@databricks/sdk-networking 0.33.0 → 0.35.0

package/dist/v1/model.d.ts

@@ -1,155 +1,138 @@
-import { Temporal } from '@js-temporal/polyfill';
-import { FieldMask } from '@databricks/sdk-core/wkt';
-import { z } from 'zod';
+import { z } from "zod";
+import { Temporal } from "@js-temporal/polyfill";
+import { FieldMask } from "@databricks/sdk-core/wkt";
+
+//#region src/v1/model.d.ts
 /**
  * The target resources that are supported by Network Connectivity Config.
  * Note: some egress types can support general types that are not defined in EgressResourceType.
  * E.g.: Azure private endpoint supports private link enabled Azure services.
  */
-export declare const EgressResourceType: {
-    readonly EGRESS_RESOURCE_TYPE_UNSPECIFIED: "EGRESS_RESOURCE_TYPE_UNSPECIFIED";
-    readonly AZURE_BLOB_STORAGE: "AZURE_BLOB_STORAGE";
+declare const EgressResourceType: {
+  readonly EGRESS_RESOURCE_TYPE_UNSPECIFIED: "EGRESS_RESOURCE_TYPE_UNSPECIFIED";
+  readonly AZURE_BLOB_STORAGE: "AZURE_BLOB_STORAGE";
 };
-export type EgressResourceType = (typeof EgressResourceType)[keyof typeof EgressResourceType] | (string & {});
-export declare const EndpointState: {
-    /** The endpoint is pending approval. */
-    readonly PENDING: "PENDING";
-    /** The endpoint has been approved and is ready for use. */
-    readonly APPROVED: "APPROVED";
-    /** The endpoint encountered some issues during setup. */
-    readonly FAILED: "FAILED";
-    /** The endpoint was once established but later disconnected. This endpoint doesn't provide connectivity. */
-    readonly DISCONNECTED: "DISCONNECTED";
+type EgressResourceType = (typeof EgressResourceType)[keyof typeof EgressResourceType] | (string & {});
+declare const EndpointState: {
+  /** The endpoint is pending approval. */readonly PENDING: "PENDING"; /** The endpoint has been approved and is ready for use. */
+  readonly APPROVED: "APPROVED"; /** The endpoint encountered some issues during setup. */
+  readonly FAILED: "FAILED"; /** The endpoint was once established but later disconnected. This endpoint doesn't provide connectivity. */
+  readonly DISCONNECTED: "DISCONNECTED";
 };
-export type EndpointState = (typeof EndpointState)[keyof typeof EndpointState] | (string & {});
+type EndpointState = (typeof EndpointState)[keyof typeof EndpointState] | (string & {});
 /**
  * Type of IP access list. Valid values are as follows and are case-sensitive:
  *
  * * `ALLOW`: An allow list. Include this IP or range.
  * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.
  */
-export declare const IpAccessListType: {
-    readonly ALLOW: "ALLOW";
-    /** Blocks the associated CIDRs. */
-    readonly BLOCK: "BLOCK";
+declare const IpAccessListType: {
+  readonly ALLOW: "ALLOW"; /** Blocks the associated CIDRs. */
+  readonly BLOCK: "BLOCK";
 };
-export type IpAccessListType = (typeof IpAccessListType)[keyof typeof IpAccessListType] | (string & {});
-export declare const PrivateAccessLevel: {
-    /** Only specifically listed endpoints can access my workspace */
-    readonly ENDPOINT: "ENDPOINT";
-    /** Only endpoints in the same account can access my workspace */
-    readonly ACCOUNT: "ACCOUNT";
+type IpAccessListType = (typeof IpAccessListType)[keyof typeof IpAccessListType] | (string & {});
+declare const PrivateAccessLevel: {
+  /** Only specifically listed endpoints can access my workspace */readonly ENDPOINT: "ENDPOINT"; /** Only endpoints in the same account can access my workspace */
+  readonly ACCOUNT: "ACCOUNT";
 };
-export type PrivateAccessLevel = (typeof PrivateAccessLevel)[keyof typeof PrivateAccessLevel] | (string & {});
-export declare const VpcEndpointUseCase: {
-    readonly WORKSPACE_ACCESS: "WORKSPACE_ACCESS";
-    readonly DATAPLANE_RELAY_ACCESS: "DATAPLANE_RELAY_ACCESS";
-    /** General access, replaces WORKSPACE_ACCESS in customer-facing API. */
-    readonly GENERAL_ACCESS: "GENERAL_ACCESS";
+type PrivateAccessLevel = (typeof PrivateAccessLevel)[keyof typeof PrivateAccessLevel] | (string & {});
+declare const VpcEndpointUseCase: {
+  readonly WORKSPACE_ACCESS: "WORKSPACE_ACCESS";
+  readonly DATAPLANE_RELAY_ACCESS: "DATAPLANE_RELAY_ACCESS"; /** General access, replaces WORKSPACE_ACCESS in customer-facing API. */
+  readonly GENERAL_ACCESS: "GENERAL_ACCESS";
 };
-export type VpcEndpointUseCase = (typeof VpcEndpointUseCase)[keyof typeof VpcEndpointUseCase] | (string & {});
-export declare const VpcStatus: {
-    readonly VALID: "VALID";
-    readonly BROKEN: "BROKEN";
-    readonly UNATTACHED: "UNATTACHED";
-    /** Some optional tests are failing for this Vpc, see NetworkWarning for more information */
-    readonly WARNED: "WARNED";
+type VpcEndpointUseCase = (typeof VpcEndpointUseCase)[keyof typeof VpcEndpointUseCase] | (string & {});
+declare const VpcStatus: {
+  readonly VALID: "VALID";
+  readonly BROKEN: "BROKEN";
+  readonly UNATTACHED: "UNATTACHED"; /** Some optional tests are failing for this Vpc, see NetworkWarning for more information */
+  readonly WARNED: "WARNED";
 };
-export type VpcStatus = (typeof VpcStatus)[keyof typeof VpcStatus] | (string & {});
+type VpcStatus = (typeof VpcStatus)[keyof typeof VpcStatus] | (string & {});
 /**
  * Type of IP access list. Valid values are as follows and are case-sensitive:
  *
  * * `ALLOW`: An allow list. Include this IP or range.
  * * `BLOCK`: A block list. Exclude this IP or range. IP addresses in the block list are excluded even if they are included in an allow list.
  */
-export declare const AccountIpAccessListType_IpAccessListType: {
-    /** Allows the associated CIDRs. */
-    readonly ALLOW: "ALLOW";
-    /** Blocks the associated CIDRs. */
-    readonly BLOCK: "BLOCK";
+declare const AccountIpAccessListType_IpAccessListType: {
+  /** Allows the associated CIDRs. */readonly ALLOW: "ALLOW"; /** Blocks the associated CIDRs. */
+  readonly BLOCK: "BLOCK";
 };
-export type AccountIpAccessListType_IpAccessListType = (typeof AccountIpAccessListType_IpAccessListType)[keyof typeof AccountIpAccessListType_IpAccessListType] | (string & {});
-export declare const EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType: {
-    readonly INTERNET_DESTINATION_TYPE_UNSPECIFIED: "INTERNET_DESTINATION_TYPE_UNSPECIFIED";
-    /** This is defined as `FQDN` in settings-policy/api/proto/messages.proto. Translation is done in accounts-lake-net-manager/src/util/NetworkPolicySettingUtil.scala. */
-    readonly DNS_NAME: "DNS_NAME";
+type AccountIpAccessListType_IpAccessListType = (typeof AccountIpAccessListType_IpAccessListType)[keyof typeof AccountIpAccessListType_IpAccessListType] | (string & {});
+declare const EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType: {
+  readonly INTERNET_DESTINATION_TYPE_UNSPECIFIED: "INTERNET_DESTINATION_TYPE_UNSPECIFIED"; /** This is defined as `FQDN` in settings-policy/api/proto/messages.proto. Translation is done in accounts-lake-net-manager/src/util/NetworkPolicySettingUtil.scala. */
+  readonly DNS_NAME: "DNS_NAME";
 };
-export type EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType = (typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType] | (string & {});
+type EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType = (typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType] | (string & {});
 /** The values should match the list of workloads used in networkconfig.proto */
-export declare const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter: {
-    readonly DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED: "DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED";
-    /** SQL Warehouse product */
-    readonly DBSQL: "DBSQL";
-    /** Machine Learning serving product */
-    readonly ML_SERVING: "ML_SERVING";
+declare const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter: {
+  readonly DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED: "DRY_RUN_MODE_PRODUCT_FILTER_UNSPECIFIED"; /** SQL Warehouse product */
+  readonly DBSQL: "DBSQL"; /** Machine Learning serving product */
+  readonly ML_SERVING: "ML_SERVING";
 };
-export type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter = (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter] | (string & {});
-export declare const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode: {
-    readonly ENFORCEMENT_MODE_UNSPECIFIED: "ENFORCEMENT_MODE_UNSPECIFIED";
-    /** Blocks traffic that violates network policy. This is the default mode. */
-    readonly ENFORCED: "ENFORCED";
-    /** Logs violations without blocking traffic. Useful for testing policies before enforcement. */
-    readonly DRY_RUN: "DRY_RUN";
+type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter = (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter] | (string & {});
+declare const EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode: {
+  readonly ENFORCEMENT_MODE_UNSPECIFIED: "ENFORCEMENT_MODE_UNSPECIFIED"; /** Blocks traffic that violates network policy. This is the default mode. */
+  readonly ENFORCED: "ENFORCED"; /** Logs violations without blocking traffic. Useful for testing policies before enforcement. */
+  readonly DRY_RUN: "DRY_RUN";
 };
-export type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode = (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode] | (string & {});
+type EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode = (typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode] | (string & {});
 /**
  * At which level can <Databricks> and <Databricks> managed compute access Internet.
  * FULL_ACCESS: <Databricks> can access Internet. No blocking rules will apply.
  * RESTRICTED_ACCESS: <Databricks> can only access explicitly allowed internet and storage destinations,
  * as well as UC connections and external locations.
  */
-export declare const EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode: {
-    readonly RESTRICTION_MODE_UNSPECIFIED: "RESTRICTION_MODE_UNSPECIFIED";
-    readonly FULL_ACCESS: "FULL_ACCESS";
-    readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
+declare const EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode: {
+  readonly RESTRICTION_MODE_UNSPECIFIED: "RESTRICTION_MODE_UNSPECIFIED";
+  readonly FULL_ACCESS: "FULL_ACCESS";
+  readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
 };
-export type EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode = (typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode] | (string & {});
-export declare const EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType: {
-    readonly STORAGE_DESTINATION_TYPE_UNSPECIFIED: "STORAGE_DESTINATION_TYPE_UNSPECIFIED";
-    /**
-     * AWS_S3 can be used both for direct AWS S3 access and for cross-cloud access from Azure and GCP
-     * When used in an Azure/GCP context, this indicates cross-cloud access from Azure/GCP to the specified S3 bucket
-     */
-    readonly AWS_S3: "AWS_S3";
-    readonly AZURE_STORAGE: "AZURE_STORAGE";
-    readonly GOOGLE_CLOUD_STORAGE: "GOOGLE_CLOUD_STORAGE";
+type EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode = (typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode] | (string & {});
+declare const EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType: {
+  readonly STORAGE_DESTINATION_TYPE_UNSPECIFIED: "STORAGE_DESTINATION_TYPE_UNSPECIFIED";
+  /**
+   * AWS_S3 can be used both for direct AWS S3 access and for cross-cloud access from Azure and GCP
+   * When used in an Azure/GCP context, this indicates cross-cloud access from Azure/GCP to the specified S3 bucket
+   */
+  readonly AWS_S3: "AWS_S3";
+  readonly AZURE_STORAGE: "AZURE_STORAGE";
+  readonly GOOGLE_CLOUD_STORAGE: "GOOGLE_CLOUD_STORAGE";
 };
-export type EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType = (typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType] | (string & {});
-export declare const EndpointUseCase_EndpointUseCase: {
-    /** service-direct frontend private link connectivity. */
-    readonly SERVICE_DIRECT: "SERVICE_DIRECT";
+type EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType = (typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType)[keyof typeof EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType] | (string & {});
+declare const EndpointUseCase_EndpointUseCase: {
+  /** service-direct frontend private link connectivity. */readonly SERVICE_DIRECT: "SERVICE_DIRECT";
 };
-export type EndpointUseCase_EndpointUseCase = (typeof EndpointUseCase_EndpointUseCase)[keyof typeof EndpointUseCase_EndpointUseCase] | (string & {});
+type EndpointUseCase_EndpointUseCase = (typeof EndpointUseCase_EndpointUseCase)[keyof typeof EndpointUseCase_EndpointUseCase] | (string & {});
 /**
  * Qualifies the breadth of API access permitted by an ingress network policy rule.
  * API_SCOPE_QUALIFIER_READ narrows matching to read-only variants of the listed scopes;
  * API_SCOPE_QUALIFIER_ALL matches any scope. When unset, scopes match exactly as listed.
  */
-export declare const IngressNetworkPolicy_ApiScopeQualifier: {
-    /** Narrows matching to read-only variants of the listed scopes (e.g. GET/HEAD requests). */
-    readonly API_SCOPE_QUALIFIER_READ: "API_SCOPE_QUALIFIER_READ";
-    /** Matches any scope regardless of access level. */
-    readonly API_SCOPE_QUALIFIER_ALL: "API_SCOPE_QUALIFIER_ALL";
+declare const IngressNetworkPolicy_ApiScopeQualifier: {
+  /** Narrows matching to read-only variants of the listed scopes (e.g. GET/HEAD requests). */readonly API_SCOPE_QUALIFIER_READ: "API_SCOPE_QUALIFIER_READ"; /** Matches any scope regardless of access level. */
+  readonly API_SCOPE_QUALIFIER_ALL: "API_SCOPE_QUALIFIER_ALL";
 };
-export type IngressNetworkPolicy_ApiScopeQualifier = (typeof IngressNetworkPolicy_ApiScopeQualifier)[keyof typeof IngressNetworkPolicy_ApiScopeQualifier] | (string & {});
-export declare const IngressNetworkPolicy_Authentication_IdentityType: {
-    readonly IDENTITY_TYPE_UNSPECIFIED: "IDENTITY_TYPE_UNSPECIFIED";
-    readonly IDENTITY_TYPE_ALL_USERS: "IDENTITY_TYPE_ALL_USERS";
-    readonly IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS: "IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS";
-    readonly IDENTITY_TYPE_SELECTED_IDENTITIES: "IDENTITY_TYPE_SELECTED_IDENTITIES";
+type IngressNetworkPolicy_ApiScopeQualifier = (typeof IngressNetworkPolicy_ApiScopeQualifier)[keyof typeof IngressNetworkPolicy_ApiScopeQualifier] | (string & {});
+declare const IngressNetworkPolicy_Authentication_IdentityType: {
+  readonly IDENTITY_TYPE_UNSPECIFIED: "IDENTITY_TYPE_UNSPECIFIED";
+  readonly IDENTITY_TYPE_ALL_USERS: "IDENTITY_TYPE_ALL_USERS";
+  readonly IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS: "IDENTITY_TYPE_ALL_SERVICE_PRINCIPALS";
+  readonly IDENTITY_TYPE_SELECTED_IDENTITIES: "IDENTITY_TYPE_SELECTED_IDENTITIES";
 };
-export type IngressNetworkPolicy_Authentication_IdentityType = (typeof IngressNetworkPolicy_Authentication_IdentityType)[keyof typeof IngressNetworkPolicy_Authentication_IdentityType] | (string & {});
-export declare const IngressNetworkPolicy_AuthenticationIdentity_PrincipalType: {
-    readonly PRINCIPAL_TYPE_UNSPECIFIED: "PRINCIPAL_TYPE_UNSPECIFIED";
-    readonly PRINCIPAL_TYPE_USER: "PRINCIPAL_TYPE_USER";
-    readonly PRINCIPAL_TYPE_SERVICE_PRINCIPAL: "PRINCIPAL_TYPE_SERVICE_PRINCIPAL";
+type IngressNetworkPolicy_Authentication_IdentityType = (typeof IngressNetworkPolicy_Authentication_IdentityType)[keyof typeof IngressNetworkPolicy_Authentication_IdentityType] | (string & {});
+declare const IngressNetworkPolicy_AuthenticationIdentity_PrincipalType: {
+  readonly PRINCIPAL_TYPE_UNSPECIFIED: "PRINCIPAL_TYPE_UNSPECIFIED";
+  readonly PRINCIPAL_TYPE_USER: "PRINCIPAL_TYPE_USER";
+  readonly PRINCIPAL_TYPE_SERVICE_PRINCIPAL: "PRINCIPAL_TYPE_SERVICE_PRINCIPAL";
 };
-export type IngressNetworkPolicy_AuthenticationIdentity_PrincipalType = (typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType)[keyof typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType] | (string & {});
-export declare const IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode: {
-    readonly FULL_ACCESS: "FULL_ACCESS";
-    readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
+type IngressNetworkPolicy_AuthenticationIdentity_PrincipalType = (typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType)[keyof typeof IngressNetworkPolicy_AuthenticationIdentity_PrincipalType] | (string & {});
+declare const IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode: {
+  readonly FULL_ACCESS: "FULL_ACCESS";
+  readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
 };
-export type IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = (typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode] | (string & {});
+type IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = (typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode] | (string & {});
 /**
  * The restriction mode for private access. In ALLOW_ALL_REGISTERED_ENDPOINTS mode,
  * requests arriving through any endpoint registered to the account are allowed, and
@@ -157,1634 +140,1601 @@ export type IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode = (typeof
  * restricted based on deny rules and allow rules; requests that do not match any
  * allow rule are denied.
  */
-export declare const IngressNetworkPolicy_PrivateAccess_RestrictionMode: {
-    /**
-     * Allows requests arriving through any endpoint registered to the account.
-     * Deny rules and allow rules cannot be set in this mode.
-     */
-    readonly ALLOW_ALL_REGISTERED_ENDPOINTS: "ALLOW_ALL_REGISTERED_ENDPOINTS";
-    /**
-     * Restricts access based on deny rules and allow rules. Requests that do not
-     * match any allow rule are denied.
-     */
-    readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
+declare const IngressNetworkPolicy_PrivateAccess_RestrictionMode: {
+  /**
+   * Allows requests arriving through any endpoint registered to the account.
+   * Deny rules and allow rules cannot be set in this mode.
+   */
+  readonly ALLOW_ALL_REGISTERED_ENDPOINTS: "ALLOW_ALL_REGISTERED_ENDPOINTS";
+  /**
+   * Restricts access based on deny rules and allow rules. Requests that do not
+   * match any allow rule are denied.
+   */
+  readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
 };
-export type IngressNetworkPolicy_PrivateAccess_RestrictionMode = (typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode] | (string & {});
-export declare const IngressNetworkPolicy_PublicAccess_RestrictionMode: {
-    readonly FULL_ACCESS: "FULL_ACCESS";
-    readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
+type IngressNetworkPolicy_PrivateAccess_RestrictionMode = (typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PrivateAccess_RestrictionMode] | (string & {});
+declare const IngressNetworkPolicy_PublicAccess_RestrictionMode: {
+  readonly FULL_ACCESS: "FULL_ACCESS";
+  readonly RESTRICTED_ACCESS: "RESTRICTED_ACCESS";
 };
-export type IngressNetworkPolicy_PublicAccess_RestrictionMode = (typeof IngressNetworkPolicy_PublicAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PublicAccess_RestrictionMode] | (string & {});
-export declare const NccPrivateEndpointRule_PrivateLinkConnectionState: {
-    readonly PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED";
-    /** The endpoint has been approved and is ready to use in your serverless compute resources. */
-    readonly ESTABLISHED: "ESTABLISHED";
-    /** Connection was rejected by the private link resource owner. */
-    readonly REJECTED: "REJECTED";
-    /**
-     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
-     * be deleted for clean-up.
