@pulumi/databricks 1.75.0-alpha.1757081845 → 1.75.0-alpha.1757561963

package/types/output.d.ts

@@ -23,6 +23,48 @@ export interface AccessControlRuleSetGrantRule {
      */
     role: string;
 }
+export interface AccountFederationPolicyOidcPolicy {
+    /**
+     * The allowed token audiences, as specified in the 'aud' claim of federated tokens.
+     * The audience identifier is intended to represent the recipient of the token.
+     * Can be any non-empty string value. As long as the audience in the token matches
+     * at least one audience in the policy, the token is considered a match. If audiences
+     * is unspecified, defaults to your Databricks account id
+     */
+    audiences?: string[];
+    /**
+     * The required token issuer, as specified in the 'iss' claim of federated tokens
+     */
+    issuer?: string;
+    /**
+     * The public keys used to validate the signature of federated tokens, in JWKS format.
+     * Most use cases should not need to specify this field. If jwksUri and jwksJson
+     * are both unspecified (recommended), Databricks automatically fetches the public
+     * keys from your issuer’s well known endpoint. Databricks strongly recommends
+     * relying on your issuer’s well known endpoint for discovering public keys
+     */
+    jwksJson?: string;
+    /**
+     * URL of the public keys used to validate the signature of federated tokens, in
+     * JWKS format. Most use cases should not need to specify this field. If jwksUri
+     * and jwksJson are both unspecified (recommended), Databricks automatically
+     * fetches the public keys from your issuer’s well known endpoint. Databricks
+     * strongly recommends relying on your issuer’s well known endpoint for discovering
+     * public keys
+     */
+    jwksUri?: string;
+    /**
+     * The required token subject, as specified in the subject claim of federated tokens.
+     * Must be specified for service principal federation policies. Must not be specified
+     * for account federation policies
+     */
+    subject?: string;
+    /**
+     * The claim that contains the subject of the token. If unspecified, the default value
+     * is 'sub'
+     */
+    subjectClaim?: string;
+}
 export interface AccountNetworkPolicyEgress {
     /**
      * The access policy enforced for egress traffic to the internet
@@ -86,6 +128,138 @@ export interface AccountNetworkPolicyEgressNetworkAccessPolicyEnforcement {
      */
     enforcementMode?: string;
 }
+export interface AccountSettingV2AibiDashboardEmbeddingAccessPolicy {
+    /**
+     * . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface AccountSettingV2AibiDashboardEmbeddingApprovedDomains {
+    approvedDomains?: string[];
+}
+export interface AccountSettingV2AutomaticClusterUpdateWorkspace {
+    canToggle?: boolean;
+    enabled?: boolean;
+    enablementDetails?: outputs.AccountSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails;
+    maintenanceWindow?: outputs.AccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface AccountSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * The feature is force enabled if compliance mode is active
+     */
+    forcedForComplianceMode?: boolean;
+    /**
+     * The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface AccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow {
+    weekDayBasedSchedule?: outputs.AccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface AccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
+    /**
+     * . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
+     */
+    dayOfWeek?: string;
+    /**
+     * . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    windowStartTime?: outputs.AccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface AccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    hours?: number;
+    minutes?: number;
+}
+export interface AccountSettingV2BooleanVal {
+    value?: boolean;
+}
+export interface AccountSettingV2DefaultDataSecurityMode {
+    status: string;
+}
+export interface AccountSettingV2EffectiveAibiDashboardEmbeddingAccessPolicy {
+    /**
+     * . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface AccountSettingV2EffectiveAibiDashboardEmbeddingApprovedDomains {
+    approvedDomains?: string[];
+}
+export interface AccountSettingV2EffectiveAutomaticClusterUpdateWorkspace {
+    canToggle?: boolean;
+    enabled?: boolean;
+    enablementDetails?: outputs.AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails;
+    maintenanceWindow?: outputs.AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * The feature is force enabled if compliance mode is active
+     */
+    forcedForComplianceMode?: boolean;
+    /**
+     * The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow {
+    weekDayBasedSchedule?: outputs.AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
+    /**
+     * . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
+     */
+    dayOfWeek?: string;
+    /**
+     * . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    windowStartTime?: outputs.AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface AccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    hours?: number;
+    minutes?: number;
+}
+export interface AccountSettingV2EffectiveBooleanVal {
+    value?: boolean;
+}
+export interface AccountSettingV2EffectiveDefaultDataSecurityMode {
+    status: string;
+}
+export interface AccountSettingV2EffectiveIntegerVal {
+    value?: number;
+}
+export interface AccountSettingV2EffectivePersonalCompute {
+    value?: string;
+}
+export interface AccountSettingV2EffectiveRestrictWorkspaceAdmins {
+    status: string;
+}
+export interface AccountSettingV2EffectiveStringVal {
+    value?: string;
+}
+export interface AccountSettingV2IntegerVal {
+    value?: number;
+}
+export interface AccountSettingV2PersonalCompute {
+    value?: string;
+}
+export interface AccountSettingV2RestrictWorkspaceAdmins {
+    status: string;
+}
+export interface AccountSettingV2StringVal {
+    value?: string;
+}
 export interface AibiDashboardEmbeddingAccessPolicySettingAibiDashboardEmbeddingAccessPolicy {
     /**
      * Configured embedding policy. Possible values are `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`.
@@ -148,6 +322,16 @@ export interface AlertConditionThresholdValue {
      */
     stringValue?: string;
 }
+export interface AlertV2EffectiveRunAs {
+    /**
+     * Application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role
+     */
+    servicePrincipalName?: string;
+    /**
+     * The email of an active workspace user. Can only set this field to their own email
+     */
+    userName?: string;
+}
 export interface AlertV2Evaluation {
     /**
      * Operator used for comparison in alert evaluation. Possible values are: `EQUAL`, `GREATER_THAN`, `GREATER_THAN_OR_EQUAL`, `IS_NOT_NULL`, `IS_NULL`, `LESS_THAN`, `LESS_THAN_OR_EQUAL`, `NOT_EQUAL`
@@ -218,6 +402,16 @@ export interface AlertV2EvaluationThresholdValue {
     doubleValue?: number;
     stringValue?: string;
 }
+export interface AlertV2RunAs {
+    /**
+     * Application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role
+     */
+    servicePrincipalName?: string;
+    /**
+     * The email of an active workspace user. Can only set this field to their own email
+     */
+    userName?: string;
+}
 export interface AlertV2Schedule {
     /**
      * Indicate whether this schedule is paused or not. Possible values are: `PAUSED`, `UNPAUSED`
@@ -427,6 +621,57 @@ export interface AppResourceUcSecurable {
      */
     securableType: string;
 }
+export interface AppsSettingsCustomTemplateManifest {
+    /**
+     * The description of the template
+     */
+    description?: string;
+    /**
+     * The name of the template. It must contain only alphanumeric characters, hyphens, underscores, and whitespaces.
+     * It must be unique within the workspace
+     */
+    name: string;
+    resourceSpecs?: outputs.AppsSettingsCustomTemplateManifestResourceSpec[];
+    /**
+     * The manifest schema version, for now only 1 is allowed
+     */
+    version: number;
+}
+export interface AppsSettingsCustomTemplateManifestResourceSpec {
+    /**
+     * The description of the template
+     */
+    description?: string;
+    jobSpec?: outputs.AppsSettingsCustomTemplateManifestResourceSpecJobSpec;
+    /**
+     * The name of the template. It must contain only alphanumeric characters, hyphens, underscores, and whitespaces.
+     * It must be unique within the workspace
+     */
+    name: string;
+    secretSpec?: outputs.AppsSettingsCustomTemplateManifestResourceSpecSecretSpec;
+    servingEndpointSpec?: outputs.AppsSettingsCustomTemplateManifestResourceSpecServingEndpointSpec;
+    sqlWarehouseSpec?: outputs.AppsSettingsCustomTemplateManifestResourceSpecSqlWarehouseSpec;
+    ucSecurableSpec?: outputs.AppsSettingsCustomTemplateManifestResourceSpecUcSecurableSpec;
+}
+export interface AppsSettingsCustomTemplateManifestResourceSpecJobSpec {
+    permission: string;
+}
+export interface AppsSettingsCustomTemplateManifestResourceSpecSecretSpec {
+    permission: string;
+}
+export interface AppsSettingsCustomTemplateManifestResourceSpecServingEndpointSpec {
+    permission: string;
+}
+export interface AppsSettingsCustomTemplateManifestResourceSpecSqlWarehouseSpec {
+    permission: string;
+}
+export interface AppsSettingsCustomTemplateManifestResourceSpecUcSecurableSpec {
+    permission: string;
+    /**
+     * . Possible values are: `VOLUME`
+     */
+    securableType: string;
+}
 export interface ArtifactAllowlistArtifactMatcher {
     /**
      * The artifact path or maven coordinate.
