From 48b1b5d4843f5fd334b80b754054770cf209e8a3 Mon Sep 17 00:00:00 2001
From: "gcf-owl-bot[bot]" <78513119+gcf-owl-bot[bot]@users.noreply.github.com>
Date: Thu, 22 Jun 2023 11:16:08 -0400
Subject: [PATCH] feat: [securitycenter] Add user agent and DLP parent type
 fields to finding's list of attributes (#9535)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat: Add user agent and DLP parent type fields to finding's list of attributes

PiperOrigin-RevId: 539195531

Source-Link: https://github.com/googleapis/googleapis/commit/0b212ba3117718d381810f0d0e0c3d2640920516

Source-Link: https://github.com/googleapis/googleapis-gen/commit/64c1a0032f89ffafde49424ea137640b868348d4
Copy-Tag: eyJwIjoiamF2YS1zZWN1cml0eWNlbnRlci8uT3dsQm90LnlhbWwiLCJoIjoiNjRjMWEwMDMyZjg5ZmZhZmRlNDk0MjRlYTEzNzY0MGI4NjgzNDhkNCJ9

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
---
 .../v1/SecurityCenterClient.java              |  32 +-
 .../cloud/securitycenter/v1/Access.java       | 258 ++++-
 .../securitycenter/v1/AccessOrBuilder.java    |  25 +
 .../cloud/securitycenter/v1/AccessProto.java  |  35 +-
 .../v1/CloudDlpDataProfile.java               | 316 ++++++
 .../v1/CloudDlpDataProfileOrBuilder.java      |  25 +
 .../v1/CloudDlpDataProfileProto.java          |  12 +-
 .../securitycenter/v1/CloudDlpInspection.java |  28 +-
 .../v1/CloudDlpInspectionOrBuilder.java       |   8 +-
 .../cloud/securitycenter/v1/Compliance.java   |  68 +-
 .../v1/ComplianceOrBuilder.java               |  20 +-
 .../securitycenter/v1/ContactDetails.java     |   4 +-
 .../cloud/securitycenter/v1/Container.java    |  77 +-
 .../securitycenter/v1/ContainerOrBuilder.java |  22 +-
 .../v1/CreateBigQueryExportRequest.java       |  42 +-
 .../CreateBigQueryExportRequestOrBuilder.java |  12 +-
 .../v1/CreateMuteConfigRequest.java           |  42 +-
 .../v1/CreateMuteConfigRequestOrBuilder.java  |  12 +-
 .../cloud/securitycenter/v1/Database.java     | 177 ++--
 .../securitycenter/v1/DatabaseOrBuilder.java  |  42 +-
 .../v1/EnvironmentVariable.java               |   8 +-
 .../securitycenter/v1/ExfilResource.java      | 142 +--
 .../v1/ExfilResourceOrBuilder.java            |  42 +-
 .../cloud/securitycenter/v1/Exfiltration.java |  16 +-
 .../google/cloud/securitycenter/v1/File.java  |  21 +-
 .../securitycenter/v1/FileOrBuilder.java      |   6 +-
 .../cloud/securitycenter/v1/IamBinding.java   |  28 +-
 .../v1/IamBindingOrBuilder.java               |   8 +-
 .../securitycenter/v1/KernelRootkit.java      |  78 +-
 .../v1/KernelRootkitOrBuilder.java            |  20 +-
 .../cloud/securitycenter/v1/Kubernetes.java   | 925 +++++++++++-------
 .../v1/KubernetesOrBuilder.java               | 135 ++-
 .../google/cloud/securitycenter/v1/Label.java |  40 +-
 .../securitycenter/v1/LabelOrBuilder.java     |   8 +-
 .../v1/OrganizationSettings.java              |  24 +-
 .../v1/OrganizationSettingsOrBuilder.java     |   6 +-
 .../cloud/securitycenter/v1/Process.java      | 135 ++-
 .../securitycenter/v1/ProcessOrBuilder.java   |  35 +-
 .../cloud/securitycenter/v1/access.proto      |   3 +
 .../v1/cloud_dlp_data_profile.proto           |  15 +
 .../v1/cloud_dlp_inspection.proto             |   4 +-
 .../cloud/securitycenter/v1/compliance.proto  |   8 +-
 .../securitycenter/v1/contact_details.proto   |   2 +-
 .../cloud/securitycenter/v1/container.proto   |  11 +-
 .../cloud/securitycenter/v1/database.proto    |  34 +-
 .../securitycenter/v1/exfiltration.proto      |  22 +-
 .../google/cloud/securitycenter/v1/file.proto |   3 +-
 .../cloud/securitycenter/v1/iam_binding.proto |   4 +-
 .../securitycenter/v1/kernel_rootkit.proto    |  18 +-
 .../cloud/securitycenter/v1/kubernetes.proto  |  75 +-
 .../cloud/securitycenter/v1/label.proto       |  10 +-
 .../v1/organization_settings.proto            |   6 +-
 .../cloud/securitycenter/v1/process.proto     |  20 +-
 .../v1/securitycenter_service.proto           |  12 +-
 54 files changed, 1997 insertions(+), 1184 deletions(-)

diff --git a/java-securitycenter/google-cloud-securitycenter/src/main/java/com/google/cloud/securitycenter/v1/SecurityCenterClient.java b/java-securitycenter/google-cloud-securitycenter/src/main/java/com/google/cloud/securitycenter/v1/SecurityCenterClient.java
index da0b12395019..bd3f9caf474a 100644
--- a/java-securitycenter/google-cloud-securitycenter/src/main/java/com/google/cloud/securitycenter/v1/SecurityCenterClient.java
+++ b/java-securitycenter/google-cloud-securitycenter/src/main/java/com/google/cloud/securitycenter/v1/SecurityCenterClient.java
@@ -954,8 +954,8 @@ public final MuteConfig createMuteConfig(String parent, MuteConfig muteConfig) {
    *     "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param muteConfig Required. The mute config being created.
    * @param muteConfigId Required. Unique identifier provided by the client within the parent scope.
-   *     It must consist of lower case letters, numbers, and hyphen, with the first character a
-   *     letter, the last a letter or a number, and a 63 character maximum.
+   *     It must consist of only lowercase letters, numbers, and hyphens, must start with a letter,
+   *     must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final MuteConfig createMuteConfig(
@@ -993,8 +993,8 @@ public final MuteConfig createMuteConfig(
    *     "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param muteConfig Required. The mute config being created.
    * @param muteConfigId Required. Unique identifier provided by the client within the parent scope.
-   *     It must consist of lower case letters, numbers, and hyphen, with the first character a
-   *     letter, the last a letter or a number, and a 63 character maximum.
+   *     It must consist of only lowercase letters, numbers, and hyphens, must start with a letter,
+   *     must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final MuteConfig createMuteConfig(
@@ -1032,8 +1032,8 @@ public final MuteConfig createMuteConfig(
    *     "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param muteConfig Required. The mute config being created.
    * @param muteConfigId Required. Unique identifier provided by the client within the parent scope.
-   *     It must consist of lower case letters, numbers, and hyphen, with the first character a
-   *     letter, the last a letter or a number, and a 63 character maximum.
+   *     It must consist of only lowercase letters, numbers, and hyphens, must start with a letter,
+   *     must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final MuteConfig createMuteConfig(
@@ -1071,8 +1071,8 @@ public final MuteConfig createMuteConfig(
    *     "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param muteConfig Required. The mute config being created.
    * @param muteConfigId Required. Unique identifier provided by the client within the parent scope.
-   *     It must consist of lower case letters, numbers, and hyphen, with the first character a
-   *     letter, the last a letter or a number, and a 63 character maximum.
+   *     It must consist of only lowercase letters, numbers, and hyphens, must start with a letter,
+   *     must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final MuteConfig createMuteConfig(
@@ -6344,8 +6344,8 @@ public final SecurityMarks updateSecurityMarks(UpdateSecurityMarksRequest reques
    *     is "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param bigQueryExport Required. The BigQuery export being created.
    * @param bigQueryExportId Required. Unique identifier provided by the client within the parent
-   *     scope. It must consist of lower case letters, numbers, and hyphen, with the first character
-   *     a letter, the last a letter or a number, and a 63 character maximum.
+   *     scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a
+   *     letter, must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final BigQueryExport createBigQueryExport(
@@ -6384,8 +6384,8 @@ public final BigQueryExport createBigQueryExport(
    *     is "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param bigQueryExport Required. The BigQuery export being created.
    * @param bigQueryExportId Required. Unique identifier provided by the client within the parent
-   *     scope. It must consist of lower case letters, numbers, and hyphen, with the first character
-   *     a letter, the last a letter or a number, and a 63 character maximum.
+   *     scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a
+   *     letter, must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final BigQueryExport createBigQueryExport(
@@ -6424,8 +6424,8 @@ public final BigQueryExport createBigQueryExport(
    *     is "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param bigQueryExport Required. The BigQuery export being created.
    * @param bigQueryExportId Required. Unique identifier provided by the client within the parent
-   *     scope. It must consist of lower case letters, numbers, and hyphen, with the first character
-   *     a letter, the last a letter or a number, and a 63 character maximum.
+   *     scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a
+   *     letter, must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final BigQueryExport createBigQueryExport(
@@ -6464,8 +6464,8 @@ public final BigQueryExport createBigQueryExport(
    *     is "organizations/[organization_id]", "folders/[folder_id]", or "projects/[project_id]".
    * @param bigQueryExport Required. The BigQuery export being created.
    * @param bigQueryExportId Required. Unique identifier provided by the client within the parent
-   *     scope. It must consist of lower case letters, numbers, and hyphen, with the first character
-   *     a letter, the last a letter or a number, and a 63 character maximum.
+   *     scope. It must consist of only lowercase letters, numbers, and hyphens, must start with a
+   *     letter, must end with either a letter or a number, and must be 63 characters or less.
    * @throws com.google.api.gax.rpc.ApiException if the remote call fails
    */
   public final BigQueryExport createBigQueryExport(
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Access.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Access.java
index 47ac2ae1458f..61d26b80426b 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Access.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Access.java
@@ -41,6 +41,7 @@ private Access() {
     principalEmail_ = "";
     callerIp_ = "";
     userAgentFamily_ = "";
+    userAgent_ = "";
     serviceName_ = "";
     methodName_ = "";
     principalSubject_ = "";
@@ -289,6 +290,57 @@ public com.google.protobuf.ByteString getUserAgentFamilyBytes() {
     }
   }
 
+  public static final int USER_AGENT_FIELD_NUMBER = 12;
+
+  @SuppressWarnings("serial")
+  private volatile java.lang.Object userAgent_ = "";
+  /**
+   *
+   *
+   * <pre>
+   * The caller's user agent string associated with the finding.
+   * </pre>
+   *
+   * <code>string user_agent = 12;</code>
+   *
+   * @return The userAgent.
+   */
+  @java.lang.Override
+  public java.lang.String getUserAgent() {
+    java.lang.Object ref = userAgent_;
+    if (ref instanceof java.lang.String) {
+      return (java.lang.String) ref;
+    } else {
+      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+      java.lang.String s = bs.toStringUtf8();
+      userAgent_ = s;
+      return s;
+    }
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The caller's user agent string associated with the finding.
+   * </pre>
+   *
+   * <code>string user_agent = 12;</code>
+   *
+   * @return The bytes for userAgent.
+   */
+  @java.lang.Override
+  public com.google.protobuf.ByteString getUserAgentBytes() {
+    java.lang.Object ref = userAgent_;
+    if (ref instanceof java.lang.String) {
+      com.google.protobuf.ByteString b =
+          com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+      userAgent_ = b;
+      return b;
+    } else {
+      return (com.google.protobuf.ByteString) ref;
+    }
+  }
+
   public static final int SERVICE_NAME_FIELD_NUMBER = 5;
 