-     */
-    readonly DISCONNECTED: "DISCONNECTED";
-    /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */
-    readonly EXPIRED: "EXPIRED";
-    /** The endpoint has been created and pending approval. */
-    readonly PENDING: "PENDING";
-    /** The endpoint creation is in progress. */
-    readonly CREATING: "CREATING";
-    /** The endpoint creation failed. */
-    readonly CREATE_FAILED: "CREATE_FAILED";
+type IngressNetworkPolicy_PublicAccess_RestrictionMode = (typeof IngressNetworkPolicy_PublicAccess_RestrictionMode)[keyof typeof IngressNetworkPolicy_PublicAccess_RestrictionMode] | (string & {});
+declare const NccPrivateEndpointRule_PrivateLinkConnectionState: {
+  readonly PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED"; /** The endpoint has been approved and is ready to use in your serverless compute resources. */
+  readonly ESTABLISHED: "ESTABLISHED"; /** Connection was rejected by the private link resource owner. */
+  readonly REJECTED: "REJECTED";
+  /**
+   * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
+   * be deleted for clean-up.
+   */
+  readonly DISCONNECTED: "DISCONNECTED"; /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */
+  readonly EXPIRED: "EXPIRED"; /** The endpoint has been created and pending approval. */
+  readonly PENDING: "PENDING"; /** The endpoint creation is in progress. */
+  readonly CREATING: "CREATING"; /** The endpoint creation failed. */
+  readonly CREATE_FAILED: "CREATE_FAILED";
 };
-export type NccPrivateEndpointRule_PrivateLinkConnectionState = (typeof NccPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NccPrivateEndpointRule_PrivateLinkConnectionState] | (string & {});
-export declare const NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState: {
-    readonly PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED";
-    /** The endpoint has been approved and is ready to use in your serverless compute resources. */
-    readonly ESTABLISHED: "ESTABLISHED";
-    /** Connection was rejected by the private link resource owner. */
-    readonly REJECTED: "REJECTED";
-    /**
-     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
-     * be deleted for clean-up.
-     */
-    readonly DISCONNECTED: "DISCONNECTED";
-    /** If the endpoint is created but not approved in 14 days, it is EXPIRED. */
-    readonly EXPIRED: "EXPIRED";
-    /** The endpoint has been created and pending approval. */
-    readonly PENDING: "PENDING";
-    /** The endpoint creation is in progress. */
-    readonly CREATING: "CREATING";
-    /** The endpoint creation failed. */
-    readonly CREATE_FAILED: "CREATE_FAILED";
+type NccPrivateEndpointRule_PrivateLinkConnectionState = (typeof NccPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NccPrivateEndpointRule_PrivateLinkConnectionState] | (string & {});
+declare const NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState: {
+  readonly PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED"; /** The endpoint has been approved and is ready to use in your serverless compute resources. */
+  readonly ESTABLISHED: "ESTABLISHED"; /** Connection was rejected by the private link resource owner. */
+  readonly REJECTED: "REJECTED";
+  /**
+   * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
+   * be deleted for clean-up.
+   */
+  readonly DISCONNECTED: "DISCONNECTED"; /** If the endpoint is created but not approved in 14 days, it is EXPIRED. */
+  readonly EXPIRED: "EXPIRED"; /** The endpoint has been created and pending approval. */
+  readonly PENDING: "PENDING"; /** The endpoint creation is in progress. */
+  readonly CREATING: "CREATING"; /** The endpoint creation failed. */
+  readonly CREATE_FAILED: "CREATE_FAILED";
 };
-export type NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState = (typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState] | (string & {});
-export declare const NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState: {
-    readonly PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED";
-    /** The endpoint has been created and pending approval. */
-    readonly INIT: "INIT";
-    /** The endpoint has been approved and is ready to use in your serverless compute resources. */
-    readonly ESTABLISHED: "ESTABLISHED";
-    /** Connection was rejected by the private link resource owner. */
-    readonly REJECTED: "REJECTED";
-    /**
-     * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
-     * be deleted for clean-up.
-     */
-    readonly DISCONNECTED: "DISCONNECTED";
-    /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */
-    readonly EXPIRED: "EXPIRED";
-    /** The endpoint has been created and pending approval. */
-    readonly PENDING: "PENDING";
-    /** The endpoint creation is in progress. */
-    readonly CREATING: "CREATING";
-    /** The endpoint creation failed. */
-    readonly CREATE_FAILED: "CREATE_FAILED";
+type NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState = (typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState] | (string & {});
+declare const NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState: {
+  readonly PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED: "PRIVATE_LINK_CONNECTION_STATE_UNSPECIFIED"; /** The endpoint has been created and pending approval. */
+  readonly INIT: "INIT"; /** The endpoint has been approved and is ready to use in your serverless compute resources. */
+  readonly ESTABLISHED: "ESTABLISHED"; /** Connection was rejected by the private link resource owner. */
+  readonly REJECTED: "REJECTED";
+  /**
+   * Connection was removed by the private link resource owner, the private endpoint becomes informative and should
+   * be deleted for clean-up.
+   */
+  readonly DISCONNECTED: "DISCONNECTED"; /** If the endpoint was created but not approved in 14 days, it will be EXPIRED. */
+  readonly EXPIRED: "EXPIRED"; /** The endpoint has been created and pending approval. */
+  readonly PENDING: "PENDING"; /** The endpoint creation is in progress. */
+  readonly CREATING: "CREATING"; /** The endpoint creation failed. */
+  readonly CREATE_FAILED: "CREATE_FAILED";
 };
-export type NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState = (typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState] | (string & {});
+type NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState = (typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState)[keyof typeof NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState] | (string & {});
 /** Definition of an IP Access list */
-export interface AccountIpAccessList {
-    /** Universally unique identifier (UUID) of the IP access list. */
-    listId?: string | undefined;
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    ipAddresses?: string[] | undefined;
-    /** Total number of IP or CIDR values. */
-    addressCount?: number | undefined;
-    listType?: AccountIpAccessListType_IpAccessListType | undefined;
-    /** Creation timestamp in milliseconds. */
-    createdAt?: bigint | undefined;
-    /** The ID of the user that created this list. */
-    createdBy?: bigint | undefined;
-    /** Update timestamp in milliseconds. */
-    updatedAt?: bigint | undefined;
-    /** The ID of the user that last updated this list. */
-    updatedBy?: bigint | undefined;
-    /** Specifies whether this IP access list is enabled. */
-    enabled?: boolean | undefined;
-}
-export interface AccountIpAccessListType {
-}
-export interface AccountNetworkPolicy {
-    /** The unique identifier for the network policy. */
-    networkPolicyId?: string | undefined;
-    /** The associated account ID for this Network Policy object. */
-    accountId?: string | undefined;
-    /** The network policies applying for egress traffic. */
-    egress?: EgressNetworkPolicy | undefined;
-    /** The network policies applying for ingress traffic. */
-    ingress?: IngressNetworkPolicy | undefined;
-    /**
-     * The ingress policy for dry run mode. Dry run will always run even if the request
-     * is allowed by the ingress policy. When this field is set, the policy will be evaluated
-     * and emit logs only without blocking requests.
-     */
-    ingressDryRun?: IngressNetworkPolicy | undefined;
-}
-export interface AwsVpcEndpointInfo {
-    /**
-     * The ID of the underlying VPC endpoint in AWS. Provided by the customer when
-     * registering an existing AWS VPC endpoint.
-     */
-    awsVpcEndpointId?: string | undefined;
-    /** The ID of the Databricks VPC endpoint service that this endpoint connects to. */
-    awsEndpointServiceId?: string | undefined;
-    /** The AWS account ID in which this VPC endpoint lives. */
-    awsAccountId?: string | undefined;
-}
-export interface AzurePrivateEndpointInfo {
-    /** The name of the Private Endpoint in the Azure subscription. */
-    privateEndpointName?: string | undefined;
-    /**
-     * The GUID of the Private Endpoint resource in the Azure subscription.
-     * This is assigned by Azure when the user sets up the Private Endpoint.
-     */
-    privateEndpointResourceGuid?: string | undefined;
-    /** The full resource ID of the Private Endpoint. */
-    privateEndpointResourceId?: string | undefined;
-    /** The resource ID of the Databricks Private Link Service that this Private Endpoint connects to. */
-    privateLinkServiceId?: string | undefined;
+interface AccountIpAccessList {
+  /** Universally unique identifier (UUID) of the IP access list. */
+  listId?: string | undefined;
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  ipAddresses?: string[] | undefined;
+  /** Total number of IP or CIDR values. */
+  addressCount?: number | undefined;
+  listType?: AccountIpAccessListType_IpAccessListType | undefined;
+  /** Creation timestamp in milliseconds. */
+  createdAt?: bigint | undefined;
+  /** The ID of the user that created this list. */
+  createdBy?: bigint | undefined;
+  /** Update timestamp in milliseconds. */
+  updatedAt?: bigint | undefined;
+  /** The ID of the user that last updated this list. */
+  updatedBy?: bigint | undefined;
+  /** Specifies whether this IP access list is enabled. */
+  enabled?: boolean | undefined;
+}
+interface AccountIpAccessListType {}
+interface AccountNetworkPolicy {
+  /** The unique identifier for the network policy. */
+  networkPolicyId?: string | undefined;
+  /** The associated account ID for this Network Policy object. */
+  accountId?: string | undefined;
+  /** The network policies applying for egress traffic. */
+  egress?: EgressNetworkPolicy | undefined;
+  /** The network policies applying for ingress traffic. */
+  ingress?: IngressNetworkPolicy | undefined;
+  /**
+   * The ingress policy for dry run mode. Dry run will always run even if the request
+   * is allowed by the ingress policy. When this field is set, the policy will be evaluated
+   * and emit logs only without blocking requests.
+   */
+  ingressDryRun?: IngressNetworkPolicy | undefined;
+}
+interface AwsVpcEndpointInfo {
+  /**
+   * The ID of the underlying VPC endpoint in AWS. Provided by the customer when
+   * registering an existing AWS VPC endpoint.
+   */
+  awsVpcEndpointId?: string | undefined;
+  /** The ID of the Databricks VPC endpoint service that this endpoint connects to. */
+  awsEndpointServiceId?: string | undefined;
+  /** The AWS account ID in which this VPC endpoint lives. */
+  awsAccountId?: string | undefined;
+}
+interface AzurePrivateEndpointInfo {
+  /** The name of the Private Endpoint in the Azure subscription. */
+  privateEndpointName?: string | undefined;
+  /**
+   * The GUID of the Private Endpoint resource in the Azure subscription.
+   * This is assigned by Azure when the user sets up the Private Endpoint.
+   */
+  privateEndpointResourceGuid?: string | undefined;
+  /** The full resource ID of the Private Endpoint. */
+  privateEndpointResourceId?: string | undefined;
+  /** The resource ID of the Databricks Private Link Service that this Private Endpoint connects to. */
+  privateLinkServiceId?: string | undefined;
 }
 /** Details required to configure a block list or allow list. */
-export interface CreateAccountIpAccessListRequest {
-    accountId?: string | undefined;
-    label?: string | undefined;
-    listType?: AccountIpAccessListType_IpAccessListType | undefined;
-    ipAddresses?: string[] | undefined;
+interface CreateAccountIpAccessListRequest {
+  accountId?: string | undefined;
+  label?: string | undefined;
+  listType?: AccountIpAccessListType_IpAccessListType | undefined;
+  ipAddresses?: string[] | undefined;
 }
 /** An IP access list was successfully created. */
-export interface CreateAccountIpAccessListResponse {
-    ipAccessList?: AccountIpAccessList | undefined;
+interface CreateAccountIpAccessListResponse {
+  ipAccessList?: AccountIpAccessList | undefined;
 }
-export interface CreateEndpointRequest {
-    /**
-     * The parent resource name of the account under which the endpoint is created.
-     * Format: `accounts/{account_id}`.
-     */
-    parent?: string | undefined;
-    endpoint?: Endpoint | undefined;
+interface CreateEndpointRequest {
+  /**
+   * The parent resource name of the account under which the endpoint is created.
+   * Format: `accounts/{account_id}`.
+   */
+  parent?: string | undefined;
+  endpoint?: Endpoint | undefined;
 }
 /** Details required to configure a block list or allow list. */
-export interface CreateIpAccessListRequest {
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    listType?: IpAccessListType | undefined;
-    ipAddresses?: string[] | undefined;
+interface CreateIpAccessListRequest {
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  listType?: IpAccessListType | undefined;
+  ipAddresses?: string[] | undefined;
 }
 /** An IP access list was successfully created. */
-export interface CreateIpAccessListResponse {
-    ipAccessList?: IpAccessList | undefined;
+interface CreateIpAccessListResponse {
+  ipAccessList?: IpAccessList | undefined;
 }
 /** Properties of the new private endpoint rule. */
-export interface CreateNccPrivateEndpointRuleRequest {
-    /** Your Network Connectivity Configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    privateEndpointRule?: CreatePrivateEndpointRule | undefined;
+interface CreateNccPrivateEndpointRuleRequest {
+  /** Your Network Connectivity Configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  privateEndpointRule?: CreatePrivateEndpointRule | undefined;
 }
 /** Properties of the new network connectivity configuration. */
-export interface CreateNetworkConnectivityConfigRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    networkConnectivityConfig?: CreateNetworkConnectivityConfiguration | undefined;
+interface CreateNetworkConnectivityConfigRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  networkConnectivityConfig?: CreateNetworkConnectivityConfiguration | undefined;
 }
 /** Properties of the new network connectivity configuration. */
-export interface CreateNetworkConnectivityConfiguration {
-    /** <Databricks> network connectivity configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /**
-     * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,
-     * and underscores. The length must be between 3 and 30 characters. The name must match the regular
-     * expression ^[0-9a-zA-Z-_]{3,30}$
-     */
-    name?: string | undefined;
-    /**
-     * The region for the network connectivity configuration.
-     * Only workspaces in the same region can be attached to the network connectivity configuration.
-     */
-    region?: string | undefined;
-    /** The network connectivity rules that apply to network traffic from your serverless compute resources. */
-    egressConfig?: CustomerFacingNetworkConnectivityConfigEgressConfig | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
-}
-export interface CreateNetworkPolicyRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Network policy configuration details. */
-    networkPolicy?: AccountNetworkPolicy | undefined;
-}
-export interface CreateNetworkRequest {
-    accountId?: string | undefined;
-    /** The human-readable name of the network configuration. */
-    networkName?: string | undefined;
-    /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */
-    vpcId?: string | undefined;
-    /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */
-    subnetIds?: string[] | undefined;
-    /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */
-    securityGroupIds?: string[] | undefined;
-    vpcEndpoints?: NetworkVpcEndpoints | undefined;
-    gcpNetworkInfo?: GcpNetworkInfo | undefined;
-}
-export interface CreatePrivateAccessSettingsRequest {
-    accountId?: string | undefined;
-    /** The human-readable name of the private access settings object. */
-    privateAccessSettingsName?: string | undefined;
-    /** The AWS region for workspaces attached to this private access settings object. */
-    region?: string | undefined;
-    /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */
-    publicAccessEnabled?: boolean | undefined;
-    /**
-     * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.
-     * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.
-     * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.
-     */
-    privateAccessLevel?: PrivateAccessLevel | undefined;
-    /**
-     * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.
-     * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints registered in your <Databricks> account that can connect to your workspace over AWS PrivateLink.
-     * Note: If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.
-     */
-    allowedVpcEndpointIds?: string[] | undefined;
+interface CreateNetworkConnectivityConfiguration {
+  /** <Databricks> network connectivity configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /**
+   * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,
+   * and underscores. The length must be between 3 and 30 characters. The name must match the regular
+   * expression ^[0-9a-zA-Z-_]{3,30}$
+   */
+  name?: string | undefined;
+  /**
+   * The region for the network connectivity configuration.
+   * Only workspaces in the same region can be attached to the network connectivity configuration.
+   */
+  region?: string | undefined;
+  /** The network connectivity rules that apply to network traffic from your serverless compute resources. */
+  egressConfig?: CustomerFacingNetworkConnectivityConfigEgressConfig | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
+}
+interface CreateNetworkPolicyRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Network policy configuration details. */
+  networkPolicy?: AccountNetworkPolicy | undefined;
+}
+interface CreateNetworkRequest {
+  accountId?: string | undefined;
+  /** The human-readable name of the network configuration. */
+  networkName?: string | undefined;
+  /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */
+  vpcId?: string | undefined;
+  /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */
+  subnetIds?: string[] | undefined;
+  /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */
+  securityGroupIds?: string[] | undefined;
+  vpcEndpoints?: NetworkVpcEndpoints | undefined;
+  gcpNetworkInfo?: GcpNetworkInfo | undefined;
+}
+interface CreatePrivateAccessSettingsRequest {
+  accountId?: string | undefined;
+  /** The human-readable name of the private access settings object. */
+  privateAccessSettingsName?: string | undefined;
+  /** The AWS region for workspaces attached to this private access settings object. */
+  region?: string | undefined;
+  /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */
+  publicAccessEnabled?: boolean | undefined;
+  /**
+   * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.
+   * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.
+   * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.
+   */
+  privateAccessLevel?: PrivateAccessLevel | undefined;
+  /**
+   * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.
+   * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints registered in your <Databricks> account that can connect to your workspace over AWS PrivateLink.
+   * Note: If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.
+   */
+  allowedVpcEndpointIds?: string[] | undefined;
 }
 /**
  * Properties of the new private endpoint rule.
  * Note that you must approve the endpoint in Azure portal after initialization.
  */
-export interface CreatePrivateEndpointRule {
-    /** The ID of a private endpoint rule. */
-    ruleId?: string | undefined;
-    /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
-    networkConnectivityConfigId?: string | undefined;
-    /**
-     * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
-     * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console
-     * before they take effect.
-     * The possible values are:
-     * - PENDING: The endpoint has been created and pending approval.
-     * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
-     * - REJECTED: Connection was rejected by the private link resource owner.
-     * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
-     * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
-     * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.
-     * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.
-     */
-    connectionState?: NccPrivateEndpointRule_PrivateLinkConnectionState | undefined;
-    /**
-     * Only used by private endpoints to customer-managed private endpoint services.
-     *
-     * Domain names of target private link service.
-     * When updating this field, the full list of target domain_names must be specified.
-     */
-    domainNames?: string[] | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Whether this private endpoint is deactivated. */
-    deactivated?: boolean | undefined;
-    /** Time in epoch milliseconds when this object was deactivated. */
-    deactivatedAt?: bigint | undefined;
-    errorMessage?: string | undefined;
-    /** The Azure resource ID of the target resource. */
-    resourceId?: string | undefined;
-    /**
-     * Not used by customer-managed private endpoint services.
-     *
-     * The sub-resource type (group ID) of the target resource.
-     * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
-     */
-    groupId?: string | undefined;
-    /** The name of the Azure private endpoint resource. */
-    endpointName?: string | undefined;
-    /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
-    accountId?: string | undefined;
-    /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
-    endpointService?: string | undefined;
-    /**
-     * Only used by private endpoints towards AWS S3 service.
-     *
-     * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
-     * The bucket names must be in the same region as the NCC/endpoint service.
-     * When updating this field, we perform full update on this field. Please ensure a full list of desired
-     * resource_names is provided.
-     */
-    resourceNames?: string[] | undefined;
-    /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */
-    vpcEndpointId?: string | undefined;
-    /**
-     * Update this field to activate/deactivate this private endpoint to allow egress access from
-     * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).
