feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/__init__.py

@@ -0,0 +1,27 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""Manage Compliance Manager resources."""
+
+from googlecloudsdk.calliope import base
+from surface.compliance_manager import _init_extensions as extensions
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+@base.Autogenerated
+class ComplianceManagerGa(extensions.ComplianceManagerGa):
+  """Manage Compliance Manager resources."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/_init_extensions.py

@@ -0,0 +1,34 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""File to add optional custom code to extend __init__.py."""
+from googlecloudsdk.calliope import base
+
+
+class ComplianceManagerAlpha(base.Group):
+  """Optional no-auto-generated code for ALPHA."""
+  category = base.UNCATEGORIZED_CATEGORY
+
+
+class ComplianceManagerBeta(base.Group):
+  """Optional no-auto-generated code for BETA."""
+  category = base.UNCATEGORIZED_CATEGORY
+
+
+class ComplianceManagerGa(base.Group):
+  """Optional no-auto-generated code for GA."""
+  category = base.UNCATEGORIZED_CATEGORY

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_control_deployments/__init__.py

@@ -0,0 +1,27 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""Manage Cloud Control Deployment resources."""
+
+from googlecloudsdk.calliope import base
+from surface.compliance_manager.cloud_control_deployments import _init_extensions as extensions
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+@base.Autogenerated
+class CloudControlDeploymentsGa(extensions.CloudControlDeploymentsGa):
+  """Manage Cloud Control Deployment resources."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_control_deployments/_init_extensions.py

@@ -0,0 +1,31 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""File to add optional custom code to extend __init__.py."""
+from googlecloudsdk.calliope import base
+
+
+class CloudControlDeploymentsAlpha(base.Group):
+  """Optional no-auto-generated code for ALPHA."""
+
+
+class CloudControlDeploymentsBeta(base.Group):
+  """Optional no-auto-generated code for BETA."""
+
+
+class CloudControlDeploymentsGa(base.Group):
+  """Optional no-auto-generated code for GA."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_control_deployments/_partials/_describe_ga.yaml

@@ -0,0 +1,42 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Get a cloud control deployment.
+    description: |
+      Get the details for a specific cloud control deployment.
+    examples: |-
+      To get the cloud control deployment `my-cloud-control-deployment-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-cloud-control-deployment-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name for the cloud control deployment, in the format
+        `organizations/{organization}/locations/{location}/cloudControlDeployments/{cloud_control_deployment_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_cloud_control_deployments
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControlDeployments

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_control_deployments/_partials/_list_ga.yaml

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: List Cloud Control Deployments.
+    description: |
+      List cloud control deployments for a given organization and location.
+    examples: |-
+      To list all cloud control deployments in organization `my-organization-id` and location `global`, run:
+
+      $ {command} --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The parent resource for the cloud control deployment, in the format
+        `organizations/{organization}/locations/{location}`.
+        The only supported location is `global`.
+      is_positional: false
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControlDeployments
+  response:
+    id_field: name

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_control_deployments/describe.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_control_deployments/list.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/__init__.py

@@ -0,0 +1,27 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""Manage Cloud Control resources."""
+
+from googlecloudsdk.calliope import base
+from surface.compliance_manager.cloud_controls import _init_extensions as extensions
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+@base.Autogenerated
+class CloudControlsGa(extensions.CloudControlsGa):
+  """Manage Cloud Control resources."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/_init_extensions.py

@@ -0,0 +1,31 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""File to add optional custom code to extend __init__.py."""
+from googlecloudsdk.calliope import base
+
+
+class CloudControlsAlpha(base.Group):
+  """Optional no-auto-generated code for ALPHA."""
+
+
+class CloudControlsBeta(base.Group):
+  """Optional no-auto-generated code for BETA."""
+
+
+class CloudControlsGa(base.Group):
+  """Optional no-auto-generated code for GA."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/_partials/_create_ga.yaml

