aspects for profiled resources with the
           # aspect type Sensitive Data Protection Profile. To learn more about aspects,
-          # see https://cloud.google.com/sensitive-data-protection/docs/add-aspects.
+          # see
+          # https://docs.cloud.google.com/sensitive-data-protection/docs/add-aspects.
           # @!attribute [rw] lower_data_risk_to_low
           #   @return [::Boolean]
           #     Whether creating a Dataplex Universal Catalog aspect for a profiled
@@ -4861,10 +4925,10 @@ module Google
           end
           # If set, attaches the [tags]
-          # (https://cloud.google.com/resource-manager/docs/tags/tags-overview)
+          # (https://docs.cloud.google.com/resource-manager/docs/tags/tags-overview)
           # provided to profiled resources. Tags support [access
-          # control](https://cloud.google.com/iam/docs/tags-access-control). You can
-          # conditionally grant or deny access to a resource based on whether the
+          # control](https://docs.cloud.google.com/iam/docs/tags-access-control). You
+          # can conditionally grant or deny access to a resource based on whether the
           # resource has a specific tag.
           # @!attribute [rw] tag_conditions
           #   @return [::Array<::Google::Cloud::Dlp::V2::DataProfileAction::TagResources::TagCondition>]
@@ -4881,11 +4945,11 @@ module Google
           #   @return [::Boolean]
           #     Whether applying a tag to a resource should lower the risk of the profile
           #     for that resource. For example, in conjunction with an [IAM deny
-          #     policy](https://cloud.google.com/iam/docs/deny-overview), you can deny
-          #     all principals a permission if a tag value is present, mitigating the
-          #     risk of the resource. This also lowers the data risk of resources at the
-          #     lower levels of the resource hierarchy. For example, reducing the data
-          #     risk of a table data profile also reduces the data risk of the
+          #     policy](https://docs.cloud.google.com/iam/docs/deny-overview), you can
+          #     deny all principals a permission if a tag value is present, mitigating
+          #     the risk of the resource. This also lowers the data risk of resources at
+          #     the lower levels of the resource hierarchy. For example, reducing the
+          #     data risk of a table data profile also reduces the data risk of the
           #     constituent column data profiles.
           class TagResources
             include ::Google::Protobuf::MessageExts
@@ -4949,7 +5013,7 @@ module Google
         # @!attribute [rw] infotype
         #   @return [::Google::Cloud::Dlp::V2::InfoType]
         #     The [type of
-        #     content](https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference)
+        #     content](https://docs.cloud.google.com/sensitive-data-protection/docs/infotypes-reference)
         #     that might have been found.
         # @!attribute [rw] quote_info
         #   @return [::Google::Cloud::Dlp::V2::QuoteInfo]
@@ -5016,7 +5080,7 @@ module Google
         #
         # The generated data profiles are retained according to the
         # [data retention policy]
-        # (https://cloud.google.com/sensitive-data-protection/docs/data-profiles#retention).
+        # (https://docs.cloud.google.com/sensitive-data-protection/docs/data-profiles#retention).
         # @!attribute [rw] location
         #   @return [::Google::Cloud::Dlp::V2::DataProfileLocation]
         #     The data to scan.
@@ -5045,7 +5109,7 @@ module Google
         #     scanned.
         #
         #     For more information, see
-        #     https://cloud.google.com/sensitive-data-protection/docs/data-profiles#data-residency.
+        #     https://docs.cloud.google.com/sensitive-data-protection/docs/data-profiles#data-residency.
         # @!attribute [rw] data_profile_actions
         #   @return [::Array<::Google::Cloud::Dlp::V2::DataProfileAction>]
         #     Actions to execute at the completion of the job.
@@ -5122,11 +5186,11 @@ module Google
         #
         # The generated data profiles are retained according to the
         # [data retention policy]
-        # (https://cloud.google.com/sensitive-data-protection/docs/data-profiles#retention).