-     */
-    enabled?: boolean | undefined;
-    endpoint?: {
-        $case: 'gcpEndpoint';
-        gcpEndpoint: GcpEndpoint;
-    } | undefined;
-}
-export interface CreateVpcEndpointRequest {
-    accountId?: string | undefined;
-    /** The human-readable name of the storage configuration. */
-    vpcEndpointName?: string | undefined;
-    /** The region in which this VPC endpoint object exists. */
-    region?: string | undefined;
-    /** The ID of the VPC endpoint object in AWS. */
-    awsVpcEndpointId?: string | undefined;
-    vpcEndpointInfo?: {
-        $case: 'gcpVpcEndpointInfo';
-        /** The cloud info of this vpc endpoint. */
-        gcpVpcEndpointInfo: GcpVpcEndpointInfo;
-    } | undefined;
-}
-export interface CustomerFacingNetworkConnectivityConfigEgressConfig {
-    /**
-     * The network connectivity rules that are applied by default without resource specific configurations.
-     * You can find the stable network information of your serverless compute resources here.
-     */
-    defaultRules?: NetworkConnectivityConfigEgressConfig_DefaultRule | undefined;
-    /** The network connectivity rules that configured for each destinations. These rules override default rules. */
-    targetRules?: CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule | undefined;
+interface CreatePrivateEndpointRule {
+  /** The ID of a private endpoint rule. */
+  ruleId?: string | undefined;
+  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
+  networkConnectivityConfigId?: string | undefined;
+  /**
+   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
+   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console
+   * before they take effect.
+   * The possible values are:
+   * - PENDING: The endpoint has been created and pending approval.
+   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
+   * - REJECTED: Connection was rejected by the private link resource owner.
+   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
+   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
+   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.
+   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.
+   */
+  connectionState?: NccPrivateEndpointRule_PrivateLinkConnectionState | undefined;
+  /**
+   * Only used by private endpoints to customer-managed private endpoint services.
+   *
+   * Domain names of target private link service.
+   * When updating this field, the full list of target domain_names must be specified.
+   */
+  domainNames?: string[] | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Whether this private endpoint is deactivated. */
+  deactivated?: boolean | undefined;
+  /** Time in epoch milliseconds when this object was deactivated. */
+  deactivatedAt?: bigint | undefined;
+  errorMessage?: string | undefined;
+  /** The Azure resource ID of the target resource. */
+  resourceId?: string | undefined;
+  /**
+   * Not used by customer-managed private endpoint services.
+   *
+   * The sub-resource type (group ID) of the target resource.
+   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
+   */
+  groupId?: string | undefined;
+  /** The name of the Azure private endpoint resource. */
+  endpointName?: string | undefined;
+  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
+  accountId?: string | undefined;
+  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
+  endpointService?: string | undefined;
+  /**
+   * Only used by private endpoints towards AWS S3 service.
+   *
+   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
+   * The bucket names must be in the same region as the NCC/endpoint service.
+   * When updating this field, we perform full update on this field. Please ensure a full list of desired
+   * resource_names is provided.
+   */
+  resourceNames?: string[] | undefined;
+  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */
+  vpcEndpointId?: string | undefined;
+  /**
+   * Update this field to activate/deactivate this private endpoint to allow egress access from
+   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).
+   */
+  enabled?: boolean | undefined;
+  endpoint?: {
+    $case: 'gcpEndpoint';
+    gcpEndpoint: GcpEndpoint;
+  } | undefined;
+}
+interface CreateVpcEndpointRequest {
+  accountId?: string | undefined;
+  /** The human-readable name of the storage configuration. */
+  vpcEndpointName?: string | undefined;
+  /** The region in which this VPC endpoint object exists. */
+  region?: string | undefined;
+  /** The ID of the VPC endpoint object in AWS. */
+  awsVpcEndpointId?: string | undefined;
+  vpcEndpointInfo?: {
+    $case: 'gcpVpcEndpointInfo'; /** The cloud info of this vpc endpoint. */
+    gcpVpcEndpointInfo: GcpVpcEndpointInfo;
+  } | undefined;
+}
+interface CustomerFacingNetworkConnectivityConfigEgressConfig {
+  /**
+   * The network connectivity rules that are applied by default without resource specific configurations.
+   * You can find the stable network information of your serverless compute resources here.
+   */
+  defaultRules?: NetworkConnectivityConfigEgressConfig_DefaultRule | undefined;
+  /** The network connectivity rules that configured for each destinations. These rules override default rules. */
+  targetRules?: CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule | undefined;
 }
 /** Target rule controls the egress rules that are dedicated to specific resources. */
-export interface CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule {
-    azurePrivateEndpointRules?: NetworkConnectivityConfigAzurePrivateEndpointRule[] | undefined;
-    /** AWS private endpoint rule controls the AWS private endpoint based egress rules. */
-    awsPrivateEndpointRules?: NetworkConnectivityConfigAwsPrivateEndpointRule[] | undefined;
+interface CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule {
+  azurePrivateEndpointRules?: NetworkConnectivityConfigAzurePrivateEndpointRule[] | undefined;
+  /** AWS private endpoint rule controls the AWS private endpoint based egress rules. */
+  awsPrivateEndpointRules?: NetworkConnectivityConfigAwsPrivateEndpointRule[] | undefined;
 }
-export interface DeleteAccountIpAccessListRequest {
-    accountId?: string | undefined;
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
+interface DeleteAccountIpAccessListRequest {
+  accountId?: string | undefined;
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
 }
 /** The IP access list was successfully deleted. */
-export interface DeleteAccountIpAccessListResponse {
-}
-export interface DeleteEndpointRequest {
-    name?: string | undefined;
+interface DeleteAccountIpAccessListResponse {}
+interface DeleteEndpointRequest {
+  name?: string | undefined;
 }
-export interface DeleteIpAccessListRequest {
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
+interface DeleteIpAccessListRequest {
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
 }
 /** The IP access list was successfully deleted. */
-export interface DeleteIpAccessListResponse {
-}
+interface DeleteIpAccessListResponse {}
 /**
  * Initiates deleting a private endpoint rule. If the connection state is PENDING or EXPIRED, the private endpoint is
  * immediately deleted. Otherwise, the private endpoint is deactivated and will be deleted after one day of
  * deactivation. When a private endpoint is deactivated, the deactivated field is set to true and the private endpoint
  * is not available to your serverless compute resources.
  */
-export interface DeleteNccPrivateEndpointRuleRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Your Network Connectvity Configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Your private endpoint rule ID. */
-    privateEndpointRuleId?: string | undefined;
-}
-export interface DeleteNetworkConnectivityConfigRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Your Network Connectivity Configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-}
-export interface DeleteNetworkPolicyRequest {
-    /** The unique identifier of the network policy to delete. */
-    networkPolicyId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-}
-export interface DeleteNetworkRequest {
-    /** Databricks Account API network configuration ID. */
-    networkId?: string | undefined;
-    accountId?: string | undefined;
-}
-export interface DeletePrivateAccessSettingsRequest {
-    privateAccessSettingsId?: string | undefined;
-    accountId?: string | undefined;
-}
-export interface DeleteVpcEndpointRequest {
-    vpcEndpointId?: string | undefined;
-    accountId?: string | undefined;
+interface DeleteNccPrivateEndpointRuleRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Your Network Connectvity Configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Your private endpoint rule ID. */
+  privateEndpointRuleId?: string | undefined;
+}
+interface DeleteNetworkConnectivityConfigRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Your Network Connectivity Configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+}
+interface DeleteNetworkPolicyRequest {
+  /** The unique identifier of the network policy to delete. */
+  networkPolicyId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+}
+interface DeleteNetworkRequest {
+  /** Databricks Account API network configuration ID. */
+  networkId?: string | undefined;
+  accountId?: string | undefined;
+}
+interface DeletePrivateAccessSettingsRequest {
+  privateAccessSettingsId?: string | undefined;
+  accountId?: string | undefined;
+}
+interface DeleteVpcEndpointRequest {
+  vpcEndpointId?: string | undefined;
+  accountId?: string | undefined;
 }
 /** The network policies applying for egress traffic. */
-export interface EgressNetworkPolicy {
-    /** The access policy enforced for egress traffic to the internet. */
-    networkAccess?: EgressNetworkPolicy_NetworkAccessPolicy | undefined;
-}
-export interface EgressNetworkPolicy_NetworkAccessPolicy {
-    /** The restriction mode that controls how serverless workloads can access the internet. */
-    restrictionMode?: EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode | undefined;
-    /** List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */
-    allowedInternetDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[] | undefined;
-    /** List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */
-    allowedStorageDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination[] | undefined;
-    /** Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES */
-    policyEnforcement?: EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement | undefined;
-    /**
-     * List of internet destinations that serverless workloads are blocked from accessing.
-     * These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN.
-     * Currently supports DNS_NAME type only; IP_RANGE support is planned.
-     */
-    blockedInternetDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[] | undefined;
-    /**
-     * List of <Databricks> workspace destinations that serverless workloads are
-     * allowed to access when in RESTRICTED_ACCESS mode.
-     */
-    allowedDatabricksDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination[] | undefined;
-}
-export interface EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination {
-    /** The workspace IDs to allow egress traffic to. */
-    workspaceIds?: bigint[] | undefined;
+interface EgressNetworkPolicy {
+  /** The access policy enforced for egress traffic to the internet. */
+  networkAccess?: EgressNetworkPolicy_NetworkAccessPolicy | undefined;
+}
+interface EgressNetworkPolicy_NetworkAccessPolicy {
+  /** The restriction mode that controls how serverless workloads can access the internet. */
+  restrictionMode?: EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode | undefined;
+  /** List of internet destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */
+  allowedInternetDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[] | undefined;
+  /** List of storage destinations that serverless workloads are allowed to access when in RESTRICTED_ACCESS mode. */
+  allowedStorageDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination[] | undefined;
+  /** Optional. When policy_enforcement is not provided, we default to ENFORCE_MODE_ALL_SERVICES */
+  policyEnforcement?: EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement | undefined;
+  /**
+   * List of internet destinations that serverless workloads are blocked from accessing.
+   * These destinations are enforced when restriction mode is RESTRICTED_ACCESS or DRY_RUN.
+   * Currently supports DNS_NAME type only; IP_RANGE support is planned.
+   */
+  blockedInternetDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination[] | undefined;
+  /**
+   * List of <Databricks> workspace destinations that serverless workloads are
+   * allowed to access when in RESTRICTED_ACCESS mode.
+   */
+  allowedDatabricksDestinations?: EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination[] | undefined;
+}
+interface EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination {
+  /** The workspace IDs to allow egress traffic to. */
+  workspaceIds?: bigint[] | undefined;
 }
 /**
  * Users can specify accessible internet destinations when outbound access is restricted.
  * We only support DNS_NAME (FQDN format) destinations for the time being.
  * Going forward we may extend support to host names and IP addresses.
  */
-export interface EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination {
-    /** The internet destination to which access will be allowed. Format dependent on the destination type. */
-    destination?: string | undefined;
-    /** The type of internet destination. Currently only DNS_NAME is supported. */
-    internetDestinationType?: EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType | undefined;
-}
-export interface EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement {
-    /**
-     * The mode of policy enforcement. ENFORCED blocks traffic that violates policy,
-     * while DRY_RUN only logs violations without blocking. When not specified,
-     * defaults to ENFORCED.
-     */
-    enforcementMode?: EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode | undefined;
-    /**
-     * When empty, it means dry run for all products.
-     * When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode.
-     */
-    dryRunModeProductFilter?: EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter[] | undefined;
+interface EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination {
+  /** The internet destination to which access will be allowed. Format dependent on the destination type. */
+  destination?: string | undefined;
+  /** The type of internet destination. Currently only DNS_NAME is supported. */
+  internetDestinationType?: EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType | undefined;
+}
+interface EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement {
+  /**
+   * The mode of policy enforcement. ENFORCED blocks traffic that violates policy,
+   * while DRY_RUN only logs violations without blocking. When not specified,
+   * defaults to ENFORCED.
+   */
+  enforcementMode?: EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode | undefined;
+  /**
+   * When empty, it means dry run for all products.
+   * When non-empty, it means dry run for specific products and for the other products, they will run in enforced mode.
+   */
+  dryRunModeProductFilter?: EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter[] | undefined;
 }
 /** Users can specify accessible storage destinations. */
-export interface EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination {
-    bucketName?: string | undefined;
-    region?: string | undefined;
-    /** The type of storage destination. */
-    storageDestinationType?: EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType | undefined;
-    /** The Azure storage account name. */
-    azureStorageAccount?: string | undefined;
-    /** The Azure storage service type (blob, dfs, etc.). */
-    azureStorageService?: string | undefined;
+interface EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination {
+  bucketName?: string | undefined;
+  region?: string | undefined;
+  /** The type of storage destination. */
+  storageDestinationType?: EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType | undefined;
+  /** The Azure storage account name. */
+  azureStorageAccount?: string | undefined;
+  /** The Azure storage service type (blob, dfs, etc.). */
+  azureStorageService?: string | undefined;
 }
 /** Endpoint represents a cloud networking resource in a user's cloud account and binds it to the <Databricks> account. */
-export interface Endpoint {
-    /** The resource name of the endpoint, which uniquely identifies the endpoint. */
-    name?: string | undefined;
-    /** The unique identifier for this endpoint under the account. This field is a UUID generated by <Databricks>. */
-    endpointId?: string | undefined;
-    /** The Databricks Account in which the endpoint object exists. */
-    accountId?: string | undefined;
-    /**
-     * The human-readable display name of this endpoint.
-     * The input should conform to RFC-1034, which restricts to letters, numbers, and hyphens,
-     * with the first character a letter, the last a letter or a number, and a 63 character maximum.
-     */
-    displayName?: string | undefined;
-    /**
-     * The use case that determines the type of network connectivity this endpoint provides.
-     * This field is automatically determined based on the endpoint configuration and cloud-specific settings.
-     */
-    useCase?: EndpointUseCase_EndpointUseCase | undefined;
-    /** The cloud provider region where this endpoint is located. */
-    region?: string | undefined;
-    /** The state of the endpoint. The endpoint can only be used if the state is `APPROVED`. */
-    state?: EndpointState | undefined;
-    /**
-     * The cloud info of this endpoint.
-     * (-- Azure is GA; AWS and GCP added for PLAT-165656 (Private Preview). --)
-     */
-    endpointInfo?: {
-        $case: 'azurePrivateEndpointInfo';
-        /** Info for an Azure private endpoint. */
-        azurePrivateEndpointInfo: AzurePrivateEndpointInfo;
-    } | {
-        $case: 'awsVpcEndpointInfo';
-        /** Info for an AWS VPC endpoint. */
-        awsVpcEndpointInfo: AwsVpcEndpointInfo;
-    } | {
-        $case: 'gcpPscEndpointInfo';
-        /** Info for a GCP Private Service Connect endpoint. */
-        gcpPscEndpointInfo: GcpPscEndpointInfo;
-    } | undefined;
-    /** The timestamp when the endpoint was created. The timestamp is in RFC 3339 format in UTC timezone. */
-    createTime?: Temporal.Instant | undefined;
-}
-export interface EndpointUseCase {
-}
-export interface GcpEndpoint {
-    /** Output only. The URI of the created PSC endpoint. */
-    pscEndpointUri?: string | undefined;
-    /** Selects which target services this private endpoint reaches. */
-    targetServices?: {
-        $case: 'serviceAttachment';
-        /**
-         * The full url of the target service attachment.
-         * Example:
-         * projects/my-gcp-project/regions/us-east4/serviceAttachments/my-service-attachment
-         */
-        serviceAttachment: string;
-    } | undefined;
-}
-export interface GcpNetworkInfo {
-    /** The GCP project ID for network resources. This project is where the VPC and subnet resides. */
-    networkProjectId?: string | undefined;
-    /** The customer-provided VPC ID. */
-    vpcId?: string | undefined;
-    /**
-     * The customer-provided Subnet ID that will be available to Clusters in Workspaces using this
-     * Network.
-     */
-    subnetId?: string | undefined;
-    subnetRegion?: string | undefined;
-    /**
-     * Name of the secondary range within the subnet that will be used by GKE as Pod IP range.
-     * This is BYO VPC specific. DB VPC uses network.getGcpManagedNetworkConfig.getGkeClusterPodIpRange
-     */
-    podIpRangeName?: string | undefined;
-    /** Name of the secondary range within the subnet that will be used by GKE as Service IP range. */
-    serviceIpRangeName?: string | undefined;
-}
-export interface GcpPscEndpointInfo {
-    /**
-     * The ID of the underlying Private Service Connect connection in the GCP consumer project,
-     * assigned by GCP when the PSC connection is created.
-     */
-    pscConnectionId?: string | undefined;
-    /**
-     * The GCP consumer project ID in which this PSC endpoint is created. Provided by the customer
-     * when registering an existing PSC endpoint.
-     */
-    projectId?: string | undefined;
-    /**
-     * The name of this PSC connection in the GCP consumer project. Provided by the customer when
-     * registering an existing PSC endpoint.
-     */
-    pscEndpoint?: string | undefined;
-    /**
-     * The GCP region of the PSC connection endpoint. Provided by the customer when registering an
-     * existing PSC endpoint. GCP supports only same-region PSC, so this must match the workspace
-     * region.
-     */
-    endpointRegion?: string | undefined;
-    /** The ID of the <Databricks> service attachment this PSC endpoint connects to. */
-    serviceAttachmentId?: string | undefined;
-}
-export interface GcpVpcEndpointInfo {
-    pscConnectionId?: string | undefined;
-    projectId?: string | undefined;
-    pscEndpointName?: string | undefined;
-    endpointRegion?: string | undefined;
-    serviceAttachmentId?: string | undefined;
-}
-export interface GetAccountIpAccessListRequest {
-    accountId?: string | undefined;
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
-}
-export interface GetAccountIpAccessListResponse {
-    ipAccessList?: AccountIpAccessList | undefined;
-}
-export interface GetEndpointRequest {
-    name?: string | undefined;
-}
-export interface GetIpAccessListRequest {
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
+interface Endpoint {
+  /** The resource name of the endpoint, which uniquely identifies the endpoint. */
+  name?: string | undefined;
+  /** The unique identifier for this endpoint under the account. This field is a UUID generated by <Databricks>. */
+  endpointId?: string | undefined;
+  /** The Databricks Account in which the endpoint object exists. */
+  accountId?: string | undefined;
+  /**
+   * The human-readable display name of this endpoint.
+   * The input should conform to RFC-1034, which restricts to letters, numbers, and hyphens,
+   * with the first character a letter, the last a letter or a number, and a 63 character maximum.
+   */
+  displayName?: string | undefined;
+  /**
+   * The use case that determines the type of network connectivity this endpoint provides.
+   * This field is automatically determined based on the endpoint configuration and cloud-specific settings.
+   */
+  useCase?: EndpointUseCase_EndpointUseCase | undefined;
+  /** The cloud provider region where this endpoint is located. */
+  region?: string | undefined;
+  /** The state of the endpoint. The endpoint can only be used if the state is `APPROVED`. */
+  state?: EndpointState | undefined;
+  /**
+   * The cloud info of this endpoint.
+   * (-- Azure is GA; AWS and GCP added for PLAT-165656 (Private Preview). --)
+   */
+  endpointInfo?: {
+    $case: 'azurePrivateEndpointInfo'; /** Info for an Azure private endpoint. */
+    azurePrivateEndpointInfo: AzurePrivateEndpointInfo;
+  } | {
+    $case: 'awsVpcEndpointInfo'; /** Info for an AWS VPC endpoint. */
+    awsVpcEndpointInfo: AwsVpcEndpointInfo;
+  } | {
+    $case: 'gcpPscEndpointInfo'; /** Info for a GCP Private Service Connect endpoint. */
+    gcpPscEndpointInfo: GcpPscEndpointInfo;
+  } | undefined;
+  /** The timestamp when the endpoint was created. The timestamp is in RFC 3339 format in UTC timezone. */
+  createTime?: Temporal.Instant | undefined;
+}
+interface EndpointUseCase {}
+interface GcpEndpoint {
+  /** Output only. The URI of the created PSC endpoint. */
+  pscEndpointUri?: string | undefined;
+  /** Selects which target services this private endpoint reaches. */
+  targetServices?: {
+    $case: 'serviceAttachment';
+    /**
+     * The full url of the target service attachment.