@@ -0,0 +1,390 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Create a cloud control.
+    description: |
+      Create a cloud control for a given organization and location.
+    examples: |-
+      To create a cloud control `my-cloud-control-id` in organization `my-organization-id` and location `global` with a specific rule, run:
+
+      $ {command} my-cloud-control-id --organization=my-organization-id --location=global \
+          --display-name="My cloud control display name" \
+          --description="My cloud control description" \
+          --rules='[{"description":"VM IP forwarding check","ruleActionTypes":["rule-action-type-detective"],"celExpression":{"expression":"resource.canIpForward == false","resourceTypesValues":{"values":["compute.googleapis.com/Instance"]}}}]' \
+  arguments:
+    params:
+    - help_text: |-
+        Identifier. The name of the cloud control, in the format
+        `organizations/{organization}/locations/{location}/cloudControls/{cloud_control_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      request_id_field: cloudControlId
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_cloud_controls
+      required: true
+    - arg_name: description
+      api_field: cloudControl.description
+      required: false
+      repeated: false
+      help_text: |-
+        A description of the cloud control. The maximum length is 2000 characters.
+    - arg_name: display-name
+      api_field: cloudControl.displayName
+      required: false
+      repeated: false
+      help_text: |-
+        The friendly name of the cloud control. The maximum length is 200
+        characters.
+    - arg_name: parameter-spec
+      api_field: cloudControl.parameterSpec
+      required: false
+      repeated: true
+      help_text: |-
+        The parameter specifications for the cloud control.
+      spec:
+      - api_field: name
+        help_text: |-
+          The name of the parameter.
+      - api_field: displayName
+        help_text: |-
+          The friendly name of the parameter. The maximum length is 200 characters.
+      - api_field: description
+        help_text: |-
+          The description of the parameter. The maximum length is 2000 characters.
+      - api_field: isRequired
+        help_text: |-
+          Whether the parameter is required.
+      - api_field: valueType
+        help_text: |-
+          The parameter value type.
+      - api_field: defaultValue
+        help_text: |-
+          The default value of the parameter.
+        spec:
+        - api_field: stringValue
+          one_of_index: 0
+          help_text: |-
+            A string value.
+        - api_field: boolValue
+          one_of_index: 0
+          help_text: |-
+            A boolean value.
+        - api_field: stringListValue
+          one_of_index: 0
+          help_text: |-
+            A repeated string.
+          spec:
+          - api_field: values
+            help_text: |-
+              The strings in the list.
+        - api_field: numberValue
+          one_of_index: 0
+          help_text: |-
+            A double value.
+      - api_field: substitutionRules
+        help_text: |-
+          The list of parameter substitutions.
+        spec:
+        - api_field: placeholderSubstitutionRule
+          one_of_index: 0
+          help_text: |-
+            The placeholder substitution rule.
+          spec:
+          - api_field: attribute
+            help_text: |-
+              The fully qualified proto attribute path, in dot notation.
+        - api_field: attributeSubstitutionRule
+          one_of_index: 0
+          help_text: |-
+            The attribute substitution rule.
+          spec:
+          - api_field: attribute
+            help_text: |-
+              The fully qualified proto attribute path, in dot notation.
+              For example: `rules[0].cel_expression.resource_types_values`
+      - api_field: validation
+        help_text: |-
+          The permitted set of values for the parameter.
+        spec:
+        - api_field: allowedValues
+          one_of_index: 0
+          help_text: |-
+            The permitted set of values for the parameter.
+          spec:
+          - api_field: values
+            help_text: |-
+              The list of allowed values for the parameter.
+            spec:
+            - api_field: stringValue
+              one_of_index: 0
+              help_text: |-
+                A string value.
+            - api_field: boolValue
+              one_of_index: 0
+              help_text: |-
+                A boolean value.
+            - api_field: stringListValue
+              one_of_index: 0
+              help_text: |-
+                A repeated string.
+              spec:
+              - api_field: values
+                help_text: |-
+                  The strings in the list.
+            - api_field: numberValue
+              one_of_index: 0
+              help_text: |-
+                A double value.
+        - api_field: intRange
+          one_of_index: 0
+          help_text: |-
+            The permitted range for numeric parameters.
+          spec:
+          - api_field: min
+            help_text: |-
+              The minimum permitted value for the numeric parameter (inclusive).
+          - api_field: max
+            help_text: |-
+              The maximum permitted value for the numeric parameter (inclusive).
+        - api_field: regexpPattern
+          one_of_index: 0
+          help_text: |-
+            The regular expression for string parameters.
+          spec:
+          - api_field: pattern
+            help_text: |-
+              The regex pattern to match the values of the parameter with.
+    - arg_name: rules
+      api_field: cloudControl.rules
+      required: false
+      repeated: true
+      help_text: |-
+        The rules that you can enforce to meet your security or compliance intent.
+      spec:
+      - api_field: celExpression
+        one_of_index: 0
+        help_text: |-
+          The rule's logic expression in Common Expression Language (CEL).
+        spec:
+        - api_field: resourceTypesValues
+          one_of_index: 0
+          help_text: |-
+            The resource instance types on which this expression is defined.
+            The format is `<SERVICE_NAME>/<type>`.
+            For example: `compute.googleapis.com/Instance`
+          spec:
+          - api_field: values
+            help_text: |-
+              The strings in the list.
+        - api_field: expression
+          help_text: |-
+            The logical expression in CEL. The maximum length of the condition
+            is 1000 characters. For more information, see
+            [CEL
+            expression](https://cloud.google.com/security-command-center/docs/compliance-manager-write-cel-expressions).
+      - api_field: description
+        help_text: |-
+          The rule description. The maximum length is 2000 characters.
+      - api_field: ruleActionTypes
+        help_text: |-
+          The functionality that's enabled by the rule.
+    - arg_name: severity
+      api_field: cloudControl.severity
+      required: false
+      help_text: |-
+        The severity of the findings that are generated by the cloud control.
+      choices:
+      - arg_value: critical
+        enum_value: CRITICAL
+        help_text: |-
+          A critical vulnerability is easily discoverable by an external actor,
+          exploitable, and results in the direct ability to execute arbitrary code,