   @SuppressWarnings("serial")
@@ -729,6 +781,9 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(userName_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 11, userName_);
     }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(userAgent_)) {
+      com.google.protobuf.GeneratedMessageV3.writeString(output, 12, userAgent_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -770,6 +825,9 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(userName_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(11, userName_);
     }
+    if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(userAgent_)) {
+      size += com.google.protobuf.GeneratedMessageV3.computeStringSize(12, userAgent_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -793,6 +851,7 @@ public boolean equals(final java.lang.Object obj) {
       if (!getCallerIpGeo().equals(other.getCallerIpGeo())) return false;
     }
     if (!getUserAgentFamily().equals(other.getUserAgentFamily())) return false;
+    if (!getUserAgent().equals(other.getUserAgent())) return false;
     if (!getServiceName().equals(other.getServiceName())) return false;
     if (!getMethodName().equals(other.getMethodName())) return false;
     if (!getPrincipalSubject().equals(other.getPrincipalSubject())) return false;
@@ -821,6 +880,8 @@ public int hashCode() {
     }
     hash = (37 * hash) + USER_AGENT_FAMILY_FIELD_NUMBER;
     hash = (53 * hash) + getUserAgentFamily().hashCode();
+    hash = (37 * hash) + USER_AGENT_FIELD_NUMBER;
+    hash = (53 * hash) + getUserAgent().hashCode();
     hash = (37 * hash) + SERVICE_NAME_FIELD_NUMBER;
     hash = (53 * hash) + getServiceName().hashCode();
     hash = (37 * hash) + METHOD_NAME_FIELD_NUMBER;
@@ -982,6 +1043,7 @@ public Builder clear() {
         callerIpGeoBuilder_ = null;
       }
       userAgentFamily_ = "";
+      userAgent_ = "";
       serviceName_ = "";
       methodName_ = "";
       principalSubject_ = "";
@@ -992,7 +1054,7 @@ public Builder clear() {
         serviceAccountDelegationInfo_ = null;
         serviceAccountDelegationInfoBuilder_.clear();
       }
-      bitField0_ = (bitField0_ & ~0x00000100);
+      bitField0_ = (bitField0_ & ~0x00000200);
       userName_ = "";
       return this;
     }
@@ -1031,10 +1093,10 @@ public com.google.cloud.securitycenter.v1.Access buildPartial() {
 
     private void buildPartialRepeatedFields(com.google.cloud.securitycenter.v1.Access result) {
       if (serviceAccountDelegationInfoBuilder_ == null) {
-        if (((bitField0_ & 0x00000100) != 0)) {
+        if (((bitField0_ & 0x00000200) != 0)) {
           serviceAccountDelegationInfo_ =
               java.util.Collections.unmodifiableList(serviceAccountDelegationInfo_);
-          bitField0_ = (bitField0_ & ~0x00000100);
+          bitField0_ = (bitField0_ & ~0x00000200);
         }
         result.serviceAccountDelegationInfo_ = serviceAccountDelegationInfo_;
       } else {
@@ -1058,18 +1120,21 @@ private void buildPartial0(com.google.cloud.securitycenter.v1.Access result) {
         result.userAgentFamily_ = userAgentFamily_;
       }
       if (((from_bitField0_ & 0x00000010) != 0)) {
-        result.serviceName_ = serviceName_;
+        result.userAgent_ = userAgent_;
       }
       if (((from_bitField0_ & 0x00000020) != 0)) {
-        result.methodName_ = methodName_;
+        result.serviceName_ = serviceName_;
       }
       if (((from_bitField0_ & 0x00000040) != 0)) {
-        result.principalSubject_ = principalSubject_;
+        result.methodName_ = methodName_;
       }
       if (((from_bitField0_ & 0x00000080) != 0)) {
+        result.principalSubject_ = principalSubject_;
+      }
+      if (((from_bitField0_ & 0x00000100) != 0)) {
         result.serviceAccountKeyName_ = serviceAccountKeyName_;
       }
-      if (((from_bitField0_ & 0x00000200) != 0)) {
+      if (((from_bitField0_ & 0x00000400) != 0)) {
         result.userName_ = userName_;
       }
     }
@@ -1137,31 +1202,36 @@ public Builder mergeFrom(com.google.cloud.securitycenter.v1.Access other) {
         bitField0_ |= 0x00000008;
         onChanged();
       }
+      if (!other.getUserAgent().isEmpty()) {
+        userAgent_ = other.userAgent_;
+        bitField0_ |= 0x00000010;
+        onChanged();
+      }
       if (!other.getServiceName().isEmpty()) {
         serviceName_ = other.serviceName_;
-        bitField0_ |= 0x00000010;
+        bitField0_ |= 0x00000020;
         onChanged();
       }
       if (!other.getMethodName().isEmpty()) {
         methodName_ = other.methodName_;
-        bitField0_ |= 0x00000020;
+        bitField0_ |= 0x00000040;
         onChanged();
       }
       if (!other.getPrincipalSubject().isEmpty()) {
         principalSubject_ = other.principalSubject_;
-        bitField0_ |= 0x00000040;
+        bitField0_ |= 0x00000080;
         onChanged();
       }
       if (!other.getServiceAccountKeyName().isEmpty()) {
         serviceAccountKeyName_ = other.serviceAccountKeyName_;
-        bitField0_ |= 0x00000080;
+        bitField0_ |= 0x00000100;
         onChanged();
       }
       if (serviceAccountDelegationInfoBuilder_ == null) {
         if (!other.serviceAccountDelegationInfo_.isEmpty()) {
           if (serviceAccountDelegationInfo_.isEmpty()) {
             serviceAccountDelegationInfo_ = other.serviceAccountDelegationInfo_;
-            bitField0_ = (bitField0_ & ~0x00000100);
+            bitField0_ = (bitField0_ & ~0x00000200);
           } else {
             ensureServiceAccountDelegationInfoIsMutable();
             serviceAccountDelegationInfo_.addAll(other.serviceAccountDelegationInfo_);
@@ -1174,7 +1244,7 @@ public Builder mergeFrom(com.google.cloud.securitycenter.v1.Access other) {
             serviceAccountDelegationInfoBuilder_.dispose();
             serviceAccountDelegationInfoBuilder_ = null;
             serviceAccountDelegationInfo_ = other.serviceAccountDelegationInfo_;
-            bitField0_ = (bitField0_ & ~0x00000100);
+            bitField0_ = (bitField0_ & ~0x00000200);
             serviceAccountDelegationInfoBuilder_ =
                 com.google.protobuf.GeneratedMessageV3.alwaysUseFieldBuilders
                     ? getServiceAccountDelegationInfoFieldBuilder()
@@ -1187,7 +1257,7 @@ public Builder mergeFrom(com.google.cloud.securitycenter.v1.Access other) {
       }
       if (!other.getUserName().isEmpty()) {
         userName_ = other.userName_;
-        bitField0_ |= 0x00000200;
+        bitField0_ |= 0x00000400;
         onChanged();
       }
       this.mergeUnknownFields(other.getUnknownFields());
@@ -1243,25 +1313,25 @@ public Builder mergeFrom(
             case 42:
               {
                 serviceName_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000010;
+                bitField0_ |= 0x00000020;
                 break;
               } // case 42
             case 50:
               {
                 methodName_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000020;
+                bitField0_ |= 0x00000040;
                 break;
               } // case 50
             case 58:
               {
                 principalSubject_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000040;
+                bitField0_ |= 0x00000080;
                 break;
               } // case 58
             case 66:
               {
                 serviceAccountKeyName_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000080;
+                bitField0_ |= 0x00000100;
                 break;
               } // case 66
             case 74:
@@ -1281,9 +1351,15 @@ public Builder mergeFrom(
             case 90:
               {
                 userName_ = input.readStringRequireUtf8();
-                bitField0_ |= 0x00000200;
+                bitField0_ |= 0x00000400;
                 break;
               } // case 90
+            case 98:
+              {
+                userAgent_ = input.readStringRequireUtf8();
+                bitField0_ |= 0x00000010;
+                break;
+              } // case 98
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1846,6 +1922,112 @@ public Builder setUserAgentFamilyBytes(com.google.protobuf.ByteString value) {
       return this;
     }
 
+    private java.lang.Object userAgent_ = "";
+    /**
+     *
+     *
+     * <pre>
+     * The caller's user agent string associated with the finding.
+     * </pre>
+     *
+     * <code>string user_agent = 12;</code>
+     *
+     * @return The userAgent.
+     */
+    public java.lang.String getUserAgent() {
+      java.lang.Object ref = userAgent_;
+      if (!(ref instanceof java.lang.String)) {
+        com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
+        java.lang.String s = bs.toStringUtf8();
+        userAgent_ = s;
+        return s;
+      } else {
+        return (java.lang.String) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The caller's user agent string associated with the finding.
+     * </pre>
+     *
+     * <code>string user_agent = 12;</code>
+     *
+     * @return The bytes for userAgent.
+     */
+    public com.google.protobuf.ByteString getUserAgentBytes() {
+      java.lang.Object ref = userAgent_;
+      if (ref instanceof String) {
+        com.google.protobuf.ByteString b =
+            com.google.protobuf.ByteString.copyFromUtf8((java.lang.String) ref);
+        userAgent_ = b;
+        return b;
+      } else {
+        return (com.google.protobuf.ByteString) ref;
+      }
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The caller's user agent string associated with the finding.
+     * </pre>
+     *
+     * <code>string user_agent = 12;</code>
+     *
+     * @param value The userAgent to set.
+     * @return This builder for chaining.
+     */
+    public Builder setUserAgent(java.lang.String value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      userAgent_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The caller's user agent string associated with the finding.
+     * </pre>
+     *
+     * <code>string user_agent = 12;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearUserAgent() {
+      userAgent_ = getDefaultInstance().getUserAgent();
+      bitField0_ = (bitField0_ & ~0x00000010);
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The caller's user agent string associated with the finding.
+     * </pre>
+     *
+     * <code>string user_agent = 12;</code>
+     *
+     * @param value The bytes for userAgent to set.
+     * @return This builder for chaining.
+     */
+    public Builder setUserAgentBytes(com.google.protobuf.ByteString value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      checkByteStringIsUtf8(value);
+      userAgent_ = value;
+      bitField0_ |= 0x00000010;
+      onChanged();
+      return this;
+    }
+
     private java.lang.Object serviceName_ = "";
     /**
      *
@@ -1911,7 +2093,7 @@ public Builder setServiceName(java.lang.String value) {
         throw new NullPointerException();
       }
       serviceName_ = value;
-      bitField0_ |= 0x00000010;
+      bitField0_ |= 0x00000020;
       onChanged();
       return this;
     }
@@ -1929,7 +2111,7 @@ public Builder setServiceName(java.lang.String value) {
      */
     public Builder clearServiceName() {
       serviceName_ = getDefaultInstance().getServiceName();
-      bitField0_ = (bitField0_ & ~0x00000010);
+      bitField0_ = (bitField0_ & ~0x00000020);
       onChanged();
       return this;
     }
@@ -1952,7 +2134,7 @@ public Builder setServiceNameBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       serviceName_ = value;
-      bitField0_ |= 0x00000010;
+      bitField0_ |= 0x00000020;
       onChanged();
       return this;
     }
@@ -2019,7 +2201,7 @@ public Builder setMethodName(java.lang.String value) {
         throw new NullPointerException();
       }
       methodName_ = value;
-      bitField0_ |= 0x00000020;
+      bitField0_ |= 0x00000040;
       onChanged();
       return this;
     }
@@ -2036,7 +2218,7 @@ public Builder setMethodName(java.lang.String value) {
      */
     public Builder clearMethodName() {
       methodName_ = getDefaultInstance().getMethodName();
-      bitField0_ = (bitField0_ & ~0x00000020);
+      bitField0_ = (bitField0_ & ~0x00000040);
       onChanged();
       return this;
     }
@@ -2058,7 +2240,7 @@ public Builder setMethodNameBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       methodName_ = value;
-      bitField0_ |= 0x00000020;
+      bitField0_ |= 0x00000040;
       onChanged();
       return this;
     }
@@ -2146,7 +2328,7 @@ public Builder setPrincipalSubject(java.lang.String value) {
         throw new NullPointerException();
       }
       principalSubject_ = value;
-      bitField0_ |= 0x00000040;
+      bitField0_ |= 0x00000080;
       onChanged();
       return this;
     }
@@ -2170,7 +2352,7 @@ public Builder setPrincipalSubject(java.lang.String value) {
      */
     public Builder clearPrincipalSubject() {
       principalSubject_ = getDefaultInstance().getPrincipalSubject();
-      bitField0_ = (bitField0_ & ~0x00000040);
+      bitField0_ = (bitField0_ & ~0x00000080);
       onChanged();
       return this;
     }
@@ -2199,7 +2381,7 @@ public Builder setPrincipalSubjectBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       principalSubject_ = value;
-      bitField0_ |= 0x00000040;
+      bitField0_ |= 0x00000080;
       onChanged();
       return this;
     }
@@ -2278,7 +2460,7 @@ public Builder setServiceAccountKeyName(java.lang.String value) {
         throw new NullPointerException();
       }
       serviceAccountKeyName_ = value;
-      bitField0_ |= 0x00000080;
+      bitField0_ |= 0x00000100;
       onChanged();
       return this;
     }
@@ -2299,7 +2481,7 @@ public Builder setServiceAccountKeyName(java.lang.String value) {
      */
     public Builder clearServiceAccountKeyName() {
       serviceAccountKeyName_ = getDefaultInstance().getServiceAccountKeyName();
-      bitField0_ = (bitField0_ & ~0x00000080);
+      bitField0_ = (bitField0_ & ~0x00000100);
       onChanged();
       return this;
     }
@@ -2325,7 +2507,7 @@ public Builder setServiceAccountKeyNameBytes(com.google.protobuf.ByteString valu
       }
       checkByteStringIsUtf8(value);
       serviceAccountKeyName_ = value;
-      bitField0_ |= 0x00000080;
+      bitField0_ |= 0x00000100;
       onChanged();
       return this;
     }
@@ -2334,12 +2516,12 @@ public Builder setServiceAccountKeyNameBytes(com.google.protobuf.ByteString valu
         serviceAccountDelegationInfo_ = java.util.Collections.emptyList();
 
     private void ensureServiceAccountDelegationInfoIsMutable() {
-      if (!((bitField0_ & 0x00000100) != 0)) {
+      if (!((bitField0_ & 0x00000200) != 0)) {
         serviceAccountDelegationInfo_ =
             new java.util.ArrayList<
                 com.google.cloud.securitycenter.v1.ServiceAccountDelegationInfo>(
                 serviceAccountDelegationInfo_);
-        bitField0_ |= 0x00000100;
+        bitField0_ |= 0x00000200;
       }
     }
 