+     * Example:
+     * projects/my-gcp-project/regions/us-east4/serviceAttachments/my-service-attachment
+     */
+    serviceAttachment: string;
+  } | undefined;
+}
+interface GcpNetworkInfo {
+  /** The GCP project ID for network resources. This project is where the VPC and subnet resides. */
+  networkProjectId?: string | undefined;
+  /** The customer-provided VPC ID. */
+  vpcId?: string | undefined;
+  /**
+   * The customer-provided Subnet ID that will be available to Clusters in Workspaces using this
+   * Network.
+   */
+  subnetId?: string | undefined;
+  subnetRegion?: string | undefined;
+  /**
+   * Name of the secondary range within the subnet that will be used by GKE as Pod IP range.
+   * This is BYO VPC specific. DB VPC uses network.getGcpManagedNetworkConfig.getGkeClusterPodIpRange
+   */
+  podIpRangeName?: string | undefined;
+  /** Name of the secondary range within the subnet that will be used by GKE as Service IP range. */
+  serviceIpRangeName?: string | undefined;
+}
+interface GcpPscEndpointInfo {
+  /**
+   * The ID of the underlying Private Service Connect connection in the GCP consumer project,
+   * assigned by GCP when the PSC connection is created.
+   */
+  pscConnectionId?: string | undefined;
+  /**
+   * The GCP consumer project ID in which this PSC endpoint is created. Provided by the customer
+   * when registering an existing PSC endpoint.
+   */
+  projectId?: string | undefined;
+  /**
+   * The name of this PSC connection in the GCP consumer project. Provided by the customer when
+   * registering an existing PSC endpoint.
+   */
+  pscEndpoint?: string | undefined;
+  /**
+   * The GCP region of the PSC connection endpoint. Provided by the customer when registering an
+   * existing PSC endpoint. GCP supports only same-region PSC, so this must match the workspace
+   * region.
+   */
+  endpointRegion?: string | undefined;
+  /** The ID of the <Databricks> service attachment this PSC endpoint connects to. */
+  serviceAttachmentId?: string | undefined;
+}
+interface GcpVpcEndpointInfo {
+  pscConnectionId?: string | undefined;
+  projectId?: string | undefined;
+  pscEndpointName?: string | undefined;
+  endpointRegion?: string | undefined;
+  serviceAttachmentId?: string | undefined;
+}
+interface GetAccountIpAccessListRequest {
+  accountId?: string | undefined;
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
+}
+interface GetAccountIpAccessListResponse {
+  ipAccessList?: AccountIpAccessList | undefined;
+}
+interface GetEndpointRequest {
+  name?: string | undefined;
+}
+interface GetIpAccessListRequest {
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
 }
 /** An IP access list was successfully returned. */
-export interface GetIpAccessListResponse {
-    ipAccessList?: IpAccessList | undefined;
+interface GetIpAccessListResponse {
+  ipAccessList?: IpAccessList | undefined;
 }
-export interface GetNccPrivateEndpointRuleRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Your Network Connectvity Configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Your private endpoint rule ID. */
-    privateEndpointRuleId?: string | undefined;
+interface GetNccPrivateEndpointRuleRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Your Network Connectvity Configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Your private endpoint rule ID. */
+  privateEndpointRuleId?: string | undefined;
 }
 /** ***************************** Public facing RPC requests and responses *****************************\// */
-export interface GetNetworkConnectivityConfigRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Your Network Connectivity Configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-}
-export interface GetNetworkPolicyRequest {
-    /** The unique identifier of the network policy to retrieve. */
-    networkPolicyId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-}
-export interface GetNetworkRequest {
-    /** Databricks Account API network configuration ID. */
-    networkId?: string | undefined;
-    accountId?: string | undefined;
-}
-export interface GetPrivateAccessSettingsRequest {
-    privateAccessSettingsId?: string | undefined;
-    accountId?: string | undefined;
-}
-export interface GetVpcEndpointRequest {
-    /** Databricks VPC endpoint ID. */
-    vpcEndpointId?: string | undefined;
-    accountId?: string | undefined;
-}
-export interface GetWorkspaceNetworkOptionRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** The workspace ID. */
-    workspaceId?: bigint | undefined;
+interface GetNetworkConnectivityConfigRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Your Network Connectivity Configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+}
+interface GetNetworkPolicyRequest {
+  /** The unique identifier of the network policy to retrieve. */
+  networkPolicyId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+}
+interface GetNetworkRequest {
+  /** Databricks Account API network configuration ID. */
+  networkId?: string | undefined;
+  accountId?: string | undefined;
+}
+interface GetPrivateAccessSettingsRequest {
+  privateAccessSettingsId?: string | undefined;
+  accountId?: string | undefined;
+}
+interface GetVpcEndpointRequest {
+  /** Databricks VPC endpoint ID. */
+  vpcEndpointId?: string | undefined;
+  accountId?: string | undefined;
+}
+interface GetWorkspaceNetworkOptionRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** The workspace ID. */
+  workspaceId?: bigint | undefined;
 }
 /** The network policies applying for ingress traffic. */
-export interface IngressNetworkPolicy {
-    /**
-     * The network policy restrictions for public access to the workspace.
-     * Configures how public internet traffic is allowed or denied access.
-     */
-    publicAccess?: IngressNetworkPolicy_PublicAccess | undefined;
-    /**
-     * The network policy restrictions for private access.
-     * Configures how requests arriving over private connectivity are governed.
-     */
-    privateAccess?: IngressNetworkPolicy_PrivateAccess | undefined;
-    crossWorkspaceAccess?: IngressNetworkPolicy_CrossWorkspaceAccess | undefined;
+interface IngressNetworkPolicy {
+  /**
+   * The network policy restrictions for public access to the workspace.
+   * Configures how public internet traffic is allowed or denied access.
+   */
+  publicAccess?: IngressNetworkPolicy_PublicAccess | undefined;
+  /**
+   * The network policy restrictions for private access.
+   * Configures how requests arriving over private connectivity are governed.
+   */
+  privateAccess?: IngressNetworkPolicy_PrivateAccess | undefined;
+  crossWorkspaceAccess?: IngressNetworkPolicy_CrossWorkspaceAccess | undefined;
 }
 /** Matches account-level Databricks API endpoints for an ingress network policy rule. */
-export interface IngressNetworkPolicy_AccountApiDestination {
-    /** The API scopes to match. Use "all-apis" to match any account-level API. */
-    scopes?: string[] | undefined;
-    /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */
-    scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;
+interface IngressNetworkPolicy_AccountApiDestination {
+  /** The API scopes to match. Use "all-apis" to match any account-level API. */
+  scopes?: string[] | undefined;
+  /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */
+  scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;
 }
-export interface IngressNetworkPolicy_AccountDatabricksOneDestination {
-    /** Must be set to true. */
-    allDestinations?: boolean | undefined;
+interface IngressNetworkPolicy_AccountDatabricksOneDestination {
+  /** Must be set to true. */
+  allDestinations?: boolean | undefined;
 }
 /** The account console UI destination. */
-export interface IngressNetworkPolicy_AccountUiDestination {
-    /** Must be set to true. */
-    allDestinations?: boolean | undefined;
-}
-export interface IngressNetworkPolicy_AppsRuntimeDestination {
-    /** Must be set to true. */
-    allDestinations?: boolean | undefined;
-}
-export interface IngressNetworkPolicy_Authentication {
-    identityType?: IngressNetworkPolicy_Authentication_IdentityType | undefined;
-    /** Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES. */
-    identities?: IngressNetworkPolicy_AuthenticationIdentity[] | undefined;
-}
-export interface IngressNetworkPolicy_AuthenticationIdentity {
-    principalType?: IngressNetworkPolicy_AuthenticationIdentity_PrincipalType | undefined;
-    principalId?: bigint | undefined;
-}
-export interface IngressNetworkPolicy_CrossWorkspaceAccess {
-    restrictionMode?: IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode | undefined;
-    denyRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;
-    allowRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;
-}
-export interface IngressNetworkPolicy_CrossWorkspaceIngressRule {
-    origin?: IngressNetworkPolicy_CrossWorkspaceRequestOrigin | undefined;
-    destination?: IngressNetworkPolicy_RequestDestination | undefined;
-    authentication?: IngressNetworkPolicy_Authentication | undefined;
-    /** The label for this ingress rule. */
-    label?: string | undefined;
-}
-export interface IngressNetworkPolicy_CrossWorkspaceRequestOrigin {
-    source?: {
-        $case: 'allSourceWorkspaces';
-        /** Matches all source workspaces. */
-        allSourceWorkspaces: boolean;
-    } | {
-        $case: 'selectedWorkspaces';
-        /** Specific source workspace IDs to match. */
-        selectedWorkspaces: IngressNetworkPolicy_WorkspaceIdList;
-    } | undefined;
+interface IngressNetworkPolicy_AccountUiDestination {
+  /** Must be set to true. */
+  allDestinations?: boolean | undefined;
+}
+interface IngressNetworkPolicy_AppsRuntimeDestination {
+  /** Must be set to true. */
+  allDestinations?: boolean | undefined;
+}
+interface IngressNetworkPolicy_Authentication {
+  identityType?: IngressNetworkPolicy_Authentication_IdentityType | undefined;
+  /** Valid only when IdentityType is IDENTITY_TYPE_SELECTED_IDENTITIES. */
+  identities?: IngressNetworkPolicy_AuthenticationIdentity[] | undefined;
+}
+interface IngressNetworkPolicy_AuthenticationIdentity {
+  principalType?: IngressNetworkPolicy_AuthenticationIdentity_PrincipalType | undefined;
+  principalId?: bigint | undefined;
+}
+interface IngressNetworkPolicy_CrossWorkspaceAccess {
+  restrictionMode?: IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode | undefined;
+  denyRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;
+  allowRules?: IngressNetworkPolicy_CrossWorkspaceIngressRule[] | undefined;
+}
+interface IngressNetworkPolicy_CrossWorkspaceIngressRule {
+  origin?: IngressNetworkPolicy_CrossWorkspaceRequestOrigin | undefined;
+  destination?: IngressNetworkPolicy_RequestDestination | undefined;
+  authentication?: IngressNetworkPolicy_Authentication | undefined;
+  /** The label for this ingress rule. */
+  label?: string | undefined;
+}
+interface IngressNetworkPolicy_CrossWorkspaceRequestOrigin {
+  source?: {
+    $case: 'allSourceWorkspaces'; /** Matches all source workspaces. */
+    allSourceWorkspaces: boolean;
+  } | {
+    $case: 'selectedWorkspaces'; /** Specific source workspace IDs to match. */
+    selectedWorkspaces: IngressNetworkPolicy_WorkspaceIdList;
+  } | undefined;
 }
 /** A set of registered endpoints, identified by their endpoint IDs. */
-export interface IngressNetworkPolicy_Endpoints {
-    /** The IDs of the registered endpoints. Must contain at least one endpoint ID. */
-    endpointIds?: string[] | undefined;
+interface IngressNetworkPolicy_Endpoints {
+  /** The IDs of the registered endpoints. Must contain at least one endpoint ID. */
+  endpointIds?: string[] | undefined;
 }
-export interface IngressNetworkPolicy_IpRanges {
-    /** We only support IPv4 and IPv4 CIDR notation for now. */
-    ipRanges?: string[] | undefined;
+interface IngressNetworkPolicy_IpRanges {
+  /** We only support IPv4 and IPv4 CIDR notation for now. */
+  ipRanges?: string[] | undefined;
 }
-export interface IngressNetworkPolicy_LakebaseRuntimeDestination {
-    /** Must be set to true. */
-    allDestinations?: boolean | undefined;
+interface IngressNetworkPolicy_LakebaseRuntimeDestination {
+  /** Must be set to true. */
+  allDestinations?: boolean | undefined;
 }
 /**
  * Configures how requests arriving over private connectivity, such as
  * registered endpoints, are allowed or denied access.
  */
-export interface IngressNetworkPolicy_PrivateAccess {
-    /** The restriction mode for private access. */
-    restrictionMode?: IngressNetworkPolicy_PrivateAccess_RestrictionMode | undefined;
-    /**
-     * Deny rules are evaluated first. A request matching any deny rule is denied,
-     * regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS.
-     */
-    denyRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;
-    /**
-     * Allow rules are evaluated after deny rules. A request matching any allow rule is
-     * allowed; a request matching no rule is denied by default. Only applies when
-     * restriction_mode is RESTRICTED_ACCESS.
-     */
-    allowRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;
+interface IngressNetworkPolicy_PrivateAccess {
+  /** The restriction mode for private access. */
+  restrictionMode?: IngressNetworkPolicy_PrivateAccess_RestrictionMode | undefined;
+  /**
+   * Deny rules are evaluated first. A request matching any deny rule is denied,
+   * regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS.
+   */
+  denyRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;
+  /**
+   * Allow rules are evaluated after deny rules. A request matching any allow rule is
+   * allowed; a request matching no rule is denied by default. Only applies when
+   * restriction_mode is RESTRICTED_ACCESS.
+   */
+  allowRules?: IngressNetworkPolicy_PrivateIngressRule[] | undefined;
 }
 /**
  * An ingress rule is enforced when a request satisfies all
  * specified attributes — including request origin, destination, and authentication.
  */
-export interface IngressNetworkPolicy_PrivateIngressRule {
+interface IngressNetworkPolicy_PrivateIngressRule {
+  /**
+   * The origin the request must match — the private connectivity the request arrives
+   * through, for example a specific set of registered endpoints or any endpoint
+   * registered to the account. See PrivateRequestOrigin.
+   */
+  origin?: IngressNetworkPolicy_PrivateRequestOrigin | undefined;
+  /**
+   * The destination the request must match — the resource being accessed, for example
+   * the workspace UI, workspace APIs, or account-level APIs. See RequestDestination.
+   */
+  destination?: IngressNetworkPolicy_RequestDestination | undefined;
+  /**
+   * The authenticated identity the request must match. When unset, the rule matches
+   * all users and service principals.
+   * On the account-level network policy, scoping to specific identities is not
+   * currently supported, so this field must be unset (the rule matches all users
+   * and service principals).
+   */
+  authentication?: IngressNetworkPolicy_Authentication | undefined;
+  /** The label for this ingress rule. */
+  label?: string | undefined;
+}
+/**
+ * The origin of a private access request, identified by the endpoint
+ * through which the request arrives.
+ */
+interface IngressNetworkPolicy_PrivateRequestOrigin {
+  source?: {
+    $case: 'endpoints'; /** Matches requests arriving through any of the specified registered endpoints. */
+    endpoints: IngressNetworkPolicy_Endpoints;
+  } | {
+    $case: 'allRegisteredEndpoints';
     /**
-     * The origin the request must match — the private connectivity the request arrives
-     * through, for example a specific set of registered endpoints or any endpoint
-     * registered to the account. See PrivateRequestOrigin.
+     * Matches requests arriving through any endpoint registered to the account.
+     * Must be set to true when specified.
      */
-    origin?: IngressNetworkPolicy_PrivateRequestOrigin | undefined;
+    allRegisteredEndpoints: boolean;
+  } | {
+    $case: 'azureWorkspacePrivateLink';
     /**
-     * The destination the request must match — the resource being accessed, for example
-     * the workspace UI, workspace APIs, or account-level APIs. See RequestDestination.
+     * Matches requests arriving through the workspace's Azure Private Link (ui-api)
+     * endpoints. Can only be used in deny rules of workspace-level network policies.
+     * Must be set to true when specified.
      */
-    destination?: IngressNetworkPolicy_RequestDestination | undefined;
+    azureWorkspacePrivateLink: boolean;
+  } | {
+    $case: 'allPrivateAccess';
     /**
-     * The authenticated identity the request must match. When unset, the rule matches
-     * all users and service principals.
-     * On the account-level network policy, scoping to specific identities is not
-     * currently supported, so this field must be unset (the rule matches all users
-     * and service principals).
+     * Matches requests arriving over any private connectivity, including registered
+     * endpoints and the workspace's Azure Private Link (ui-api) endpoints.
+     * Can only be used in deny rules of workspace-level network policies.
+     * Must be set to true when specified.
      */
-    authentication?: IngressNetworkPolicy_Authentication | undefined;
-    /** The label for this ingress rule. */
-    label?: string | undefined;
+    allPrivateAccess: boolean;
+  } | undefined;
 }
-/**
- * The origin of a private access request, identified by the endpoint
- * through which the request arrives.
- */
-export interface IngressNetworkPolicy_PrivateRequestOrigin {
-    source?: {
-        $case: 'endpoints';
-        /** Matches requests arriving through any of the specified registered endpoints. */
-        endpoints: IngressNetworkPolicy_Endpoints;
-    } | {
-        $case: 'allRegisteredEndpoints';
-        /**
-         * Matches requests arriving through any endpoint registered to the account.
-         * Must be set to true when specified.
-         */
-        allRegisteredEndpoints: boolean;
-    } | {
-        $case: 'azureWorkspacePrivateLink';
-        /**
-         * Matches requests arriving through the workspace's Azure Private Link (ui-api)
-         * endpoints. Can only be used in deny rules of workspace-level network policies.
-         * Must be set to true when specified.
-         */
-        azureWorkspacePrivateLink: boolean;
-    } | {
-        $case: 'allPrivateAccess';
-        /**
-         * Matches requests arriving over any private connectivity, including registered
-         * endpoints and the workspace's Azure Private Link (ui-api) endpoints.
-         * Can only be used in deny rules of workspace-level network policies.
-         * Must be set to true when specified.
-         */
-        allPrivateAccess: boolean;
-    } | undefined;
-}
-export interface IngressNetworkPolicy_PublicAccess {
-    restrictionMode?: IngressNetworkPolicy_PublicAccess_RestrictionMode | undefined;
-    denyRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;
-    allowRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;
+interface IngressNetworkPolicy_PublicAccess {
+  restrictionMode?: IngressNetworkPolicy_PublicAccess_RestrictionMode | undefined;
+  denyRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;
+  allowRules?: IngressNetworkPolicy_PublicIngressRule[] | undefined;
 }
 /**
  * An ingress rule is enforced when a request satisfies all
  * specified attributes — including request origin, destination, and authentication.
  */
-export interface IngressNetworkPolicy_PublicIngressRule {
-    origin?: IngressNetworkPolicy_PublicRequestOrigin | undefined;
-    destination?: IngressNetworkPolicy_RequestDestination | undefined;
-    authentication?: IngressNetworkPolicy_Authentication | undefined;
-    /** The label for this ingress rule. */
-    label?: string | undefined;
-}
-export interface IngressNetworkPolicy_PublicRequestOrigin {
-    source?: {
-        $case: 'allIpRanges';
-        /** Matches all IPv4 and IPv6 ranges (both public and private). */
-        allIpRanges: boolean;
-    } | {
-        $case: 'includedIpRanges';
-        /** Will not allow IP ranges with private IPs. */
-        includedIpRanges: IngressNetworkPolicy_IpRanges;
-    } | {
-        $case: 'excludedIpRanges';
-        /** Excluded means: all public IP ranges except this one. */
-        excludedIpRanges: IngressNetworkPolicy_IpRanges;
-    } | undefined;
-}
-export interface IngressNetworkPolicy_RequestDestination {
-    /**
-     * When true, match all destinations, no other destination fields can be set.
-     * When not set or false, at least one specific destination must be provided.
-     */
-    allDestinations?: boolean | undefined;
-    workspaceUi?: IngressNetworkPolicy_WorkspaceUiDestination | undefined;
-    workspaceApi?: IngressNetworkPolicy_WorkspaceApiDestination | undefined;
-    appsRuntime?: IngressNetworkPolicy_AppsRuntimeDestination | undefined;
-    lakebaseRuntime?: IngressNetworkPolicy_LakebaseRuntimeDestination | undefined;
-    /**
-     * Matches requests to the account console UI.
-     * Can only be used in the account-level network policy.
-     */
-    accountUi?: IngressNetworkPolicy_AccountUiDestination | undefined;
-    /**
-     * Matches requests to account-level APIs.