+          exfiltrate data, and otherwise gain additional access and privileges to
+          cloud resources and workloads. Examples include publicly accessible
+          unprotected user data and public SSH access with weak or no
+          passwords.
+
+          A critical threat is a threat that can access, modify, or delete data or
+          execute unauthorized code within existing resources.
+      - arg_value: high
+        enum_value: HIGH
+        help_text: |-
+          A high-risk vulnerability can be easily discovered and exploited in
+          combination with other vulnerabilities to gain direct access and
+          the ability to execute arbitrary code, exfiltrate data, and otherwise
+          gain additional access and privileges to cloud resources and workloads.
+          An example is a database with weak or no passwords that is only
+          accessible internally. This database could easily be compromised by an
+          actor that had access to the internal network.
+
+          A high-risk threat is a threat that can create new computational
+          resources in an environment but can't access data or execute code in
+          existing resources.
+      - arg_value: medium
+        enum_value: MEDIUM
+        help_text: |-
+          A medium-risk vulnerability can be used by an actor to gain access to
+          resources or privileges that enable them to eventually (through multiple
+          steps or a complex exploit) gain access and the ability to execute
+          arbitrary code or exfiltrate data. An example is a service account with
+          access to more projects than it should have. If an actor gains access to
+          the service account, they could potentially use that access to manipulate
+          a project the service account was not intended to.
+
+          A medium-risk threat can cause operational impact but might not
+          access data or execute unauthorized code.
+      - arg_value: low
+        enum_value: LOW
+        help_text: |-
+          A low-risk vulnerability hampers a security organization's ability to
+          detect vulnerabilities or active threats in their deployment, or prevents
+          the root cause investigation of security issues. An example is monitoring
+          and logs being disabled for resource configurations and access.
+
+          A low-risk threat is a threat that has obtained minimal access to an
+          environment but can't access data, execute code, or create resources.
+    - arg_name: finding-category
+      api_field: cloudControl.findingCategory
+      required: false
+      repeated: false
+      help_text: |-
+        The finding category for the cloud control findings. The maximum
+        length is 255 characters.
+    - arg_name: supported-cloud-providers
+      api_field: cloudControl.supportedCloudProviders
+      required: false
+      repeated: true
+      help_text: |-
+        The supported cloud providers.
+      choices:
+      - arg_value: aws
+        enum_value: AWS
+        help_text: |-
+          Amazon Web Services (AWS).
+      - arg_value: azure
+        enum_value: AZURE
+        help_text: |-
+          Microsoft Azure.
+      - arg_value: gcp
+        enum_value: GCP
+        help_text: |-
+          Google Cloud.
+    - arg_name: remediation-steps
+      api_field: cloudControl.remediationSteps
+      required: false
+      repeated: false
+      help_text: |-
+        The remediation steps for the cloud control findings. The
+        maximum length is 400 characters.
+    - arg_name: categories
+      api_field: cloudControl.categories
+      required: false
+      repeated: true
+      help_text: |-
+        The categories for the cloud control.
+      choices:
+      - arg_value: cc-category-infrastructure
+        enum_value: CC_CATEGORY_INFRASTRUCTURE
+        help_text: |-
+          The infrastructure security category.
+      - arg_value: cc-category-artificial-intelligence
+        enum_value: CC_CATEGORY_ARTIFICIAL_INTELLIGENCE
+        help_text: |-
+          The artificial intelligence category.
+      - arg_value: cc-category-physical-security
+        enum_value: CC_CATEGORY_PHYSICAL_SECURITY
+        help_text: |-
+          The physical security category.
+      - arg_value: cc-category-data-security
+        enum_value: CC_CATEGORY_DATA_SECURITY
+        help_text: |-
+          The data security category.
+      - arg_value: cc-category-network-security
+        enum_value: CC_CATEGORY_NETWORK_SECURITY
+        help_text: |-
+          The network security category.
+      - arg_value: cc-category-incident-management
+        enum_value: CC_CATEGORY_INCIDENT_MANAGEMENT
+        help_text: |-
+          The incident management category.
+      - arg_value: cc-category-identity-and-access-management
+        enum_value: CC_CATEGORY_IDENTITY_AND_ACCESS_MANAGEMENT
+        help_text: |-
+          The identity and access management category.
+      - arg_value: cc-category-encryption
+        enum_value: CC_CATEGORY_ENCRYPTION
+        help_text: |-
+          The encryption category.
+      - arg_value: cc-category-logs-management-and-infrastructure
+        enum_value: CC_CATEGORY_LOGS_MANAGEMENT_AND_INFRASTRUCTURE
+        help_text: |-
+          The logs management and infrastructure category.
+      - arg_value: cc-category-hr-admin-and-processes
+        enum_value: CC_CATEGORY_HR_ADMIN_AND_PROCESSES
+        help_text: |-
+          The HR, admin, and processes category.
+      - arg_value: cc-category-third-party-and-sub-processor-management
+        enum_value: CC_CATEGORY_THIRD_PARTY_AND_SUB_PROCESSOR_MANAGEMENT
+        help_text: |-
+          The third-party and sub-processor management category.
+      - arg_value: cc-category-legal-and-disclosures
+        enum_value: CC_CATEGORY_LEGAL_AND_DISCLOSURES
+        help_text: |-
+          The legal and disclosures category.
+      - arg_value: cc-category-vulnerability-management
+        enum_value: CC_CATEGORY_VULNERABILITY_MANAGEMENT
+        help_text: |-
+          The vulnerability management category.
+      - arg_value: cc-category-privacy
+        enum_value: CC_CATEGORY_PRIVACY
+        help_text: |-
+          The privacy category.
+      - arg_value: cc-category-bcdr
+        enum_value: CC_CATEGORY_BCDR
+        help_text: |-
+          The business continuity and disaster recovery (BCDR) category.
+    - arg_name: supported-target-resource-types
+      api_field: cloudControl.supportedTargetResourceTypes
+      required: false
+      repeated: true
+      help_text: |-
+        The target resource types that are supported by the cloud control.
+      choices:
+      - arg_value: target-resource-crm-type-org
+        enum_value: TARGET_RESOURCE_CRM_TYPE_ORG
+        help_text: |-
+          The target resource is a Google Cloud organization.
+      - arg_value: target-resource-crm-type-folder
+        enum_value: TARGET_RESOURCE_CRM_TYPE_FOLDER
+        help_text: |-
+          The target resource is a folder.
+      - arg_value: target-resource-crm-type-project
+        enum_value: TARGET_RESOURCE_CRM_TYPE_PROJECT
+        help_text: |-
+          The target resource is a project.
+      - arg_value: target-resource-type-application
+        enum_value: TARGET_RESOURCE_TYPE_APPLICATION
+        help_text: |-
+          The target resource is an application in App Hub.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControls

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/_partials/_delete_ga.yaml

@@ -0,0 +1,42 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Delete a cloud control.
+    description: |
+      Delete a specific cloud control.
+    examples: |-
+      To delete cloud control `my-cloud-control-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-cloud-control-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name of the cloud control to delete, in the format
+        `organizations/{organization}/locations/{location}/CloudControls/{CloudControl}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_cloud_controls
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControls

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/_partials/_describe_ga.yaml

@@ -0,0 +1,50 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Get a cloud control.
+    description: |
+      Get the details for a specific cloud control.
+    examples: |-
+      To get cloud control `my-cloud-control-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-cloud-control-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name of the cloud control to retrieve, in the format
+        `organizations/{organization}/locations/{location}/cloudControls/{cloud_control}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_cloud_controls
+      required: true
+    - arg_name: major-revision-id
+      api_field: majorRevisionId
+      required: false
+      repeated: false
+      type: long
+      help_text: |-
+        The major version of the cloud control to retrieve. If not specified,
+        the most recently updated `revision_id` is retrieved.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControls

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/_partials/_list_ga.yaml

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: List cloud controls.
+    description: |
+      List all cloud controls for a given organization and location.
+    examples: |-
+      To list all cloud controls in organization `my-organization-id` and location `global`, run:
+
+      $ {command} --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The parent resource name, in the format
+        `organizations/{organization}/locations/{location}`.
+        The only supported location is `global`.
+      is_positional: false
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControls
+  response:
+    id_field: name