@@ -548,6 +793,14 @@ export interface BudgetPolicyCustomTag {
      */
     value?: string;
 }
+export interface CatalogEffectivePredictiveOptimizationFlag {
+    inheritedFromName?: string;
+    inheritedFromType?: string;
+    value: string;
+}
+export interface CatalogProvisioningInfo {
+    state?: string;
+}
 export interface CleanRoomAssetForeignTable {
     /**
      * (list of ColumnInfo) - The metadata information of the columns in the view
@@ -638,7 +891,7 @@ export interface CleanRoomAssetNotebook {
      */
     reviews: outputs.CleanRoomAssetNotebookReview[];
     /**
-     * collaborators that can run the notebook
+     * Aliases of collaborators that can run the notebook
      */
     runnerCollaboratorAliases?: string[];
 }
@@ -901,7 +1154,7 @@ export interface CleanRoomsCleanRoomRemoteDetailedInfoCollaborator {
      */
     displayName: string;
     /**
-     * The global Unity Catalog metastore id of the collaborator. The identifier is of format cloud:region:metastore-uuid
+     * The global Unity Catalog metastore ID of the collaborator. The identifier is of format cloud:region:metastore-uuid
      */
     globalMetastoreId?: string;
     /**
@@ -946,7 +1199,7 @@ export interface CleanRoomsCleanRoomRemoteDetailedInfoCreator {
      */
     displayName: string;
     /**
-     * The global Unity Catalog metastore id of the collaborator. The identifier is of format cloud:region:metastore-uuid
+     * The global Unity Catalog metastore ID of the collaborator. The identifier is of format cloud:region:metastore-uuid
      */
     globalMetastoreId?: string;
     /**
@@ -1229,6 +1482,9 @@ export interface ClusterGcpAttributes {
      * Boot disk size in GB
      */
     bootDiskSize?: number;
+    /**
+     * The first `firstOnDemand` nodes of the cluster will be placed on on-demand instances. If this value is greater than 0, the cluster driver node will be placed on an on-demand instance. If this value is greater than or equal to the current cluster size, all nodes will be placed on on-demand instances. If this value is less than the current cluster size, `firstOnDemand` nodes will be placed on on-demand instances, and the remainder will be placed on availability instances. This value does not affect cluster size and cannot be mutated over the lifetime of a cluster.
+     */
     firstOnDemand?: number;
     /**
      * Google Service Account email address that the cluster uses to authenticate with Google Identity. This field is used for authentication with the GCS and BigQuery data sources.
@@ -1407,10 +1663,6 @@ export interface ComplianceSecurityProfileWorkspaceSettingComplianceSecurityProf
     complianceStandards: string[];
     isEnabled: boolean;
 }
-export interface ConnectionEnvironmentSettings {
-    environmentVersion?: string;
-    javaDependencies?: string[];
-}
 export interface ConnectionProvisioningInfo {
     state?: string;
 }
@@ -1919,6 +2171,129 @@ export interface ExternalLocationFileEventQueueProvidedSqs {
      */
     queueUrl: string;
 }
+export interface GetAccountFederationPoliciesPolicy {
+    /**
+     * (string) - Creation time of the federation policy
+     */
+    createTime: string;
+    /**
+     * (string) - Description of the federation policy
+     */
+    description?: string;
+    /**
+     * (string) - Resource name for the federation policy. Example values include
+     * `accounts/<account-id>/federationPolicies/my-federation-policy` for Account Federation Policies, and
+     * `accounts/<account-id>/servicePrincipals/<service-principal-id>/federationPolicies/my-federation-policy`
+     * for Service Principal Federation Policies. Typically an output parameter, which does not need to be
+     * specified in create or update requests. If specified in a request, must match the value in the
+     * request URL
+     */
+    name: string;
+    /**
+     * (OidcFederationPolicy)
+     */
+    oidcPolicy?: outputs.GetAccountFederationPoliciesPolicyOidcPolicy;
+    /**
+     * (string) - The ID of the federation policy
+     */
+    policyId: string;
+    /**
+     * (integer) - The service principal ID that this federation policy applies to. Only set for service principal federation policies
+     */
+    servicePrincipalId: number;
+    /**
+     * (string) - Unique, immutable id of the federation policy
+     */
+    uid: string;
+    /**
+     * (string) - Last update time of the federation policy
+     */
+    updateTime: string;
+}
+export interface GetAccountFederationPoliciesPolicyOidcPolicy {
+    /**
+     * (list of string) - The allowed token audiences, as specified in the 'aud' claim of federated tokens.
+     * The audience identifier is intended to represent the recipient of the token.
+     * Can be any non-empty string value. As long as the audience in the token matches
+     * at least one audience in the policy, the token is considered a match. If audiences
+     * is unspecified, defaults to your Databricks account id
+     */
+    audiences?: string[];
+    /**
+     * (string) - The required token issuer, as specified in the 'iss' claim of federated tokens
+     */
+    issuer?: string;
+    /**
+     * (string) - The public keys used to validate the signature of federated tokens, in JWKS format.
+     * Most use cases should not need to specify this field. If jwksUri and jwksJson
+     * are both unspecified (recommended), Databricks automatically fetches the public
+     * keys from your issuer’s well known endpoint. Databricks strongly recommends
+     * relying on your issuer’s well known endpoint for discovering public keys
+     */
+    jwksJson?: string;
+    /**
+     * (string) - URL of the public keys used to validate the signature of federated tokens, in
+     * JWKS format. Most use cases should not need to specify this field. If jwksUri
+     * and jwksJson are both unspecified (recommended), Databricks automatically
+     * fetches the public keys from your issuer’s well known endpoint. Databricks
+     * strongly recommends relying on your issuer’s well known endpoint for discovering
+     * public keys
+     */
+    jwksUri?: string;
+    /**
+     * (string) - The required token subject, as specified in the subject claim of federated tokens.
+     * Must be specified for service principal federation policies. Must not be specified
+     * for account federation policies
+     */
+    subject?: string;
+    /**
+     * (string) - The claim that contains the subject of the token. If unspecified, the default value
+     * is 'sub'
+     */
+    subjectClaim?: string;
+}
+export interface GetAccountFederationPolicyOidcPolicy {
+    /**
+     * (list of string) - The allowed token audiences, as specified in the 'aud' claim of federated tokens.
+     * The audience identifier is intended to represent the recipient of the token.
+     * Can be any non-empty string value. As long as the audience in the token matches
+     * at least one audience in the policy, the token is considered a match. If audiences
+     * is unspecified, defaults to your Databricks account id
+     */
+    audiences?: string[];
+    /**
+     * (string) - The required token issuer, as specified in the 'iss' claim of federated tokens
+     */
+    issuer?: string;
+    /**
+     * (string) - The public keys used to validate the signature of federated tokens, in JWKS format.
+     * Most use cases should not need to specify this field. If jwksUri and jwksJson
+     * are both unspecified (recommended), Databricks automatically fetches the public
+     * keys from your issuer’s well known endpoint. Databricks strongly recommends
+     * relying on your issuer’s well known endpoint for discovering public keys
+     */
+    jwksJson?: string;
+    /**
+     * (string) - URL of the public keys used to validate the signature of federated tokens, in
+     * JWKS format. Most use cases should not need to specify this field. If jwksUri
+     * and jwksJson are both unspecified (recommended), Databricks automatically
+     * fetches the public keys from your issuer’s well known endpoint. Databricks
+     * strongly recommends relying on your issuer’s well known endpoint for discovering
+     * public keys
+     */
+    jwksUri?: string;
+    /**
+     * (string) - The required token subject, as specified in the subject claim of federated tokens.