-     * Can only be used in the account-level network policy.
-     */
-    accountApi?: IngressNetworkPolicy_AccountApiDestination | undefined;
-    /** Account DatabricksOne destination is not supported. */
-    accountDatabricksOne?: IngressNetworkPolicy_AccountDatabricksOneDestination | undefined;
+interface IngressNetworkPolicy_PublicIngressRule {
+  origin?: IngressNetworkPolicy_PublicRequestOrigin | undefined;
+  destination?: IngressNetworkPolicy_RequestDestination | undefined;
+  authentication?: IngressNetworkPolicy_Authentication | undefined;
+  /** The label for this ingress rule. */
+  label?: string | undefined;
+}
+interface IngressNetworkPolicy_PublicRequestOrigin {
+  source?: {
+    $case: 'allIpRanges'; /** Matches all IPv4 and IPv6 ranges (both public and private). */
+    allIpRanges: boolean;
+  } | {
+    $case: 'includedIpRanges'; /** Will not allow IP ranges with private IPs. */
+    includedIpRanges: IngressNetworkPolicy_IpRanges;
+  } | {
+    $case: 'excludedIpRanges'; /** Excluded means: all public IP ranges except this one. */
+    excludedIpRanges: IngressNetworkPolicy_IpRanges;
+  } | undefined;
+}
+interface IngressNetworkPolicy_RequestDestination {
+  /**
+   * When true, match all destinations, no other destination fields can be set.
+   * When not set or false, at least one specific destination must be provided.
+   */
+  allDestinations?: boolean | undefined;
+  workspaceUi?: IngressNetworkPolicy_WorkspaceUiDestination | undefined;
+  workspaceApi?: IngressNetworkPolicy_WorkspaceApiDestination | undefined;
+  appsRuntime?: IngressNetworkPolicy_AppsRuntimeDestination | undefined;
+  lakebaseRuntime?: IngressNetworkPolicy_LakebaseRuntimeDestination | undefined;
+  /**
+   * Matches requests to the account console UI.
+   * Can only be used in the account-level network policy.
+   */
+  accountUi?: IngressNetworkPolicy_AccountUiDestination | undefined;
+  /**
+   * Matches requests to account-level APIs.
+   * Can only be used in the account-level network policy.
+   */
+  accountApi?: IngressNetworkPolicy_AccountApiDestination | undefined;
+  /** Account DatabricksOne destination is not supported. */
+  accountDatabricksOne?: IngressNetworkPolicy_AccountDatabricksOneDestination | undefined;
 }
 /** Matches workspace-level Databricks API endpoints for an ingress network policy rule. */
-export interface IngressNetworkPolicy_WorkspaceApiDestination {
-    scopes?: string[] | undefined;
-    /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */
-    scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;
+interface IngressNetworkPolicy_WorkspaceApiDestination {
+  scopes?: string[] | undefined;
+  /** Qualifies the breadth of API access for the listed scopes. See ApiScopeQualifier. */
+  scopeQualifier?: IngressNetworkPolicy_ApiScopeQualifier | undefined;
 }
-export interface IngressNetworkPolicy_WorkspaceIdList {
-    workspaceIds?: bigint[] | undefined;
+interface IngressNetworkPolicy_WorkspaceIdList {
+  workspaceIds?: bigint[] | undefined;
 }
-export interface IngressNetworkPolicy_WorkspaceUiDestination {
-    /** Must be set to true. */
-    allDestinations?: boolean | undefined;
+interface IngressNetworkPolicy_WorkspaceUiDestination {
+  /** Must be set to true. */
+  allDestinations?: boolean | undefined;
 }
 /** Definition of an IP Access list */
-export interface IpAccessList {
-    /** Universally unique identifier (UUID) of the IP access list. */
-    listId?: string | undefined;
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    ipAddresses?: string[] | undefined;
-    /** Total number of IP or CIDR values. */
-    addressCount?: number | undefined;
-    listType?: IpAccessListType | undefined;
-    /** Creation timestamp in milliseconds. */
-    createdAt?: bigint | undefined;
-    /** User ID of the user who created this list. */
-    createdBy?: bigint | undefined;
-    /** Update timestamp in milliseconds. */
-    updatedAt?: bigint | undefined;
-    /** User ID of the user who updated this list. */
-    updatedBy?: bigint | undefined;
-    /** Specifies whether this IP access list is enabled. */
-    enabled?: boolean | undefined;
-}
-export interface ListAccountIpAccessListsRequest {
-    accountId?: string | undefined;
+interface IpAccessList {
+  /** Universally unique identifier (UUID) of the IP access list. */
+  listId?: string | undefined;
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  ipAddresses?: string[] | undefined;
+  /** Total number of IP or CIDR values. */
+  addressCount?: number | undefined;
+  listType?: IpAccessListType | undefined;
+  /** Creation timestamp in milliseconds. */
+  createdAt?: bigint | undefined;
+  /** User ID of the user who created this list. */
+  createdBy?: bigint | undefined;
+  /** Update timestamp in milliseconds. */
+  updatedAt?: bigint | undefined;
+  /** User ID of the user who updated this list. */
+  updatedBy?: bigint | undefined;
+  /** Specifies whether this IP access list is enabled. */
+  enabled?: boolean | undefined;
+}
+interface ListAccountIpAccessListsRequest {
+  accountId?: string | undefined;
 }
 /** IP access lists were successfully returned. */
-export interface ListAccountIpAccessListsResponse {
-    ipAccessLists?: AccountIpAccessList[] | undefined;
-}
-export interface ListEndpointsRequest {
-    /**
-     * The parent resource name of the account to list endpoints for.
-     * Format: `accounts/{account_id}`.
-     */
-    parent?: string | undefined;
-    pageToken?: string | undefined;
-    pageSize?: number | undefined;
-}
-export interface ListEndpointsResponse {
-    items?: Endpoint[] | undefined;
-    nextPageToken?: string | undefined;
-}
-export interface ListIpAccessLists {
-}
+interface ListAccountIpAccessListsResponse {
+  ipAccessLists?: AccountIpAccessList[] | undefined;
+}
+interface ListEndpointsRequest {
+  /**
+   * The parent resource name of the account to list endpoints for.
+   * Format: `accounts/{account_id}`.
+   */
+  parent?: string | undefined;
+  pageToken?: string | undefined;
+  pageSize?: number | undefined;
+}
+interface ListEndpointsResponse {
+  items?: Endpoint[] | undefined;
+  nextPageToken?: string | undefined;
+}
+interface ListIpAccessLists {}
 /** IP access lists were successfully returned. */
-export interface ListIpAccessListsResponse {
-    ipAccessLists?: IpAccessList[] | undefined;
+interface ListIpAccessListsResponse {
+  ipAccessLists?: IpAccessList[] | undefined;
 }
 /** Gets an array of private endpoint rules. */
-export interface ListNccPrivateEndpointRulesRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Your Network Connectvity Configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Pagination token to go to next page based on previous query. */
-    pageToken?: string | undefined;
+interface ListNccPrivateEndpointRulesRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Your Network Connectvity Configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Pagination token to go to next page based on previous query. */
+  pageToken?: string | undefined;
 }
 /** The private endpoint rule list was successfully retrieved. */
-export interface ListNccPrivateEndpointRulesResponse {
-    items?: NccPrivateEndpointRule[] | undefined;
-    /** A token that can be used to get the next page of results. If null, there are no more results to show. */
-    nextPageToken?: string | undefined;
+interface ListNccPrivateEndpointRulesResponse {
+  items?: NccPrivateEndpointRule[] | undefined;
+  /** A token that can be used to get the next page of results. If null, there are no more results to show. */
+  nextPageToken?: string | undefined;
 }
-export interface ListNetworkConnectivityConfigsRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Pagination token to go to next page based on previous query. */
-    pageToken?: string | undefined;
+interface ListNetworkConnectivityConfigsRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Pagination token to go to next page based on previous query. */
+  pageToken?: string | undefined;
 }
 /** The network connectivity configuration list was successfully retrieved. */
-export interface ListNetworkConnectivityConfigsResponse {
-    items?: NetworkConnectivityConfig[] | undefined;
-    /** A token that can be used to get the next page of results. If null, there are no more results to show. */
-    nextPageToken?: string | undefined;
+interface ListNetworkConnectivityConfigsResponse {
+  items?: NetworkConnectivityConfig[] | undefined;
+  /** A token that can be used to get the next page of results. If null, there are no more results to show. */
+  nextPageToken?: string | undefined;
 }
-export interface ListNetworkPoliciesRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Pagination token to go to next page based on previous query. */
-    pageToken?: string | undefined;
+interface ListNetworkPoliciesRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Pagination token to go to next page based on previous query. */
+  pageToken?: string | undefined;
 }
-export interface ListNetworkPoliciesResponse {
-    /** List of network policies. */
-    items?: AccountNetworkPolicy[] | undefined;
-    /** A token that can be used to get the next page of results. If null, there are no more results to show. */
-    nextPageToken?: string | undefined;
+interface ListNetworkPoliciesResponse {
+  /** List of network policies. */
+  items?: AccountNetworkPolicy[] | undefined;
+  /** A token that can be used to get the next page of results. If null, there are no more results to show. */
+  nextPageToken?: string | undefined;
 }
-export interface ListNetworkRequest {
-    accountId?: string | undefined;
+interface ListNetworkRequest {
+  accountId?: string | undefined;
 }
-export interface ListNetworkResponse {
-    networks?: Network[] | undefined;
+interface ListNetworkResponse {
+  networks?: Network[] | undefined;
 }
-export interface ListPrivateAccessSettingsRequest {
-    accountId?: string | undefined;
+interface ListPrivateAccessSettingsRequest {
+  accountId?: string | undefined;
 }
-export interface ListPrivateAccessSettingsResponse {
-    privateAccessSettings?: PrivateAccessSettings[] | undefined;
+interface ListPrivateAccessSettingsResponse {
+  privateAccessSettings?: PrivateAccessSettings[] | undefined;
 }
-export interface ListVpcEndpointRequest {
-    accountId?: string | undefined;
+interface ListVpcEndpointRequest {
+  accountId?: string | undefined;
 }
-export interface ListVpcEndpointResponse {
-    vpcEndpoints?: VpcEndpoint[] | undefined;
+interface ListVpcEndpointResponse {
+  vpcEndpoints?: VpcEndpoint[] | undefined;
 }
 /**
  * Properties of the new private endpoint rule.
  * Note that you must approve the endpoint in Azure portal after initialization.
  */
-export interface NccPrivateEndpointRule {
-    /** The ID of a private endpoint rule. */
-    ruleId?: string | undefined;
-    /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
-    networkConnectivityConfigId?: string | undefined;
-    /**
-     * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
-     * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console
-     * before they take effect.
-     * The possible values are:
-     * - PENDING: The endpoint has been created and pending approval.
-     * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
-     * - REJECTED: Connection was rejected by the private link resource owner.
-     * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
-     * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
-     * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.
-     * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.
-     */
-    connectionState?: NccPrivateEndpointRule_PrivateLinkConnectionState | undefined;
-    /**
-     * Only used by private endpoints to customer-managed private endpoint services.
-     *
-     * Domain names of target private link service.
-     * When updating this field, the full list of target domain_names must be specified.
-     */
-    domainNames?: string[] | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Whether this private endpoint is deactivated. */
-    deactivated?: boolean | undefined;
-    /** Time in epoch milliseconds when this object was deactivated. */
-    deactivatedAt?: bigint | undefined;
-    errorMessage?: string | undefined;
-    /** The Azure resource ID of the target resource. */
-    resourceId?: string | undefined;
-    /**
-     * Not used by customer-managed private endpoint services.
-     *
-     * The sub-resource type (group ID) of the target resource.
-     * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
-     */
-    groupId?: string | undefined;
-    /** The name of the Azure private endpoint resource. */
-    endpointName?: string | undefined;
-    /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
-    accountId?: string | undefined;
-    /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
-    endpointService?: string | undefined;
-    /**
-     * Only used by private endpoints towards AWS S3 service.
-     *
-     * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
-     * The bucket names must be in the same region as the NCC/endpoint service.
-     * When updating this field, we perform full update on this field. Please ensure a full list of desired
-     * resource_names is provided.
-     */
-    resourceNames?: string[] | undefined;
-    /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */
-    vpcEndpointId?: string | undefined;
-    /**
-     * Update this field to activate/deactivate this private endpoint to allow egress access from
-     * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).
-     */
-    enabled?: boolean | undefined;
-    endpoint?: {
-        $case: 'gcpEndpoint';
-        gcpEndpoint: GcpEndpoint;
-    } | undefined;
-}
-export interface Network {
-    /** The <Databricks> network configuration ID. */
-    networkId?: string | undefined;
-    /** The <Databricks> account ID associated with this network configuration. */
-    accountId?: string | undefined;
-    /** Workspace ID associated with this network configuration. */
-    workspaceId?: bigint | undefined;
-    /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */
-    vpcId?: string | undefined;
-    /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */
-    subnetIds?: string[] | undefined;
-    /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */
-    securityGroupIds?: string[] | undefined;
-    vpcStatus?: VpcStatus | undefined;
-    /** Array of error messages about the network configuration. */
-    errorMessages?: NetworkHealth[] | undefined;
-    /** The human-readable name of the network configuration. */
-    networkName?: string | undefined;
-    /** Time in epoch milliseconds when the network was created. */
-    creationTime?: bigint | undefined;
-    /** Array of warning messages about the network configuration. */
-    warningMessages?: NetworkWarning[] | undefined;
-    vpcEndpoints?: NetworkVpcEndpoints | undefined;
-    networkInfo?: {
-        $case: 'gcpNetworkInfo';
-        gcpNetworkInfo: GcpNetworkInfo;
-    } | undefined;
+interface NccPrivateEndpointRule {
+  /** The ID of a private endpoint rule. */
+  ruleId?: string | undefined;
+  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
+  networkConnectivityConfigId?: string | undefined;
+  /**
+   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
+   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console
+   * before they take effect.
+   * The possible values are:
+   * - PENDING: The endpoint has been created and pending approval.
+   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
+   * - REJECTED: Connection was rejected by the private link resource owner.
+   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
+   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
+   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.
+   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.
+   */
+  connectionState?: NccPrivateEndpointRule_PrivateLinkConnectionState | undefined;
+  /**
+   * Only used by private endpoints to customer-managed private endpoint services.
+   *
+   * Domain names of target private link service.
+   * When updating this field, the full list of target domain_names must be specified.
+   */
+  domainNames?: string[] | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Whether this private endpoint is deactivated. */
+  deactivated?: boolean | undefined;
+  /** Time in epoch milliseconds when this object was deactivated. */
+  deactivatedAt?: bigint | undefined;
+  errorMessage?: string | undefined;
+  /** The Azure resource ID of the target resource. */
+  resourceId?: string | undefined;
+  /**
+   * Not used by customer-managed private endpoint services.
+   *
+   * The sub-resource type (group ID) of the target resource.
+   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
+   */
+  groupId?: string | undefined;
+  /** The name of the Azure private endpoint resource. */
+  endpointName?: string | undefined;
+  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
+  accountId?: string | undefined;
+  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
+  endpointService?: string | undefined;
+  /**
+   * Only used by private endpoints towards AWS S3 service.
+   *
+   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
+   * The bucket names must be in the same region as the NCC/endpoint service.
+   * When updating this field, we perform full update on this field. Please ensure a full list of desired
+   * resource_names is provided.
+   */
+  resourceNames?: string[] | undefined;
+  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */
+  vpcEndpointId?: string | undefined;
+  /**
+   * Update this field to activate/deactivate this private endpoint to allow egress access from
+   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).
+   */
+  enabled?: boolean | undefined;
+  endpoint?: {
+    $case: 'gcpEndpoint';
+    gcpEndpoint: GcpEndpoint;
+  } | undefined;
+}
+interface Network {
+  /** The <Databricks> network configuration ID. */
+  networkId?: string | undefined;
+  /** The <Databricks> account ID associated with this network configuration. */
+  accountId?: string | undefined;
+  /** Workspace ID associated with this network configuration. */
+  workspaceId?: bigint | undefined;
+  /** The ID of the VPC associated with this network configuration. VPC IDs can be used in multiple networks. */
+  vpcId?: string | undefined;
+  /** IDs of at least two subnets associated with this network. Subnet IDs **cannot** be used in multiple network configurations. */
+  subnetIds?: string[] | undefined;
+  /** IDs of one to five security groups associated with this network. Security group IDs **cannot** be used in multiple network configurations. */
+  securityGroupIds?: string[] | undefined;
+  vpcStatus?: VpcStatus | undefined;
+  /** Array of error messages about the network configuration. */
+  errorMessages?: NetworkHealth[] | undefined;
+  /** The human-readable name of the network configuration. */
+  networkName?: string | undefined;
+  /** Time in epoch milliseconds when the network was created. */
+  creationTime?: bigint | undefined;
+  /** Array of warning messages about the network configuration. */
+  warningMessages?: NetworkWarning[] | undefined;
+  vpcEndpoints?: NetworkVpcEndpoints | undefined;
+  networkInfo?: {
+    $case: 'gcpNetworkInfo';
+    gcpNetworkInfo: GcpNetworkInfo;
+  } | undefined;
 }
 /** Properties of the new network connectivity configuration. */
-export interface NetworkConnectivityConfig {
-    /** <Databricks> network connectivity configuration ID. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /**
-     * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,
-     * and underscores. The length must be between 3 and 30 characters. The name must match the regular
-     * expression ^[0-9a-zA-Z-_]{3,30}$
-     */
-    name?: string | undefined;
-    /**
-     * The region for the network connectivity configuration.
-     * Only workspaces in the same region can be attached to the network connectivity configuration.
-     */
-    region?: string | undefined;
-    /** The network connectivity rules that apply to network traffic from your serverless compute resources. */
-    egressConfig?: CustomerFacingNetworkConnectivityConfigEgressConfig | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
+interface NetworkConnectivityConfig {
+  /** <Databricks> network connectivity configuration ID. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /**
+   * The name of the network connectivity configuration. The name can contain alphanumeric characters, hyphens,
+   * and underscores. The length must be between 3 and 30 characters. The name must match the regular
+   * expression ^[0-9a-zA-Z-_]{3,30}$
+   */
+  name?: string | undefined;
+  /**
+   * The region for the network connectivity configuration.
+   * Only workspaces in the same region can be attached to the network connectivity configuration.
+   */
+  region?: string | undefined;
+  /** The network connectivity rules that apply to network traffic from your serverless compute resources. */
+  egressConfig?: CustomerFacingNetworkConnectivityConfigEgressConfig | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
 }
 /**
  * Properties of the new private endpoint rule.
  * Note that for private endpoints towards a VPC endpoint service behind a customer-managed NLB,
  * you must approve the endpoint in AWS console after initialization.
  */
-export interface NetworkConnectivityConfigAwsPrivateEndpointRule {
-    /** The ID of a private endpoint rule. */
-    ruleId?: string | undefined;
-    /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
-    networkConnectivityConfigId?: string | undefined;
-    /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
-    accountId?: string | undefined;
-    /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
-    endpointService?: string | undefined;
-    /**
-     * Only used by private endpoints towards a VPC endpoint service for customer-managed VPC endpoint service.
-     *
-     * The target AWS resource FQDNs accessible via the VPC endpoint service.
-     * When updating this field, we perform full update on this field. Please ensure a full list of desired domain_names is provided.
-     */
-    domainNames?: string[] | undefined;
-    /**
-     * Only used by private endpoints towards AWS S3 service.
-     *
-     * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
-     * The bucket names must be in the same region as the NCC/endpoint service.
-     * When updating this field, we perform full update on this field.
-     * Please ensure a full list of desired resource_names is provided.
-     */
-    resourceNames?: string[] | undefined;
-    /** The AWS VPC endpoint ID. You can use this ID to identify VPC endpoint created by <Databricks>. */
-    vpcEndpointId?: string | undefined;
-    /**
-     * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
-     * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the AWS console
-     * before they take effect.