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/_partials/_update_ga.yaml

@@ -0,0 +1,396 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  hidden: true
+  help_text:
+    brief: Update a cloud control.
+    description: |
+      Update a specific cloud control.
+    examples: |-
+      To update cloud control `my-cloud-control-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-cloud-control-id --organization=my-organization-id --location=global \
+          --display-name="New control display name" \
+          --description="New control description"
+  arguments:
+    params:
+    - help_text: |-
+        Identifier. The name of the cloud control, in the format
+        `organizations/{organization}/locations/{location}/cloudControls/{cloud_control_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_cloud_controls
+      required: true
+    - arg_name: description
+      api_field: cloudControl.description
+      required: false
+      repeated: false
+      help_text: |-
+        A description of the cloud control. The maximum length is 2000 characters.
+    - arg_name: display-name
+      api_field: cloudControl.displayName
+      required: false
+      repeated: false
+      help_text: |-
+        The friendly name of the cloud control. The maximum length is 200
+        characters.
+    - arg_name: parameter-spec
+      api_field: cloudControl.parameterSpec
+      required: false
+      repeated: true
+      help_text: |-
+        The parameter specifications for the cloud control.
+      clearable: true
+      spec:
+      - api_field: name
+        help_text: |-
+          The name of the parameter.
+      - api_field: displayName
+        help_text: |-
+          The friendly name of the parameter. The maximum length is 200 characters.
+      - api_field: description
+        help_text: |-
+          The description of the parameter. The maximum length is 2000 characters.
+      - api_field: isRequired
+        help_text: |-
+          Whether the parameter is required.
+      - api_field: valueType
+        help_text: |-
+          The parameter value type.
+      - api_field: defaultValue
+        help_text: |-
+          The default value of the parameter.
+        spec:
+        - api_field: stringValue
+          one_of_index: 0
+          help_text: |-
+            A string value.
+        - api_field: boolValue
+          one_of_index: 0
+          help_text: |-
+            A boolean value.
+        - api_field: stringListValue
+          one_of_index: 0
+          help_text: |-
+            A repeated string.
+          spec:
+          - api_field: values
+            help_text: |-
+              The strings in the list.
+        - api_field: numberValue
+          one_of_index: 0
+          help_text: |-
+            A double value.
+      - api_field: substitutionRules
+        help_text: |-
+          The list of parameter substitutions.
+        spec:
+        - api_field: placeholderSubstitutionRule
+          one_of_index: 0
+          help_text: |-
+            The placeholder substitution rule.
+          spec:
+          - api_field: attribute
+            help_text: |-
+              The fully qualified proto attribute path, in dot notation.
+        - api_field: attributeSubstitutionRule
+          one_of_index: 0
+          help_text: |-
+            The attribute substitution rule.
+          spec:
+          - api_field: attribute
+            help_text: |-
+              The fully qualified proto attribute path, in dot notation.
+              For example: `rules[0].cel_expression.resource_types_values`
+      - api_field: validation
+        help_text: |-
+          The permitted set of values for the parameter.
+        spec:
+        - api_field: allowedValues
+          one_of_index: 0
+          help_text: |-
+            The permitted set of values for the parameter.
+          spec:
+          - api_field: values
+            help_text: |-
+              The list of allowed values for the parameter.
+            spec:
+            - api_field: stringValue
+              one_of_index: 0
+              help_text: |-
+                A string value.
+            - api_field: boolValue
+              one_of_index: 0
+              help_text: |-
+                A boolean value.
+            - api_field: stringListValue
+              one_of_index: 0
+              help_text: |-
+                A repeated string.
+              spec:
+              - api_field: values
+                help_text: |-
+                  The strings in the list.
+            - api_field: numberValue
+              one_of_index: 0
+              help_text: |-
+                A double value.
+        - api_field: intRange
+          one_of_index: 0
+          help_text: |-
+            The permitted range for numeric parameters.
+          spec:
+          - api_field: min
+            help_text: |-
+              The minimum permitted value for the numeric parameter (inclusive).
+          - api_field: max
+            help_text: |-
+              The maximum permitted value for the numeric parameter (inclusive).
+        - api_field: regexpPattern
+          one_of_index: 0
+          help_text: |-
+            The regular expression for string parameters.
+          spec:
+          - api_field: pattern
+            help_text: |-
+              The regex pattern to match the values of the parameter with.
+    - arg_name: rules
+      api_field: cloudControl.rules
+      required: false
+      repeated: true
+      help_text: |-
+        The rules that you can enforce to meet your security or compliance intent.
+      clearable: true
+      spec:
+      - api_field: celExpression
+        one_of_index: 0
+        help_text: |-
+          The rule's logic expression in Common Expression Language (CEL).
+        spec:
+        - api_field: resourceTypesValues
+          one_of_index: 0
+          help_text: |-
+            The resource instance types on which this expression is defined.
+            The format is `<SERVICE_NAME>/<type>`.
+            For example: `compute.googleapis.com/Instance`
+          spec:
+          - api_field: values
+            help_text: |-
+              The strings in the list.
+        - api_field: expression
+          help_text: |-
+            The logical expression in CEL. The maximum length of the condition
+            is 1000 characters. For more information, see
+            [CEL
+            expression](https://cloud.google.com/security-command-center/docs/compliance-manager-write-cel-expressions).
+      - api_field: description
+        help_text: |-
+          The rule description. The maximum length is 2000 characters.
+      - api_field: ruleActionTypes
+        help_text: |-
+          The functionality that's enabled by the rule.
+    - arg_name: severity
+      api_field: cloudControl.severity
+      required: false
+      help_text: |-
+        The severity of the findings that are generated by the cloud control.
+      choices:
+      - arg_value: critical
+        enum_value: CRITICAL
+        help_text: |-
+          A critical vulnerability is easily discoverable by an external actor,
+          exploitable, and results in the direct ability to execute arbitrary code,
+          exfiltrate data, and otherwise gain additional access and privileges to
+          cloud resources and workloads. Examples include publicly accessible
+          unprotected user data and public SSH access with weak or no
+          passwords.
+
+          A critical threat is a threat that can access, modify, or delete data or
+          execute unauthorized code within existing resources.
+      - arg_value: high
+        enum_value: HIGH
+        help_text: |-
+          A high-risk vulnerability can be easily discovered and exploited in
+          combination with other vulnerabilities to gain direct access and
+          the ability to execute arbitrary code, exfiltrate data, and otherwise
+          gain additional access and privileges to cloud resources and workloads.
+          An example is a database with weak or no passwords that is only
+          accessible internally. This database could easily be compromised by an
+          actor that had access to the internal network.
+
+          A high-risk threat is a threat that can create new computational
+          resources in an environment but can't access data or execute code in
+          existing resources.
+      - arg_value: medium
+        enum_value: MEDIUM
+        help_text: |-
+          A medium-risk vulnerability can be used by an actor to gain access to
+          resources or privileges that enable them to eventually (through multiple
+          steps or a complex exploit) gain access and the ability to execute
+          arbitrary code or exfiltrate data. An example is a service account with
+          access to more projects than it should have. If an actor gains access to
+          the service account, they could potentially use that access to manipulate
+          a project the service account was not intended to.
+
+          A medium-risk threat can cause operational impact but might not
+          access data or execute unauthorized code.
+      - arg_value: low
+        enum_value: LOW
+        help_text: |-
+          A low-risk vulnerability hampers a security organization's ability to
+          detect vulnerabilities or active threats in their deployment, or prevents
+          the root cause investigation of security issues. An example is monitoring
+          and logs being disabled for resource configurations and access.
+
+          A low-risk threat is a threat that has obtained minimal access to an
+          environment but can't access data, execute code, or create resources.
+    - arg_name: finding-category
+      api_field: cloudControl.findingCategory
+      required: false
+      repeated: false
+      help_text: |-
+        The finding category for the cloud control findings. The maximum
+        length is 255 characters.
+    - arg_name: supported-cloud-providers
+      api_field: cloudControl.supportedCloudProviders
+      required: false
+      repeated: true
+      help_text: |-
+        The supported cloud providers.
+      choices:
+      - arg_value: aws
+        enum_value: AWS
+        help_text: |-
+          Amazon Web Services (AWS).
+      - arg_value: azure
+        enum_value: AZURE
+        help_text: |-
+          Microsoft Azure.
+      - arg_value: gcp
+        enum_value: GCP
+        help_text: |-
+          Google Cloud.
+      clearable: true
+    - arg_name: remediation-steps
+      api_field: cloudControl.remediationSteps
+      required: false
+      repeated: false
+      help_text: |-
+        The remediation steps for the cloud control findings. The
+        maximum length is 400 characters.
+    - arg_name: categories
+      api_field: cloudControl.categories
+      required: false
+      repeated: true
+      help_text: |-
+        The categories for the cloud control.
+      choices:
+      - arg_value: cc-category-infrastructure
+        enum_value: CC_CATEGORY_INFRASTRUCTURE
+        help_text: |-
+          The infrastructure security category.
+      - arg_value: cc-category-artificial-intelligence
+        enum_value: CC_CATEGORY_ARTIFICIAL_INTELLIGENCE
+        help_text: |-
+          The artificial intelligence category.
+      - arg_value: cc-category-physical-security
+        enum_value: CC_CATEGORY_PHYSICAL_SECURITY
+        help_text: |-
+          The physical security category.
+      - arg_value: cc-category-data-security
+        enum_value: CC_CATEGORY_DATA_SECURITY
+        help_text: |-
+          The data security category.
+      - arg_value: cc-category-network-security
+        enum_value: CC_CATEGORY_NETWORK_SECURITY
+        help_text: |-
+          The network security category.
+      - arg_value: cc-category-incident-management
+        enum_value: CC_CATEGORY_INCIDENT_MANAGEMENT
+        help_text: |-
+          The incident management category.
+      - arg_value: cc-category-identity-and-access-management
+        enum_value: CC_CATEGORY_IDENTITY_AND_ACCESS_MANAGEMENT
+        help_text: |-
+          The identity and access management category.
+      - arg_value: cc-category-encryption
+        enum_value: CC_CATEGORY_ENCRYPTION
+        help_text: |-
+          The encryption category.
+      - arg_value: cc-category-logs-management-and-infrastructure
+        enum_value: CC_CATEGORY_LOGS_MANAGEMENT_AND_INFRASTRUCTURE
+        help_text: |-
+          The logs management and infrastructure category.
+      - arg_value: cc-category-hr-admin-and-processes
+        enum_value: CC_CATEGORY_HR_ADMIN_AND_PROCESSES
+        help_text: |-
+          The HR, admin, and processes category.
+      - arg_value: cc-category-third-party-and-sub-processor-management
+        enum_value: CC_CATEGORY_THIRD_PARTY_AND_SUB_PROCESSOR_MANAGEMENT
+        help_text: |-
+          The third-party and sub-processor management category.
+      - arg_value: cc-category-legal-and-disclosures
+        enum_value: CC_CATEGORY_LEGAL_AND_DISCLOSURES
+        help_text: |-
+          The legal and disclosures category.
+      - arg_value: cc-category-vulnerability-management
+        enum_value: CC_CATEGORY_VULNERABILITY_MANAGEMENT
+        help_text: |-
+          The vulnerability management category.
+      - arg_value: cc-category-privacy
+        enum_value: CC_CATEGORY_PRIVACY
+        help_text: |-
+          The privacy category.
+      - arg_value: cc-category-bcdr
+        enum_value: CC_CATEGORY_BCDR
+        help_text: |-
+          The business continuity and disaster recovery (BCDR) category.
+      clearable: true
+    - arg_name: supported-target-resource-types
+      api_field: cloudControl.supportedTargetResourceTypes
+      required: false
+      repeated: true
+      help_text: |-
+        The target resource types that are supported by the cloud control.
+      choices:
+      - arg_value: target-resource-crm-type-org
+        enum_value: TARGET_RESOURCE_CRM_TYPE_ORG
+        help_text: |-
+          The target resource is a Google Cloud organization.
+      - arg_value: target-resource-crm-type-folder
+        enum_value: TARGET_RESOURCE_CRM_TYPE_FOLDER
+        help_text: |-
+          The target resource is a folder.
+      - arg_value: target-resource-crm-type-project
+        enum_value: TARGET_RESOURCE_CRM_TYPE_PROJECT
+        help_text: |-
+          The target resource is a project.
+      - arg_value: target-resource-type-application
+        enum_value: TARGET_RESOURCE_TYPE_APPLICATION
+        help_text: |-
+          The target resource is an application in App Hub.
+      clearable: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.cloudControls
+  update:
+    read_modify_update: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/create.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/delete.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/describe.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/list.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/cloud_controls/update.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/__init__.py