@@ -2642,7 +2824,7 @@ public Builder addAllServiceAccountDelegationInfo(
     public Builder clearServiceAccountDelegationInfo() {
       if (serviceAccountDelegationInfoBuilder_ == null) {
         serviceAccountDelegationInfo_ = java.util.Collections.emptyList();
-        bitField0_ = (bitField0_ & ~0x00000100);
+        bitField0_ = (bitField0_ & ~0x00000200);
         onChanged();
       } else {
         serviceAccountDelegationInfoBuilder_.clear();
@@ -2822,7 +3004,7 @@ public Builder removeServiceAccountDelegationInfo(int index) {
                 com.google.cloud.securitycenter.v1.ServiceAccountDelegationInfo.Builder,
                 com.google.cloud.securitycenter.v1.ServiceAccountDelegationInfoOrBuilder>(
                 serviceAccountDelegationInfo_,
-                ((bitField0_ & 0x00000100) != 0),
+                ((bitField0_ & 0x00000200) != 0),
                 getParentForChildren(),
                 isClean());
         serviceAccountDelegationInfo_ = null;
@@ -2901,7 +3083,7 @@ public Builder setUserName(java.lang.String value) {
         throw new NullPointerException();
       }
       userName_ = value;
-      bitField0_ |= 0x00000200;
+      bitField0_ |= 0x00000400;
       onChanged();
       return this;
     }
@@ -2921,7 +3103,7 @@ public Builder setUserName(java.lang.String value) {
      */
     public Builder clearUserName() {
       userName_ = getDefaultInstance().getUserName();
-      bitField0_ = (bitField0_ & ~0x00000200);
+      bitField0_ = (bitField0_ & ~0x00000400);
       onChanged();
       return this;
     }
@@ -2946,7 +3128,7 @@ public Builder setUserNameBytes(com.google.protobuf.ByteString value) {
       }
       checkByteStringIsUtf8(value);
       userName_ = value;
-      bitField0_ |= 0x00000200;
+      bitField0_ |= 0x00000400;
       onChanged();
       return this;
     }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessOrBuilder.java
index 6cc08a0ab67a..ad0217a5185d 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessOrBuilder.java
@@ -149,6 +149,31 @@ public interface AccessOrBuilder
    */
   com.google.protobuf.ByteString getUserAgentFamilyBytes();
 
+  /**
+   *
+   *
+   * <pre>
+   * The caller's user agent string associated with the finding.
+   * </pre>
+   *
+   * <code>string user_agent = 12;</code>
+   *
+   * @return The userAgent.
+   */
+  java.lang.String getUserAgent();
+  /**
+   *
+   *
+   * <pre>
+   * The caller's user agent string associated with the finding.
+   * </pre>
+   *
+   * <code>string user_agent = 12;</code>
+   *
+   * @return The bytes for userAgent.
+   */
+  com.google.protobuf.ByteString getUserAgentBytes();
+
   /**
    *
    *
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessProto.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessProto.java
index fbca323055ff..45a518c89194 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessProto.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/AccessProto.java
@@ -49,26 +49,26 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
   static {
     java.lang.String[] descriptorData = {
       "\n+google/cloud/securitycenter/v1/access."
-          + "proto\022\036google.cloud.securitycenter.v1\"\365\002"
+          + "proto\022\036google.cloud.securitycenter.v1\"\211\003"
           + "\n\006Access\022\027\n\017principal_email\030\001 \001(\t\022\021\n\tcal"
           + "ler_ip\030\002 \001(\t\022B\n\rcaller_ip_geo\030\003 \001(\0132+.go"
           + "ogle.cloud.securitycenter.v1.Geolocation"
-          + "\022\031\n\021user_agent_family\030\004 \001(\t\022\024\n\014service_n"
-          + "ame\030\005 \001(\t\022\023\n\013method_name\030\006 \001(\t\022\031\n\021princi"
-          + "pal_subject\030\007 \001(\t\022 \n\030service_account_key"
-          + "_name\030\010 \001(\t\022e\n\037service_account_delegatio"
-          + "n_info\030\t \003(\0132<.google.cloud.securitycent"
-          + "er.v1.ServiceAccountDelegationInfo\022\021\n\tus"
-          + "er_name\030\013 \001(\t\"R\n\034ServiceAccountDelegatio"
-          + "nInfo\022\027\n\017principal_email\030\001 \001(\t\022\031\n\021princi"
-          + "pal_subject\030\002 \001(\t\"\"\n\013Geolocation\022\023\n\013regi"
-          + "on_code\030\001 \001(\tB\345\001\n\"com.google.cloud.secur"
-          + "itycenter.v1B\013AccessProtoP\001ZJcloud.googl"
-          + "e.com/go/securitycenter/apiv1/securityce"
-          + "nterpb;securitycenterpb\252\002\036Google.Cloud.S"
-          + "ecurityCenter.V1\312\002\036Google\\Cloud\\Security"
-          + "Center\\V1\352\002!Google::Cloud::SecurityCente"
-          + "r::V1b\006proto3"
+          + "\022\031\n\021user_agent_family\030\004 \001(\t\022\022\n\nuser_agen"
+          + "t\030\014 \001(\t\022\024\n\014service_name\030\005 \001(\t\022\023\n\013method_"
+          + "name\030\006 \001(\t\022\031\n\021principal_subject\030\007 \001(\t\022 \n"
+          + "\030service_account_key_name\030\010 \001(\t\022e\n\037servi"
+          + "ce_account_delegation_info\030\t \003(\0132<.googl"
+          + "e.cloud.securitycenter.v1.ServiceAccount"
+          + "DelegationInfo\022\021\n\tuser_name\030\013 \001(\t\"R\n\034Ser"
+          + "viceAccountDelegationInfo\022\027\n\017principal_e"
+          + "mail\030\001 \001(\t\022\031\n\021principal_subject\030\002 \001(\t\"\"\n"
+          + "\013Geolocation\022\023\n\013region_code\030\001 \001(\tB\345\001\n\"co"
+          + "m.google.cloud.securitycenter.v1B\013Access"
+          + "ProtoP\001ZJcloud.google.com/go/securitycen"
+          + "ter/apiv1/securitycenterpb;securitycente"
+          + "rpb\252\002\036Google.Cloud.SecurityCenter.V1\312\002\036G"
+          + "oogle\\Cloud\\SecurityCenter\\V1\352\002!Google::"
+          + "Cloud::SecurityCenter::V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -83,6 +83,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "CallerIp",
               "CallerIpGeo",
               "UserAgentFamily",
+              "UserAgent",
               "ServiceName",
               "MethodName",
               "PrincipalSubject",
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfile.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfile.java
index 91f0643cb62a..b820feb86f7c 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfile.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfile.java
@@ -40,6 +40,7 @@ private CloudDlpDataProfile(com.google.protobuf.GeneratedMessageV3.Builder<?> bu
 
   private CloudDlpDataProfile() {
     dataProfile_ = "";
+    parentType_ = 0;
   }
 
   @java.lang.Override
@@ -63,6 +64,165 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
             com.google.cloud.securitycenter.v1.CloudDlpDataProfile.Builder.class);
   }
 
+  /**
+   *
+   *
+   * <pre>
+   * Parents for configurations that produce data profile findings.
+   * </pre>
+   *
+   * Protobuf enum {@code google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType}
+   */
+  public enum ParentType implements com.google.protobuf.ProtocolMessageEnum {
+    /**
+     *
+     *
+     * <pre>
+     * Unspecified parent type.
+     * </pre>
+     *
+     * <code>PARENT_TYPE_UNSPECIFIED = 0;</code>
+     */
+    PARENT_TYPE_UNSPECIFIED(0),
+    /**
+     *
+     *
+     * <pre>
+     * Organization-level configurations.
+     * </pre>
+     *
+     * <code>ORGANIZATION = 1;</code>
+     */
+    ORGANIZATION(1),
+    /**
+     *
+     *
+     * <pre>
+     * Project-level configurations.
+     * </pre>
+     *
+     * <code>PROJECT = 2;</code>
+     */
+    PROJECT(2),
+    UNRECOGNIZED(-1),
+    ;
+
+    /**
+     *
+     *
+     * <pre>
+     * Unspecified parent type.
+     * </pre>
+     *
+     * <code>PARENT_TYPE_UNSPECIFIED = 0;</code>
+     */
+    public static final int PARENT_TYPE_UNSPECIFIED_VALUE = 0;
+    /**
+     *
+     *
+     * <pre>
+     * Organization-level configurations.
+     * </pre>
+     *
+     * <code>ORGANIZATION = 1;</code>
+     */
+    public static final int ORGANIZATION_VALUE = 1;
+    /**
+     *
+     *
+     * <pre>
+     * Project-level configurations.
+     * </pre>
+     *
+     * <code>PROJECT = 2;</code>
+     */
+    public static final int PROJECT_VALUE = 2;
+
+    public final int getNumber() {
+      if (this == UNRECOGNIZED) {
+        throw new java.lang.IllegalArgumentException(
+            "Can't get the number of an unknown enum value.");
+      }
+      return value;
+    }
+
+    /**
+     * @param value The numeric wire value of the corresponding enum entry.
+     * @return The enum associated with the given numeric wire value.
+     * @deprecated Use {@link #forNumber(int)} instead.
+     */
+    @java.lang.Deprecated
+    public static ParentType valueOf(int value) {
+      return forNumber(value);
+    }
+
+    /**
+     * @param value The numeric wire value of the corresponding enum entry.
+     * @return The enum associated with the given numeric wire value.
+     */
+    public static ParentType forNumber(int value) {
+      switch (value) {
+        case 0:
+          return PARENT_TYPE_UNSPECIFIED;
+        case 1:
+          return ORGANIZATION;
+        case 2:
+          return PROJECT;
+        default:
+          return null;
+      }
+    }
+
+    public static com.google.protobuf.Internal.EnumLiteMap<ParentType> internalGetValueMap() {
+      return internalValueMap;
+    }
+
+    private static final com.google.protobuf.Internal.EnumLiteMap<ParentType> internalValueMap =
+        new com.google.protobuf.Internal.EnumLiteMap<ParentType>() {
+          public ParentType findValueByNumber(int number) {
+            return ParentType.forNumber(number);
+          }
+        };
+
+    public final com.google.protobuf.Descriptors.EnumValueDescriptor getValueDescriptor() {
+      if (this == UNRECOGNIZED) {
+        throw new java.lang.IllegalStateException(
+            "Can't get the descriptor of an unrecognized enum value.");
+      }
+      return getDescriptor().getValues().get(ordinal());
+    }
+
+    public final com.google.protobuf.Descriptors.EnumDescriptor getDescriptorForType() {
+      return getDescriptor();
+    }
+
+    public static final com.google.protobuf.Descriptors.EnumDescriptor getDescriptor() {
+      return com.google.cloud.securitycenter.v1.CloudDlpDataProfile.getDescriptor()
+          .getEnumTypes()
+          .get(0);
+    }
+
+    private static final ParentType[] VALUES = values();
+
+    public static ParentType valueOf(com.google.protobuf.Descriptors.EnumValueDescriptor desc) {
+      if (desc.getType() != getDescriptor()) {
+        throw new java.lang.IllegalArgumentException("EnumValueDescriptor is not for this type.");
+      }
+      if (desc.getIndex() == -1) {
+        return UNRECOGNIZED;
+      }
+      return VALUES[desc.getIndex()];
+    }
+
+    private final int value;
+
+    private ParentType(int value) {
+      this.value = value;
+    }
+
+    // @@protoc_insertion_point(enum_scope:google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType)
+  }
+
   public static final int DATA_PROFILE_FIELD_NUMBER = 1;
 
   @SuppressWarnings("serial")
@@ -116,6 +276,43 @@ public com.google.protobuf.ByteString getDataProfileBytes() {
     }
   }
 
+  public static final int PARENT_TYPE_FIELD_NUMBER = 2;
+  private int parentType_ = 0;
+  /**
+   *
+   *
+   * <pre>
+   * The resource hierarchy level at which the data profile was generated.
+   * </pre>
+   *
+   * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+   *
+   * @return The enum numeric value on the wire for parentType.
+   */
+  @java.lang.Override
+  public int getParentTypeValue() {
+    return parentType_;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * The resource hierarchy level at which the data profile was generated.
+   * </pre>
+   *
+   * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+   *
+   * @return The parentType.
+   */
+  @java.lang.Override
+  public com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType getParentType() {
+    com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType result =
+        com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType.forNumber(parentType_);
+    return result == null
+        ? com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType.UNRECOGNIZED
+        : result;
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -133,6 +330,11 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(dataProfile_)) {
       com.google.protobuf.GeneratedMessageV3.writeString(output, 1, dataProfile_);
     }
+    if (parentType_
+        != com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType.PARENT_TYPE_UNSPECIFIED
+            .getNumber()) {
+      output.writeEnum(2, parentType_);
+    }
     getUnknownFields().writeTo(output);
   }
 