-        # @!attribute [rw] name
+        # (https://docs.cloud.google.com/sensitive-data-protection/docs/data-profiles#retention).
+        # @!attribute [r] name
         #   @return [::String]
-        #     Unique resource name for the DiscoveryConfig, assigned by the service when
-        #     the DiscoveryConfig is created, for example
+        #     Output only. Unique resource name for the DiscoveryConfig, assigned by the
+        #     service when the DiscoveryConfig is created, for example
         #     `projects/dlp-test-project/locations/global/discoveryConfigs/53234423`.
         # @!attribute [rw] display_name
         #   @return [::String]
@@ -5154,7 +5218,7 @@ module Google
         #     scanned.
         #
         #     For more information, see
-        #     https://cloud.google.com/sensitive-data-protection/docs/data-profiles#data-residency.
+        #     https://docs.cloud.google.com/sensitive-data-protection/docs/data-profiles#data-residency.
         # @!attribute [rw] actions
         #   @return [::Array<::Google::Cloud::Dlp::V2::DataProfileAction>]
         #     Actions to execute at the completion of scanning.
@@ -5673,7 +5737,7 @@ module Google
         # No inspect template should be included in the discovery config for a
         # security benchmarks scan. Instead, the built-in list of secrets and
         # credentials infoTypes will be used (see
-        # https://cloud.google.com/sensitive-data-protection/docs/infotypes-reference#credentials_and_secrets).
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/infotypes-reference#credentials_and_secrets).
         #
         # Credentials and secrets discovered will be reported as vulnerabilities to
         # Security Command Center.
@@ -5753,7 +5817,7 @@ module Google
         #     For a resource to match the tag filters, the resource must have all of the
         #     provided tags attached. Tags refer to Resource Manager tags bound to the
         #     resource or its ancestors. For more information, see [Manage
-        #     schedules](https://cloud.google.com/sensitive-data-protection/docs/profile-project-cloud-storage#manage-schedules).
+        #     schedules](https://docs.cloud.google.com/sensitive-data-protection/docs/profile-project-cloud-storage#manage-schedules).
         class FileStoreCollection
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -5847,8 +5911,8 @@ module Google
           extend ::Google::Protobuf::MessageExts::ClassMethods
           # The attribute of an object. See
-          # https://cloud.google.com/storage/docs/storage-classes for more information
-          # on storage classes.
+          # https://docs.cloud.google.com/storage/docs/storage-classes for more
+          # information on storage classes.
           module CloudStorageObjectAttribute
             # Unused.
             CLOUD_STORAGE_OBJECT_ATTRIBUTE_UNSPECIFIED = 0
@@ -5890,12 +5954,14 @@ module Google
             # Scan buckets regardless of the attribute.
             ALL_SUPPORTED_BUCKETS = 1
-            # Buckets with [Autoclass](https://cloud.google.com/storage/docs/autoclass)
+            # Buckets with
+            # [Autoclass](https://docs.cloud.google.com/storage/docs/autoclass)
             # disabled. Only one of
             # AUTOCLASS_DISABLED or AUTOCLASS_ENABLED should be set.
             AUTOCLASS_DISABLED = 2
-            # Buckets with [Autoclass](https://cloud.google.com/storage/docs/autoclass)
+            # Buckets with
+            # [Autoclass](https://docs.cloud.google.com/storage/docs/autoclass)
             # enabled. Only one of
             # AUTOCLASS_DISABLED or AUTOCLASS_ENABLED should be set. Scanning
             # Autoclass-enabled buckets can affect object storage classes.
@@ -5924,7 +5990,7 @@ module Google
         # Target used to match against for discovery of resources from other clouds.
         # An [AWS connector in Security Command Center
-        # (Enterprise](https://cloud.google.com/security-command-center/docs/connect-scc-to-aws)
+        # (Enterprise](https://docs.cloud.google.com/security-command-center/docs/connect-scc-to-aws)
         # is required to use this feature.
         # @!attribute [rw] data_source_type
         #   @return [::Google::Cloud::Dlp::V2::DataSourceType]
@@ -6334,15 +6400,15 @@ module Google
         end
         # Combines all of the information about a DLP job.
-        # @!attribute [rw] name
+        # @!attribute [r] name
         #   @return [::String]
-        #     The server-assigned name.