@@ -0,0 +1,27 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""Manage Framework Deployment resources."""
+
+from googlecloudsdk.calliope import base
+from surface.compliance_manager.framework_deployments import _init_extensions as extensions
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+@base.Autogenerated
+class FrameworkDeploymentsGa(extensions.FrameworkDeploymentsGa):
+  """Manage Framework Deployment resources."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/_init_extensions.py

@@ -0,0 +1,31 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""File to add optional custom code to extend __init__.py."""
+from googlecloudsdk.calliope import base
+
+
+class FrameworkDeploymentsAlpha(base.Group):
+  """Optional no-auto-generated code for ALPHA."""
+
+
+class FrameworkDeploymentsBeta(base.Group):
+  """Optional no-auto-generated code for BETA."""
+
+
+class FrameworkDeploymentsGa(base.Group):
+  """Optional no-auto-generated code for GA."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/_partials/_create_ga.yaml

@@ -0,0 +1,207 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Create a framework deployment.
+    description: |
+      Create a framework deployment for a given organization and location.
+    examples: |-
+      To create a framework deployment `my-framework-deployment-id` in organization `my-organization-id` and location `global`, targeting `folders/my-folder-id` and using framework `my-framework-name`, run:
+
+      $ {command} my-framework-deployment-id --organization=my-organization-id --location=global \
+          --target-resource-config-existing=folders/my-folder-id \
+          --framework='organizations/my-organization-id/locations/global/frameworks/my-framework-name' \
+          --framework-major-revision-id='1' \
+          --cloud-control-metadata='[{"cloudControlDetails": {"name": "organizations/my-organization-id/locations/global/cloudControls/my-control-1", "majorRevisionId": "1", "parameters": []}, "enforcementMode": "DETECTIVE"}]'
+  arguments:
+    params:
+    - help_text: |-
+        Identifier. The name of the framework deployment, in the format
+        `organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      request_id_field: frameworkDeploymentId
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_framework_deployments
+      required: true
+    - group:
+        api_field: frameworkDeployment.targetResourceConfig
+        required: true
+        help_text: |-
+          The name of the target resource or the configuration that's required to
+          create a new target resource.
+        params:
+        - group:
+            mutex: true
+            help_text: |-
+              Arguments for the resource config.
+            params:
+            - arg_name: target-resource-config-existing
+              api_field: frameworkDeployment.targetResourceConfig.existingTargetResource
+              required: false
+              repeated: false
+              help_text: |-
+                The resource hierarchy node, in one of the following formats:
+
+                - `organizations/{organizationID}`
+                - `folders/{folderID}`
+                - `projects/{projectID}`
+            - group:
+                api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig
+                required: false
+                help_text: |-
+                  The configuration that's required to create a target resource.
+                params:
+                - group:
+                    mutex: true
+                    help_text: |-
+                      Arguments for the resource creation config.
+                    params:
+                    - group:
+                        api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.folderCreationConfig
+                        required: false
+                        help_text: |-
+                          The configuration that's required to create a folder to be used
+                          as the target resource for a deployment.
+                        params:
+                        - arg_name: target-resource-creation-config-folder-parent
+                          api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.folderCreationConfig.parent
+                          required: true
+                          repeated: false
+                          help_text: |-
+                            The parent of the folder, in the format
+                            `organizations/{organizationID}` or `folders/{folderID}`.
+                        - arg_name: target-resource-creation-config-folder-display-name
+                          api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.folderCreationConfig.folderDisplayName
+                          required: true
+                          repeated: false
+                          help_text: |-
+                            The display name of the folder.
+                    - group:
+                        api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.projectCreationConfig
+                        required: false
+                        help_text: |-
+                          The configuration that's required to create a project to be used
+                          as the target resource of a deployment.
+                        params:
+                        - arg_name: target-resource-creation-config-project-parent
+                          api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.projectCreationConfig.parent
+                          required: true
+                          repeated: false
+                          help_text: |-
+                            The parent of the project, in the format
+                            `organizations/{organizationID}` or `folders/{folderID}`.
+                        - arg_name: target-resource-creation-config-project-display-name
+                          api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.projectCreationConfig.projectDisplayName
+                          required: true
+                          repeated: false
+                          help_text: |-
+                            The display name of the project.
+                        - arg_name: target-resource-creation-config-project-billing-account-id
+                          api_field: frameworkDeployment.targetResourceConfig.targetResourceCreationConfig.projectCreationConfig.billingAccountId
+                          required: true
+                          repeated: false
+                          help_text: |-
+                            The billing account ID for the project.
+    - group:
+        api_field: frameworkDeployment.framework
+        required: true
+        help_text: |-
+          The reference of a framework, in the format
+          `organizations/{organization}/locations/{location}/frameworks/{framework}`.
+          The only supported location is `global`.
+        params:
+        - group:
+            mutex: true
+            help_text: |-
+              Arguments for the  major revision id.
+            params:
+            - arg_name: framework-major-revision-id
+              api_field: frameworkDeployment.framework.majorRevisionId
+              required: false
+              repeated: false
+              type: long
+              help_text: |-
+                The major version of the framework. If not specified, the version
+                corresponds to the latest version of the framework.
+        - arg_name: framework
+          api_field: frameworkDeployment.framework.framework
+          required: true
+          repeated: false
+          help_text: |-
+            The major version of the framework. If not specified, the version
+            corresponds to the latest version of the framework.
+    - arg_name: description
+      api_field: frameworkDeployment.description
+      required: false
+      repeated: false
+      help_text: |-
+        A user-provided description of the framework deployment.
+    - arg_name: cloud-control-metadata
+      api_field: frameworkDeployment.cloudControlMetadata
+      required: true
+      repeated: true
+      help_text: |-
+        The deployment mode and parameters for each of the cloud controls in
+        the framework. Every cloud control in the framework includes
+        metadata.
+      spec:
+      - api_field: cloudControlDetails
+        help_text: |-
+          The cloud control name and parameters.
+        spec:
+        - api_field: name
+          help_text: |-
+            The name of the cloud control, in the format
+            `organizations/{organization}/locations/{location}/cloudControls/{cloud-control}`.
+            The only supported location is `global`.
+        - api_field: majorRevisionId
+          help_text: |-
+            The major version of the cloud control.
+        - api_field: parameters
+          help_text: |-
+            Parameters are key-value pairs that let you provide your custom location
+            requirements, environment requirements, or other settings that are
+            relevant to the cloud control. An example parameter is
+            `{"name": "location","value": "us-west-1"}`.
+          spec:
+          - api_field: name
+            help_text: |-
+              The name or key of the parameter.
+      - api_field: enforcementMode
+        help_text: |-
+          The enforcement mode of the cloud control.
+    - arg_name: etag
+      api_field: frameworkDeployment.etag
+      required: false
+      repeated: false
+      help_text: |-
+        To prevent concurrent updates from overwriting each other, always provide
+        the `etag` when you update a framework deployment. You can also
+        provide the `etag` when you delete a framework deployment, to help
+        ensure that you're deleting the intended version of the
+        framework deployment.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworkDeployments
+  async:
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/_partials/_delete_ga.yaml