@@ -145,6 +347,11 @@ public int getSerializedSize() {
     if (!com.google.protobuf.GeneratedMessageV3.isStringEmpty(dataProfile_)) {
       size += com.google.protobuf.GeneratedMessageV3.computeStringSize(1, dataProfile_);
     }
+    if (parentType_
+        != com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType.PARENT_TYPE_UNSPECIFIED
+            .getNumber()) {
+      size += com.google.protobuf.CodedOutputStream.computeEnumSize(2, parentType_);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -162,6 +369,7 @@ public boolean equals(final java.lang.Object obj) {
         (com.google.cloud.securitycenter.v1.CloudDlpDataProfile) obj;
 
     if (!getDataProfile().equals(other.getDataProfile())) return false;
+    if (parentType_ != other.parentType_) return false;
     if (!getUnknownFields().equals(other.getUnknownFields())) return false;
     return true;
   }
@@ -175,6 +383,8 @@ public int hashCode() {
     hash = (19 * hash) + getDescriptor().hashCode();
     hash = (37 * hash) + DATA_PROFILE_FIELD_NUMBER;
     hash = (53 * hash) + getDataProfile().hashCode();
+    hash = (37 * hash) + PARENT_TYPE_FIELD_NUMBER;
+    hash = (53 * hash) + parentType_;
     hash = (29 * hash) + getUnknownFields().hashCode();
     memoizedHashCode = hash;
     return hash;
@@ -317,6 +527,7 @@ public Builder clear() {
       super.clear();
       bitField0_ = 0;
       dataProfile_ = "";
+      parentType_ = 0;
       return this;
     }
 
@@ -356,6 +567,9 @@ private void buildPartial0(com.google.cloud.securitycenter.v1.CloudDlpDataProfil
       if (((from_bitField0_ & 0x00000001) != 0)) {
         result.dataProfile_ = dataProfile_;
       }
+      if (((from_bitField0_ & 0x00000002) != 0)) {
+        result.parentType_ = parentType_;
+      }
     }
 
     @java.lang.Override
@@ -409,6 +623,9 @@ public Builder mergeFrom(com.google.cloud.securitycenter.v1.CloudDlpDataProfile
         bitField0_ |= 0x00000001;
         onChanged();
       }
+      if (other.parentType_ != 0) {
+        setParentTypeValue(other.getParentTypeValue());
+      }
       this.mergeUnknownFields(other.getUnknownFields());
       onChanged();
       return this;
@@ -441,6 +658,12 @@ public Builder mergeFrom(
                 bitField0_ |= 0x00000001;
                 break;
               } // case 10
+            case 16:
+              {
+                parentType_ = input.readEnum();
+                bitField0_ |= 0x00000002;
+                break;
+              } // case 16
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -571,6 +794,99 @@ public Builder setDataProfileBytes(com.google.protobuf.ByteString value) {
       return this;
     }
 