+        #     Output only. The server-assigned name.
         # @!attribute [rw] type
         #   @return [::Google::Cloud::Dlp::V2::DlpJobType]
         #     The type of job.
-        # @!attribute [rw] state
+        # @!attribute [r] state
         #   @return [::Google::Cloud::Dlp::V2::DlpJob::JobState]
-        #     State of a job.
+        #     Output only. State of a job.
         # @!attribute [rw] risk_details
         #   @return [::Google::Cloud::Dlp::V2::AnalyzeDataSourceRiskDetails]
         #     Results from analyzing risk of a data source.
@@ -6353,28 +6419,28 @@ module Google
         #     Results from inspecting a data source.
         #
         #     Note: The following fields are mutually exclusive: `inspect_details`, `risk_details`. If a field in that set is populated, all other fields in the set will automatically be cleared.
-        # @!attribute [rw] create_time
+        # @!attribute [r] create_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Time when the job was created.
-        # @!attribute [rw] start_time
+        #     Output only. Time when the job was created.
+        # @!attribute [r] start_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Time when the job started.
-        # @!attribute [rw] end_time
+        #     Output only. Time when the job started.
+        # @!attribute [r] end_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Time when the job finished.
-        # @!attribute [rw] last_modified
+        #     Output only. Time when the job finished.
+        # @!attribute [r] last_modified
         #   @return [::Google::Protobuf::Timestamp]
-        #     Time when the job was last modified by the system.
-        # @!attribute [rw] job_trigger_name
+        #     Output only. Time when the job was last modified by the system.
+        # @!attribute [r] job_trigger_name
         #   @return [::String]
-        #     If created by a job trigger, the resource name of the trigger that
-        #     instantiated the job.
-        # @!attribute [rw] errors
+        #     Output only. If created by a job trigger, the resource name of the trigger
+        #     that instantiated the job.
+        # @!attribute [r] errors
         #   @return [::Array<::Google::Cloud::Dlp::V2::Error>]
-        #     A stream of errors encountered running the job.
-        # @!attribute [rw] action_details
+        #     Output only. A stream of errors encountered running the job.
+        # @!attribute [r] action_details
         #   @return [::Array<::Google::Cloud::Dlp::V2::ActionDetails>]
-        #     Events that should occur after the job has completed.
+        #     Output only. Events that should occur after the job has completed.
         class DlpJob
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -6425,7 +6491,7 @@ module Google
         #
         #     The format of this value varies depending on whether you have [specified a
         #     processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -6547,7 +6613,7 @@ module Google
         #
         #     The format of this value varies depending on the scope of the request
         #     (project or organization) and whether you have [specified a processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -6616,7 +6682,7 @@ module Google
         #
         #     The format of this value varies depending on the scope of the request
         #     (project or organization) and whether you have [specified a processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -6691,10 +6757,10 @@ module Google
         # Configuration for a custom dictionary created from a data source of any size
         # up to the maximum size defined in the
-        # [limits](https://cloud.google.com/sensitive-data-protection/limits) page. The
-        # artifacts of dictionary creation are stored in the specified Cloud Storage
-        # location. Consider using `CustomInfoType.Dictionary` for smaller dictionaries
-        # that satisfy the size requirements.
+        # [limits](https://docs.cloud.google.com/sensitive-data-protection/limits)
+        # page. The artifacts of dictionary creation are stored in the specified Cloud
+        # Storage location. Consider using `CustomInfoType.Dictionary` for smaller
+        # dictionaries that satisfy the size requirements.