+     * Must be specified for service principal federation policies. Must not be specified
+     * for account federation policies
+     */
+    subject?: string;
+    /**
+     * (string) - The claim that contains the subject of the token. If unspecified, the default value
+     * is 'sub'
+     */
+    subjectClaim?: string;
+}
 export interface GetAccountNetworkPoliciesItem {
     /**
      * (string) - The associated account ID for this Network Policy object
@@ -2071,6 +2446,244 @@ export interface GetAccountNetworkPolicyEgressNetworkAccessPolicyEnforcement {
      */
     enforcementMode?: string;
 }
+export interface GetAccountSettingV2AibiDashboardEmbeddingAccessPolicy {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface GetAccountSettingV2AibiDashboardEmbeddingApprovedDomains {
+    /**
+     * (list of string)
+     */
+    approvedDomains?: string[];
+}
+export interface GetAccountSettingV2AutomaticClusterUpdateWorkspace {
+    /**
+     * (boolean)
+     */
+    canToggle?: boolean;
+    /**
+     * (boolean)
+     */
+    enabled?: boolean;
+    /**
+     * (ClusterAutoRestartMessageEnablementDetails)
+     */
+    enablementDetails?: outputs.GetAccountSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindow)
+     */
+    maintenanceWindow?: outputs.GetAccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    /**
+     * (boolean)
+     */
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface GetAccountSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * (boolean) - The feature is force enabled if compliance mode is active
+     */
+    forcedForComplianceMode?: boolean;
+    /**
+     * (boolean) - The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * (boolean) - The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface GetAccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow {
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindowWeekDayBasedSchedule)
+     */
+    weekDayBasedSchedule?: outputs.GetAccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface GetAccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
+    /**
+     * (string) - . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
+     */
+    dayOfWeek?: string;
+    /**
+     * (string) - . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindowWindowStartTime)
+     */
+    windowStartTime?: outputs.GetAccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface GetAccountSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    /**
+     * (integer)
+     */
+    hours?: number;
+    /**
+     * (integer)
+     */
+    minutes?: number;
+}
+export interface GetAccountSettingV2BooleanVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: boolean;
+}
+export interface GetAccountSettingV2DefaultDataSecurityMode {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
+     */
+    status: string;
+}
+export interface GetAccountSettingV2EffectiveAibiDashboardEmbeddingAccessPolicy {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface GetAccountSettingV2EffectiveAibiDashboardEmbeddingApprovedDomains {
+    /**
+     * (list of string)
+     */
+    approvedDomains?: string[];
+}
+export interface GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspace {
+    /**
+     * (boolean)
+     */
+    canToggle?: boolean;
+    /**
+     * (boolean)
+     */
+    enabled?: boolean;
+    /**
+     * (ClusterAutoRestartMessageEnablementDetails)
+     */
+    enablementDetails?: outputs.GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindow)
+     */
+    maintenanceWindow?: outputs.GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    /**
+     * (boolean)
+     */
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * (boolean) - The feature is force enabled if compliance mode is active
+     */
+    forcedForComplianceMode?: boolean;
+    /**
+     * (boolean) - The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * (boolean) - The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow {
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindowWeekDayBasedSchedule)
+     */
+    weekDayBasedSchedule?: outputs.GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
+    /**
+     * (string) - . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
+     */
+    dayOfWeek?: string;
+    /**
+     * (string) - . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindowWindowStartTime)
+     */
+    windowStartTime?: outputs.GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface GetAccountSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    /**
+     * (integer)
+     */
+    hours?: number;
+    /**
+     * (integer)
+     */
+    minutes?: number;
+}
+export interface GetAccountSettingV2EffectiveBooleanVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: boolean;
+}
+export interface GetAccountSettingV2EffectiveDefaultDataSecurityMode {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
+     */
+    status: string;
+}
+export interface GetAccountSettingV2EffectiveIntegerVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: number;
+}
+export interface GetAccountSettingV2EffectivePersonalCompute {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: string;
+}
+export interface GetAccountSettingV2EffectiveRestrictWorkspaceAdmins {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
+     */
+    status: string;
+}
+export interface GetAccountSettingV2EffectiveStringVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: string;
+}
+export interface GetAccountSettingV2IntegerVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: number;
+}
+export interface GetAccountSettingV2PersonalCompute {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: string;
+}
+export interface GetAccountSettingV2RestrictWorkspaceAdmins {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
+     */
+    status: string;
+}
+export interface GetAccountSettingV2StringVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: string;
+}
+export interface GetAlertV2EffectiveRunAs {
+    /**
+     * (string) - Application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role
+     */
+    servicePrincipalName?: string;
+    /**
+     * (string) - The email of an active workspace user. Can only set this field to their own email
+     */
+    userName?: string;
+}
 export interface GetAlertV2Evaluation {
     /**
      * (string) - Operator used for comparison in alert evaluation. Possible values are: `EQUAL`, `GREATER_THAN`, `GREATER_THAN_OR_EQUAL`, `IS_NOT_NULL`, `IS_NULL`, `LESS_THAN`, `LESS_THAN_OR_EQUAL`, `NOT_EQUAL`
@@ -2177,6 +2790,16 @@ export interface GetAlertV2EvaluationThresholdValue {
      */
     stringValue?: string;
 }
+export interface GetAlertV2RunAs {
+    /**
+     * (string) - Application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role
+     */
+    servicePrincipalName?: string;
+    /**
+     * (string) - The email of an active workspace user. Can only set this field to their own email
+     */
+    userName?: string;
+}
 export interface GetAlertV2Schedule {
     /**
      * (string) - Indicate whether this schedule is paused or not. Possible values are: `PAUSED`, `UNPAUSED`
@@ -2211,6 +2834,12 @@ export interface GetAlertsV2Result {
      * (string) - The display name of the alert
      */
     displayName?: string;
+    /**
+     * (AlertV2RunAs) - The actual identity that will be used to execute the alert.
+     * This is an output-only field that shows the resolved run-as identity after applying
+     * permissions and defaults
+     */
+    effectiveRunAs: outputs.GetAlertsV2ResultEffectiveRunAs;
     /**
      * (AlertV2Evaluation)
      */
@@ -2236,8 +2865,17 @@ export interface GetAlertsV2Result {
      */
     queryText?: string;
     /**
-     * (string) - The run as username or application ID of service principal.
-     * On Create and Update, this field can be set to application ID of an active service principal. Setting this field requires the servicePrincipal/user role
+     * (AlertV2RunAs) - Specifies the identity that will be used to run the alert.
+     * This field allows you to configure alerts to run as a specific user or service principal.
+     * - For user identity: Set `userName` to the email of an active workspace user. Users can only set this to their own email.
+     * - For service principal: Set `servicePrincipalName` to the application ID. Requires the `servicePrincipal/user` role.
+     * If not specified, the alert will run as the request user
+     */
+    runAs?: outputs.GetAlertsV2ResultRunAs;
+    /**
+     * (string, deprecated) - The run as username or application ID of service principal.
+     * On Create and Update, this field can be set to application ID of an active service principal. Setting this field requires the servicePrincipal/user role.
+     * Deprecated: Use `runAs` field instead. This field will be removed in a future release
      */
     runAsUserName?: string;
     /**
@@ -2253,6 +2891,16 @@ export interface GetAlertsV2Result {
      */
     warehouseId?: string;
 }
+export interface GetAlertsV2ResultEffectiveRunAs {
+    /**
+     * (string) - Application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role
+     */
+    servicePrincipalName?: string;
+    /**
+     * (string) - The email of an active workspace user. Can only set this field to their own email
+     */
+    userName?: string;
+}
 export interface GetAlertsV2ResultEvaluation {
     /**
      * (string) - Operator used for comparison in alert evaluation. Possible values are: `EQUAL`, `GREATER_THAN`, `GREATER_THAN_OR_EQUAL`, `IS_NOT_NULL`, `IS_NULL`, `LESS_THAN`, `LESS_THAN_OR_EQUAL`, `NOT_EQUAL`
@@ -2359,6 +3007,16 @@ export interface GetAlertsV2ResultEvaluationThresholdValue {
      */
     stringValue?: string;
 }
+export interface GetAlertsV2ResultRunAs {
+    /**
+     * (string) - Application ID of an active service principal. Setting this field requires the `servicePrincipal/user` role
+     */
+    servicePrincipalName?: string;
+    /**
+     * (string) - The email of an active workspace user. Can only set this field to their own email
+     */
+    userName?: string;
+}
 export interface GetAlertsV2ResultSchedule {
     /**
      * (string) - Indicate whether this schedule is paused or not. Possible values are: `PAUSED`, `UNPAUSED`
@@ -2890,21 +3548,217 @@ export interface GetAppsAppResourceSqlWarehouse {
      */
     id: string;
     /**
-     * Permission to grant on database. Supported permissions are: `CAN_CONNECT_AND_CREATE`.
+     * Permission to grant on database. Supported permissions are: `CAN_CONNECT_AND_CREATE`.
+     */
+    permission: string;
+}
+export interface GetAppsAppResourceUcSecurable {
+    /**
+     * Permission to grant on database. Supported permissions are: `CAN_CONNECT_AND_CREATE`.
+     */
+    permission: string;
+    /**
+     * the full name of UC securable, i.e. `my-catalog.my-schema.my-volume`.
+     */
+    securableFullName: string;
+    /**
+     * the type of UC securable, i.e. `VOLUME`.
+     */
+    securableType: string;
+}
+export interface GetAppsSettingsCustomTemplateManifest {
+    /**
+     * (string) - Description of the App Resource
+     */
+    description?: string;
+    /**
+     * The name of the template. It must contain only alphanumeric characters, hyphens, underscores, and whitespaces.
+     * It must be unique within the workspace
+     */
+    name: string;
+    /**
+     * (list of AppManifestAppResourceSpec)
+     */
+    resourceSpecs?: outputs.GetAppsSettingsCustomTemplateManifestResourceSpec[];
+    /**
+     * (integer) - The manifest schema version, for now only 1 is allowed
+     */
+    version: number;
+}
+export interface GetAppsSettingsCustomTemplateManifestResourceSpec {
+    /**
+     * (string) - Description of the App Resource
+     */
+    description?: string;
+    /**
+     * (AppManifestAppResourceJobSpec)
+     */
+    jobSpec?: outputs.GetAppsSettingsCustomTemplateManifestResourceSpecJobSpec;
+    /**
+     * The name of the template. It must contain only alphanumeric characters, hyphens, underscores, and whitespaces.