+    private int parentType_ = 0;
+    /**
+     *
+     *
+     * <pre>
+     * The resource hierarchy level at which the data profile was generated.
+     * </pre>
+     *
+     * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+     *
+     * @return The enum numeric value on the wire for parentType.
+     */
+    @java.lang.Override
+    public int getParentTypeValue() {
+      return parentType_;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The resource hierarchy level at which the data profile was generated.
+     * </pre>
+     *
+     * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+     *
+     * @param value The enum numeric value on the wire for parentType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setParentTypeValue(int value) {
+      parentType_ = value;
+      bitField0_ |= 0x00000002;
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The resource hierarchy level at which the data profile was generated.
+     * </pre>
+     *
+     * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+     *
+     * @return The parentType.
+     */
+    @java.lang.Override
+    public com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType getParentType() {
+      com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType result =
+          com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType.forNumber(parentType_);
+      return result == null
+          ? com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType.UNRECOGNIZED
+          : result;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The resource hierarchy level at which the data profile was generated.
+     * </pre>
+     *
+     * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+     *
+     * @param value The parentType to set.
+     * @return This builder for chaining.
+     */
+    public Builder setParentType(
+        com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType value) {
+      if (value == null) {
+        throw new NullPointerException();
+      }
+      bitField0_ |= 0x00000002;
+      parentType_ = value.getNumber();
+      onChanged();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * The resource hierarchy level at which the data profile was generated.
+     * </pre>
+     *
+     * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+     *
+     * @return This builder for chaining.
+     */
+    public Builder clearParentType() {
+      bitField0_ = (bitField0_ & ~0x00000002);
+      parentType_ = 0;
+      onChanged();
+      return this;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileOrBuilder.java
index add5e6eabb61..3be64b6b7a78 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileOrBuilder.java
@@ -49,4 +49,29 @@ public interface CloudDlpDataProfileOrBuilder
    * @return The bytes for dataProfile.
    */
   com.google.protobuf.ByteString getDataProfileBytes();
+
+  /**
+   *
+   *
+   * <pre>
+   * The resource hierarchy level at which the data profile was generated.
+   * </pre>
+   *
+   * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+   *
+   * @return The enum numeric value on the wire for parentType.
+   */
+  int getParentTypeValue();
+  /**
+   *
+   *
+   * <pre>
+   * The resource hierarchy level at which the data profile was generated.
+   * </pre>
+   *
+   * <code>.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType parent_type = 2;</code>
+   *
+   * @return The parentType.
+   */
+  com.google.cloud.securitycenter.v1.CloudDlpDataProfile.ParentType getParentType();
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileProto.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileProto.java
index 38b59849c242..932f797fe0a6 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileProto.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpDataProfileProto.java
@@ -43,9 +43,13 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
       "\n;google/cloud/securitycenter/v1/cloud_d"
           + "lp_data_profile.proto\022\036google.cloud.secu"
           + "ritycenter.v1\032\031google/api/resource.proto"
-          + "\"U\n\023CloudDlpDataProfile\022>\n\014data_profile\030"
-          + "\001 \001(\tB(\372A%\n#dlp.googleapis.com/TableData"
-          + "ProfileB\224\003\n\"com.google.cloud.securitycen"
+          + "\"\364\001\n\023CloudDlpDataProfile\022>\n\014data_profile"
+          + "\030\001 \001(\tB(\372A%\n#dlp.googleapis.com/TableDat"
+          + "aProfile\022S\n\013parent_type\030\002 \001(\0162>.google.c"
+          + "loud.securitycenter.v1.CloudDlpDataProfi"
+          + "le.ParentType\"H\n\nParentType\022\033\n\027PARENT_TY"
+          + "PE_UNSPECIFIED\020\000\022\020\n\014ORGANIZATION\020\001\022\013\n\007PR"
+          + "OJECT\020\002B\224\003\n\"com.google.cloud.securitycen"
           + "ter.v1B\030CloudDlpDataProfileProtoP\001ZJclou"
           + "d.google.com/go/securitycenter/apiv1/sec"
           + "uritycenterpb;securitycenterpb\252\002\036Google."
@@ -69,7 +73,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
         new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
             internal_static_google_cloud_securitycenter_v1_CloudDlpDataProfile_descriptor,
             new java.lang.String[] {
-              "DataProfile",
+              "DataProfile", "ParentType",
             });
     com.google.protobuf.ExtensionRegistry registry =
         com.google.protobuf.ExtensionRegistry.newInstance();
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspection.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspection.java
index 96a2cac0a0de..aa77741006b2 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspection.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspection.java
@@ -126,8 +126,8 @@ public com.google.protobuf.ByteString getInspectJobBytes() {
    *
    *
    * <pre>
-   * The [type of
-   * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+   * The type of information (or
+   * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
    * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
    * </pre>
    *
@@ -151,8 +151,8 @@ public java.lang.String getInfoType() {
    *
    *
    * <pre>
-   * The [type of
-   * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+   * The type of information (or
+   * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
    * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
    * </pre>
    *
@@ -739,8 +739,8 @@ public Builder setInspectJobBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * The [type of
-     * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+     * The type of information (or
+     * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
      * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
      * </pre>
      *
@@ -763,8 +763,8 @@ public java.lang.String getInfoType() {
      *
      *
      * <pre>
-     * The [type of
-     * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+     * The type of information (or
+     * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
      * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
      * </pre>
      *
@@ -787,8 +787,8 @@ public com.google.protobuf.ByteString getInfoTypeBytes() {
      *
      *
      * <pre>
-     * The [type of
-     * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+     * The type of information (or
+     * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
      * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
      * </pre>
      *
@@ -810,8 +810,8 @@ public Builder setInfoType(java.lang.String value) {
      *
      *
      * <pre>
-     * The [type of
-     * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+     * The type of information (or
+     * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
      * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
      * </pre>
      *
@@ -829,8 +829,8 @@ public Builder clearInfoType() {
      *
      *
      * <pre>
-     * The [type of
-     * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+     * The type of information (or
+     * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
      * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
      * </pre>
      *
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspectionOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspectionOrBuilder.java
index 97e8b10a1c9a..fd3880d4e692 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspectionOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CloudDlpInspectionOrBuilder.java
@@ -54,8 +54,8 @@ public interface CloudDlpInspectionOrBuilder
    *
    *
    * <pre>
-   * The [type of
-   * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+   * The type of information (or
+   * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
    * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
    * </pre>
    *
@@ -68,8 +68,8 @@ public interface CloudDlpInspectionOrBuilder
    *
    *
    * <pre>
-   * The [type of
-   * information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+   * The type of information (or
+   * *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
    * for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
    * </pre>
    *
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Compliance.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Compliance.java
index f534fcf92dc0..481e9dd940d4 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Compliance.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Compliance.java
@@ -73,8 +73,8 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-   * etc.
+   * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+   * OWASP.
    * </pre>
    *
    * <code>string standard = 1;</code>
@@ -97,8 +97,8 @@ public java.lang.String getStandard() {
    *
    *
    * <pre>
-   * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-   * etc.
+   * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+   * OWASP.
    * </pre>
    *
    * <code>string standard = 1;</code>
@@ -126,7 +126,7 @@ public com.google.protobuf.ByteString getStandardBytes() {
    *
    *
    * <pre>
-   * Version of the standard/benchmark e.g. 1.1
+   * Version of the standard or benchmark, for example, 1.1
    * </pre>
    *
    * <code>string version = 2;</code>
@@ -149,7 +149,7 @@ public java.lang.String getVersion() {
    *
    *
    * <pre>
-   * Version of the standard/benchmark e.g. 1.1
+   * Version of the standard or benchmark, for example, 1.1
    * </pre>
    *
    * <code>string version = 2;</code>
@@ -178,7 +178,7 @@ public com.google.protobuf.ByteString getVersionBytes() {
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -192,7 +192,7 @@ public com.google.protobuf.ProtocolStringList getIdsList() {
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -206,7 +206,7 @@ public int getIdsCount() {
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -221,7 +221,7 @@ public java.lang.String getIds(int index) {
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -642,8 +642,8 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-     * etc.
+     * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+     * OWASP.
      * </pre>
      *
      * <code>string standard = 1;</code>
@@ -665,8 +665,8 @@ public java.lang.String getStandard() {
      *
      *
      * <pre>
-     * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-     * etc.
+     * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+     * OWASP.
      * </pre>
      *
      * <code>string standard = 1;</code>
@@ -688,8 +688,8 @@ public com.google.protobuf.ByteString getStandardBytes() {
      *
      *
      * <pre>
-     * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-     * etc.
+     * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+     * OWASP.
      * </pre>
      *
      * <code>string standard = 1;</code>
@@ -710,8 +710,8 @@ public Builder setStandard(java.lang.String value) {
      *
      *
      * <pre>
-     * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-     * etc.
+     * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+     * OWASP.
      * </pre>
      *
      * <code>string standard = 1;</code>
@@ -728,8 +728,8 @@ public Builder clearStandard() {
      *
      *
      * <pre>
-     * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-     * etc.
+     * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+     * OWASP.
      * </pre>
      *
      * <code>string standard = 1;</code>
@@ -753,7 +753,7 @@ public Builder setStandardBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Version of the standard/benchmark e.g. 1.1
+     * Version of the standard or benchmark, for example, 1.1
      * </pre>
      *
      * <code>string version = 2;</code>
@@ -775,7 +775,7 @@ public java.lang.String getVersion() {
      *
      *
      * <pre>
-     * Version of the standard/benchmark e.g. 1.1
+     * Version of the standard or benchmark, for example, 1.1
      * </pre>
      *
      * <code>string version = 2;</code>
@@ -797,7 +797,7 @@ public com.google.protobuf.ByteString getVersionBytes() {
      *
      *
      * <pre>
-     * Version of the standard/benchmark e.g. 1.1
+     * Version of the standard or benchmark, for example, 1.1
      * </pre>
      *
      * <code>string version = 2;</code>
@@ -818,7 +818,7 @@ public Builder setVersion(java.lang.String value) {
      *
      *
      * <pre>
-     * Version of the standard/benchmark e.g. 1.1
+     * Version of the standard or benchmark, for example, 1.1
      * </pre>
      *
      * <code>string version = 2;</code>
@@ -835,7 +835,7 @@ public Builder clearVersion() {
      *
      *
      * <pre>
-     * Version of the standard/benchmark e.g. 1.1
+     * Version of the standard or benchmark, for example, 1.1
      * </pre>
      *
      * <code>string version = 2;</code>
@@ -867,7 +867,7 @@ private void ensureIdsIsMutable() {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -882,7 +882,7 @@ public com.google.protobuf.ProtocolStringList getIdsList() {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -896,7 +896,7 @@ public int getIdsCount() {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -911,7 +911,7 @@ public java.lang.String getIds(int index) {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -926,7 +926,7 @@ public com.google.protobuf.ByteString getIdsBytes(int index) {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -949,7 +949,7 @@ public Builder setIds(int index, java.lang.String value) {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -971,7 +971,7 @@ public Builder addIds(java.lang.String value) {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -990,7 +990,7 @@ public Builder addAllIds(java.lang.Iterable<java.lang.String> values) {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
@@ -1008,7 +1008,7 @@ public Builder clearIds() {
      *
      *
      * <pre>
-     * Policies within the standard/benchmark e.g. A.12.4.1
+     * Policies within the standard or benchmark, for example, A.12.4.1
      * </pre>
      *
      * <code>repeated string ids = 3;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ComplianceOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ComplianceOrBuilder.java
index bc66c3fbd151..168577ae0a58 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ComplianceOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ComplianceOrBuilder.java
@@ -27,8 +27,8 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-   * etc.
+   * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+   * OWASP.
    * </pre>
    *
    * <code>string standard = 1;</code>
@@ -40,8 +40,8 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-   * etc.
+   * Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+   * OWASP.
    * </pre>
    *
    * <code>string standard = 1;</code>
@@ -54,7 +54,7 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Version of the standard/benchmark e.g. 1.1
+   * Version of the standard or benchmark, for example, 1.1
    * </pre>
    *
    * <code>string version = 2;</code>
@@ -66,7 +66,7 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Version of the standard/benchmark e.g. 1.1
+   * Version of the standard or benchmark, for example, 1.1
    * </pre>
    *
    * <code>string version = 2;</code>
@@ -79,7 +79,7 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -91,7 +91,7 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -103,7 +103,7 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
@@ -116,7 +116,7 @@ public interface ComplianceOrBuilder
    *
    *
    * <pre>
-   * Policies within the standard/benchmark e.g. A.12.4.1
+   * Policies within the standard or benchmark, for example, A.12.4.1
    * </pre>
    *
    * <code>repeated string ids = 3;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContactDetails.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContactDetails.java
index 6e35cd674db2..a4dd789dd6eb 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContactDetails.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContactDetails.java
@@ -22,7 +22,7 @@
  *
  *
  * <pre>
- * The details pertaining to specific contacts
+ * Details about specific contacts
  * </pre>
  *
  * Protobuf type {@code google.cloud.securitycenter.v1.ContactDetails}
@@ -298,7 +298,7 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * The details pertaining to specific contacts
+   * Details about specific contacts
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.ContactDetails}
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Container.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Container.java
index 7457d5f210ad..c0f4035228ff 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Container.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Container.java
@@ -73,7 +73,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Container name.
+   * Name of the container.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -96,7 +96,7 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Container name.
+   * Name of the container.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -124,8 +124,8 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * Container image URI provided when configuring a pod/container.
-   * May identify a container image version using mutable tags.
+   * Container image URI provided when configuring a pod or container. This
+   * string can identify a container image version using mutable tags.
    * </pre>
    *
    * <code>string uri = 2;</code>
@@ -148,8 +148,8 @@ public java.lang.String getUri() {
    *
    *
    * <pre>
-   * Container image URI provided when configuring a pod/container.
-   * May identify a container image version using mutable tags.
+   * Container image URI provided when configuring a pod or container. This
+   * string can identify a container image version using mutable tags.
    * </pre>
    *
    * <code>string uri = 2;</code>
@@ -177,9 +177,8 @@ public com.google.protobuf.ByteString getUriBytes() {
    *
    *
    * <pre>
-   * Optional container image id, when provided by the container runtime.
-   * Uniquely identifies the container image launched using a container image
-   * digest.
+   * Optional container image ID, if provided by the container runtime. Uniquely
+   * identifies the container image launched using a container image digest.
    * </pre>
    *
    * <code>string image_id = 3;</code>
@@ -202,9 +201,8 @@ public java.lang.String getImageId() {
    *
    *
    * <pre>
-   * Optional container image id, when provided by the container runtime.
-   * Uniquely identifies the container image launched using a container image
-   * digest.
+   * Optional container image ID, if provided by the container runtime. Uniquely
+   * identifies the container image launched using a container image digest.
    * </pre>
    *
    * <code>string image_id = 3;</code>
@@ -760,7 +758,7 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Container name.
+     * Name of the container.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -782,7 +780,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Container name.
+     * Name of the container.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -804,7 +802,7 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Container name.
+     * Name of the container.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -825,7 +823,7 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Container name.
+     * Name of the container.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -842,7 +840,7 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Container name.