         # @!attribute [rw] output_path
         #   @return [::Google::Cloud::Dlp::V2::CloudStoragePath]
         #     Location to store dictionary artifacts in Cloud Storage. These files
@@ -6727,7 +6793,7 @@ module Google
         # Configuration for stored infoTypes. All fields and subfield are provided
         # by the user. For more information, see
-        # https://cloud.google.com/sensitive-data-protection/docs/creating-custom-infotypes.
+        # https://docs.cloud.google.com/sensitive-data-protection/docs/creating-custom-infotypes.
         # @!attribute [rw] display_name
         #   @return [::String]
         #     Display name of the StoredInfoType (max 256 characters).
@@ -6768,20 +6834,20 @@ module Google
         # @!attribute [rw] config
         #   @return [::Google::Cloud::Dlp::V2::StoredInfoTypeConfig]
         #     StoredInfoType configuration.
-        # @!attribute [rw] create_time
+        # @!attribute [r] create_time
         #   @return [::Google::Protobuf::Timestamp]
-        #     Create timestamp of the version. Read-only, determined by the system
-        #     when the version is created.
-        # @!attribute [rw] state
+        #     Output only. Create timestamp of the version. Read-only, determined by the
+        #     system when the version is created.
+        # @!attribute [r] state
         #   @return [::Google::Cloud::Dlp::V2::StoredInfoTypeState]
-        #     Stored info type version state. Read-only, updated by the system
-        #     during dictionary creation.
-        # @!attribute [rw] errors
+        #     Output only. Stored info type version state. Read-only, updated by the
+        #     system during dictionary creation.
+        # @!attribute [r] errors
         #   @return [::Array<::Google::Cloud::Dlp::V2::Error>]
-        #     Errors that occurred when creating this storedInfoType version, or
-        #     anomalies detected in the storedInfoType data that render it unusable. Only
-        #     the five most recent errors will be displayed, with the most recent error
-        #     appearing first.
+        #     Output only. Errors that occurred when creating this storedInfoType
+        #     version, or anomalies detected in the storedInfoType data that render it
+        #     unusable. Only the five most recent errors will be displayed, with the most
+        #     recent error appearing first.
         #
         #     For example, some of the data for stored custom dictionaries is put in
         #     the user's Cloud Storage bucket, and if this data is modified or
@@ -6791,9 +6857,9 @@ module Google
         #     use the UpdateStoredInfoType API method to create another version of the
         #     storedInfoType to continue using it, reusing the same `config` if it was
         #     not the source of the error.
-        # @!attribute [rw] stats
+        # @!attribute [r] stats
         #   @return [::Google::Cloud::Dlp::V2::StoredInfoTypeStats]
-        #     Statistics about this storedInfoType version.
+        #     Output only. Statistics about this storedInfoType version.
         class StoredInfoTypeVersion
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -6801,9 +6867,9 @@ module Google
         # StoredInfoType resource message that contains information about the current
         # version and any pending updates.
-        # @!attribute [rw] name
+        # @!attribute [r] name
         #   @return [::String]
-        #     Resource name.
+        #     Output only. Resource name.
         # @!attribute [rw] current_version
         #   @return [::Google::Cloud::Dlp::V2::StoredInfoTypeVersion]
         #     Current version of the stored info type.
@@ -6823,7 +6889,7 @@ module Google
         #
         #     The format of this value varies depending on the scope of the request
         #     (project or organization) and whether you have [specified a processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -6893,7 +6959,7 @@ module Google
         #
         #     The format of this value varies depending on the scope of the request
         #     (project or organization) and whether you have [specified a processing
-        #     location](https://cloud.google.com/sensitive-data-protection/docs/specifying-location):
+        #     location](https://docs.cloud.google.com/sensitive-data-protection/docs/specifying-location):