@@ -0,0 +1,59 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Delete a framework deployment.
+    description: |
+      Delete a specific framework deployment.
+    examples: |-
+      To delete the framework deployment `my-framework-deployment-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-framework-deployment-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name of the framework deployment that you want to delete,
+        in the format
+        `organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_framework_deployments
+      required: true
+    - arg_name: etag
+      api_field: etag
+      required: false
+      repeated: false
+      help_text: |-
+        An opaque identifier for the current version of the resource.
+
+        If you provide this value, then it must match the existing value. If the
+        values don't match, then the request fails with an
+        [`ABORTED`][google.rpc.Code.ABORTED] error.
+
+        If you omit this value, then the resource is deleted regardless of its
+        current `etag` value.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworkDeployments
+  async:
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/_partials/_describe_ga.yaml

@@ -0,0 +1,42 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Get a framework deployment.
+    description: |
+      Get the details for a specific framework deployment.
+    examples: |-
+      To get the framework deployment `my-framework-deployment-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-framework-deployment-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name of the framework deployment, in the format
+        `organizations/{organization}/locations/{location}/frameworkDeployments/{framework_deployment_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_framework_deployments
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworkDeployments

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/_partials/_list_ga.yaml

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: List framework deployments.
+    description: |
+      List all framework deployments for a given organization and location.
+    examples: |-
+      To list all framework deployments in organization `my-organization-id` and location `global`, run:
+
+      $ {command} --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The parent resource of the framework deployment, in the format
+        `organizations/{organization}/locations/{location}`.
+        The only supported location is `global`.
+      is_positional: false
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworkDeployments
+  response:
+    id_field: name

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/create.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/delete.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/describe.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/framework_deployments/list.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/__init__.py

@@ -0,0 +1,27 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""Manage Framework resources."""
+
+from googlecloudsdk.calliope import base
+from surface.compliance_manager.frameworks import _init_extensions as extensions
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+@base.Autogenerated
+class FrameworksGa(extensions.FrameworksGa):
+  """Manage Framework resources."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/_init_extensions.py

@@ -0,0 +1,31 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""File to add optional custom code to extend __init__.py."""
+from googlecloudsdk.calliope import base
+
+
+class FrameworksAlpha(base.Group):
+  """Optional no-auto-generated code for ALPHA."""
+
+
+class FrameworksBeta(base.Group):
+  """Optional no-auto-generated code for BETA."""
+
+
+class FrameworksGa(base.Group):
+  """Optional no-auto-generated code for GA."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/_partials/_create_ga.yaml

@@ -0,0 +1,111 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Create a framework.
+    description: |
+      Create a framework for a given organization and location.
+    examples: |-
+      To create a framework `my-framework-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-framework-id --organization=my-organization-id --location=global \
+          --description="My framework description" \
+          --display-name="My framework display name" \
+          --controls='[{"name": "organizations/my-organization-id/locations/global/cloudControls/my-control-1", "majorRevisionId": "1", "parameters": []}]' \
+  arguments:
+    params:
+    - help_text: |-
+        Identifier. The name of the framework, in the format
+        `organizations/{organization}/locations/{location}/frameworks/{framework_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      request_id_field: frameworkId
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_frameworks
+      required: true
+    - arg_name: display-name
+      api_field: framework.displayName
+      required: false
+      repeated: false
+      help_text: |-
+        The friendly name of the framework. The maximum length is 200 characters.
+    - arg_name: description
+      api_field: framework.description
+      required: false
+      repeated: false
+      help_text: |-
+        The description of the framework. The maximum length is 2000 characters.
+    - arg_name: cloud-control-details
+      api_field: framework.cloudControlDetails
+      required: false
+      repeated: true
+      help_text: |-
+        The cloud control details that are directly added without any
+        grouping in the framework.
+      spec:
+      - api_field: name
+        help_text: |-
+          The name of the cloud control, in the format
+          `organizations/{organization}/locations/{location}/cloudControls/{cloud-control}`.
+          The only supported location is `global`.
+      - api_field: majorRevisionId
+        help_text: |-
+          The major version of the cloud control.
+      - api_field: parameters
+        help_text: |-
+          Parameters are key-value pairs that let you provide your custom location
+          requirements, environment requirements, or other settings that are
+          relevant to the cloud control. An example parameter is
+          `{"name": "location","value": "us-west-1"}`.
+        spec:
+        - api_field: name
+          help_text: |-
+            The name or key of the parameter.
+    - arg_name: category
+      api_field: framework.category
+      required: false
+      repeated: true
+      help_text: |-
+        The category of the framework.
+      choices:
+      - arg_value: industry-defined-standard
+        enum_value: INDUSTRY_DEFINED_STANDARD
+        help_text: |-
+          An industry-defined framework.
+      - arg_value: assured-workloads
+        enum_value: ASSURED_WORKLOADS
+        help_text: |-
+          An Assured Workloads framework.
+      - arg_value: data-security
+        enum_value: DATA_SECURITY
+        help_text: |-
+          A data security posture framework.
+      - arg_value: google-best-practices
+        enum_value: GOOGLE_BEST_PRACTICES
+        help_text: |-
+          A Google's best practices framework.
+      - arg_value: custom-framework
+        enum_value: CUSTOM_FRAMEWORK
+        help_text: |-
+          A user-created framework.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworks

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/_partials/_delete_ga.yaml

@@ -0,0 +1,42 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Delete a framework.
+    description: |
+      Delete a specific framework.
+    examples: |-
+      To delete framework `my-framework-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-framework-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name of the resource, in the format
+        `organizations/{organization}/locations/{location}/frameworks/{framework}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_frameworks
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworks

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/_partials/_describe_ga.yaml

@@ -0,0 +1,50 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Get a framework.
+    description: |
+      Get the details for a specific framework.
+    examples: |-
+      To get framework `my-framework-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-framework-id --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The name of the framework to retrieve, in the format
+        `organizations/{organization}/locations/{location}/frameworks/{framework_id}`
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_frameworks
+      required: true
+    - arg_name: major-revision-id
+      api_field: majorRevisionId
+      required: false
+      repeated: false
+      type: long
+      help_text: |-
+        The framework major version to retrieve. If not specified, the most
+        recently updated `revision_id` is retrieved.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworks

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/_partials/_list_ga.yaml

@@ -0,0 +1,44 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: List frameworks.
+    description: |
+      List all frameworks for a given organization and location.
+    examples: |-
+      To list all frameworks in organization `my-organization-id` and location `global`, run:
+
+      $ {command} --organization=my-organization-id --location=global
+  arguments:
+    params:
+    - help_text: |-
+        The parent resource name, in the format
+        `organizations/{organization}/locations/{location}`.
+        The only supported location is `global`.
+      is_positional: false
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworks
+  response:
+    id_field: name