+     * Name of the container.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -866,8 +864,8 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Container image URI provided when configuring a pod/container.
-     * May identify a container image version using mutable tags.
+     * Container image URI provided when configuring a pod or container. This
+     * string can identify a container image version using mutable tags.
      * </pre>
      *
      * <code>string uri = 2;</code>
@@ -889,8 +887,8 @@ public java.lang.String getUri() {
      *
      *
      * <pre>
-     * Container image URI provided when configuring a pod/container.
-     * May identify a container image version using mutable tags.
+     * Container image URI provided when configuring a pod or container. This
+     * string can identify a container image version using mutable tags.
      * </pre>
      *
      * <code>string uri = 2;</code>
@@ -912,8 +910,8 @@ public com.google.protobuf.ByteString getUriBytes() {
      *
      *
      * <pre>
-     * Container image URI provided when configuring a pod/container.
-     * May identify a container image version using mutable tags.
+     * Container image URI provided when configuring a pod or container. This
+     * string can identify a container image version using mutable tags.
      * </pre>
      *
      * <code>string uri = 2;</code>
@@ -934,8 +932,8 @@ public Builder setUri(java.lang.String value) {
      *
      *
      * <pre>
-     * Container image URI provided when configuring a pod/container.
-     * May identify a container image version using mutable tags.
+     * Container image URI provided when configuring a pod or container. This
+     * string can identify a container image version using mutable tags.
      * </pre>
      *
      * <code>string uri = 2;</code>
@@ -952,8 +950,8 @@ public Builder clearUri() {
      *
      *
      * <pre>
-     * Container image URI provided when configuring a pod/container.
-     * May identify a container image version using mutable tags.
+     * Container image URI provided when configuring a pod or container. This
+     * string can identify a container image version using mutable tags.
      * </pre>
      *
      * <code>string uri = 2;</code>
@@ -977,9 +975,8 @@ public Builder setUriBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Optional container image id, when provided by the container runtime.
-     * Uniquely identifies the container image launched using a container image
-     * digest.
+     * Optional container image ID, if provided by the container runtime. Uniquely
+     * identifies the container image launched using a container image digest.
      * </pre>
      *
      * <code>string image_id = 3;</code>
@@ -1001,9 +998,8 @@ public java.lang.String getImageId() {
      *
      *
      * <pre>
-     * Optional container image id, when provided by the container runtime.
-     * Uniquely identifies the container image launched using a container image
-     * digest.
+     * Optional container image ID, if provided by the container runtime. Uniquely
+     * identifies the container image launched using a container image digest.
      * </pre>
      *
      * <code>string image_id = 3;</code>
@@ -1025,9 +1021,8 @@ public com.google.protobuf.ByteString getImageIdBytes() {
      *
      *
      * <pre>
-     * Optional container image id, when provided by the container runtime.
-     * Uniquely identifies the container image launched using a container image
-     * digest.
+     * Optional container image ID, if provided by the container runtime. Uniquely
+     * identifies the container image launched using a container image digest.
      * </pre>
      *
      * <code>string image_id = 3;</code>
@@ -1048,9 +1043,8 @@ public Builder setImageId(java.lang.String value) {
      *
      *
      * <pre>
-     * Optional container image id, when provided by the container runtime.
-     * Uniquely identifies the container image launched using a container image
-     * digest.
+     * Optional container image ID, if provided by the container runtime. Uniquely
+     * identifies the container image launched using a container image digest.
      * </pre>
      *
      * <code>string image_id = 3;</code>
@@ -1067,9 +1061,8 @@ public Builder clearImageId() {
      *
      *
      * <pre>
-     * Optional container image id, when provided by the container runtime.
-     * Uniquely identifies the container image launched using a container image
-     * digest.
+     * Optional container image ID, if provided by the container runtime. Uniquely
+     * identifies the container image launched using a container image digest.
      * </pre>
      *
      * <code>string image_id = 3;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContainerOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContainerOrBuilder.java
index 573448691aad..fc505c7d37e2 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContainerOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ContainerOrBuilder.java
@@ -27,7 +27,7 @@ public interface ContainerOrBuilder
    *
    *
    * <pre>
-   * Container name.
+   * Name of the container.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -39,7 +39,7 @@ public interface ContainerOrBuilder
    *
    *
    * <pre>
-   * Container name.
+   * Name of the container.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -52,8 +52,8 @@ public interface ContainerOrBuilder
    *
    *
    * <pre>
-   * Container image URI provided when configuring a pod/container.
-   * May identify a container image version using mutable tags.
+   * Container image URI provided when configuring a pod or container. This
+   * string can identify a container image version using mutable tags.
    * </pre>
    *
    * <code>string uri = 2;</code>
@@ -65,8 +65,8 @@ public interface ContainerOrBuilder
    *
    *
    * <pre>
-   * Container image URI provided when configuring a pod/container.
-   * May identify a container image version using mutable tags.
+   * Container image URI provided when configuring a pod or container. This
+   * string can identify a container image version using mutable tags.
    * </pre>
    *
    * <code>string uri = 2;</code>
@@ -79,9 +79,8 @@ public interface ContainerOrBuilder
    *
    *
    * <pre>
-   * Optional container image id, when provided by the container runtime.
-   * Uniquely identifies the container image launched using a container image
-   * digest.
+   * Optional container image ID, if provided by the container runtime. Uniquely
+   * identifies the container image launched using a container image digest.
    * </pre>
    *
    * <code>string image_id = 3;</code>
@@ -93,9 +92,8 @@ public interface ContainerOrBuilder
    *
    *
    * <pre>
-   * Optional container image id, when provided by the container runtime.
-   * Uniquely identifies the container image launched using a container image
-   * digest.
+   * Optional container image ID, if provided by the container runtime. Uniquely
+   * identifies the container image launched using a container image digest.
    * </pre>
    *
    * <code>string image_id = 3;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequest.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequest.java
index 9d9151ffdd14..afa3c0f79563 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequest.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequest.java
@@ -187,9 +187,9 @@ public com.google.cloud.securitycenter.v1.BigQueryExportOrBuilder getBigQueryExp
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -213,9 +213,9 @@ public java.lang.String getBigQueryExportId() {
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -972,9 +972,9 @@ public com.google.cloud.securitycenter.v1.BigQueryExportOrBuilder getBigQueryExp
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -997,9 +997,9 @@ public java.lang.String getBigQueryExportId() {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1022,9 +1022,9 @@ public com.google.protobuf.ByteString getBigQueryExportIdBytes() {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1046,9 +1046,9 @@ public Builder setBigQueryExportId(java.lang.String value) {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1066,9 +1066,9 @@ public Builder clearBigQueryExportId() {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequestOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequestOrBuilder.java
index 055e14bfa5e5..810fb5a739f1 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequestOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateBigQueryExportRequestOrBuilder.java
@@ -102,9 +102,9 @@ public interface CreateBigQueryExportRequestOrBuilder
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -117,9 +117,9 @@ public interface CreateBigQueryExportRequestOrBuilder
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string big_query_export_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequest.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequest.java
index d3afb93f234c..394f45f91760 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequest.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequest.java
@@ -187,9 +187,9 @@ public com.google.cloud.securitycenter.v1.MuteConfigOrBuilder getMuteConfigOrBui
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -213,9 +213,9 @@ public java.lang.String getMuteConfigId() {
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -967,9 +967,9 @@ public com.google.cloud.securitycenter.v1.MuteConfigOrBuilder getMuteConfigOrBui
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -992,9 +992,9 @@ public java.lang.String getMuteConfigId() {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1017,9 +1017,9 @@ public com.google.protobuf.ByteString getMuteConfigIdBytes() {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1041,9 +1041,9 @@ public Builder setMuteConfigId(java.lang.String value) {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -1061,9 +1061,9 @@ public Builder clearMuteConfigId() {
      *
      * <pre>
      * Required. Unique identifier provided by the client within the parent scope.
-     * It must consist of lower case letters, numbers, and hyphen, with the first
-     * character a letter, the last a letter or a number, and a 63 character
-     * maximum.
+     * It must consist of only lowercase letters, numbers, and hyphens, must start
+     * with a letter, must end with either a letter or a number, and must be 63
+     * characters or less.
      * </pre>
      *
      * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequestOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequestOrBuilder.java
index e9d387056d28..0db872992bd1 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequestOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/CreateMuteConfigRequestOrBuilder.java
@@ -102,9 +102,9 @@ public interface CreateMuteConfigRequestOrBuilder
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -117,9 +117,9 @@ public interface CreateMuteConfigRequestOrBuilder
    *
    * <pre>
    * Required. Unique identifier provided by the client within the parent scope.
-   * It must consist of lower case letters, numbers, and hyphen, with the first
-   * character a letter, the last a letter or a number, and a 63 character
-   * maximum.
+   * It must consist of only lowercase letters, numbers, and hyphens, must start
+   * with a letter, must end with either a letter or a number, and must be 63
+   * characters or less.
    * </pre>
    *
    * <code>string mute_config_id = 3 [(.google.api.field_behavior) = REQUIRED];</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Database.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Database.java
index 0539cc0488df..dd1e233f7aee 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Database.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Database.java
@@ -22,12 +22,17 @@
  *
  *
  * <pre>
- * Represents database access information, such as queries.
- * A database may be a sub-resource of an instance (as in the case of CloudSQL
- * instances or Cloud Spanner instances), or the database instance itself.
- * Some database resources may not have the full resource name populated
- * because these resource types are not yet supported by Cloud Asset Inventory
- * (e.g. CloudSQL databases). In these cases only the display name will be
+ * Represents database access information, such as queries. A database may be a
+ * sub-resource of an instance (as in the case of Cloud SQL instances or Cloud
+ * Spanner instances), or the database instance itself. Some database resources
+ * might not have the [full resource
+ * name](https://google.aip.dev/122#full-resource-names) populated because these
+ * resource types, such as Cloud SQL databases, are not yet supported by Cloud
+ * Asset Inventory. In these cases only the display name is provided.
+ * Some database resources may not have the [full resource
+ * name](https://google.aip.dev/122#full-resource-names) populated because
+ * these resource types are not yet supported by Cloud Asset Inventory (e.g.
+ * Cloud SQL databases). In these cases only the display name will be
  * provided.
  * </pre>
  *
@@ -80,8 +85,9 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * The full resource name of the database the user connected to, if it is
-   * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+   * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+   * the database that the user connected to, if it is supported by Cloud Asset
+   * Inventory.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -104,8 +110,9 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * The full resource name of the database the user connected to, if it is
-   * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+   * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+   * the database that the user connected to, if it is supported by Cloud Asset
+   * Inventory.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -133,7 +140,7 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * The human readable name of the database the user connected to.
+   * The human-readable name of the database that the user connected to.
    * </pre>
    *
    * <code>string display_name = 2;</code>
@@ -156,7 +163,7 @@ public java.lang.String getDisplayName() {
    *
    *
    * <pre>
-   * The human readable name of the database the user connected to.
+   * The human-readable name of the database that the user connected to.
    * </pre>
    *
    * <code>string display_name = 2;</code>
@@ -184,8 +191,8 @@ public com.google.protobuf.ByteString getDisplayNameBytes() {
    *
    *
    * <pre>
-   * The username used to connect to the DB. This may not necessarily be an IAM
-   * principal, and has no required format.
+   * The username used to connect to the database. The username might not be an
+   * IAM principal and does not have a set format.
    * </pre>
    *
    * <code>string user_name = 3;</code>
@@ -208,8 +215,8 @@ public java.lang.String getUserName() {
    *
    *
    * <pre>
-   * The username used to connect to the DB. This may not necessarily be an IAM
-   * principal, and has no required format.
+   * The username used to connect to the database. The username might not be an
+   * IAM principal and does not have a set format.
    * </pre>
    *
    * <code>string user_name = 3;</code>
@@ -237,7 +244,7 @@ public com.google.protobuf.ByteString getUserNameBytes() {
    *
    *
    * <pre>
-   * The SQL statement associated with the relevant access.
+   * The SQL statement that is associated with the database access.
    * </pre>
    *
    * <code>string query = 4;</code>
@@ -260,7 +267,7 @@ public java.lang.String getQuery() {
    *
    *
    * <pre>
-   * The SQL statement associated with the relevant access.
+   * The SQL statement that is associated with the database access.
    * </pre>
    *
    * <code>string query = 4;</code>
@@ -289,8 +296,8 @@ public com.google.protobuf.ByteString getQueryBytes() {
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -304,8 +311,8 @@ public com.google.protobuf.ProtocolStringList getGranteesList() {
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -319,8 +326,8 @@ public int getGranteesCount() {
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -335,8 +342,8 @@ public java.lang.String getGrantees(int index) {
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -554,12 +561,17 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Represents database access information, such as queries.
-   * A database may be a sub-resource of an instance (as in the case of CloudSQL
-   * instances or Cloud Spanner instances), or the database instance itself.
-   * Some database resources may not have the full resource name populated
-   * because these resource types are not yet supported by Cloud Asset Inventory
-   * (e.g. CloudSQL databases). In these cases only the display name will be
+   * Represents database access information, such as queries. A database may be a
+   * sub-resource of an instance (as in the case of Cloud SQL instances or Cloud
+   * Spanner instances), or the database instance itself. Some database resources
+   * might not have the [full resource
+   * name](https://google.aip.dev/122#full-resource-names) populated because these
+   * resource types, such as Cloud SQL databases, are not yet supported by Cloud
+   * Asset Inventory. In these cases only the display name is provided.
+   * Some database resources may not have the [full resource
+   * name](https://google.aip.dev/122#full-resource-names) populated because
+   * these resource types are not yet supported by Cloud Asset Inventory (e.g.
+   * Cloud SQL databases). In these cases only the display name will be
    * provided.
    * </pre>
    *
@@ -810,8 +822,9 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * The full resource name of the database the user connected to, if it is
-     * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+     * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the database that the user connected to, if it is supported by Cloud Asset
+     * Inventory.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -833,8 +846,9 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * The full resource name of the database the user connected to, if it is
-     * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+     * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the database that the user connected to, if it is supported by Cloud Asset
+     * Inventory.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -856,8 +870,9 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * The full resource name of the database the user connected to, if it is
-     * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+     * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the database that the user connected to, if it is supported by Cloud Asset
+     * Inventory.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -878,8 +893,9 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * The full resource name of the database the user connected to, if it is
-     * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+     * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the database that the user connected to, if it is supported by Cloud Asset
+     * Inventory.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -896,8 +912,9 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * The full resource name of the database the user connected to, if it is
-     * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+     * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the database that the user connected to, if it is supported by Cloud Asset
+     * Inventory.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -921,7 +938,7 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * The human readable name of the database the user connected to.
+     * The human-readable name of the database that the user connected to.
      * </pre>
      *
      * <code>string display_name = 2;</code>
@@ -943,7 +960,7 @@ public java.lang.String getDisplayName() {
      *
      *
      * <pre>
-     * The human readable name of the database the user connected to.
+     * The human-readable name of the database that the user connected to.
      * </pre>
      *
      * <code>string display_name = 2;</code>
@@ -965,7 +982,7 @@ public com.google.protobuf.ByteString getDisplayNameBytes() {
      *
      *
      * <pre>
-     * The human readable name of the database the user connected to.
+     * The human-readable name of the database that the user connected to.
      * </pre>