         #
         #     + Projects scope, location specified:
         #       `projects/{project_id}/locations/{location_id}`
@@ -7466,7 +7532,7 @@ module Google
         # @!attribute [rw] dataset_location
         #   @return [::String]
         #     If supported, the location where the dataset's data is stored.
-        #     See https://cloud.google.com/bigquery/docs/locations for supported
+        #     See https://docs.cloud.google.com/bigquery/docs/locations for supported
         #     locations.
         # @!attribute [rw] dataset_id
         #   @return [::String]
@@ -7648,7 +7714,7 @@ module Google
         # @!attribute [rw] dataset_location
         #   @return [::String]
         #     If supported, the location where the dataset's data is stored.
-        #     See https://cloud.google.com/bigquery/docs/locations for supported
+        #     See https://docs.cloud.google.com/bigquery/docs/locations for supported
         #     BigQuery locations.
         # @!attribute [rw] dataset_id
         #   @return [::String]
@@ -7803,7 +7869,7 @@ module Google
         #     The location of the file store.
         #
         #     * Cloud Storage:
-        #     https://cloud.google.com/storage/docs/locations#available-locations
+        #     https://docs.cloud.google.com/storage/docs/locations#available-locations
         #     * Amazon S3:
         #     https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints
         # @!attribute [rw] data_storage_locations
@@ -8450,8 +8516,8 @@ module Google
         # Use IAM authentication to connect. This requires the Cloud SQL IAM feature
         # to be enabled on the instance, which is not the default for Cloud SQL.
-        # See https://cloud.google.com/sql/docs/postgres/authentication and
-        # https://cloud.google.com/sql/docs/mysql/authentication.
+        # See https://docs.cloud.google.com/sql/docs/postgres/authentication and
+        # https://docs.cloud.google.com/sql/docs/mysql/authentication.
         class CloudSqlIamCredential
           include ::Google::Protobuf::MessageExts
           extend ::Google::Protobuf::MessageExts::ClassMethods
@@ -8688,12 +8754,12 @@ module Google
             EMBEDDING = 7
             # The [Cloud SQL Vertex
-            # AI](https://cloud.google.com/sql/docs/postgres/integrate-cloud-sql-with-vertex-ai)
+            # AI](https://docs.cloud.google.com/sql/docs/postgres/integrate-cloud-sql-with-vertex-ai)
             # plugin is installed on the database.
             VERTEX_PLUGIN = 3
             # Support for [Cloud SQL vector
-            # embeddings](https://cloud.google.com/sql/docs/mysql/enable-vector-search)
+            # embeddings](https://docs.cloud.google.com/sql/docs/mysql/enable-vector-search)
             # is enabled on the database.
             VECTOR_PLUGIN = 4
@@ -8706,6 +8772,252 @@ module Google
           end
         end
+        # Request message for CreateContentPolicy.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. Parent resource name.
+        #
+        #     The format of this value varies depending on the scope of the request
+        #     (project):
+        #
+        #     + Projects scope:
+        #       `projects/{project_id}/locations/{location_id}`
+        # @!attribute [rw] content_policy
+        #   @return [::Google::Cloud::Dlp::V2::ContentPolicy]
+        #     Required. The content_policy resource.
+        # @!attribute [rw] content_policy_id
+        #   @return [::String]
+        #     Optional. The content policy ID can contain uppercase and lowercase
+        #     letters, numbers, and hyphens; that is, it must match the regular
+        #     expression:
+        #       `[a-zA-Z\d-_]+`.
+        #     The maximum length is 100 characters. If empty, the system will generate
+        #     a random id.
+        class CreateContentPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+        # Request message for GetContentPolicy.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Resource name in the format:
+        #     `projects/{project}/locations/{location}/contentPolicies/{content_policy}`.
+        class GetContentPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+        # Request message for ListContentPolicies.
+        # @!attribute [rw] parent
+        #   @return [::String]
+        #     Required. Resource name of the project,
+        #     for example, `projects/project-id/locations/asia`.