-     * The possible values are:
-     * - PENDING: The endpoint has been created and pending approval.
-     * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
-     * - REJECTED: Connection was rejected by the private link resource owner.
-     * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
-     * - EXPIRED: If the endpoint is created but not approved in 14 days, it is EXPIRED.
-     */
-    connectionState?: NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Whether this private endpoint is deactivated. */
-    deactivated?: boolean | undefined;
-    /** Time in epoch milliseconds when this object was deactivated. */
-    deactivatedAt?: bigint | undefined;
-    /**
-     * Only used by private endpoints towards an AWS S3 service.
-     *
-     * Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources.
-     */
-    enabled?: boolean | undefined;
-    errorMessage?: string | undefined;
+interface NetworkConnectivityConfigAwsPrivateEndpointRule {
+  /** The ID of a private endpoint rule. */
+  ruleId?: string | undefined;
+  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
+  networkConnectivityConfigId?: string | undefined;
+  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
+  accountId?: string | undefined;
+  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
+  endpointService?: string | undefined;
+  /**
+   * Only used by private endpoints towards a VPC endpoint service for customer-managed VPC endpoint service.
+   *
+   * The target AWS resource FQDNs accessible via the VPC endpoint service.
+   * When updating this field, we perform full update on this field. Please ensure a full list of desired domain_names is provided.
+   */
+  domainNames?: string[] | undefined;
+  /**
+   * Only used by private endpoints towards AWS S3 service.
+   *
+   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
+   * The bucket names must be in the same region as the NCC/endpoint service.
+   * When updating this field, we perform full update on this field.
+   * Please ensure a full list of desired resource_names is provided.
+   */
+  resourceNames?: string[] | undefined;
+  /** The AWS VPC endpoint ID. You can use this ID to identify VPC endpoint created by <Databricks>. */
+  vpcEndpointId?: string | undefined;
+  /**
+   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
+   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the AWS console
+   * before they take effect.
+   * The possible values are:
+   * - PENDING: The endpoint has been created and pending approval.
+   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
+   * - REJECTED: Connection was rejected by the private link resource owner.
+   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
+   * - EXPIRED: If the endpoint is created but not approved in 14 days, it is EXPIRED.
+   */
+  connectionState?: NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Whether this private endpoint is deactivated. */
+  deactivated?: boolean | undefined;
+  /** Time in epoch milliseconds when this object was deactivated. */
+  deactivatedAt?: bigint | undefined;
+  /**
+   * Only used by private endpoints towards an AWS S3 service.
+   *
+   * Update this field to activate/deactivate this private endpoint to allow egress access from serverless compute resources.
+   */
+  enabled?: boolean | undefined;
+  errorMessage?: string | undefined;
 }
 /**
  * Properties of the new private endpoint rule.
  * Note that you must approve the endpoint in Azure portal after initialization.
  */
-export interface NetworkConnectivityConfigAzurePrivateEndpointRule {
-    /** The ID of a private endpoint rule. */
-    ruleId?: string | undefined;
-    /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
-    networkConnectivityConfigId?: string | undefined;
-    /** The Azure resource ID of the target resource. */
-    resourceId?: string | undefined;
-    /**
-     * Only used by private endpoints to Azure first-party services.
-     *
-     * The sub-resource type (group ID) of the target resource.
-     * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
-     */
-    groupId?: string | undefined;
-    /** The name of the Azure private endpoint resource. */
-    endpointName?: string | undefined;
-    /**
-     * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
-     * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Azure portal
-     * before they take effect.
-     * The possible values are:
-     * - INIT: (deprecated) The endpoint has been created and pending approval.
-     * - PENDING: The endpoint has been created and pending approval.
-     * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
-     * - REJECTED: Connection was rejected by the private link resource owner.
-     * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
-     * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
-     */
-    connectionState?: NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Whether this private endpoint is deactivated. */
-    deactivated?: boolean | undefined;
-    /** Time in epoch milliseconds when this object was deactivated. */
-    deactivatedAt?: bigint | undefined;
-    /**
-     * Not used by customer-managed private endpoint services.
-     *
-     * Domain names of target private link service.
-     * When updating this field, the full list of target domain_names must be specified.
-     */
-    domainNames?: string[] | undefined;
-    errorMessage?: string | undefined;
+interface NetworkConnectivityConfigAzurePrivateEndpointRule {
+  /** The ID of a private endpoint rule. */
+  ruleId?: string | undefined;
+  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
+  networkConnectivityConfigId?: string | undefined;
+  /** The Azure resource ID of the target resource. */
+  resourceId?: string | undefined;
+  /**
+   * Only used by private endpoints to Azure first-party services.
+   *
+   * The sub-resource type (group ID) of the target resource.
+   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
+   */
+  groupId?: string | undefined;
+  /** The name of the Azure private endpoint resource. */
+  endpointName?: string | undefined;
+  /**
+   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
+   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Azure portal
+   * before they take effect.
+   * The possible values are:
+   * - INIT: (deprecated) The endpoint has been created and pending approval.
+   * - PENDING: The endpoint has been created and pending approval.
+   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
+   * - REJECTED: Connection was rejected by the private link resource owner.
+   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
+   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
+   */
+  connectionState?: NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Whether this private endpoint is deactivated. */
+  deactivated?: boolean | undefined;
+  /** Time in epoch milliseconds when this object was deactivated. */
+  deactivatedAt?: bigint | undefined;
+  /**
+   * Not used by customer-managed private endpoint services.
+   *
+   * Domain names of target private link service.
+   * When updating this field, the full list of target domain_names must be specified.
+   */
+  domainNames?: string[] | undefined;
+  errorMessage?: string | undefined;
 }
 /**
  * Egress network configurations. Provides network configurations for Databricks -> Customer
  * traffic.
  */
-export interface NetworkConnectivityConfigEgressConfig {
-}
+interface NetworkConnectivityConfigEgressConfig {}
 /** Default rules don't have specific targets. */
-export interface NetworkConnectivityConfigEgressConfig_DefaultRule {
-    azureServiceEndpointRule?: NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule | undefined;
-    awsStableIpRule?: NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule | undefined;
+interface NetworkConnectivityConfigEgressConfig_DefaultRule {
+  azureServiceEndpointRule?: NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule | undefined;
+  awsStableIpRule?: NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule | undefined;
 }
 /** The stable AWS IP CIDR blocks. You can use these to configure the firewall of your resources to allow traffic from your <Databricks> workspace. */
-export interface NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule {
-    /** The list of stable IP CIDR blocks from which <Databricks> network traffic originates when accessing your resources. */
-    cidrBlocks?: string[] | undefined;
+interface NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule {
+  /** The list of stable IP CIDR blocks from which <Databricks> network traffic originates when accessing your resources. */
+  cidrBlocks?: string[] | undefined;
 }
 /**
  * The stable Azure service endpoints. You can configure the firewall of your Azure resources
  * to allow traffic from your <Databricks> serverless compute resources.
  */
-export interface NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule {
-    /** The Azure region in which this service endpoint rule applies.. */
-    targetRegion?: string | undefined;
-    /** The Azure services to which this service endpoint rule applies to. */
-    targetServices?: EgressResourceType[] | undefined;
-    /** The list of subnets from which <Databricks> network traffic originates when accessing your Azure resources. */
-    subnets?: string[] | undefined;
-}
-export interface NetworkHealth {
-    errorType?: string | undefined;
-    /** Details of the error. */
-    errorMessage?: string | undefined;
-}
-export interface NetworkVpcEndpoints {
-    /** The VPC endpoint ID used by this network to access the Databricks REST API. */
-    restApi?: string[] | undefined;
-    /** The VPC endpoint ID used by this network to access the <Databricks> secure cluster connectivity relay. */
-    dataplaneRelay?: string[] | undefined;
-}
-export interface NetworkWarning {
-    warningType?: string | undefined;
-    /** Details of the warning. */
-    warningMessage?: string | undefined;
+interface NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule {
+  /** The Azure region in which this service endpoint rule applies.. */
+  targetRegion?: string | undefined;
+  /** The Azure services to which this service endpoint rule applies to. */
+  targetServices?: EgressResourceType[] | undefined;
+  /** The list of subnets from which <Databricks> network traffic originates when accessing your Azure resources. */
+  subnets?: string[] | undefined;
+}
+interface NetworkHealth {
+  errorType?: string | undefined;
+  /** Details of the error. */
+  errorMessage?: string | undefined;
+}
+interface NetworkVpcEndpoints {
+  /** The VPC endpoint ID used by this network to access the Databricks REST API. */
+  restApi?: string[] | undefined;
+  /** The VPC endpoint ID used by this network to access the <Databricks> secure cluster connectivity relay. */
+  dataplaneRelay?: string[] | undefined;
+}
+interface NetworkWarning {
+  warningType?: string | undefined;
+  /** Details of the warning. */
+  warningMessage?: string | undefined;
 }
 /** * */
-export interface PrivateAccessSettings {
-    /** <Databricks> private access settings ID. */
-    privateAccessSettingsId?: string | undefined;
-    /** The <Databricks> account ID that hosts the private access settings. */
-    accountId?: string | undefined;
-    /** The human-readable name of the private access settings object. */
-    privateAccessSettingsName?: string | undefined;
-    /** The AWS region for workspaces attached to this private access settings object. */
-    region?: string | undefined;
-    /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */
-    publicAccessEnabled?: boolean | undefined;
-    /**
-     * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.
-     * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.
-     * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.
-     */
-    privateAccessLevel?: PrivateAccessLevel | undefined;
-    /**
-     * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID that is returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.
-     * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints that in your account that can connect to your workspace over AWS PrivateLink.
-     * If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.
-     */
-    allowedVpcEndpointIds?: string[] | undefined;
+interface PrivateAccessSettings {
+  /** <Databricks> private access settings ID. */
+  privateAccessSettingsId?: string | undefined;
+  /** The <Databricks> account ID that hosts the private access settings. */
+  accountId?: string | undefined;
+  /** The human-readable name of the private access settings object. */
+  privateAccessSettingsName?: string | undefined;
+  /** The AWS region for workspaces attached to this private access settings object. */
+  region?: string | undefined;
+  /** Determines if the workspace can be accessed over public internet. For fully private workspaces, you can optionally specify false, but only if you implement both the front-end and the back-end PrivateLink connections. Otherwise, specify true, which means that public access is enabled. */
+  publicAccessEnabled?: boolean | undefined;
+  /**
+   * The private access level controls which VPC endpoints can connect to the UI or API of any workspace that attaches this private access settings object.
+   * `ACCOUNT` level access (the default) allows only VPC endpoints that are registered in your <Databricks> account connect to your workspace.
+   * `ENDPOINT` level access allows only specified VPC endpoints connect to your workspace. For details, see allowed_vpc_endpoint_ids.
+   */
+  privateAccessLevel?: PrivateAccessLevel | undefined;
+  /**
+   * An array of Databricks VPC endpoint IDs. This is the <Databricks> ID that is returned when registering the VPC endpoint configuration in your <Databricks> account. This is not the ID of the VPC endpoint in AWS.
+   * Only used when private_access_level is set to ENDPOINT. This is an allow list of VPC endpoints that in your account that can connect to your workspace over AWS PrivateLink.
+   * If hybrid access to your workspace is enabled by setting public_access_enabled to true, this control only works for PrivateLink connections. To control how your workspace is accessed via public internet, see IP access lists.
+   */
+  allowedVpcEndpointIds?: string[] | undefined;
 }
 /** Details required to replace an IP access list. */
-export interface ReplaceAccountIpAccessListRequest {
-    accountId?: string | undefined;
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    listType?: AccountIpAccessListType_IpAccessListType | undefined;
-    ipAddresses?: string[] | undefined;
-    /** Specifies whether this IP access list is enabled. */
-    enabled?: boolean | undefined;
+interface ReplaceAccountIpAccessListRequest {
+  accountId?: string | undefined;
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  listType?: AccountIpAccessListType_IpAccessListType | undefined;
+  ipAddresses?: string[] | undefined;
+  /** Specifies whether this IP access list is enabled. */
+  enabled?: boolean | undefined;
 }
 /** The IP access list was successfully replaced. */
-export interface ReplaceAccountIpAccessListResponse {
-    ipAccessList?: AccountIpAccessList | undefined;
+interface ReplaceAccountIpAccessListResponse {
+  ipAccessList?: AccountIpAccessList | undefined;
 }
 /** Details required to replace an IP access list. */
-export interface ReplaceIpAccessListRequest {
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    listType?: IpAccessListType | undefined;
-    ipAddresses?: string[] | undefined;
-    /** Specifies whether this IP access list is enabled. */
-    enabled?: boolean | undefined;
+interface ReplaceIpAccessListRequest {
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  listType?: IpAccessListType | undefined;
+  ipAddresses?: string[] | undefined;
+  /** Specifies whether this IP access list is enabled. */
+  enabled?: boolean | undefined;
 }
 /** The IP access list was successfully replaced. */
-export interface ReplaceIpAccessListResponse {
-    ipAccessList?: IpAccessList | undefined;
+interface ReplaceIpAccessListResponse {
+  ipAccessList?: IpAccessList | undefined;
 }
 /** Details required to update an IP access list. */
-export interface UpdateAccountIpAccessListRequest {
-    accountId?: string | undefined;
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    listType?: AccountIpAccessListType_IpAccessListType | undefined;
-    ipAddresses?: string[] | undefined;
-    /** Specifies whether this IP access list is enabled. */
-    enabled?: boolean | undefined;
+interface UpdateAccountIpAccessListRequest {
+  accountId?: string | undefined;
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  listType?: AccountIpAccessListType_IpAccessListType | undefined;
+  ipAddresses?: string[] | undefined;
+  /** Specifies whether this IP access list is enabled. */
+  enabled?: boolean | undefined;
 }
 /** The IP access list was successfully updated. */
-export interface UpdateAccountIpAccessListResponse {
-    ipAccessList?: AccountIpAccessList | undefined;
+interface UpdateAccountIpAccessListResponse {
+  ipAccessList?: AccountIpAccessList | undefined;
 }
 /** Details required to update an IP access list. */
-export interface UpdateIpAccessListRequest {
-    /** The ID for the corresponding IP access list */
-    listId?: string | undefined;
-    /** Label for the IP access list. This **cannot** be empty. */
-    label?: string | undefined;
-    listType?: IpAccessListType | undefined;
-    ipAddresses?: string[] | undefined;
-    /** Specifies whether this IP access list is enabled. */
-    enabled?: boolean | undefined;
+interface UpdateIpAccessListRequest {
+  /** The ID for the corresponding IP access list */
+  listId?: string | undefined;
+  /** Label for the IP access list. This **cannot** be empty. */
+  label?: string | undefined;
+  listType?: IpAccessListType | undefined;
+  ipAddresses?: string[] | undefined;
+  /** Specifies whether this IP access list is enabled. */
+  enabled?: boolean | undefined;
 }
 /** The IP access list was successfully updated. */
-export interface UpdateIpAccessListResponse {
-    ipAccessList?: IpAccessList | undefined;
+interface UpdateIpAccessListResponse {
+  ipAccessList?: IpAccessList | undefined;
 }
 /** Your Network Connectivity Configuration ID. */
-export interface UpdateNccPrivateEndpointRuleRequest {
-    /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
-    networkConnectivityConfigId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Your private endpoint rule ID. */
-    privateEndpointRuleId?: string | undefined;
-    privateEndpointRule?: UpdatePrivateEndpointRule | undefined;
-    updateMask?: FieldMask<UpdatePrivateEndpointRule> | undefined;
-}
-export interface UpdateNetworkPolicyRequest {
-    /** The unique identifier for the network policy. */
-    networkPolicyId?: string | undefined;
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** Updated network policy configuration details. */
-    networkPolicy?: AccountNetworkPolicy | undefined;
-}
-export interface UpdatePrivateAccessSettingsRequest {
-    /** Properties of the new private access settings object. */
-    customerFacingPrivateAccessSettings?: PrivateAccessSettings | undefined;
+interface UpdateNccPrivateEndpointRuleRequest {
+  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
+  networkConnectivityConfigId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Your private endpoint rule ID. */
+  privateEndpointRuleId?: string | undefined;
+  privateEndpointRule?: UpdatePrivateEndpointRule | undefined;
+  updateMask?: FieldMask<UpdatePrivateEndpointRule> | undefined;
+}
+interface UpdateNetworkPolicyRequest {
+  /** The unique identifier for the network policy. */
+  networkPolicyId?: string | undefined;
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** Updated network policy configuration details. */
+  networkPolicy?: AccountNetworkPolicy | undefined;
+}
+interface UpdatePrivateAccessSettingsRequest {
+  /** Properties of the new private access settings object. */
+  customerFacingPrivateAccessSettings?: PrivateAccessSettings | undefined;
 }
 /**
  * Properties of the new private endpoint rule.
  * Note that you must approve the endpoint in Azure portal after initialization.
  */
-export interface UpdatePrivateEndpointRule {
-    /** The ID of a private endpoint rule. */
-    ruleId?: string | undefined;
-    /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
-    networkConnectivityConfigId?: string | undefined;
-    /**
-     * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
-     * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console
-     * before they take effect.
-     * The possible values are:
-     * - PENDING: The endpoint has been created and pending approval.
-     * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
-     * - REJECTED: Connection was rejected by the private link resource owner.
-     * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
-     * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
-     * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.
-     * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.
-     */
-    connectionState?: NccPrivateEndpointRule_PrivateLinkConnectionState | undefined;
-    /**
-     * Only used by private endpoints to customer-managed private endpoint services.
-     *
-     * Domain names of target private link service.
-     * When updating this field, the full list of target domain_names must be specified.
-     */
-    domainNames?: string[] | undefined;
-    /** Time in epoch milliseconds when this object was created. */
-    creationTime?: bigint | undefined;
-    /** Time in epoch milliseconds when this object was updated. */
-    updatedTime?: bigint | undefined;
-    /** Whether this private endpoint is deactivated. */
-    deactivated?: boolean | undefined;
-    /** Time in epoch milliseconds when this object was deactivated. */
-    deactivatedAt?: bigint | undefined;
-    errorMessage?: string | undefined;
-    /** The Azure resource ID of the target resource. */
-    resourceId?: string | undefined;
-    /**
-     * Not used by customer-managed private endpoint services.
-     *
-     * The sub-resource type (group ID) of the target resource.
-     * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
-     */
-    groupId?: string | undefined;
-    /** The name of the Azure private endpoint resource. */
-    endpointName?: string | undefined;
-    /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
-    accountId?: string | undefined;
-    /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
-    endpointService?: string | undefined;
-    /**
-     * Only used by private endpoints towards AWS S3 service.
-     *
-     * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
-     * The bucket names must be in the same region as the NCC/endpoint service.
-     * When updating this field, we perform full update on this field. Please ensure a full list of desired
-     * resource_names is provided.
-     */
-    resourceNames?: string[] | undefined;
-    /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */
-    vpcEndpointId?: string | undefined;
-    /**
-     * Update this field to activate/deactivate this private endpoint to allow egress access from
-     * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).
-     */
-    enabled?: boolean | undefined;
-    endpoint?: {
-        $case: 'gcpEndpoint';
-        gcpEndpoint: GcpEndpoint;
-    } | undefined;
-}
-export interface UpdateWorkspaceNetworkOptionRequest {
-    /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
-    accountId?: string | undefined;
-    /** The workspace ID. */
-    workspaceId?: bigint | undefined;
-    /** The network option details for the workspace. */
-    workspaceNetworkOption?: WorkspaceNetworkOption | undefined;
+interface UpdatePrivateEndpointRule {
+  /** The ID of a private endpoint rule. */
+  ruleId?: string | undefined;
+  /** The ID of a network connectivity configuration, which is the parent resource of this private endpoint rule object. */
+  networkConnectivityConfigId?: string | undefined;
+  /**
+   * The current status of this private endpoint. The private endpoint rules are effective only if the connection state
+   * is ESTABLISHED. Remember that you must approve new endpoints on your resources in the Cloud console
+   * before they take effect.