      *
      * <code>string display_name = 2;</code>
@@ -986,7 +1003,7 @@ public Builder setDisplayName(java.lang.String value) {
      *
      *
      * <pre>
-     * The human readable name of the database the user connected to.
+     * The human-readable name of the database that the user connected to.
      * </pre>
      *
      * <code>string display_name = 2;</code>
@@ -1003,7 +1020,7 @@ public Builder clearDisplayName() {
      *
      *
      * <pre>
-     * The human readable name of the database the user connected to.
+     * The human-readable name of the database that the user connected to.
      * </pre>
      *
      * <code>string display_name = 2;</code>
@@ -1027,8 +1044,8 @@ public Builder setDisplayNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * The username used to connect to the DB. This may not necessarily be an IAM
-     * principal, and has no required format.
+     * The username used to connect to the database. The username might not be an
+     * IAM principal and does not have a set format.
      * </pre>
      *
      * <code>string user_name = 3;</code>
@@ -1050,8 +1067,8 @@ public java.lang.String getUserName() {
      *
      *
      * <pre>
-     * The username used to connect to the DB. This may not necessarily be an IAM
-     * principal, and has no required format.
+     * The username used to connect to the database. The username might not be an
+     * IAM principal and does not have a set format.
      * </pre>
      *
      * <code>string user_name = 3;</code>
@@ -1073,8 +1090,8 @@ public com.google.protobuf.ByteString getUserNameBytes() {
      *
      *
      * <pre>
-     * The username used to connect to the DB. This may not necessarily be an IAM
-     * principal, and has no required format.
+     * The username used to connect to the database. The username might not be an
+     * IAM principal and does not have a set format.
      * </pre>
      *
      * <code>string user_name = 3;</code>
@@ -1095,8 +1112,8 @@ public Builder setUserName(java.lang.String value) {
      *
      *
      * <pre>
-     * The username used to connect to the DB. This may not necessarily be an IAM
-     * principal, and has no required format.
+     * The username used to connect to the database. The username might not be an
+     * IAM principal and does not have a set format.
      * </pre>
      *
      * <code>string user_name = 3;</code>
@@ -1113,8 +1130,8 @@ public Builder clearUserName() {
      *
      *
      * <pre>
-     * The username used to connect to the DB. This may not necessarily be an IAM
-     * principal, and has no required format.
+     * The username used to connect to the database. The username might not be an
+     * IAM principal and does not have a set format.
      * </pre>
      *
      * <code>string user_name = 3;</code>
@@ -1138,7 +1155,7 @@ public Builder setUserNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * The SQL statement associated with the relevant access.
+     * The SQL statement that is associated with the database access.
      * </pre>
      *
      * <code>string query = 4;</code>
@@ -1160,7 +1177,7 @@ public java.lang.String getQuery() {
      *
      *
      * <pre>
-     * The SQL statement associated with the relevant access.
+     * The SQL statement that is associated with the database access.
      * </pre>
      *
      * <code>string query = 4;</code>
@@ -1182,7 +1199,7 @@ public com.google.protobuf.ByteString getQueryBytes() {
      *
      *
      * <pre>
-     * The SQL statement associated with the relevant access.
+     * The SQL statement that is associated with the database access.
      * </pre>
      *
      * <code>string query = 4;</code>
@@ -1203,7 +1220,7 @@ public Builder setQuery(java.lang.String value) {
      *
      *
      * <pre>
-     * The SQL statement associated with the relevant access.
+     * The SQL statement that is associated with the database access.
      * </pre>
      *
      * <code>string query = 4;</code>
@@ -1220,7 +1237,7 @@ public Builder clearQuery() {
      *
      *
      * <pre>
-     * The SQL statement associated with the relevant access.
+     * The SQL statement that is associated with the database access.
      * </pre>
      *
      * <code>string query = 4;</code>
@@ -1252,8 +1269,8 @@ private void ensureGranteesIsMutable() {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1268,8 +1285,8 @@ public com.google.protobuf.ProtocolStringList getGranteesList() {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1283,8 +1300,8 @@ public int getGranteesCount() {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1299,8 +1316,8 @@ public java.lang.String getGrantees(int index) {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1315,8 +1332,8 @@ public com.google.protobuf.ByteString getGranteesBytes(int index) {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1339,8 +1356,8 @@ public Builder setGrantees(int index, java.lang.String value) {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1362,8 +1379,8 @@ public Builder addGrantees(java.lang.String value) {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1382,8 +1399,8 @@ public Builder addAllGrantees(java.lang.Iterable<java.lang.String> values) {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
@@ -1401,8 +1418,8 @@ public Builder clearGrantees() {
      *
      *
      * <pre>
-     * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-     * policy change).
+     * The target usernames, roles, or groups of an SQL privilege grant, which is
+     * not an IAM policy change.
      * </pre>
      *
      * <code>repeated string grantees = 5;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/DatabaseOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/DatabaseOrBuilder.java
index dcfd32905637..8de469574fff 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/DatabaseOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/DatabaseOrBuilder.java
@@ -27,8 +27,9 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The full resource name of the database the user connected to, if it is
-   * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+   * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+   * the database that the user connected to, if it is supported by Cloud Asset
+   * Inventory.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -40,8 +41,9 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The full resource name of the database the user connected to, if it is
-   * supported by CAI. (https://google.aip.dev/122#full-resource-names)
+   * The [full resource name](https://google.aip.dev/122#full-resource-names) of
+   * the database that the user connected to, if it is supported by Cloud Asset
+   * Inventory.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -54,7 +56,7 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The human readable name of the database the user connected to.
+   * The human-readable name of the database that the user connected to.
    * </pre>
    *
    * <code>string display_name = 2;</code>
@@ -66,7 +68,7 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The human readable name of the database the user connected to.
+   * The human-readable name of the database that the user connected to.
    * </pre>
    *
    * <code>string display_name = 2;</code>
@@ -79,8 +81,8 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The username used to connect to the DB. This may not necessarily be an IAM
-   * principal, and has no required format.
+   * The username used to connect to the database. The username might not be an
+   * IAM principal and does not have a set format.
    * </pre>
    *
    * <code>string user_name = 3;</code>
@@ -92,8 +94,8 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The username used to connect to the DB. This may not necessarily be an IAM
-   * principal, and has no required format.
+   * The username used to connect to the database. The username might not be an
+   * IAM principal and does not have a set format.
    * </pre>
    *
    * <code>string user_name = 3;</code>
@@ -106,7 +108,7 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The SQL statement associated with the relevant access.
+   * The SQL statement that is associated with the database access.
    * </pre>
    *
    * <code>string query = 4;</code>
@@ -118,7 +120,7 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The SQL statement associated with the relevant access.
+   * The SQL statement that is associated with the database access.
    * </pre>
    *
    * <code>string query = 4;</code>
@@ -131,8 +133,8 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -144,8 +146,8 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -157,8 +159,8 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
@@ -171,8 +173,8 @@ public interface DatabaseOrBuilder
    *
    *
    * <pre>
-   * The target usernames/roles/groups of a SQL privilege grant (not an IAM
-   * policy change).
+   * The target usernames, roles, or groups of an SQL privilege grant, which is
+   * not an IAM policy change.
    * </pre>
    *
    * <code>repeated string grantees = 5;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/EnvironmentVariable.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/EnvironmentVariable.java
index 2258db70696a..9d5d1d8069b5 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/EnvironmentVariable.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/EnvironmentVariable.java
@@ -22,8 +22,8 @@
  *
  *
  * <pre>
- * EnvironmentVariable is a name-value pair to store environment variables for
- * Process.
+ * A name-value pair representing an environment variable used in an operating
+ * system process.
  * </pre>
  *
  * Protobuf type {@code google.cloud.securitycenter.v1.EnvironmentVariable}
@@ -339,8 +339,8 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * EnvironmentVariable is a name-value pair to store environment variables for
-   * Process.
+   * A name-value pair representing an environment variable used in an operating
+   * system process.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.EnvironmentVariable}
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResource.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResource.java
index 4e0a332aa89b..ace4cc374154 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResource.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResource.java
@@ -22,7 +22,7 @@
  *
  *
  * <pre>
- * Resource that has been exfiltrated or exfiltrated_to.
+ * Resource where data was exfiltrated from or exfiltrated to.
  * </pre>
  *
  * Protobuf type {@code google.cloud.securitycenter.v1.ExfilResource}
@@ -71,7 +71,8 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Resource's URI (https://google.aip.dev/122#full-resource-names)
+   * The resource's [full resource
+   * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -94,7 +95,8 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Resource's URI (https://google.aip.dev/122#full-resource-names)
+   * The resource's [full resource
+   * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -123,10 +125,11 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -140,10 +143,11 @@ public com.google.protobuf.ProtocolStringList getComponentsList() {
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -157,10 +161,11 @@ public int getComponentsCount() {
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -175,10 +180,11 @@ public java.lang.String getComponents(int index) {
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -369,7 +375,7 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Resource that has been exfiltrated or exfiltrated_to.
+   * Resource where data was exfiltrated from or exfiltrated to.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.ExfilResource}
@@ -575,7 +581,8 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Resource's URI (https://google.aip.dev/122#full-resource-names)
+     * The resource's [full resource
+     * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -597,7 +604,8 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Resource's URI (https://google.aip.dev/122#full-resource-names)
+     * The resource's [full resource
+     * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -619,7 +627,8 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Resource's URI (https://google.aip.dev/122#full-resource-names)
+     * The resource's [full resource
+     * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -640,7 +649,8 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Resource's URI (https://google.aip.dev/122#full-resource-names)
+     * The resource's [full resource
+     * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -657,7 +667,8 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Resource's URI (https://google.aip.dev/122#full-resource-names)
+     * The resource's [full resource
+     * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -689,10 +700,11 @@ private void ensureComponentsIsMutable() {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -707,10 +719,11 @@ public com.google.protobuf.ProtocolStringList getComponentsList() {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -724,10 +737,11 @@ public int getComponentsCount() {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -742,10 +756,11 @@ public java.lang.String getComponents(int index) {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -760,10 +775,11 @@ public com.google.protobuf.ByteString getComponentsBytes(int index) {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -786,10 +802,11 @@ public Builder setComponents(int index, java.lang.String value) {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -811,10 +828,11 @@ public Builder addComponents(java.lang.String value) {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -833,10 +851,11 @@ public Builder addAllComponents(java.lang.Iterable<java.lang.String> values) {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
@@ -854,10 +873,11 @@ public Builder clearComponents() {
      *
      *
      * <pre>
-     * Subcomponents of the asset that is exfiltrated - these could be
-     * URIs used during exfiltration, table names, databases, filenames, etc.
-     * For example, multiple tables may be exfiltrated from the same CloudSQL
-     * instance, or multiple files from the same Cloud Storage bucket.
+     * Subcomponents of the asset that was exfiltrated, like URIs used during
+     * exfiltration, table names, databases, and filenames. For example, multiple
+     * tables might have been exfiltrated from the same Cloud SQL instance, or
+     * multiple files might have been exfiltrated from the same Cloud Storage
+     * bucket.
      * </pre>
      *
      * <code>repeated string components = 2;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResourceOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResourceOrBuilder.java
index d6e2d364b84a..844639c5d6fc 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResourceOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ExfilResourceOrBuilder.java
@@ -27,7 +27,8 @@ public interface ExfilResourceOrBuilder
    *
    *
    * <pre>
-   * Resource's URI (https://google.aip.dev/122#full-resource-names)
+   * The resource's [full resource
+   * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -39,7 +40,8 @@ public interface ExfilResourceOrBuilder
    *
    *
    * <pre>
-   * Resource's URI (https://google.aip.dev/122#full-resource-names)
+   * The resource's [full resource
+   * name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -52,10 +54,11 @@ public interface ExfilResourceOrBuilder
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -67,10 +70,11 @@ public interface ExfilResourceOrBuilder
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -82,10 +86,11 @@ public interface ExfilResourceOrBuilder
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
@@ -98,10 +103,11 @@ public interface ExfilResourceOrBuilder
    *
    *
    * <pre>
-   * Subcomponents of the asset that is exfiltrated - these could be
-   * URIs used during exfiltration, table names, databases, filenames, etc.
-   * For example, multiple tables may be exfiltrated from the same CloudSQL
-   * instance, or multiple files from the same Cloud Storage bucket.
+   * Subcomponents of the asset that was exfiltrated, like URIs used during
+   * exfiltration, table names, databases, and filenames. For example, multiple
+   * tables might have been exfiltrated from the same Cloud SQL instance, or
+   * multiple files might have been exfiltrated from the same Cloud Storage
+   * bucket.
    * </pre>
    *
    * <code>repeated string components = 2;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Exfiltration.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Exfiltration.java
index e1299262b0c8..af41a23d1ee6 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Exfiltration.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Exfiltration.java
@@ -22,10 +22,10 @@
  *
  *
  * <pre>
- * Exfiltration represents a data exfiltration attempt of one or more
- * sources to one or more targets. Sources represent the source
- * of data that is exfiltrated, and Targets represents the destination the
- * data was copied to.
+ * Exfiltration represents a data exfiltration attempt from one or more sources
+ * to one or more targets. The `sources` attribute lists the sources of the
+ * exfiltrated data. The `targets` attribute lists the destinations the data was
+ * copied to.
  * </pre>
  *
  * Protobuf type {@code google.cloud.securitycenter.v1.Exfiltration}
@@ -399,10 +399,10 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Exfiltration represents a data exfiltration attempt of one or more
-   * sources to one or more targets. Sources represent the source
-   * of data that is exfiltrated, and Targets represents the destination the
-   * data was copied to.
+   * Exfiltration represents a data exfiltration attempt from one or more sources
+   * to one or more targets. The `sources` attribute lists the sources of the
+   * exfiltrated data. The `targets` attribute lists the destinations the data was
+   * copied to.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Exfiltration}
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/File.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/File.java
index 96bb5e2a1a30..c941d165c77b 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/File.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/File.java
@@ -235,8 +235,7 @@ public boolean getPartiallyHashed() {
    *
    *
    * <pre>
-   * Prefix of the file contents as a JSON encoded string.
-   * (Currently only populated for Malicious Script Executed findings.)
+   * Prefix of the file contents as a JSON-encoded string.
    * </pre>
    *
    * <code>string contents = 6;</code>
@@ -259,8 +258,7 @@ public java.lang.String getContents() {
    *
    *
    * <pre>
-   * Prefix of the file contents as a JSON encoded string.
-   * (Currently only populated for Malicious Script Executed findings.)
+   * Prefix of the file contents as a JSON-encoded string.
    * </pre>
    *
    * <code>string contents = 6;</code>
@@ -1127,8 +1125,7 @@ public Builder clearPartiallyHashed() {
      *
      *
      * <pre>
-     * Prefix of the file contents as a JSON encoded string.
-     * (Currently only populated for Malicious Script Executed findings.)
+     * Prefix of the file contents as a JSON-encoded string.
      * </pre>
      *
      * <code>string contents = 6;</code>
@@ -1150,8 +1147,7 @@ public java.lang.String getContents() {
      *
      *
      * <pre>
-     * Prefix of the file contents as a JSON encoded string.
-     * (Currently only populated for Malicious Script Executed findings.)
+     * Prefix of the file contents as a JSON-encoded string.
      * </pre>
      *
      * <code>string contents = 6;</code>
@@ -1173,8 +1169,7 @@ public com.google.protobuf.ByteString getContentsBytes() {
      *
      *
      * <pre>
-     * Prefix of the file contents as a JSON encoded string.
-     * (Currently only populated for Malicious Script Executed findings.)
+     * Prefix of the file contents as a JSON-encoded string.
      * </pre>
      *
      * <code>string contents = 6;</code>
@@ -1195,8 +1190,7 @@ public Builder setContents(java.lang.String value) {
      *
      *
      * <pre>
-     * Prefix of the file contents as a JSON encoded string.
-     * (Currently only populated for Malicious Script Executed findings.)
+     * Prefix of the file contents as a JSON-encoded string.
      * </pre>
      *