+     * It must be unique within the workspace
+     */
+    name: string;
+    /**
+     * (AppManifestAppResourceSecretSpec)
+     */
+    secretSpec?: outputs.GetAppsSettingsCustomTemplateManifestResourceSpecSecretSpec;
+    /**
+     * (AppManifestAppResourceServingEndpointSpec)
+     */
+    servingEndpointSpec?: outputs.GetAppsSettingsCustomTemplateManifestResourceSpecServingEndpointSpec;
+    /**
+     * (AppManifestAppResourceSqlWarehouseSpec)
+     */
+    sqlWarehouseSpec?: outputs.GetAppsSettingsCustomTemplateManifestResourceSpecSqlWarehouseSpec;
+    /**
+     * (AppManifestAppResourceUcSecurableSpec)
+     */
+    ucSecurableSpec?: outputs.GetAppsSettingsCustomTemplateManifestResourceSpecUcSecurableSpec;
+}
+export interface GetAppsSettingsCustomTemplateManifestResourceSpecJobSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+}
+export interface GetAppsSettingsCustomTemplateManifestResourceSpecSecretSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+}
+export interface GetAppsSettingsCustomTemplateManifestResourceSpecServingEndpointSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+}
+export interface GetAppsSettingsCustomTemplateManifestResourceSpecSqlWarehouseSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+}
+export interface GetAppsSettingsCustomTemplateManifestResourceSpecUcSecurableSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+    /**
+     * (string) - . Possible values are: `VOLUME`
+     */
+    securableType: string;
+}
+export interface GetAppsSettingsCustomTemplatesTemplate {
+    /**
+     * (string)
+     */
+    creator: string;
+    /**
+     * (string) - Description of the App Resource
+     */
+    description?: string;
+    /**
+     * (string) - The Git provider of the template
+     */
+    gitProvider: string;
+    /**
+     * (string) - The Git repository URL that the template resides in
+     */
+    gitRepo: string;
+    /**
+     * (AppManifest) - The manifest of the template. It defines fields and default values when installing the template
+     */
+    manifest: outputs.GetAppsSettingsCustomTemplatesTemplateManifest;
+    /**
+     * (string) - Name of the App Resource
+     */
+    name: string;
+    /**
+     * (string) - The path to the template within the Git repository
+     */
+    path: string;
+}
+export interface GetAppsSettingsCustomTemplatesTemplateManifest {
+    /**
+     * (string) - Description of the App Resource
+     */
+    description?: string;
+    /**
+     * (string) - Name of the App Resource
+     */
+    name: string;
+    /**
+     * (list of AppManifestAppResourceSpec)
+     */
+    resourceSpecs?: outputs.GetAppsSettingsCustomTemplatesTemplateManifestResourceSpec[];
+    /**
+     * (integer) - The manifest schema version, for now only 1 is allowed
+     */
+    version: number;
+}
+export interface GetAppsSettingsCustomTemplatesTemplateManifestResourceSpec {
+    /**
+     * (string) - Description of the App Resource
+     */
+    description?: string;
+    /**
+     * (AppManifestAppResourceJobSpec)
+     */
+    jobSpec?: outputs.GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecJobSpec;
+    /**
+     * (string) - Name of the App Resource
+     */
+    name: string;
+    /**
+     * (AppManifestAppResourceSecretSpec)
+     */
+    secretSpec?: outputs.GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecSecretSpec;
+    /**
+     * (AppManifestAppResourceServingEndpointSpec)
+     */
+    servingEndpointSpec?: outputs.GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecServingEndpointSpec;
+    /**
+     * (AppManifestAppResourceSqlWarehouseSpec)
+     */
+    sqlWarehouseSpec?: outputs.GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecSqlWarehouseSpec;
+    /**
+     * (AppManifestAppResourceUcSecurableSpec)
+     */
+    ucSecurableSpec?: outputs.GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecUcSecurableSpec;
+}
+export interface GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecJobSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+}
+export interface GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecSecretSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
+     */
+    permission: string;
+}
+export interface GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecServingEndpointSpec {
+    /**
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
      */
     permission: string;
 }
-export interface GetAppsAppResourceUcSecurable {
+export interface GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecSqlWarehouseSpec {
     /**
-     * Permission to grant on database. Supported permissions are: `CAN_CONNECT_AND_CREATE`.
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
      */
     permission: string;
+}
+export interface GetAppsSettingsCustomTemplatesTemplateManifestResourceSpecUcSecurableSpec {
     /**
-     * the full name of UC securable, i.e. `my-catalog.my-schema.my-volume`.
+     * (string) - . Possible values are: `MANAGE`, `READ_VOLUME`, `WRITE_VOLUME`
      */
-    securableFullName: string;
+    permission: string;
     /**
-     * the type of UC securable, i.e. `VOLUME`.
+     * (string) - . Possible values are: `VOLUME`
      */
     securableType: string;
 }
@@ -3156,7 +4010,7 @@ export interface GetCleanRoomAssetNotebook {
      */
     reviews: outputs.GetCleanRoomAssetNotebookReview[];
     /**
-     * (list of string) - collaborators that can run the notebook
+     * (list of string) - Aliases of collaborators that can run the notebook
      */
     runnerCollaboratorAliases?: string[];
 }
@@ -3282,7 +4136,7 @@ export interface GetCleanRoomAssetRevisionsCleanRoomAssetNotebook {
      */
     reviews: outputs.GetCleanRoomAssetRevisionsCleanRoomAssetNotebookReview[];
     /**
-     * (list of string) - collaborators that can run the notebook
+     * (list of string) - Aliases of collaborators that can run the notebook
      */
     runnerCollaboratorAliases?: string[];
 }
@@ -3674,7 +4528,7 @@ export interface GetCleanRoomAssetRevisionsCleanRoomAssetsRevisionNotebook {
      */
     reviews: outputs.GetCleanRoomAssetRevisionsCleanRoomAssetsRevisionNotebookReview[];
     /**
-     * (list of string) - collaborators that can run the notebook
+     * (list of string) - Aliases of collaborators that can run the notebook
      */
     runnerCollaboratorAliases?: string[];
 }
@@ -4254,7 +5108,7 @@ export interface GetCleanRoomAssetsAssetNotebook {
      */
     reviews: outputs.GetCleanRoomAssetsAssetNotebookReview[];
     /**
-     * (list of string) - collaborators that can run the notebook
+     * (list of string) - Aliases of collaborators that can run the notebook
      */
     runnerCollaboratorAliases?: string[];
 }
@@ -4554,7 +5408,7 @@ export interface GetCleanRoomsCleanRoomRemoteDetailedInfoCollaborator {
      */
     displayName: string;
     /**
-     * (string) - The global Unity Catalog metastore id of the collaborator. The identifier is of format cloud:region:metastore-uuid
+     * (string) - The global Unity Catalog metastore ID of the collaborator. The identifier is of format cloud:region:metastore-uuid
      */
     globalMetastoreId?: string;
     /**
@@ -4599,7 +5453,7 @@ export interface GetCleanRoomsCleanRoomRemoteDetailedInfoCreator {
      */
     displayName: string;
     /**
-     * (string) - The global Unity Catalog metastore id of the collaborator. The identifier is of format cloud:region:metastore-uuid
+     * (string) - The global Unity Catalog metastore ID of the collaborator. The identifier is of format cloud:region:metastore-uuid
      */
     globalMetastoreId?: string;
     /**
@@ -4730,7 +5584,7 @@ export interface GetCleanRoomsCleanRoomsCleanRoom {
      */
     outputCatalog: outputs.GetCleanRoomsCleanRoomsCleanRoomOutputCatalog;
     /**
-     * (string) - This is Databricks username of the owner of the local clean room securable for permission management
+     * (string) - This is the Databricks username of the owner of the local clean room securable for permission management
      */
     owner?: string;
     /**
@@ -4805,7 +5659,7 @@ export interface GetCleanRoomsCleanRoomsCleanRoomRemoteDetailedInfoCollaborator
      */
     displayName: string;
     /**
-     * (string) - The global Unity Catalog metastore id of the collaborator. The identifier is of format cloud:region:metastore-uuid
+     * (string) - The global Unity Catalog metastore ID of the collaborator. The identifier is of format cloud:region:metastore-uuid
      */
     globalMetastoreId?: string;
     /**
@@ -4850,7 +5704,7 @@ export interface GetCleanRoomsCleanRoomsCleanRoomRemoteDetailedInfoCreator {
      */
     displayName: string;
     /**
-     * (string) - The global Unity Catalog metastore id of the collaborator. The identifier is of format cloud:region:metastore-uuid
+     * (string) - The global Unity Catalog metastore ID of the collaborator. The identifier is of format cloud:region:metastore-uuid
      */
     globalMetastoreId?: string;
     /**
@@ -5667,6 +6521,12 @@ export interface GetDatabaseInstancesDatabaseInstance {
      * (string) - The email of the creator of the instance
      */
     creator: string;
+    /**
+     * (boolean) - xref AIP-129. `enablePgNativeLogin` is owned by the client, while `effectiveEnablePgNativeLogin` is owned by the server.
+     * `enablePgNativeLogin` will only be set in Create/Update response messages if and only if the user provides the field via the request.