+   * The possible values are:
+   * - PENDING: The endpoint has been created and pending approval.
+   * - ESTABLISHED: The endpoint has been approved and is ready to use in your serverless compute resources.
+   * - REJECTED: Connection was rejected by the private link resource owner.
+   * - DISCONNECTED: Connection was removed by the private link resource owner, the private endpoint becomes informative and should be deleted for clean-up.
+   * - EXPIRED: If the endpoint was created but not approved in 14 days, it will be EXPIRED.
+   * - CREATING: The endpoint creation is in progress. Once successfully created, the state will transition to PENDING.
+   * - CREATE_FAILED: The endpoint creation failed. You can check the error_message field for more details.
+   */
+  connectionState?: NccPrivateEndpointRule_PrivateLinkConnectionState | undefined;
+  /**
+   * Only used by private endpoints to customer-managed private endpoint services.
+   *
+   * Domain names of target private link service.
+   * When updating this field, the full list of target domain_names must be specified.
+   */
+  domainNames?: string[] | undefined;
+  /** Time in epoch milliseconds when this object was created. */
+  creationTime?: bigint | undefined;
+  /** Time in epoch milliseconds when this object was updated. */
+  updatedTime?: bigint | undefined;
+  /** Whether this private endpoint is deactivated. */
+  deactivated?: boolean | undefined;
+  /** Time in epoch milliseconds when this object was deactivated. */
+  deactivatedAt?: bigint | undefined;
+  errorMessage?: string | undefined;
+  /** The Azure resource ID of the target resource. */
+  resourceId?: string | undefined;
+  /**
+   * Not used by customer-managed private endpoint services.
+   *
+   * The sub-resource type (group ID) of the target resource.
+   * Note that to connect to workspace root storage (root DBFS), you need two endpoints, one for blob and one for dfs.
+   */
+  groupId?: string | undefined;
+  /** The name of the Azure private endpoint resource. */
+  endpointName?: string | undefined;
+  /** <Databricks> account ID. You can find your account ID from the Accounts Console. */
+  accountId?: string | undefined;
+  /** The full target AWS endpoint service name that connects to the destination resources of the private endpoint. */
+  endpointService?: string | undefined;
+  /**
+   * Only used by private endpoints towards AWS S3 service.
+   *
+   * The globally unique S3 bucket names that will be accessed via the VPC endpoint.
+   * The bucket names must be in the same region as the NCC/endpoint service.
+   * When updating this field, we perform full update on this field. Please ensure a full list of desired
+   * resource_names is provided.
+   */
+  resourceNames?: string[] | undefined;
+  /** The AWS VPC endpoint ID. You can use this ID to identify the VPC endpoint created by <Databricks>. */
+  vpcEndpointId?: string | undefined;
+  /**
+   * Update this field to activate/deactivate this private endpoint to allow egress access from
+   * serverless compute resources. Only honored for first-party services on each cloud (e.g. AWS S3).
+   */
+  enabled?: boolean | undefined;
+  endpoint?: {
+    $case: 'gcpEndpoint';
+    gcpEndpoint: GcpEndpoint;
+  } | undefined;
+}
+interface UpdateWorkspaceNetworkOptionRequest {
+  /** Your <Databricks> account ID. You can find your account ID in your <Databricks> accounts console. */
+  accountId?: string | undefined;
+  /** The workspace ID. */
+  workspaceId?: bigint | undefined;
+  /** The network option details for the workspace. */
+  workspaceNetworkOption?: WorkspaceNetworkOption | undefined;
 }
 /** * */
-export interface VpcEndpoint {
-    /** Databricks VPC endpoint ID. This is the <Databricks>-specific name of the VPC endpoint. Do not confuse this with the `aws_vpc_endpoint_id`, which is the ID within AWS of the VPC endpoint. */
-    vpcEndpointId?: string | undefined;
-    /** The <Databricks> account ID that hosts the VPC endpoint configuration. */
-    accountId?: string | undefined;
-    /** The human-readable name of the storage configuration. */
-    vpcEndpointName?: string | undefined;
-    /** The ID of the VPC endpoint object in AWS. */
-    awsVpcEndpointId?: string | undefined;
-    /** The ID of the <Databricks> [endpoint service](https://docs.aws.amazon.com/vpc/latest/privatelink/endpoint-service.html) that this VPC endpoint is connected to. For a list of endpoint service IDs for each supported AWS region, see the [Databricks PrivateLink documentation](https://docs.databricks.com/administration-guide/cloud-configurations/aws/privatelink.html). */
-    awsEndpointServiceId?: string | undefined;
-    /**
-     * This enumeration represents the type of Databricks VPC endpoint service that was used when creating this VPC endpoint.
-     * If the VPC endpoint connects to the <Databricks> control plane for either the front-end connection or the back-end REST API connection, the value is GENERAL_ACCESS.
-     * If the VPC endpoint connects to the <Databricks> workspace for the back-end secure cluster connectivity relay, the value is DATAPLANE_RELAY_ACCESS.
-     */
-    useCase?: VpcEndpointUseCase | undefined;
-    /** The AWS region in which this VPC endpoint object exists. */
-    region?: string | undefined;
-    /** The AWS Account in which the VPC endpoint object exists. */
-    awsAccountId?: string | undefined;
-    /** The current state (such as `available` or `rejected`) of the VPC endpoint. Derived from AWS. For the full set of values, see [AWS DescribeVpcEndpoint documentation](https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-vpc-endpoints.html). */
-    state?: string | undefined;
-    vpcEndpointInfo?: {
-        $case: 'gcpVpcEndpointInfo';
-        /**
-         * The cloud info of this vpc endpoint.
-         * Info for a GCP vpc endpoint.
-         */
-        gcpVpcEndpointInfo: GcpVpcEndpointInfo;
-    } | undefined;
-}
-export interface WorkspaceNetworkOption {
-    /**
-     * The network policy ID to apply to the workspace. This controls the network access rules
-     * for all serverless compute resources in the workspace. Each workspace can only be
-     * linked to one policy at a time. If no policy is explicitly assigned,
-     * the workspace will use 'default-policy'.
-     */
-    networkPolicyId?: string | undefined;
-    /** The workspace ID. */
-    workspaceId?: bigint | undefined;
-}
-export declare const unmarshalAccountIpAccessListSchema: z.ZodType<AccountIpAccessList>;
-export declare const unmarshalAccountNetworkPolicySchema: z.ZodType<AccountNetworkPolicy>;
-export declare const unmarshalAwsVpcEndpointInfoSchema: z.ZodType<AwsVpcEndpointInfo>;
-export declare const unmarshalAzurePrivateEndpointInfoSchema: z.ZodType<AzurePrivateEndpointInfo>;
-export declare const unmarshalCreateAccountIpAccessListResponseSchema: z.ZodType<CreateAccountIpAccessListResponse>;
-export declare const unmarshalCreateIpAccessListResponseSchema: z.ZodType<CreateIpAccessListResponse>;
-export declare const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig>;
-export declare const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule>;
-export declare const unmarshalDeleteAccountIpAccessListResponseSchema: z.ZodType<DeleteAccountIpAccessListResponse>;
-export declare const unmarshalDeleteIpAccessListResponseSchema: z.ZodType<DeleteIpAccessListResponse>;
-export declare const unmarshalEgressNetworkPolicySchema: z.ZodType<EgressNetworkPolicy>;
-export declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy>;
-export declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination>;
-export declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination>;
-export declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement>;
-export declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination>;
-export declare const unmarshalEndpointSchema: z.ZodType<Endpoint>;
-export declare const unmarshalGcpEndpointSchema: z.ZodType<GcpEndpoint>;
-export declare const unmarshalGcpNetworkInfoSchema: z.ZodType<GcpNetworkInfo>;
-export declare const unmarshalGcpPscEndpointInfoSchema: z.ZodType<GcpPscEndpointInfo>;
-export declare const unmarshalGcpVpcEndpointInfoSchema: z.ZodType<GcpVpcEndpointInfo>;
-export declare const unmarshalGetAccountIpAccessListResponseSchema: z.ZodType<GetAccountIpAccessListResponse>;
-export declare const unmarshalGetIpAccessListResponseSchema: z.ZodType<GetIpAccessListResponse>;
-export declare const unmarshalIngressNetworkPolicySchema: z.ZodType<IngressNetworkPolicy>;
-export declare const unmarshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountApiDestination>;
-export declare const unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountDatabricksOneDestination>;
-export declare const unmarshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountUiDestination>;
-export declare const unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_AppsRuntimeDestination>;
-export declare const unmarshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType<IngressNetworkPolicy_Authentication>;
-export declare const unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType<IngressNetworkPolicy_AuthenticationIdentity>;
-export declare const unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceAccess>;
-export declare const unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceIngressRule>;
-export declare const unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceRequestOrigin>;
-export declare const unmarshalIngressNetworkPolicy_EndpointsSchema: z.ZodType<IngressNetworkPolicy_Endpoints>;
-export declare const unmarshalIngressNetworkPolicy_IpRangesSchema: z.ZodType<IngressNetworkPolicy_IpRanges>;
-export declare const unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_LakebaseRuntimeDestination>;
-export declare const unmarshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType<IngressNetworkPolicy_PrivateAccess>;
-export declare const unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PrivateIngressRule>;
-export declare const unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PrivateRequestOrigin>;
-export declare const unmarshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType<IngressNetworkPolicy_PublicAccess>;
-export declare const unmarshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PublicIngressRule>;
-export declare const unmarshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PublicRequestOrigin>;
-export declare const unmarshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType<IngressNetworkPolicy_RequestDestination>;
-export declare const unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceApiDestination>;
-export declare const unmarshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType<IngressNetworkPolicy_WorkspaceIdList>;
-export declare const unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceUiDestination>;
-export declare const unmarshalIpAccessListSchema: z.ZodType<IpAccessList>;
-export declare const unmarshalListAccountIpAccessListsResponseSchema: z.ZodType<ListAccountIpAccessListsResponse>;
-export declare const unmarshalListEndpointsResponseSchema: z.ZodType<ListEndpointsResponse>;
-export declare const unmarshalListIpAccessListsResponseSchema: z.ZodType<ListIpAccessListsResponse>;
-export declare const unmarshalListNccPrivateEndpointRulesResponseSchema: z.ZodType<ListNccPrivateEndpointRulesResponse>;
-export declare const unmarshalListNetworkConnectivityConfigsResponseSchema: z.ZodType<ListNetworkConnectivityConfigsResponse>;
-export declare const unmarshalListNetworkPoliciesResponseSchema: z.ZodType<ListNetworkPoliciesResponse>;
-export declare const unmarshalNccPrivateEndpointRuleSchema: z.ZodType<NccPrivateEndpointRule>;
-export declare const unmarshalNetworkSchema: z.ZodType<Network>;
-export declare const unmarshalNetworkConnectivityConfigSchema: z.ZodType<NetworkConnectivityConfig>;
-export declare const unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAwsPrivateEndpointRule>;
-export declare const unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAzurePrivateEndpointRule>;
-export declare const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule>;
-export declare const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule>;
-export declare const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule>;
-export declare const unmarshalNetworkHealthSchema: z.ZodType<NetworkHealth>;
-export declare const unmarshalNetworkVpcEndpointsSchema: z.ZodType<NetworkVpcEndpoints>;
-export declare const unmarshalNetworkWarningSchema: z.ZodType<NetworkWarning>;
-export declare const unmarshalPrivateAccessSettingsSchema: z.ZodType<PrivateAccessSettings>;
-export declare const unmarshalReplaceAccountIpAccessListResponseSchema: z.ZodType<ReplaceAccountIpAccessListResponse>;
-export declare const unmarshalReplaceIpAccessListResponseSchema: z.ZodType<ReplaceIpAccessListResponse>;
-export declare const unmarshalUpdateAccountIpAccessListResponseSchema: z.ZodType<UpdateAccountIpAccessListResponse>;
-export declare const unmarshalUpdateIpAccessListResponseSchema: z.ZodType<UpdateIpAccessListResponse>;
-export declare const unmarshalVpcEndpointSchema: z.ZodType<VpcEndpoint>;
-export declare const unmarshalWorkspaceNetworkOptionSchema: z.ZodType<WorkspaceNetworkOption>;
-export declare const marshalAccountNetworkPolicySchema: z.ZodType;
-export declare const marshalAwsVpcEndpointInfoSchema: z.ZodType;
-export declare const marshalAzurePrivateEndpointInfoSchema: z.ZodType;
-export declare const marshalCreateAccountIpAccessListRequestSchema: z.ZodType;
-export declare const marshalCreateIpAccessListRequestSchema: z.ZodType;
-export declare const marshalCreateNetworkConnectivityConfigurationSchema: z.ZodType;
-export declare const marshalCreateNetworkRequestSchema: z.ZodType;
-export declare const marshalCreatePrivateAccessSettingsRequestSchema: z.ZodType;
-export declare const marshalCreatePrivateEndpointRuleSchema: z.ZodType;
-export declare const marshalCreateVpcEndpointRequestSchema: z.ZodType;
-export declare const marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType;
-export declare const marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType;
-export declare const marshalEgressNetworkPolicySchema: z.ZodType;
-export declare const marshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType;
-export declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType;
-export declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType;
-export declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType;
-export declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType;
-export declare const marshalEndpointSchema: z.ZodType;
-export declare const marshalGcpEndpointSchema: z.ZodType;
-export declare const marshalGcpNetworkInfoSchema: z.ZodType;
-export declare const marshalGcpPscEndpointInfoSchema: z.ZodType;
-export declare const marshalGcpVpcEndpointInfoSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicySchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_EndpointsSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_IpRangesSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType;
-export declare const marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType;
-export declare const marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType;
-export declare const marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType;
-export declare const marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType;
-export declare const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType;
-export declare const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType;
-export declare const marshalNetworkVpcEndpointsSchema: z.ZodType;
-export declare const marshalPrivateAccessSettingsSchema: z.ZodType;
-export declare const marshalReplaceAccountIpAccessListRequestSchema: z.ZodType;
-export declare const marshalReplaceIpAccessListRequestSchema: z.ZodType;
-export declare const marshalUpdateAccountIpAccessListRequestSchema: z.ZodType;
-export declare const marshalUpdateIpAccessListRequestSchema: z.ZodType;
-export declare const marshalUpdatePrivateEndpointRuleSchema: z.ZodType;
-export declare const marshalWorkspaceNetworkOptionSchema: z.ZodType;
-export declare function updatePrivateEndpointRuleFieldMask(...paths: string[]): FieldMask<UpdatePrivateEndpointRule>;
+interface VpcEndpoint {
+  /** Databricks VPC endpoint ID. This is the <Databricks>-specific name of the VPC endpoint. Do not confuse this with the `aws_vpc_endpoint_id`, which is the ID within AWS of the VPC endpoint. */
+  vpcEndpointId?: string | undefined;
+  /** The <Databricks> account ID that hosts the VPC endpoint configuration. */
+  accountId?: string | undefined;
+  /** The human-readable name of the storage configuration. */
+  vpcEndpointName?: string | undefined;
+  /** The ID of the VPC endpoint object in AWS. */
+  awsVpcEndpointId?: string | undefined;
+  /** The ID of the <Databricks> [endpoint service](https://docs.aws.amazon.com/vpc/latest/privatelink/endpoint-service.html) that this VPC endpoint is connected to. For a list of endpoint service IDs for each supported AWS region, see the [Databricks PrivateLink documentation](https://docs.databricks.com/administration-guide/cloud-configurations/aws/privatelink.html). */
+  awsEndpointServiceId?: string | undefined;
+  /**
+   * This enumeration represents the type of Databricks VPC endpoint service that was used when creating this VPC endpoint.
+   * If the VPC endpoint connects to the <Databricks> control plane for either the front-end connection or the back-end REST API connection, the value is GENERAL_ACCESS.
+   * If the VPC endpoint connects to the <Databricks> workspace for the back-end secure cluster connectivity relay, the value is DATAPLANE_RELAY_ACCESS.
+   */
+  useCase?: VpcEndpointUseCase | undefined;
+  /** The AWS region in which this VPC endpoint object exists. */
+  region?: string | undefined;
+  /** The AWS Account in which the VPC endpoint object exists. */
+  awsAccountId?: string | undefined;
+  /** The current state (such as `available` or `rejected`) of the VPC endpoint. Derived from AWS. For the full set of values, see [AWS DescribeVpcEndpoint documentation](https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-vpc-endpoints.html). */
+  state?: string | undefined;
+  vpcEndpointInfo?: {
+    $case: 'gcpVpcEndpointInfo';
+    /**
+     * The cloud info of this vpc endpoint.
+     * Info for a GCP vpc endpoint.
+     */
+    gcpVpcEndpointInfo: GcpVpcEndpointInfo;
+  } | undefined;
+}
+interface WorkspaceNetworkOption {
+  /**
+   * The network policy ID to apply to the workspace. This controls the network access rules
+   * for all serverless compute resources in the workspace. Each workspace can only be
+   * linked to one policy at a time. If no policy is explicitly assigned,
+   * the workspace will use 'default-policy'.