+        # @!attribute [rw] page_size
+        #   @return [::Integer]
+        #     Optional. Number of results per page, max 1000.
+        # @!attribute [rw] page_token
+        #   @return [::String]
+        #     Optional. Page token from a previous page to return the next set of
+        #     results. If set, all other request fields must match the original request.
+        class ListContentPoliciesRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+        # Response message for ListContentPolicies.
+        # @!attribute [rw] content_policies
+        #   @return [::Array<::Google::Cloud::Dlp::V2::ContentPolicy>]
+        #     List of content policies.
+        # @!attribute [rw] next_page_token
+        #   @return [::String]
+        #     Token to retrieve the next page of results. An empty value means there are
+        #     no more results.
+        class ListContentPoliciesResponse
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+        # Request message for UpdateContentPolicy.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Resource name in the format:
+        #     `projects/{project}/locations/{location}/contentPolicies/{content_policy}`.
+        # @!attribute [rw] content_policy
+        #   @return [::Google::Cloud::Dlp::V2::ContentPolicy]
+        #     Required. The content_policy with new values for the relevant fields.
+        # @!attribute [rw] update_mask
+        #   @return [::Google::Protobuf::FieldMask]
+        #     Optional. Mask to control which fields get updated.
+        class UpdateContentPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+        # Request message for DeleteContentPolicy.
+        # @!attribute [rw] name
+        #   @return [::String]
+        #     Required. Resource name of the ContentPolicy to be deleted, in the format:
+        #     `projects/{project}/locations/{location}/contentPolicies/{content_policy}`.
+        class DeleteContentPolicyRequest
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+        # A policy to apply to content based on its inspection findings.
+        # @!attribute [r] name
+        #   @return [::String]
+        #     Output only. Resource name of the policy.
+        # @!attribute [r] create_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The creation timestamp of a contentPolicy; output-only field.
+        # @!attribute [r] update_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The last update timestamp of a contentPolicy; output-only
+        #     field.
+        # @!attribute [rw] display_name
+        #   @return [::String]
+        #     Optional. Display name (max 63 chars)
+        # @!attribute [rw] inspect_config
+        #   @return [::Google::Cloud::Dlp::V2::InspectConfig]
+        #     Optional. InspectConfig to use to produce findings.
+        # @!attribute [rw] rules
+        #   @return [::Array<::Google::Cloud::Dlp::V2::ContentPolicy::PolicyRule>]
+        #     Required. Policies to apply, based on the findings returned by inspection.
+        #     The first rule to match applies.
+        # @!attribute [rw] unsupported_file_type
+        #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyAction]
+        #     Optional. Action to take if the content is an unsupported file type.
+        # @!attribute [rw] input_too_large
+        #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyAction]
+        #     Optional. Action to take if the content is a supported file type but is too
+        #     large to be scanned.
+        # @!attribute [rw] failed_to_scan_supported_file_type
+        #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyAction]
+        #     Optional. Action to take if the content is a supported file type and size
+        #     but fails to be scanned, for example because the file is encrypted or
+        #     corrupted.
+        # @!attribute [rw] default_action
+        #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyAction]
+        #     Action to take if the content is scanned and no rules match.
+        #     Defaults to returning an ALLOW verdict if not set.
+        # @!attribute [rw] logging_configs
+        #   @return [::Array<::Google::Cloud::Dlp::V2::ContentPolicy::LoggingConfig>]
+        #     Optional. Log the actions taken by the content policy to external systems.
+        # @!attribute [r] errors
+        #   @return [::Array<::Google::Cloud::Dlp::V2::Error>]
+        #     Output only. A stream of errors encountered when the policy was applied.
+        #     Output only field. Will return the last 100 errors. Whenever the policy is
+        #     modified this list will be cleared.
+        class ContentPolicy
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+          # A possible action to take when applying a content policy.
+          # @!attribute [rw] return_verdict
+          #   @return [::Google::Cloud::Dlp::V2::ContentPolicyVerdict]
+          #     Optional. If set, the verdict will be returned to the user.