+     * `effectiveEnablePgNativeLogin` on the other hand will always bet set in all response messages (Create/Update/Get/List)
+     */
+    effectiveEnablePgNativeLogin: boolean;
     /**
      * (boolean) - xref AIP-129. `enableReadableSecondaries` is owned by the client, while `effectiveEnableReadableSecondaries` is owned by the server.
      * `enableReadableSecondaries` will only be set in Create/Update response messages if and only if the user provides the field via the request.
@@ -5691,6 +6551,10 @@ export interface GetDatabaseInstancesDatabaseInstance {
      * `effectiveStopped` on the other hand will always bet set in all response messages (Create/Update/Get/List)
      */
     effectiveStopped: boolean;
+    /**
+     * (boolean) - Whether the instance has PG native password login enabled. Defaults to true
+     */
+    enablePgNativeLogin: boolean;
     /**
      * (boolean) - Whether to enable secondaries to serve read-only traffic. Defaults to false
      */
@@ -6328,6 +7192,24 @@ export interface GetDbfsFilePathsPathList {
      */
     path?: string;
 }
+export interface GetEntityTagAssignmentsTagAssignment {
+    /**
+     * The fully qualified name of the entity to which the tag is assigned
+     */
+    entityName: string;
+    /**
+     * The type of the entity to which the tag is assigned. Allowed values are: catalogs, schemas, tables, columns, volumes
+     */
+    entityType: string;
+    /**
+     * (string) - The key of the tag
+     */
+    tagKey: string;
+    /**
+     * (string) - The value of the tag
+     */
+    tagValue?: string;
+}
 export interface GetExternalLocationExternalLocationInfo {
     browseOnly?: boolean;
     /**
@@ -8521,7 +9403,7 @@ export interface GetPolicyInfosPolicy {
     exceptPrincipals?: string[];
     /**
      * (string) - Type of securables that the policy should take effect on.
-     * Only `table` is supported at this moment.
+     * Only `TABLE` is supported at this moment.
      * Required on create and optional on update. Possible values are: `CATALOG`, `CLEAN_ROOM`, `CONNECTION`, `CREDENTIAL`, `EXTERNAL_LOCATION`, `EXTERNAL_METADATA`, `FUNCTION`, `METASTORE`, `PIPELINE`, `PROVIDER`, `RECIPIENT`, `SCHEMA`, `SHARE`, `STAGING_TABLE`, `STORAGE_CREDENTIAL`, `TABLE`, `VOLUME`
      */
     forSecurableType: string;
@@ -8531,13 +9413,13 @@ export interface GetPolicyInfosPolicy {
     id: string;
     /**
      * (list of MatchColumn) - Optional list of condition expressions used to match table columns.
-     * Only valid when `forSecurableType` is `table`.
+     * Only valid when `forSecurableType` is `TABLE`.
      * When specified, the policy only applies to tables whose columns satisfy all match conditions
      */
     matchColumns?: outputs.GetPolicyInfosPolicyMatchColumn[];
     /**
-     * (string) - Name of the policy. Required on create and ignored on update.
-     * To update the name, use the `newName` field
+     * (string) - Name of the policy. Required on create and optional on update.
+     * To rename the policy, set `name` to a different value on update
      */
     name?: string;
     /**
@@ -9027,6 +9909,129 @@ export interface GetSchemaSchemaInfoEffectivePredictiveOptimizationFlag {
     inheritedFromType?: string;
     value: string;
 }
+export interface GetServicePrincipalFederationPoliciesPolicy {
+    /**
+     * (string) - Creation time of the federation policy
+     */
+    createTime: string;
+    /**
+     * (string) - Description of the federation policy
+     */
+    description?: string;
+    /**
+     * (string) - Resource name for the federation policy. Example values include
+     * `accounts/<account-id>/federationPolicies/my-federation-policy` for Account Federation Policies, and
+     * `accounts/<account-id>/servicePrincipals/<service-principal-id>/federationPolicies/my-federation-policy`
+     * for Service Principal Federation Policies. Typically an output parameter, which does not need to be
+     * specified in create or update requests. If specified in a request, must match the value in the
+     * request URL
+     */
+    name: string;
+    /**
+     * (OidcFederationPolicy)
+     */
+    oidcPolicy?: outputs.GetServicePrincipalFederationPoliciesPolicyOidcPolicy;
+    /**
+     * (string) - The ID of the federation policy
+     */
+    policyId: string;
+    /**
+     * The service principal id for the federation policy
+     */
+    servicePrincipalId: number;
+    /**
+     * (string) - Unique, immutable id of the federation policy
+     */
+    uid: string;
+    /**
+     * (string) - Last update time of the federation policy
+     */
+    updateTime: string;
+}
+export interface GetServicePrincipalFederationPoliciesPolicyOidcPolicy {
+    /**
+     * (list of string) - The allowed token audiences, as specified in the 'aud' claim of federated tokens.
+     * The audience identifier is intended to represent the recipient of the token.
+     * Can be any non-empty string value. As long as the audience in the token matches
+     * at least one audience in the policy, the token is considered a match. If audiences
+     * is unspecified, defaults to your Databricks account id
+     */
+    audiences?: string[];
+    /**
+     * (string) - The required token issuer, as specified in the 'iss' claim of federated tokens
+     */
+    issuer?: string;
+    /**
+     * (string) - The public keys used to validate the signature of federated tokens, in JWKS format.
+     * Most use cases should not need to specify this field. If jwksUri and jwksJson
+     * are both unspecified (recommended), Databricks automatically fetches the public
+     * keys from your issuer’s well known endpoint. Databricks strongly recommends
+     * relying on your issuer’s well known endpoint for discovering public keys
+     */
+    jwksJson?: string;
+    /**
+     * (string) - URL of the public keys used to validate the signature of federated tokens, in
+     * JWKS format. Most use cases should not need to specify this field. If jwksUri
+     * and jwksJson are both unspecified (recommended), Databricks automatically
+     * fetches the public keys from your issuer’s well known endpoint. Databricks
+     * strongly recommends relying on your issuer’s well known endpoint for discovering
+     * public keys
+     */
+    jwksUri?: string;
+    /**
+     * (string) - The required token subject, as specified in the subject claim of federated tokens.
+     * Must be specified for service principal federation policies. Must not be specified
+     * for account federation policies
+     */
+    subject?: string;
+    /**
+     * (string) - The claim that contains the subject of the token. If unspecified, the default value
+     * is 'sub'
+     */
+    subjectClaim?: string;
+}
+export interface GetServicePrincipalFederationPolicyOidcPolicy {
+    /**
+     * (list of string) - The allowed token audiences, as specified in the 'aud' claim of federated tokens.
+     * The audience identifier is intended to represent the recipient of the token.
+     * Can be any non-empty string value. As long as the audience in the token matches
+     * at least one audience in the policy, the token is considered a match. If audiences
+     * is unspecified, defaults to your Databricks account id
+     */
+    audiences?: string[];
+    /**
+     * (string) - The required token issuer, as specified in the 'iss' claim of federated tokens
+     */
+    issuer?: string;
+    /**
+     * (string) - The public keys used to validate the signature of federated tokens, in JWKS format.
+     * Most use cases should not need to specify this field. If jwksUri and jwksJson
+     * are both unspecified (recommended), Databricks automatically fetches the public
+     * keys from your issuer’s well known endpoint. Databricks strongly recommends
+     * relying on your issuer’s well known endpoint for discovering public keys
+     */
+    jwksJson?: string;
+    /**
+     * (string) - URL of the public keys used to validate the signature of federated tokens, in
+     * JWKS format. Most use cases should not need to specify this field. If jwksUri
+     * and jwksJson are both unspecified (recommended), Databricks automatically
+     * fetches the public keys from your issuer’s well known endpoint. Databricks
+     * strongly recommends relying on your issuer’s well known endpoint for discovering
+     * public keys
+     */
+    jwksUri?: string;
+    /**
+     * (string) - The required token subject, as specified in the subject claim of federated tokens.
+     * Must be specified for service principal federation policies. Must not be specified
+     * for account federation policies
+     */
+    subject?: string;
+    /**
+     * (string) - The claim that contains the subject of the token. If unspecified, the default value
+     * is 'sub'
+     */
+    subjectClaim?: string;
+}
 export interface GetServingEndpointsEndpoint {
     /**
      * A block with AI Gateway configuration for the serving endpoint.