+   */
+  networkPolicyId?: string | undefined;
+  /** The workspace ID. */
+  workspaceId?: bigint | undefined;
+}
+declare const unmarshalAccountIpAccessListSchema: z.ZodType<AccountIpAccessList>;
+declare const unmarshalAccountNetworkPolicySchema: z.ZodType<AccountNetworkPolicy>;
+declare const unmarshalAwsVpcEndpointInfoSchema: z.ZodType<AwsVpcEndpointInfo>;
+declare const unmarshalAzurePrivateEndpointInfoSchema: z.ZodType<AzurePrivateEndpointInfo>;
+declare const unmarshalCreateAccountIpAccessListResponseSchema: z.ZodType<CreateAccountIpAccessListResponse>;
+declare const unmarshalCreateIpAccessListResponseSchema: z.ZodType<CreateIpAccessListResponse>;
+declare const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig>;
+declare const unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType<CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule>;
+declare const unmarshalDeleteAccountIpAccessListResponseSchema: z.ZodType<DeleteAccountIpAccessListResponse>;
+declare const unmarshalDeleteIpAccessListResponseSchema: z.ZodType<DeleteIpAccessListResponse>;
+declare const unmarshalEgressNetworkPolicySchema: z.ZodType<EgressNetworkPolicy>;
+declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy>;
+declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination>;
+declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination>;
+declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement>;
+declare const unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType<EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination>;
+declare const unmarshalEndpointSchema: z.ZodType<Endpoint>;
+declare const unmarshalGcpEndpointSchema: z.ZodType<GcpEndpoint>;
+declare const unmarshalGcpNetworkInfoSchema: z.ZodType<GcpNetworkInfo>;
+declare const unmarshalGcpPscEndpointInfoSchema: z.ZodType<GcpPscEndpointInfo>;
+declare const unmarshalGcpVpcEndpointInfoSchema: z.ZodType<GcpVpcEndpointInfo>;
+declare const unmarshalGetAccountIpAccessListResponseSchema: z.ZodType<GetAccountIpAccessListResponse>;
+declare const unmarshalGetIpAccessListResponseSchema: z.ZodType<GetIpAccessListResponse>;
+declare const unmarshalIngressNetworkPolicySchema: z.ZodType<IngressNetworkPolicy>;
+declare const unmarshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountApiDestination>;
+declare const unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountDatabricksOneDestination>;
+declare const unmarshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType<IngressNetworkPolicy_AccountUiDestination>;
+declare const unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_AppsRuntimeDestination>;
+declare const unmarshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType<IngressNetworkPolicy_Authentication>;
+declare const unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType<IngressNetworkPolicy_AuthenticationIdentity>;
+declare const unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceAccess>;
+declare const unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceIngressRule>;
+declare const unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType<IngressNetworkPolicy_CrossWorkspaceRequestOrigin>;
+declare const unmarshalIngressNetworkPolicy_EndpointsSchema: z.ZodType<IngressNetworkPolicy_Endpoints>;
+declare const unmarshalIngressNetworkPolicy_IpRangesSchema: z.ZodType<IngressNetworkPolicy_IpRanges>;
+declare const unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType<IngressNetworkPolicy_LakebaseRuntimeDestination>;
+declare const unmarshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType<IngressNetworkPolicy_PrivateAccess>;
+declare const unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PrivateIngressRule>;
+declare const unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PrivateRequestOrigin>;
+declare const unmarshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType<IngressNetworkPolicy_PublicAccess>;
+declare const unmarshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType<IngressNetworkPolicy_PublicIngressRule>;
+declare const unmarshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType<IngressNetworkPolicy_PublicRequestOrigin>;
+declare const unmarshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType<IngressNetworkPolicy_RequestDestination>;
+declare const unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceApiDestination>;
+declare const unmarshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType<IngressNetworkPolicy_WorkspaceIdList>;
+declare const unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType<IngressNetworkPolicy_WorkspaceUiDestination>;
+declare const unmarshalIpAccessListSchema: z.ZodType<IpAccessList>;
+declare const unmarshalListAccountIpAccessListsResponseSchema: z.ZodType<ListAccountIpAccessListsResponse>;
+declare const unmarshalListEndpointsResponseSchema: z.ZodType<ListEndpointsResponse>;
+declare const unmarshalListIpAccessListsResponseSchema: z.ZodType<ListIpAccessListsResponse>;
+declare const unmarshalListNccPrivateEndpointRulesResponseSchema: z.ZodType<ListNccPrivateEndpointRulesResponse>;
+declare const unmarshalListNetworkConnectivityConfigsResponseSchema: z.ZodType<ListNetworkConnectivityConfigsResponse>;
+declare const unmarshalListNetworkPoliciesResponseSchema: z.ZodType<ListNetworkPoliciesResponse>;
+declare const unmarshalNccPrivateEndpointRuleSchema: z.ZodType<NccPrivateEndpointRule>;
+declare const unmarshalNetworkSchema: z.ZodType<Network>;
+declare const unmarshalNetworkConnectivityConfigSchema: z.ZodType<NetworkConnectivityConfig>;
+declare const unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAwsPrivateEndpointRule>;
+declare const unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigAzurePrivateEndpointRule>;
+declare const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule>;
+declare const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule>;
+declare const unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType<NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule>;
+declare const unmarshalNetworkHealthSchema: z.ZodType<NetworkHealth>;
+declare const unmarshalNetworkVpcEndpointsSchema: z.ZodType<NetworkVpcEndpoints>;
+declare const unmarshalNetworkWarningSchema: z.ZodType<NetworkWarning>;
+declare const unmarshalPrivateAccessSettingsSchema: z.ZodType<PrivateAccessSettings>;
+declare const unmarshalReplaceAccountIpAccessListResponseSchema: z.ZodType<ReplaceAccountIpAccessListResponse>;
+declare const unmarshalReplaceIpAccessListResponseSchema: z.ZodType<ReplaceIpAccessListResponse>;
+declare const unmarshalUpdateAccountIpAccessListResponseSchema: z.ZodType<UpdateAccountIpAccessListResponse>;
+declare const unmarshalUpdateIpAccessListResponseSchema: z.ZodType<UpdateIpAccessListResponse>;
+declare const unmarshalVpcEndpointSchema: z.ZodType<VpcEndpoint>;
+declare const unmarshalWorkspaceNetworkOptionSchema: z.ZodType<WorkspaceNetworkOption>;
+declare const marshalAccountNetworkPolicySchema: z.ZodType;
+declare const marshalAwsVpcEndpointInfoSchema: z.ZodType;
+declare const marshalAzurePrivateEndpointInfoSchema: z.ZodType;
+declare const marshalCreateAccountIpAccessListRequestSchema: z.ZodType;
+declare const marshalCreateIpAccessListRequestSchema: z.ZodType;
+declare const marshalCreateNetworkConnectivityConfigurationSchema: z.ZodType;
+declare const marshalCreateNetworkRequestSchema: z.ZodType;
+declare const marshalCreatePrivateAccessSettingsRequestSchema: z.ZodType;
+declare const marshalCreatePrivateEndpointRuleSchema: z.ZodType;
+declare const marshalCreateVpcEndpointRequestSchema: z.ZodType;
+declare const marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema: z.ZodType;
+declare const marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema: z.ZodType;
+declare const marshalEgressNetworkPolicySchema: z.ZodType;
+declare const marshalEgressNetworkPolicy_NetworkAccessPolicySchema: z.ZodType;
+declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema: z.ZodType;
+declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema: z.ZodType;
+declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema: z.ZodType;
+declare const marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema: z.ZodType;
+declare const marshalEndpointSchema: z.ZodType;
+declare const marshalGcpEndpointSchema: z.ZodType;
+declare const marshalGcpNetworkInfoSchema: z.ZodType;
+declare const marshalGcpPscEndpointInfoSchema: z.ZodType;
+declare const marshalGcpVpcEndpointInfoSchema: z.ZodType;
+declare const marshalIngressNetworkPolicySchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_AccountApiDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_AccountUiDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_AuthenticationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_AuthenticationIdentitySchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_EndpointsSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_IpRangesSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_PrivateAccessSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_PrivateIngressRuleSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_PrivateRequestOriginSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_PublicAccessSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_PublicIngressRuleSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_PublicRequestOriginSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_RequestDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_WorkspaceIdListSchema: z.ZodType;
+declare const marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema: z.ZodType;
+declare const marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema: z.ZodType;
+declare const marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema: z.ZodType;
+declare const marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema: z.ZodType;
+declare const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema: z.ZodType;
+declare const marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema: z.ZodType;
+declare const marshalNetworkVpcEndpointsSchema: z.ZodType;
+declare const marshalPrivateAccessSettingsSchema: z.ZodType;
+declare const marshalReplaceAccountIpAccessListRequestSchema: z.ZodType;
+declare const marshalReplaceIpAccessListRequestSchema: z.ZodType;
+declare const marshalUpdateAccountIpAccessListRequestSchema: z.ZodType;
+declare const marshalUpdateIpAccessListRequestSchema: z.ZodType;
+declare const marshalUpdatePrivateEndpointRuleSchema: z.ZodType;
+declare const marshalWorkspaceNetworkOptionSchema: z.ZodType;
+declare function updatePrivateEndpointRuleFieldMask(...paths: string[]): FieldMask<UpdatePrivateEndpointRule>;
+//#endregion
+export { AccountIpAccessList, AccountIpAccessListType, AccountIpAccessListType_IpAccessListType, AccountNetworkPolicy, AwsVpcEndpointInfo, AzurePrivateEndpointInfo, CreateAccountIpAccessListRequest, CreateAccountIpAccessListResponse, CreateEndpointRequest, CreateIpAccessListRequest, CreateIpAccessListResponse, CreateNccPrivateEndpointRuleRequest, CreateNetworkConnectivityConfigRequest, CreateNetworkConnectivityConfiguration, CreateNetworkPolicyRequest, CreateNetworkRequest, CreatePrivateAccessSettingsRequest, CreatePrivateEndpointRule, CreateVpcEndpointRequest, CustomerFacingNetworkConnectivityConfigEgressConfig, CustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRule, DeleteAccountIpAccessListRequest, DeleteAccountIpAccessListResponse, DeleteEndpointRequest, DeleteIpAccessListRequest, DeleteIpAccessListResponse, DeleteNccPrivateEndpointRuleRequest, DeleteNetworkConnectivityConfigRequest, DeleteNetworkPolicyRequest, DeleteNetworkRequest, DeletePrivateAccessSettingsRequest, DeleteVpcEndpointRequest, EgressNetworkPolicy, EgressNetworkPolicy_NetworkAccessPolicy, EgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestination, EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination, EgressNetworkPolicy_NetworkAccessPolicy_InternetDestination_InternetDestinationType, EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement, EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_DryRunModeProductFilter, EgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcement_EnforcementMode, EgressNetworkPolicy_NetworkAccessPolicy_RestrictionMode, EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination, EgressNetworkPolicy_NetworkAccessPolicy_StorageDestination_StorageDestinationType, EgressResourceType, Endpoint, EndpointState, EndpointUseCase, EndpointUseCase_EndpointUseCase, GcpEndpoint, GcpNetworkInfo, GcpPscEndpointInfo, GcpVpcEndpointInfo, GetAccountIpAccessListRequest, GetAccountIpAccessListResponse, GetEndpointRequest, GetIpAccessListRequest, GetIpAccessListResponse, GetNccPrivateEndpointRuleRequest, GetNetworkConnectivityConfigRequest, GetNetworkPolicyRequest, GetNetworkRequest, GetPrivateAccessSettingsRequest, GetVpcEndpointRequest, GetWorkspaceNetworkOptionRequest, IngressNetworkPolicy, IngressNetworkPolicy_AccountApiDestination, IngressNetworkPolicy_AccountDatabricksOneDestination, IngressNetworkPolicy_AccountUiDestination, IngressNetworkPolicy_ApiScopeQualifier, IngressNetworkPolicy_AppsRuntimeDestination, IngressNetworkPolicy_Authentication, IngressNetworkPolicy_AuthenticationIdentity, IngressNetworkPolicy_AuthenticationIdentity_PrincipalType, IngressNetworkPolicy_Authentication_IdentityType, IngressNetworkPolicy_CrossWorkspaceAccess, IngressNetworkPolicy_CrossWorkspaceAccess_RestrictionMode, IngressNetworkPolicy_CrossWorkspaceIngressRule, IngressNetworkPolicy_CrossWorkspaceRequestOrigin, IngressNetworkPolicy_Endpoints, IngressNetworkPolicy_IpRanges, IngressNetworkPolicy_LakebaseRuntimeDestination, IngressNetworkPolicy_PrivateAccess, IngressNetworkPolicy_PrivateAccess_RestrictionMode, IngressNetworkPolicy_PrivateIngressRule, IngressNetworkPolicy_PrivateRequestOrigin, IngressNetworkPolicy_PublicAccess, IngressNetworkPolicy_PublicAccess_RestrictionMode, IngressNetworkPolicy_PublicIngressRule, IngressNetworkPolicy_PublicRequestOrigin, IngressNetworkPolicy_RequestDestination, IngressNetworkPolicy_WorkspaceApiDestination, IngressNetworkPolicy_WorkspaceIdList, IngressNetworkPolicy_WorkspaceUiDestination, IpAccessList, IpAccessListType, ListAccountIpAccessListsRequest, ListAccountIpAccessListsResponse, ListEndpointsRequest, ListEndpointsResponse, ListIpAccessLists, ListIpAccessListsResponse, ListNccPrivateEndpointRulesRequest, ListNccPrivateEndpointRulesResponse, ListNetworkConnectivityConfigsRequest, ListNetworkConnectivityConfigsResponse, ListNetworkPoliciesRequest, ListNetworkPoliciesResponse, ListNetworkRequest, ListNetworkResponse, ListPrivateAccessSettingsRequest, ListPrivateAccessSettingsResponse, ListVpcEndpointRequest, ListVpcEndpointResponse, NccPrivateEndpointRule, NccPrivateEndpointRule_PrivateLinkConnectionState, Network, NetworkConnectivityConfig, NetworkConnectivityConfigAwsPrivateEndpointRule, NetworkConnectivityConfigAwsPrivateEndpointRule_PrivateLinkConnectionState, NetworkConnectivityConfigAzurePrivateEndpointRule, NetworkConnectivityConfigAzurePrivateEndpointRule_PrivateLinkConnectionState, NetworkConnectivityConfigEgressConfig, NetworkConnectivityConfigEgressConfig_DefaultRule, NetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRule, NetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRule, NetworkHealth, NetworkVpcEndpoints, NetworkWarning, PrivateAccessLevel, PrivateAccessSettings, ReplaceAccountIpAccessListRequest, ReplaceAccountIpAccessListResponse, ReplaceIpAccessListRequest, ReplaceIpAccessListResponse, UpdateAccountIpAccessListRequest, UpdateAccountIpAccessListResponse, UpdateIpAccessListRequest, UpdateIpAccessListResponse, UpdateNccPrivateEndpointRuleRequest, UpdateNetworkPolicyRequest, UpdatePrivateAccessSettingsRequest, UpdatePrivateEndpointRule, UpdateWorkspaceNetworkOptionRequest, VpcEndpoint, VpcEndpointUseCase, VpcStatus, WorkspaceNetworkOption, marshalAccountNetworkPolicySchema, marshalAwsVpcEndpointInfoSchema, marshalAzurePrivateEndpointInfoSchema, marshalCreateAccountIpAccessListRequestSchema, marshalCreateIpAccessListRequestSchema, marshalCreateNetworkConnectivityConfigurationSchema, marshalCreateNetworkRequestSchema, marshalCreatePrivateAccessSettingsRequestSchema, marshalCreatePrivateEndpointRuleSchema, marshalCreateVpcEndpointRequestSchema, marshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema, marshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema, marshalEgressNetworkPolicySchema, marshalEgressNetworkPolicy_NetworkAccessPolicySchema, marshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema, marshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema, marshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema, marshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema, marshalEndpointSchema, marshalGcpEndpointSchema, marshalGcpNetworkInfoSchema, marshalGcpPscEndpointInfoSchema, marshalGcpVpcEndpointInfoSchema, marshalIngressNetworkPolicySchema, marshalIngressNetworkPolicy_AccountApiDestinationSchema, marshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema, marshalIngressNetworkPolicy_AccountUiDestinationSchema, marshalIngressNetworkPolicy_AppsRuntimeDestinationSchema, marshalIngressNetworkPolicy_AuthenticationIdentitySchema, marshalIngressNetworkPolicy_AuthenticationSchema, marshalIngressNetworkPolicy_CrossWorkspaceAccessSchema, marshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema, marshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema, marshalIngressNetworkPolicy_EndpointsSchema, marshalIngressNetworkPolicy_IpRangesSchema, marshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema, marshalIngressNetworkPolicy_PrivateAccessSchema, marshalIngressNetworkPolicy_PrivateIngressRuleSchema, marshalIngressNetworkPolicy_PrivateRequestOriginSchema, marshalIngressNetworkPolicy_PublicAccessSchema, marshalIngressNetworkPolicy_PublicIngressRuleSchema, marshalIngressNetworkPolicy_PublicRequestOriginSchema, marshalIngressNetworkPolicy_RequestDestinationSchema, marshalIngressNetworkPolicy_WorkspaceApiDestinationSchema, marshalIngressNetworkPolicy_WorkspaceIdListSchema, marshalIngressNetworkPolicy_WorkspaceUiDestinationSchema, marshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema, marshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema, marshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema, marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema, marshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema, marshalNetworkVpcEndpointsSchema, marshalPrivateAccessSettingsSchema, marshalReplaceAccountIpAccessListRequestSchema, marshalReplaceIpAccessListRequestSchema, marshalUpdateAccountIpAccessListRequestSchema, marshalUpdateIpAccessListRequestSchema, marshalUpdatePrivateEndpointRuleSchema, marshalWorkspaceNetworkOptionSchema, unmarshalAccountIpAccessListSchema, unmarshalAccountNetworkPolicySchema, unmarshalAwsVpcEndpointInfoSchema, unmarshalAzurePrivateEndpointInfoSchema, unmarshalCreateAccountIpAccessListResponseSchema, unmarshalCreateIpAccessListResponseSchema, unmarshalCustomerFacingNetworkConnectivityConfigEgressConfigSchema, unmarshalCustomerFacingNetworkConnectivityConfigEgressConfig_CustomerFacingTargetRuleSchema, unmarshalDeleteAccountIpAccessListResponseSchema, unmarshalDeleteIpAccessListResponseSchema, unmarshalEgressNetworkPolicySchema, unmarshalEgressNetworkPolicy_NetworkAccessPolicySchema, unmarshalEgressNetworkPolicy_NetworkAccessPolicy_DatabricksDestinationSchema, unmarshalEgressNetworkPolicy_NetworkAccessPolicy_InternetDestinationSchema, unmarshalEgressNetworkPolicy_NetworkAccessPolicy_PolicyEnforcementSchema, unmarshalEgressNetworkPolicy_NetworkAccessPolicy_StorageDestinationSchema, unmarshalEndpointSchema, unmarshalGcpEndpointSchema, unmarshalGcpNetworkInfoSchema, unmarshalGcpPscEndpointInfoSchema, unmarshalGcpVpcEndpointInfoSchema, unmarshalGetAccountIpAccessListResponseSchema, unmarshalGetIpAccessListResponseSchema, unmarshalIngressNetworkPolicySchema, unmarshalIngressNetworkPolicy_AccountApiDestinationSchema, unmarshalIngressNetworkPolicy_AccountDatabricksOneDestinationSchema, unmarshalIngressNetworkPolicy_AccountUiDestinationSchema, unmarshalIngressNetworkPolicy_AppsRuntimeDestinationSchema, unmarshalIngressNetworkPolicy_AuthenticationIdentitySchema, unmarshalIngressNetworkPolicy_AuthenticationSchema, unmarshalIngressNetworkPolicy_CrossWorkspaceAccessSchema, unmarshalIngressNetworkPolicy_CrossWorkspaceIngressRuleSchema, unmarshalIngressNetworkPolicy_CrossWorkspaceRequestOriginSchema, unmarshalIngressNetworkPolicy_EndpointsSchema, unmarshalIngressNetworkPolicy_IpRangesSchema, unmarshalIngressNetworkPolicy_LakebaseRuntimeDestinationSchema, unmarshalIngressNetworkPolicy_PrivateAccessSchema, unmarshalIngressNetworkPolicy_PrivateIngressRuleSchema, unmarshalIngressNetworkPolicy_PrivateRequestOriginSchema, unmarshalIngressNetworkPolicy_PublicAccessSchema, unmarshalIngressNetworkPolicy_PublicIngressRuleSchema, unmarshalIngressNetworkPolicy_PublicRequestOriginSchema, unmarshalIngressNetworkPolicy_RequestDestinationSchema, unmarshalIngressNetworkPolicy_WorkspaceApiDestinationSchema, unmarshalIngressNetworkPolicy_WorkspaceIdListSchema, unmarshalIngressNetworkPolicy_WorkspaceUiDestinationSchema, unmarshalIpAccessListSchema, unmarshalListAccountIpAccessListsResponseSchema, unmarshalListEndpointsResponseSchema, unmarshalListIpAccessListsResponseSchema, unmarshalListNccPrivateEndpointRulesResponseSchema, unmarshalListNetworkConnectivityConfigsResponseSchema, unmarshalListNetworkPoliciesResponseSchema, unmarshalNccPrivateEndpointRuleSchema, unmarshalNetworkConnectivityConfigAwsPrivateEndpointRuleSchema, unmarshalNetworkConnectivityConfigAzurePrivateEndpointRuleSchema, unmarshalNetworkConnectivityConfigEgressConfig_DefaultRuleSchema, unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AwsStableIpRuleSchema, unmarshalNetworkConnectivityConfigEgressConfig_DefaultRule_AzureServiceEndpointRuleSchema, unmarshalNetworkConnectivityConfigSchema, unmarshalNetworkHealthSchema, unmarshalNetworkSchema, unmarshalNetworkVpcEndpointsSchema, unmarshalNetworkWarningSchema, unmarshalPrivateAccessSettingsSchema, unmarshalReplaceAccountIpAccessListResponseSchema, unmarshalReplaceIpAccessListResponseSchema, unmarshalUpdateAccountIpAccessListResponseSchema, unmarshalUpdateIpAccessListResponseSchema, unmarshalVpcEndpointSchema, unmarshalWorkspaceNetworkOptionSchema, updatePrivateEndpointRuleFieldMask };
 //# sourceMappingURL=model.d.ts.map