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/_partials/_update_ga.yaml

@@ -0,0 +1,120 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  hidden: true
+  help_text:
+    brief: Update a framework.
+    description: |
+      Update a specific framework.
+    examples: |-
+      To update framework `my-framework-id` in organization `my-organization-id` and location `global`, run:
+
+      $ {command} my-framework-id --organization=my-organization-id --location=global \
+          --description="New framework description"
+  arguments:
+    params:
+    - help_text: |-
+        Identifier. The name of the framework, in the format
+        `organizations/{organization}/locations/{location}/frameworks/{framework_id}`.
+        The only supported location is `global`.
+      is_positional: true
+      is_primary_resource: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.v1_resources:organizations_locations_frameworks
+      required: true
+    - arg_name: display-name
+      api_field: framework.displayName
+      required: false
+      repeated: false
+      help_text: |-
+        The friendly name of the framework. The maximum length is 200 characters.
+    - arg_name: description
+      api_field: framework.description
+      required: false
+      repeated: false
+      help_text: |-
+        The description of the framework. The maximum length is 2000 characters.
+    - arg_name: cloud-control-details
+      api_field: framework.cloudControlDetails
+      required: false
+      repeated: true
+      help_text: |-
+        The cloud control details that are directly added without any
+        grouping in the framework.
+      clearable: true
+      spec:
+      - api_field: name
+        help_text: |-
+          The name of the cloud control, in the format
+          `organizations/{organization}/locations/{location}/cloudControls/{cloud-control}`.
+          The only supported location is `global`.
+      - api_field: majorRevisionId
+        help_text: |-
+          The major version of the cloud control.
+      - api_field: parameters
+        help_text: |-
+          Parameters are key-value pairs that let you provide your custom location
+          requirements, environment requirements, or other settings that are
+          relevant to the cloud control. An example parameter is
+          `{"name": "location","value": "us-west-1"}`.
+        spec:
+        - api_field: name
+          help_text: |-
+            The name or key of the parameter.
+    - arg_name: category
+      api_field: framework.category
+      required: false
+      repeated: true
+      help_text: |-
+        The category of the framework.
+      choices:
+      - arg_value: industry-defined-standard
+        enum_value: INDUSTRY_DEFINED_STANDARD
+        help_text: |-
+          An industry-defined framework.
+      - arg_value: assured-workloads
+        enum_value: ASSURED_WORKLOADS
+        help_text: |-
+          An Assured Workloads framework.
+      - arg_value: data-security
+        enum_value: DATA_SECURITY
+        help_text: |-
+          A data security posture framework.
+      - arg_value: google-best-practices
+        enum_value: GOOGLE_BEST_PRACTICES
+        help_text: |-
+          A Google's best practices framework.
+      - arg_value: custom-framework
+        enum_value: CUSTOM_FRAMEWORK
+        help_text: |-
+          A user-created framework.
+      clearable: true
+    - arg_name: major-revision-id
+      api_field: majorRevisionId
+      required: false
+      repeated: false
+      type: long
+      help_text: |-
+        The major version ID of the framework to update.
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.frameworks
+  update:
+    read_modify_update: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/create.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/delete.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/describe.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/list.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/frameworks/update.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/__init__.py

@@ -0,0 +1,27 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""Manage Operation resources."""
+
+from googlecloudsdk.calliope import base
+from surface.compliance_manager.operations import _init_extensions as extensions
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA)
+@base.Autogenerated
+class OperationsGa(extensions.OperationsGa):
+  """Manage Operation resources."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/_init_extensions.py

@@ -0,0 +1,31 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+"""File to add optional custom code to extend __init__.py."""
+from googlecloudsdk.calliope import base
+
+
+class OperationsAlpha(base.Group):
+  """Optional no-auto-generated code for ALPHA."""
+
+
+class OperationsBeta(base.Group):
+  """Optional no-auto-generated code for BETA."""
+
+
+class OperationsGa(base.Group):
+  """Optional no-auto-generated code for GA."""

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/_partials/_cancel_ga.yaml

@@ -0,0 +1,39 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Cancel operations
+    description: Cancel an operation
+    examples: |-
+      To cancel the operation, run:
+
+          $ {command}
+  arguments:
+    params:
+    - help_text: |-
+        The name of the operation resource to be cancelled.
+      is_positional: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.default_resources:organizations_locations_operations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations
+    method: cancel

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/_partials/_delete_ga.yaml

@@ -0,0 +1,38 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Delete operations
+    description: Delete an operation
+    examples: |-
+      To delete the operation, run:
+
+          $ {command}
+  arguments:
+    params:
+    - help_text: |-
+        The name of the operation resource to be deleted.
+      is_positional: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.default_resources:organizations_locations_operations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/_partials/_describe_ga.yaml

@@ -0,0 +1,38 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Describe operations
+    description: Describe an operation
+    examples: |-
+      To describe the operation, run:
+
+          $ {command}
+  arguments:
+    params:
+    - help_text: |-
+        The name of the operation resource.
+      is_positional: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.default_resources:organizations_locations_operations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/_partials/_list_ga.yaml

@@ -0,0 +1,40 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: List operations
+    description: List operations
+    examples: |-
+      To list all operations, run:
+
+          $ {command}
+  arguments:
+    params:
+    - help_text: |-
+        The name of the operation's parent resource.
+      is_positional: false
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.default_resources:organizations_locations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations
+  response:
+    id_field: name

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/_partials/_wait_ga.yaml

@@ -0,0 +1,41 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+- release_tracks:
+  - GA
+  auto_generated: true
+  help_text:
+    brief: Wait operations
+    description: Wait an operation
+    examples: |-
+      To wait the operation, run:
+
+          $ {command}
+  arguments:
+    params:
+    - help_text: |-
+        The name of the operation resource to wait on.
+      is_positional: true
+      resource_spec: !REF googlecloudsdk.command_lib.compliance_manager.default_resources:organizations_locations_operations
+      required: true
+  request:
+    api_version: v1
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations
+  async:
+    collection:
+    - cloudsecuritycompliance.organizations.locations.operations

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/cancel.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/delete.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/describe.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/list.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true

gcloud auth application-default login/google-cloud-sdk/lib/surface/compliance_manager/operations/wait.yaml

@@ -0,0 +1,18 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# NOTE: This file is autogenerated and should not be edited by hand.
+# AUTOGEN_CLI_VERSION: HEAD
+_PARTIALS_: true