@@ -9052,6 +10057,7 @@ export interface GetServingEndpointsEndpoint {
      */
     tags?: outputs.GetServingEndpointsEndpointTag[];
     task?: string;
+    usagePolicyId?: string;
 }
 export interface GetServingEndpointsEndpointAiGateway {
     fallbackConfigs?: outputs.GetServingEndpointsEndpointAiGatewayFallbackConfig[];
@@ -9099,6 +10105,7 @@ export interface GetServingEndpointsEndpointAiGatewayRateLimit {
     key?: string;
     principal?: string;
     renewalPeriod: string;
+    tokens?: number;
 }
 export interface GetServingEndpointsEndpointAiGatewayUsageTrackingConfig {
     enabled?: boolean;
@@ -9546,125 +10553,383 @@ export interface GetTableTableInfoTableConstraint {
 export interface GetTableTableInfoTableConstraintForeignKeyConstraint {
     childColumns: string[];
     /**
-     * Full name of the databricks_table: _`catalog`.`schema`.`table`_
+     * Full name of the databricks_table: _`catalog`.`schema`.`table`_
+     */
+    name: string;
+    parentColumns: string[];
+    parentTable: string;
+    rely?: boolean;
+}
+export interface GetTableTableInfoTableConstraintNamedTableConstraint {
+    /**
+     * Full name of the databricks_table: _`catalog`.`schema`.`table`_
+     */
+    name: string;
+}
+export interface GetTableTableInfoTableConstraintPrimaryKeyConstraint {
+    childColumns: string[];
+    /**
+     * Full name of the databricks_table: _`catalog`.`schema`.`table`_
+     */
+    name: string;
+    rely?: boolean;
+    timeseriesColumns?: string[];
+}
+export interface GetTableTableInfoViewDependencies {
+    dependencies?: outputs.GetTableTableInfoViewDependenciesDependency[];
+}
+export interface GetTableTableInfoViewDependenciesDependency {
+    connection?: outputs.GetTableTableInfoViewDependenciesDependencyConnection;
+    credential?: outputs.GetTableTableInfoViewDependenciesDependencyCredential;
+    function?: outputs.GetTableTableInfoViewDependenciesDependencyFunction;
+    table?: outputs.GetTableTableInfoViewDependenciesDependencyTable;
+}
+export interface GetTableTableInfoViewDependenciesDependencyConnection {
+    connectionName?: string;
+}
+export interface GetTableTableInfoViewDependenciesDependencyCredential {
+    credentialName?: string;
+}
+export interface GetTableTableInfoViewDependenciesDependencyFunction {
+    functionFullName: string;
+}
+export interface GetTableTableInfoViewDependenciesDependencyTable {
+    tableFullName: string;
+}
+export interface GetTagPoliciesTagPolicy {
+    /**
+     * (string)
+     */
+    description?: string;
+    /**
+     * (string)
+     */
+    id: string;
+    /**
+     * (string)
+     */
+    tagKey: string;
+    /**
+     * (list of Value)
+     */
+    values?: outputs.GetTagPoliciesTagPolicyValue[];
+}
+export interface GetTagPoliciesTagPolicyValue {
+    /**
+     * (string)
+     */
+    name: string;
+}
+export interface GetTagPolicyValue {
+    /**
+     * (string)
+     */
+    name: string;
+}
+export interface GetVolumeVolumeInfo {
+    /**
+     * the AWS access point to use when accessing s3 bucket for this volume's external location
+     */
+    accessPoint?: string;
+    /**
+     * indicates whether the principal is limited to retrieving metadata for the volume through the BROWSE privilege when includeBrowse is enabled in the request.
+     */
+    browseOnly?: boolean;
+    /**
+     * the name of the catalog where the schema and the volume are
+     */
+    catalogName?: string;
+    /**
+     * the comment attached to the volume
+     */
+    comment?: string;
+    /**
+     * the Unix timestamp at the volume's creation
+     */
+    createdAt?: number;
+    /**
+     * the identifier of the user who created the volume
+     */
+    createdBy?: string;
+    /**
+     * encryption options that apply to clients connecting to cloud storage
+     */
+    encryptionDetails?: outputs.GetVolumeVolumeInfoEncryptionDetails;
+    /**
+     * the three-level (fully qualified) name of the volume
+     */
+    fullName?: string;
+    /**
+     * the unique identifier of the metastore
+     */
+    metastoreId?: string;
+    /**
+     * a fully qualified name of databricks_volume: *`catalog`.`schema`.`volume`*
+     */
+    name?: string;
+    /**
+     * the identifier of the user who owns the volume
+     */
+    owner?: string;
+    /**
+     * the name of the schema where the volume is
+     */
+    schemaName?: string;
+    /**
+     * the storage location on the cloud
+     */
+    storageLocation?: string;
+    /**
+     * the timestamp of the last time changes were made to the volume
+     */
+    updatedAt?: number;
+    /**
+     * the identifier of the user who updated the volume last time
+     */
+    updatedBy?: string;
+    /**
+     * the unique identifier of the volume
+     */
+    volumeId?: string;
+    /**
+     * whether the volume is `MANAGED` or `EXTERNAL`
+     */
+    volumeType?: string;
+}
+export interface GetVolumeVolumeInfoEncryptionDetails {
+    sseEncryptionDetails?: outputs.GetVolumeVolumeInfoEncryptionDetailsSseEncryptionDetails;
+}
+export interface GetVolumeVolumeInfoEncryptionDetailsSseEncryptionDetails {
+    algorithm?: string;
+    awsKmsKeyArn?: string;
+}
+export interface GetWorkspaceSettingV2AibiDashboardEmbeddingAccessPolicy {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface GetWorkspaceSettingV2AibiDashboardEmbeddingApprovedDomains {
+    /**
+     * (list of string)
+     */
+    approvedDomains?: string[];
+}
+export interface GetWorkspaceSettingV2AutomaticClusterUpdateWorkspace {
+    /**
+     * (boolean)
+     */
+    canToggle?: boolean;
+    /**
+     * (boolean)
+     */
+    enabled?: boolean;
+    /**
+     * (ClusterAutoRestartMessageEnablementDetails)
+     */
+    enablementDetails?: outputs.GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindow)
+     */
+    maintenanceWindow?: outputs.GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    /**
+     * (boolean)
+     */
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * (boolean) - The feature is force enabled if compliance mode is active
      */
-    name: string;
-    parentColumns: string[];
-    parentTable: string;
-    rely?: boolean;
+    forcedForComplianceMode?: boolean;
+    /**
+     * (boolean) - The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * (boolean) - The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
 }
-export interface GetTableTableInfoTableConstraintNamedTableConstraint {
+export interface GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow {
     /**
-     * Full name of the databricks_table: _`catalog`.`schema`.`table`_
+     * (ClusterAutoRestartMessageMaintenanceWindowWeekDayBasedSchedule)
      */
-    name: string;
+    weekDayBasedSchedule?: outputs.GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
 }
-export interface GetTableTableInfoTableConstraintPrimaryKeyConstraint {
-    childColumns: string[];
+export interface GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
     /**
-     * Full name of the databricks_table: _`catalog`.`schema`.`table`_
+     * (string) - . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
      */
-    name: string;
-    rely?: boolean;
-    timeseriesColumns?: string[];
+    dayOfWeek?: string;
+    /**
+     * (string) - . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindowWindowStartTime)
+     */
+    windowStartTime?: outputs.GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
 }
-export interface GetTableTableInfoViewDependencies {
-    dependencies?: outputs.GetTableTableInfoViewDependenciesDependency[];
+export interface GetWorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    /**
+     * (integer)
+     */
+    hours?: number;
+    /**
+     * (integer)
+     */
+    minutes?: number;
 }
-export interface GetTableTableInfoViewDependenciesDependency {
-    connection?: outputs.GetTableTableInfoViewDependenciesDependencyConnection;
-    credential?: outputs.GetTableTableInfoViewDependenciesDependencyCredential;
-    function?: outputs.GetTableTableInfoViewDependenciesDependencyFunction;
-    table?: outputs.GetTableTableInfoViewDependenciesDependencyTable;
+export interface GetWorkspaceSettingV2BooleanVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: boolean;
 }
-export interface GetTableTableInfoViewDependenciesDependencyConnection {
-    connectionName?: string;
+export interface GetWorkspaceSettingV2DefaultDataSecurityMode {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
+     */
+    status: string;
 }
-export interface GetTableTableInfoViewDependenciesDependencyCredential {
-    credentialName?: string;
+export interface GetWorkspaceSettingV2EffectiveAibiDashboardEmbeddingAccessPolicy {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
 }
-export interface GetTableTableInfoViewDependenciesDependencyFunction {
-    functionFullName: string;
+export interface GetWorkspaceSettingV2EffectiveAibiDashboardEmbeddingApprovedDomains {
+    /**
+     * (list of string)
+     */
+    approvedDomains?: string[];
 }
-export interface GetTableTableInfoViewDependenciesDependencyTable {
-    tableFullName: string;
+export interface GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspace {
+    /**
+     * (boolean)
+     */
+    canToggle?: boolean;
+    /**
+     * (boolean)
+     */
+    enabled?: boolean;
+    /**
+     * (ClusterAutoRestartMessageEnablementDetails)
+     */
+    enablementDetails?: outputs.GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails;
+    /**
+     * (ClusterAutoRestartMessageMaintenanceWindow)
+     */
+    maintenanceWindow?: outputs.GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    /**
+     * (boolean)
+     */
+    restartEvenIfNoUpdatesAvailable?: boolean;
 }
-export interface GetVolumeVolumeInfo {
+export interface GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails {
     /**
-     * the AWS access point to use when accessing s3 bucket for this volume's external location
+     * (boolean) - The feature is force enabled if compliance mode is active
      */
-    accessPoint?: string;
+    forcedForComplianceMode?: boolean;
     /**
-     * indicates whether the principal is limited to retrieving metadata for the volume through the BROWSE privilege when includeBrowse is enabled in the request.