+          class PolicyAction
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+          end
+          # A single policy rule. The first rule to match from the list above controls
+          # the result.
+          # @!attribute [rw] conditions
+          #   @return [::Array<::Google::Cloud::Dlp::V2::ContentPolicy::PolicyRule::PolicyCondition>]
+          #     Optional. Conditions that must match for this rule to apply.
+          #     All conditions must match (`AND`). For `OR` conditions, use multiple
+          #     rules.
+          # @!attribute [rw] action
+          #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyAction]
+          #     Required. Action to take if this rule applies.
+          class PolicyRule
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+            # A condition that must match for this rule to apply.
+            # @!attribute [rw] info_type_condition
+            #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyRule::PolicyCondition::InfoTypeCondition]
+            #     A condition based on info types.
+            class PolicyCondition
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+              # A info type based condition.
+              # @!attribute [rw] min_count
+              #   @return [::Integer]
+              #     Optional. The minimum total number of findings of all matching info
+              #     types required for this condition to evaluate to true. Defaults to 1
+              #     if unset.
+              # @!attribute [rw] info_types
+              #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::PolicyRule::PolicyCondition::InfoTypeCondition::InfoTypes]
+              #     match any of these info types.
+              #
+              #     Note: The following fields are mutually exclusive: `info_types`, `any_info_type`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+              # @!attribute [rw] any_info_type
+              #   @return [::Google::Protobuf::Empty]
+              #     match any info types.
+              #
+              #     Note: The following fields are mutually exclusive: `any_info_type`, `info_types`. If a field in that set is populated, all other fields in the set will automatically be cleared.
+              class InfoTypeCondition
+                include ::Google::Protobuf::MessageExts
+                extend ::Google::Protobuf::MessageExts::ClassMethods
+                # Info types to match.
+                # @!attribute [rw] info_type_names
+                #   @return [::Array<::String>]
+                #     Required. A list of info types to match.
+                class InfoTypes
+                  include ::Google::Protobuf::MessageExts
+                  extend ::Google::Protobuf::MessageExts::ClassMethods
+                end
+              end
+            end
+          end
+          # A single logging configuration.
+          # @!attribute [rw] log_to_big_query
+          #   @return [::Google::Cloud::Dlp::V2::ContentPolicy::LoggingConfig::LogToBigQuery]
+          #     Optional. Log the actions taken to a BigQuery table.
+          class LoggingConfig
+            include ::Google::Protobuf::MessageExts
+            extend ::Google::Protobuf::MessageExts::ClassMethods
+            # Configuration for logging content policy actions to BigQuery.
+            # @!attribute [rw] project_id
+            #   @return [::String]
+            #     Required. The ID of the project containing the BigQuery table to write
+            #     to.
+            # @!attribute [rw] dataset_id
+            #   @return [::String]
+            #     Required. The ID of the dataset containing the BigQuery table to write
+            #     to.
+            # @!attribute [rw] table_id
+            #   @return [::String]
+            #     Required. The ID of the BigQuery table to write to.
+            class LogToBigQuery
+              include ::Google::Protobuf::MessageExts
+              extend ::Google::Protobuf::MessageExts::ClassMethods
+            end
+          end
+        end
+        # Possible results of applying a content policy. This may expand to include
+        # additional result types in the future.
+        module ContentPolicyVerdict
+          # Not used.
+          CONTENT_POLICY_VERDICT_UNSPECIFIED = 0
+          # The policy allows the provided content to be used.
+          ALLOW = 1
+          # The policy prevents the provided content from being used. This should
+          # result in a blocked file upload, exclusion from training dataset, or
+          # other similar block action. (specific action will depend on the caller).
+          BLOCK = 2
+        end
         # Enum of possible outcomes of transformations. SUCCESS if transformation and
         # storing of transformation was successful, otherwise, reason for not
         # transforming.