+     * (boolean) - The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
      */
-    browseOnly?: boolean;
+    unavailableForDisabledEntitlement?: boolean;
     /**
-     * the name of the catalog where the schema and the volume are
+     * (boolean) - The feature is unavailable if the customer doesn't have enterprise tier
      */
-    catalogName?: string;
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow {
     /**
-     * the comment attached to the volume
+     * (ClusterAutoRestartMessageMaintenanceWindowWeekDayBasedSchedule)
      */
-    comment?: string;
+    weekDayBasedSchedule?: outputs.GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
     /**
-     * the Unix timestamp at the volume's creation
+     * (string) - . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
      */
-    createdAt?: number;
+    dayOfWeek?: string;
     /**
-     * the identifier of the user who created the volume
+     * (string) - . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
      */
-    createdBy?: string;
+    frequency?: string;
     /**
-     * encryption options that apply to clients connecting to cloud storage
+     * (ClusterAutoRestartMessageMaintenanceWindowWindowStartTime)
      */
-    encryptionDetails?: outputs.GetVolumeVolumeInfoEncryptionDetails;
+    windowStartTime?: outputs.GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface GetWorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
     /**
-     * the three-level (fully qualified) name of the volume
+     * (integer)
      */
-    fullName?: string;
+    hours?: number;
     /**
-     * the unique identifier of the metastore
+     * (integer)
      */
-    metastoreId?: string;
+    minutes?: number;
+}
+export interface GetWorkspaceSettingV2EffectiveBooleanVal {
     /**
-     * a fully qualified name of databricks_volume: *`catalog`.`schema`.`volume`*
+     * (string) - Represents a generic string value
      */
-    name?: string;
+    value?: boolean;
+}
+export interface GetWorkspaceSettingV2EffectiveDefaultDataSecurityMode {
     /**
-     * the identifier of the user who owns the volume
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
      */
-    owner?: string;
+    status: string;
+}
+export interface GetWorkspaceSettingV2EffectiveIntegerVal {
     /**
-     * the name of the schema where the volume is
+     * (string) - Represents a generic string value
      */
-    schemaName?: string;
+    value?: number;
+}
+export interface GetWorkspaceSettingV2EffectivePersonalCompute {
     /**
-     * the storage location on the cloud
+     * (string) - Represents a generic string value
      */
-    storageLocation?: string;
+    value?: string;
+}
+export interface GetWorkspaceSettingV2EffectiveRestrictWorkspaceAdmins {
     /**
-     * the timestamp of the last time changes were made to the volume
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
      */
-    updatedAt?: number;
+    status: string;
+}
+export interface GetWorkspaceSettingV2EffectiveStringVal {
     /**
-     * the identifier of the user who updated the volume last time
+     * (string) - Represents a generic string value
      */
-    updatedBy?: string;
+    value?: string;
+}
+export interface GetWorkspaceSettingV2IntegerVal {
     /**
-     * the unique identifier of the volume
+     * (string) - Represents a generic string value
      */
-    volumeId?: string;
+    value?: number;
+}
+export interface GetWorkspaceSettingV2PersonalCompute {
     /**
-     * whether the volume is `MANAGED` or `EXTERNAL`
+     * (string) - Represents a generic string value
      */
-    volumeType?: string;
+    value?: string;
 }
-export interface GetVolumeVolumeInfoEncryptionDetails {
-    sseEncryptionDetails?: outputs.GetVolumeVolumeInfoEncryptionDetailsSseEncryptionDetails;
+export interface GetWorkspaceSettingV2RestrictWorkspaceAdmins {
+    /**
+     * (string) - . Possible values are: `ALLOW_ALL`, `RESTRICT_TOKENS_AND_JOB_RUN_AS`
+     */
+    status: string;
 }
-export interface GetVolumeVolumeInfoEncryptionDetailsSseEncryptionDetails {
-    algorithm?: string;
-    awsKmsKeyArn?: string;
+export interface GetWorkspaceSettingV2StringVal {
+    /**
+     * (string) - Represents a generic string value
+     */
+    value?: string;
 }
 export interface GrantsGrant {
     principal: string;
@@ -9779,6 +11044,12 @@ export interface JobContinuous {
      * Indicate whether this continuous job is paused or not. Either `PAUSED` or `UNPAUSED`. When the `pauseStatus` field is omitted in the block, the server will default to using `UNPAUSED` as a value for `pauseStatus`.
      */
     pauseStatus?: string;
+    /**
+     * Controls task level retry behaviour. Allowed values are:
+     * * `NEVER` (default): The failed task will not be retried.
+     * * `ON_FAILURE`: Retry a failed task if at least one other task in the job is still running its first attempt. When this condition is no longer met or the retry limit is reached, the job run is cancelled and a new run is started.
+     */
+    taskRetryMode?: string;
 }
 export interface JobDbtTask {
     /**
@@ -12758,6 +14029,10 @@ export interface ModelServingAiGatewayRateLimit {
      * Renewal period field for a serving endpoint rate limit. Currently, only `minute` is supported.
      */
     renewalPeriod: string;
+    /**
+     * Specifies how many tokens are allowed for a key within the renewal_period.
+     */
+    tokens?: number;
 }
 export interface ModelServingAiGatewayUsageTrackingConfig {
     enabled?: boolean;
@@ -13265,6 +14540,7 @@ export interface ModelServingProvisionedThroughputAiGatewayRateLimit {
     key?: string;
     principal?: string;
     renewalPeriod: string;
+    tokens?: number;
 }
 export interface ModelServingProvisionedThroughputAiGatewayUsageTrackingConfig {
     /**
@@ -13522,11 +14798,11 @@ export interface MwsNetworksGcpNetworkInfo {
      */
     networkProjectId: string;
     /**
-     * @deprecated gcp_network_info.pod_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.87.1/docs/guides/gcp-workspace#creating-a-vpc
+     * @deprecated gcp_network_info.pod_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.89.0/docs/guides/gcp-workspace#creating-a-vpc
      */
     podIpRangeName?: string;
     /**
-     * @deprecated gcp_network_info.service_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.87.1/docs/guides/gcp-workspace#creating-a-vpc
+     * @deprecated gcp_network_info.service_ip_range_name is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.89.0/docs/guides/gcp-workspace#creating-a-vpc
      */
     serviceIpRangeName?: string;
     /**
@@ -13587,11 +14863,11 @@ export interface MwsWorkspacesExternalCustomerInfo {
 }
 export interface MwsWorkspacesGcpManagedNetworkConfig {
     /**
-     * @deprecated gcp_managed_network_config.gke_cluster_pod_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.87.1/docs/guides/gcp-workspace#creating-a-databricks-workspace
+     * @deprecated gcp_managed_network_config.gke_cluster_pod_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.89.0/docs/guides/gcp-workspace#creating-a-databricks-workspace
      */
     gkeClusterPodIpRange?: string;
     /**
-     * @deprecated gcp_managed_network_config.gke_cluster_service_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.87.1/docs/guides/gcp-workspace#creating-a-databricks-workspace
+     * @deprecated gcp_managed_network_config.gke_cluster_service_ip_range is deprecated and will be removed in a future release. For more information, review the documentation at https://registry.terraform.io/providers/databricks/databricks/1.89.0/docs/guides/gcp-workspace#creating-a-databricks-workspace
      */
     gkeClusterServiceIpRange?: string;
     subnetCidr: string;
@@ -13660,6 +14936,26 @@ export interface NotificationDestinationConfigGenericWebhook {
     usernameSet: boolean;
 }
 export interface NotificationDestinationConfigMicrosoftTeams {
+    /**
+     * App ID for Microsoft Teams App.
+     */
+    appId?: string;
+    appIdSet?: boolean;
+    /**
+     * Secret for Microsoft Teams App authentication.
+     */
+    authSecret?: string;
+    authSecretSet?: boolean;
+    /**
+     * Channel URL for Microsoft Teams App.
+     */
+    channelUrl?: string;
+    channelUrlSet?: boolean;
+    /**
+     * Tenant ID for Microsoft Teams App.
+     */
+    tenantId?: string;
+    tenantIdSet?: boolean;
     /**
      * The Microsoft Teams webhook URL.
      */
@@ -13674,10 +14970,16 @@ export interface NotificationDestinationConfigPagerduty {
     integrationKeySet: boolean;
 }
 export interface NotificationDestinationConfigSlack {
+    /**
+     * Slack channel ID for notifications.
+     */
     channelId?: string;
-    channelIdSet?: boolean;
+    channelIdSet: boolean;
+    /**
+     * OAuth token for Slack authentication.
+     */
     oauthToken?: string;
-    oauthTokenSet?: boolean;
+    oauthTokenSet: boolean;
     /**
      * The Slack webhook URL.
      */
@@ -13997,6 +15299,7 @@ export interface PipelineIngestionDefinition {
     connectionName?: string;
     ingestionGatewayId?: string;
     objects?: outputs.PipelineIngestionDefinitionObject[];
+    sourceConfigurations?: outputs.PipelineIngestionDefinitionSourceConfiguration[];
     sourceType?: string;
     tableConfiguration?: outputs.PipelineIngestionDefinitionTableConfiguration;
 }
@@ -14073,6 +15376,23 @@ export interface PipelineIngestionDefinitionObjectTableTableConfigurationQueryBa
     deletionCondition?: string;
     hardDeletionSyncMinIntervalInSeconds?: number;
 }
+export interface PipelineIngestionDefinitionSourceConfiguration {
+    /**
+     * The name of catalog in Unity Catalog. *Change of this parameter forces recreation of the pipeline.* (Conflicts with `storage`).
+     */
+    catalog?: outputs.PipelineIngestionDefinitionSourceConfigurationCatalog;
+}
+export interface PipelineIngestionDefinitionSourceConfigurationCatalog {
+    postgres?: outputs.PipelineIngestionDefinitionSourceConfigurationCatalogPostgres;
+    sourceCatalog?: string;
+}
+export interface PipelineIngestionDefinitionSourceConfigurationCatalogPostgres {
+    slotConfig?: outputs.PipelineIngestionDefinitionSourceConfigurationCatalogPostgresSlotConfig;
+}
+export interface PipelineIngestionDefinitionSourceConfigurationCatalogPostgresSlotConfig {
+    publicationName?: string;
+    slotName?: string;
+}
 export interface PipelineIngestionDefinitionTableConfiguration {
     excludeColumns?: string[];
     includeColumns?: string[];
@@ -14540,6 +15860,48 @@ export interface SecretScopeKeyvaultMetadata {
     dnsName: string;
     resourceId: string;
 }
+export interface ServicePrincipalFederationPolicyOidcPolicy {
+    /**
+     * The allowed token audiences, as specified in the 'aud' claim of federated tokens.
+     * The audience identifier is intended to represent the recipient of the token.
+     * Can be any non-empty string value. As long as the audience in the token matches
+     * at least one audience in the policy, the token is considered a match. If audiences
+     * is unspecified, defaults to your Databricks account id
+     */
+    audiences?: string[];
+    /**
+     * The required token issuer, as specified in the 'iss' claim of federated tokens
+     */
+    issuer?: string;
+    /**
+     * The public keys used to validate the signature of federated tokens, in JWKS format.
+     * Most use cases should not need to specify this field. If jwksUri and jwksJson
+     * are both unspecified (recommended), Databricks automatically fetches the public
+     * keys from your issuer’s well known endpoint. Databricks strongly recommends
+     * relying on your issuer’s well known endpoint for discovering public keys
+     */
+    jwksJson?: string;
+    /**
+     * URL of the public keys used to validate the signature of federated tokens, in
+     * JWKS format. Most use cases should not need to specify this field. If jwksUri
+     * and jwksJson are both unspecified (recommended), Databricks automatically
+     * fetches the public keys from your issuer’s well known endpoint. Databricks
+     * strongly recommends relying on your issuer’s well known endpoint for discovering
+     * public keys
+     */
+    jwksUri?: string;
+    /**
+     * The required token subject, as specified in the subject claim of federated tokens.
+     * Must be specified for service principal federation policies. Must not be specified
+     * for account federation policies
+     */
+    subject?: string;
+    /**
+     * The claim that contains the subject of the token. If unspecified, the default value
+     * is 'sub'
+     */
+    subjectClaim?: string;
+}
 export interface ShareObject {
     addedAt: number;
     addedBy: string;
@@ -14963,6 +16325,9 @@ export interface TableColumn {
     typeScale?: number;
     typeText: string;
 }
+export interface TagPolicyValue {
+    name: string;
+}
 export interface VectorSearchEndpointEndpointStatus {
     /**
      * Additional status message.
@@ -15003,9 +16368,13 @@ export interface VectorSearchIndexDeltaSyncIndexSpec {
 }
 export interface VectorSearchIndexDeltaSyncIndexSpecEmbeddingSourceColumn {
     /**
-     * The name of the embedding model endpoint
+     * The name of the embedding model endpoint, used by default for both ingestion and querying.
      */
     embeddingModelEndpointName?: string;
+    /**
+     * The name of the embedding model endpoint which, if specified, is used for querying (not ingestion).
+     */
+    modelEndpointNameForQuery?: string;
     /**
      * The name of the column
      */
@@ -15040,6 +16409,10 @@ export interface VectorSearchIndexDirectAccessIndexSpecEmbeddingSourceColumn {
      * The name of the embedding model endpoint
      */
     embeddingModelEndpointName?: string;
+    /**
+     * The name of the embedding model endpoint which, if specified, is used for querying (not ingestion).
+     */
+    modelEndpointNameForQuery?: string;
     /**
      * The name of the column
      */
@@ -15073,3 +16446,135 @@ export interface VectorSearchIndexStatus {
      */
     ready?: boolean;
 }
+export interface WorkspaceSettingV2AibiDashboardEmbeddingAccessPolicy {
+    /**
+     * . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface WorkspaceSettingV2AibiDashboardEmbeddingApprovedDomains {
+    approvedDomains?: string[];
+}
+export interface WorkspaceSettingV2AutomaticClusterUpdateWorkspace {
+    canToggle?: boolean;
+    enabled?: boolean;
+    enablementDetails?: outputs.WorkspaceSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails;
+    maintenanceWindow?: outputs.WorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface WorkspaceSettingV2AutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * The feature is force enabled if compliance mode is active
+     */
+    forcedForComplianceMode?: boolean;
+    /**
+     * The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface WorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindow {
+    weekDayBasedSchedule?: outputs.WorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface WorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
+    /**
+     * . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
+     */
+    dayOfWeek?: string;
+    /**
+     * . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    windowStartTime?: outputs.WorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface WorkspaceSettingV2AutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    hours?: number;
+    minutes?: number;
+}
+export interface WorkspaceSettingV2BooleanVal {
+    value?: boolean;
+}
+export interface WorkspaceSettingV2DefaultDataSecurityMode {
+    status: string;
+}
+export interface WorkspaceSettingV2EffectiveAibiDashboardEmbeddingAccessPolicy {
+    /**
+     * . Possible values are: `ALLOW_ALL_DOMAINS`, `ALLOW_APPROVED_DOMAINS`, `DENY_ALL_DOMAINS`
+     */
+    accessPolicyType: string;
+}
+export interface WorkspaceSettingV2EffectiveAibiDashboardEmbeddingApprovedDomains {
+    approvedDomains?: string[];
+}
+export interface WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspace {
+    canToggle?: boolean;
+    enabled?: boolean;
+    enablementDetails?: outputs.WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails;
+    maintenanceWindow?: outputs.WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow;
+    restartEvenIfNoUpdatesAvailable?: boolean;
+}
+export interface WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceEnablementDetails {
+    /**
+     * The feature is force enabled if compliance mode is active
+     */
+    forcedForComplianceMode?: boolean;
+    /**
+     * The feature is unavailable if the corresponding entitlement disabled (see getShieldEntitlementEnable)
+     */
+    unavailableForDisabledEntitlement?: boolean;
+    /**
+     * The feature is unavailable if the customer doesn't have enterprise tier
+     */
+    unavailableForNonEnterpriseTier?: boolean;
+}
+export interface WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindow {
+    weekDayBasedSchedule?: outputs.WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule;
+}
+export interface WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedSchedule {
+    /**
+     * . Possible values are: `FRIDAY`, `MONDAY`, `SATURDAY`, `SUNDAY`, `THURSDAY`, `TUESDAY`, `WEDNESDAY`
+     */
+    dayOfWeek?: string;
+    /**
+     * . Possible values are: `EVERY_WEEK`, `FIRST_AND_THIRD_OF_MONTH`, `FIRST_OF_MONTH`, `FOURTH_OF_MONTH`, `SECOND_AND_FOURTH_OF_MONTH`, `SECOND_OF_MONTH`, `THIRD_OF_MONTH`
+     */
+    frequency?: string;
+    windowStartTime?: outputs.WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime;
+}
+export interface WorkspaceSettingV2EffectiveAutomaticClusterUpdateWorkspaceMaintenanceWindowWeekDayBasedScheduleWindowStartTime {
+    hours?: number;
+    minutes?: number;
+}
+export interface WorkspaceSettingV2EffectiveBooleanVal {
+    value?: boolean;
+}
+export interface WorkspaceSettingV2EffectiveDefaultDataSecurityMode {
+    status: string;
+}
+export interface WorkspaceSettingV2EffectiveIntegerVal {
+    value?: number;
+}
+export interface WorkspaceSettingV2EffectivePersonalCompute {
+    value?: string;
+}
+export interface WorkspaceSettingV2EffectiveRestrictWorkspaceAdmins {
+    status: string;
+}
+export interface WorkspaceSettingV2EffectiveStringVal {
+    value?: string;
+}
+export interface WorkspaceSettingV2IntegerVal {
+    value?: number;
+}
+export interface WorkspaceSettingV2PersonalCompute {
+    value?: string;
+}
+export interface WorkspaceSettingV2RestrictWorkspaceAdmins {
+    status: string;
+}
+export interface WorkspaceSettingV2StringVal {
+    value?: string;
+}