      * <code>string contents = 6;</code>
@@ -1213,8 +1207,7 @@ public Builder clearContents() {
      *
      *
      * <pre>
-     * Prefix of the file contents as a JSON encoded string.
-     * (Currently only populated for Malicious Script Executed findings.)
+     * Prefix of the file contents as a JSON-encoded string.
      * </pre>
      *
      * <code>string contents = 6;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/FileOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/FileOrBuilder.java
index d12021014cea..a018816bf44b 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/FileOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/FileOrBuilder.java
@@ -122,8 +122,7 @@ public interface FileOrBuilder
    *
    *
    * <pre>
-   * Prefix of the file contents as a JSON encoded string.
-   * (Currently only populated for Malicious Script Executed findings.)
+   * Prefix of the file contents as a JSON-encoded string.
    * </pre>
    *
    * <code>string contents = 6;</code>
@@ -135,8 +134,7 @@ public interface FileOrBuilder
    *
    *
    * <pre>
-   * Prefix of the file contents as a JSON encoded string.
-   * (Currently only populated for Malicious Script Executed findings.)
+   * Prefix of the file contents as a JSON-encoded string.
    * </pre>
    *
    * <code>string contents = 6;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBinding.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBinding.java
index 58d93e0f7071..0cda43f88a6c 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBinding.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBinding.java
@@ -320,8 +320,8 @@ public com.google.protobuf.ByteString getRoleBytes() {
    *
    *
    * <pre>
-   * A single identity requesting access for a Cloud Platform resource,
-   * e.g. "foo&#64;google.com".
+   * A single identity requesting access for a Cloud Platform resource, for
+   * example, "foo&#64;google.com".
    * </pre>
    *
    * <code>string member = 3;</code>
@@ -344,8 +344,8 @@ public java.lang.String getMember() {
    *
    *
    * <pre>
-   * A single identity requesting access for a Cloud Platform resource,
-   * e.g. "foo&#64;google.com".
+   * A single identity requesting access for a Cloud Platform resource, for
+   * example, "foo&#64;google.com".
    * </pre>
    *
    * <code>string member = 3;</code>
@@ -963,8 +963,8 @@ public Builder setRoleBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * A single identity requesting access for a Cloud Platform resource,
-     * e.g. "foo&#64;google.com".
+     * A single identity requesting access for a Cloud Platform resource, for
+     * example, "foo&#64;google.com".
      * </pre>
      *
      * <code>string member = 3;</code>
@@ -986,8 +986,8 @@ public java.lang.String getMember() {
      *
      *
      * <pre>
-     * A single identity requesting access for a Cloud Platform resource,
-     * e.g. "foo&#64;google.com".
+     * A single identity requesting access for a Cloud Platform resource, for
+     * example, "foo&#64;google.com".
      * </pre>
      *
      * <code>string member = 3;</code>
@@ -1009,8 +1009,8 @@ public com.google.protobuf.ByteString getMemberBytes() {
      *
      *
      * <pre>
-     * A single identity requesting access for a Cloud Platform resource,
-     * e.g. "foo&#64;google.com".
+     * A single identity requesting access for a Cloud Platform resource, for
+     * example, "foo&#64;google.com".
      * </pre>
      *
      * <code>string member = 3;</code>
@@ -1031,8 +1031,8 @@ public Builder setMember(java.lang.String value) {
      *
      *
      * <pre>
-     * A single identity requesting access for a Cloud Platform resource,
-     * e.g. "foo&#64;google.com".
+     * A single identity requesting access for a Cloud Platform resource, for
+     * example, "foo&#64;google.com".
      * </pre>
      *
      * <code>string member = 3;</code>
@@ -1049,8 +1049,8 @@ public Builder clearMember() {
      *
      *
      * <pre>
-     * A single identity requesting access for a Cloud Platform resource,
-     * e.g. "foo&#64;google.com".
+     * A single identity requesting access for a Cloud Platform resource, for
+     * example, "foo&#64;google.com".
      * </pre>
      *
      * <code>string member = 3;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBindingOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBindingOrBuilder.java
index 6a32351a37af..445a6254dcd1 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBindingOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/IamBindingOrBuilder.java
@@ -79,8 +79,8 @@ public interface IamBindingOrBuilder
    *
    *
    * <pre>
-   * A single identity requesting access for a Cloud Platform resource,
-   * e.g. "foo&#64;google.com".
+   * A single identity requesting access for a Cloud Platform resource, for
+   * example, "foo&#64;google.com".
    * </pre>
    *
    * <code>string member = 3;</code>
@@ -92,8 +92,8 @@ public interface IamBindingOrBuilder
    *
    *
    * <pre>
-   * A single identity requesting access for a Cloud Platform resource,
-   * e.g. "foo&#64;google.com".
+   * A single identity requesting access for a Cloud Platform resource, for
+   * example, "foo&#64;google.com".
    * </pre>
    *
    * <code>string member = 3;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkit.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkit.java
index 1b456989c96c..f316432a1554 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkit.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkit.java
@@ -70,7 +70,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Rootkit name when available.
+   * Rootkit name, when available.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -93,7 +93,7 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Rootkit name when available.
+   * Rootkit name, when available.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -119,7 +119,7 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * True when unexpected modifications of kernel code memory are present.
+   * True if unexpected modifications of kernel code memory are present.
    * </pre>
    *
    * <code>bool unexpected_code_modification = 2;</code>
@@ -137,7 +137,7 @@ public boolean getUnexpectedCodeModification() {
    *
    *
    * <pre>
-   * True when unexpected modifications of kernel read-only data memory are
+   * True if unexpected modifications of kernel read-only data memory are
    * present.
    * </pre>
    *
@@ -156,7 +156,7 @@ public boolean getUnexpectedReadOnlyDataModification() {
    *
    *
    * <pre>
-   * True when `ftrace` points are present with callbacks pointing to regions
+   * True if `ftrace` points are present with callbacks pointing to regions
    * that are not in the expected kernel or module code range.
    * </pre>
    *
@@ -175,7 +175,7 @@ public boolean getUnexpectedFtraceHandler() {
    *
    *
    * <pre>
-   * True when `kprobe` points are present with callbacks pointing to regions
+   * True if `kprobe` points are present with callbacks pointing to regions
    * that are not in the expected kernel or module code range.
    * </pre>
    *
@@ -194,7 +194,7 @@ public boolean getUnexpectedKprobeHandler() {
    *
    *
    * <pre>
-   * True when kernel code pages that are not in the expected kernel or module
+   * True if kernel code pages that are not in the expected kernel or module
    * code regions are present.
    * </pre>
    *
@@ -213,7 +213,7 @@ public boolean getUnexpectedKernelCodePages() {
    *
    *
    * <pre>
-   * True when system call handlers that are are not in the expected kernel or
+   * True if system call handlers that are are not in the expected kernel or
    * module code regions are present.
    * </pre>
    *
@@ -232,7 +232,7 @@ public boolean getUnexpectedSystemCallHandler() {
    *
    *
    * <pre>
-   * True when interrupt handlers that are are not in the expected kernel or
+   * True if interrupt handlers that are are not in the expected kernel or
    * module code regions are present.
    * </pre>
    *
@@ -251,7 +251,7 @@ public boolean getUnexpectedInterruptHandler() {
    *
    *
    * <pre>
-   * True when unexpected processes in the scheduler run queue are present. Such
+   * True if unexpected processes in the scheduler run queue are present. Such
    * processes are in the run queue, but not in the process task list.
    * </pre>
    *
@@ -796,7 +796,7 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Rootkit name when available.
+     * Rootkit name, when available.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -818,7 +818,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Rootkit name when available.
+     * Rootkit name, when available.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -840,7 +840,7 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Rootkit name when available.
+     * Rootkit name, when available.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -861,7 +861,7 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Rootkit name when available.
+     * Rootkit name, when available.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -878,7 +878,7 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Rootkit name when available.
+     * Rootkit name, when available.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -902,7 +902,7 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * True when unexpected modifications of kernel code memory are present.
+     * True if unexpected modifications of kernel code memory are present.
      * </pre>
      *
      * <code>bool unexpected_code_modification = 2;</code>
@@ -917,7 +917,7 @@ public boolean getUnexpectedCodeModification() {
      *
      *
      * <pre>
-     * True when unexpected modifications of kernel code memory are present.
+     * True if unexpected modifications of kernel code memory are present.
      * </pre>
      *
      * <code>bool unexpected_code_modification = 2;</code>
@@ -936,7 +936,7 @@ public Builder setUnexpectedCodeModification(boolean value) {
      *
      *
      * <pre>
-     * True when unexpected modifications of kernel code memory are present.
+     * True if unexpected modifications of kernel code memory are present.
      * </pre>
      *
      * <code>bool unexpected_code_modification = 2;</code>
@@ -955,7 +955,7 @@ public Builder clearUnexpectedCodeModification() {
      *
      *
      * <pre>
-     * True when unexpected modifications of kernel read-only data memory are
+     * True if unexpected modifications of kernel read-only data memory are
      * present.
      * </pre>
      *
@@ -971,7 +971,7 @@ public boolean getUnexpectedReadOnlyDataModification() {
      *
      *
      * <pre>
-     * True when unexpected modifications of kernel read-only data memory are
+     * True if unexpected modifications of kernel read-only data memory are
      * present.
      * </pre>
      *
@@ -991,7 +991,7 @@ public Builder setUnexpectedReadOnlyDataModification(boolean value) {
      *
      *
      * <pre>
-     * True when unexpected modifications of kernel read-only data memory are
+     * True if unexpected modifications of kernel read-only data memory are
      * present.
      * </pre>
      *
@@ -1011,7 +1011,7 @@ public Builder clearUnexpectedReadOnlyDataModification() {
      *
      *
      * <pre>
-     * True when `ftrace` points are present with callbacks pointing to regions
+     * True if `ftrace` points are present with callbacks pointing to regions
      * that are not in the expected kernel or module code range.
      * </pre>
      *
@@ -1027,7 +1027,7 @@ public boolean getUnexpectedFtraceHandler() {
      *
      *
      * <pre>
-     * True when `ftrace` points are present with callbacks pointing to regions
+     * True if `ftrace` points are present with callbacks pointing to regions
      * that are not in the expected kernel or module code range.
      * </pre>
      *
@@ -1047,7 +1047,7 @@ public Builder setUnexpectedFtraceHandler(boolean value) {
      *
      *
      * <pre>
-     * True when `ftrace` points are present with callbacks pointing to regions
+     * True if `ftrace` points are present with callbacks pointing to regions
      * that are not in the expected kernel or module code range.
      * </pre>
      *
@@ -1067,7 +1067,7 @@ public Builder clearUnexpectedFtraceHandler() {
      *
      *
      * <pre>
-     * True when `kprobe` points are present with callbacks pointing to regions
+     * True if `kprobe` points are present with callbacks pointing to regions
      * that are not in the expected kernel or module code range.
      * </pre>
      *
@@ -1083,7 +1083,7 @@ public boolean getUnexpectedKprobeHandler() {
      *
      *
      * <pre>
-     * True when `kprobe` points are present with callbacks pointing to regions
+     * True if `kprobe` points are present with callbacks pointing to regions
      * that are not in the expected kernel or module code range.
      * </pre>
      *
@@ -1103,7 +1103,7 @@ public Builder setUnexpectedKprobeHandler(boolean value) {
      *
      *
      * <pre>
-     * True when `kprobe` points are present with callbacks pointing to regions
+     * True if `kprobe` points are present with callbacks pointing to regions
      * that are not in the expected kernel or module code range.
      * </pre>
      *
@@ -1123,7 +1123,7 @@ public Builder clearUnexpectedKprobeHandler() {
      *
      *
      * <pre>
-     * True when kernel code pages that are not in the expected kernel or module
+     * True if kernel code pages that are not in the expected kernel or module
      * code regions are present.
      * </pre>
      *
@@ -1139,7 +1139,7 @@ public boolean getUnexpectedKernelCodePages() {
      *
      *
      * <pre>
-     * True when kernel code pages that are not in the expected kernel or module
+     * True if kernel code pages that are not in the expected kernel or module
      * code regions are present.
      * </pre>
      *
@@ -1159,7 +1159,7 @@ public Builder setUnexpectedKernelCodePages(boolean value) {
      *
      *
      * <pre>
-     * True when kernel code pages that are not in the expected kernel or module
+     * True if kernel code pages that are not in the expected kernel or module
      * code regions are present.
      * </pre>
      *
@@ -1179,7 +1179,7 @@ public Builder clearUnexpectedKernelCodePages() {
      *
      *
      * <pre>
-     * True when system call handlers that are are not in the expected kernel or
+     * True if system call handlers that are are not in the expected kernel or
      * module code regions are present.
      * </pre>
      *
@@ -1195,7 +1195,7 @@ public boolean getUnexpectedSystemCallHandler() {
      *
      *
      * <pre>
-     * True when system call handlers that are are not in the expected kernel or
+     * True if system call handlers that are are not in the expected kernel or
      * module code regions are present.
      * </pre>
      *
@@ -1215,7 +1215,7 @@ public Builder setUnexpectedSystemCallHandler(boolean value) {
      *
      *
      * <pre>
-     * True when system call handlers that are are not in the expected kernel or
+     * True if system call handlers that are are not in the expected kernel or
      * module code regions are present.
      * </pre>
      *
@@ -1235,7 +1235,7 @@ public Builder clearUnexpectedSystemCallHandler() {
      *
      *
      * <pre>
-     * True when interrupt handlers that are are not in the expected kernel or
+     * True if interrupt handlers that are are not in the expected kernel or
      * module code regions are present.
      * </pre>
      *
@@ -1251,7 +1251,7 @@ public boolean getUnexpectedInterruptHandler() {
      *
      *
      * <pre>
-     * True when interrupt handlers that are are not in the expected kernel or
+     * True if interrupt handlers that are are not in the expected kernel or
      * module code regions are present.
      * </pre>
      *
@@ -1271,7 +1271,7 @@ public Builder setUnexpectedInterruptHandler(boolean value) {
      *
      *
      * <pre>
-     * True when interrupt handlers that are are not in the expected kernel or
+     * True if interrupt handlers that are are not in the expected kernel or
      * module code regions are present.
      * </pre>
      *
@@ -1291,7 +1291,7 @@ public Builder clearUnexpectedInterruptHandler() {
      *
      *
      * <pre>
-     * True when unexpected processes in the scheduler run queue are present. Such
+     * True if unexpected processes in the scheduler run queue are present. Such
      * processes are in the run queue, but not in the process task list.
      * </pre>
      *
@@ -1307,7 +1307,7 @@ public boolean getUnexpectedProcessesInRunqueue() {
      *
      *
      * <pre>
-     * True when unexpected processes in the scheduler run queue are present. Such
+     * True if unexpected processes in the scheduler run queue are present. Such
      * processes are in the run queue, but not in the process task list.
      * </pre>
      *
@@ -1327,7 +1327,7 @@ public Builder setUnexpectedProcessesInRunqueue(boolean value) {
      *
      *
      * <pre>
-     * True when unexpected processes in the scheduler run queue are present. Such
+     * True if unexpected processes in the scheduler run queue are present. Such
      * processes are in the run queue, but not in the process task list.
      * </pre>
      *
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkitOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkitOrBuilder.java
index 9ac7f9348223..5fda6ea17734 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkitOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KernelRootkitOrBuilder.java
@@ -27,7 +27,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * Rootkit name when available.
+   * Rootkit name, when available.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -39,7 +39,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * Rootkit name when available.
+   * Rootkit name, when available.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -52,7 +52,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when unexpected modifications of kernel code memory are present.
+   * True if unexpected modifications of kernel code memory are present.
    * </pre>
    *
    * <code>bool unexpected_code_modification = 2;</code>
@@ -65,7 +65,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when unexpected modifications of kernel read-only data memory are
+   * True if unexpected modifications of kernel read-only data memory are
    * present.
    * </pre>
    *
@@ -79,7 +79,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when `ftrace` points are present with callbacks pointing to regions
+   * True if `ftrace` points are present with callbacks pointing to regions
    * that are not in the expected kernel or module code range.
    * </pre>
    *
@@ -93,7 +93,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when `kprobe` points are present with callbacks pointing to regions
+   * True if `kprobe` points are present with callbacks pointing to regions
    * that are not in the expected kernel or module code range.
    * </pre>
    *
@@ -107,7 +107,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when kernel code pages that are not in the expected kernel or module
+   * True if kernel code pages that are not in the expected kernel or module
    * code regions are present.
    * </pre>
    *
@@ -121,7 +121,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when system call handlers that are are not in the expected kernel or
+   * True if system call handlers that are are not in the expected kernel or
    * module code regions are present.
    * </pre>
    *
@@ -135,7 +135,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when interrupt handlers that are are not in the expected kernel or
+   * True if interrupt handlers that are are not in the expected kernel or
    * module code regions are present.
    * </pre>
    *
@@ -149,7 +149,7 @@ public interface KernelRootkitOrBuilder
    *
    *
    * <pre>
-   * True when unexpected processes in the scheduler run queue are present. Such
+   * True if unexpected processes in the scheduler run queue are present. Such
    * processes are in the run queue, but not in the process task list.
    * </pre>
    *
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Kubernetes.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Kubernetes.java
index 9a7e886cf6f4..75e74c6ae683 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Kubernetes.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Kubernetes.java
@@ -235,7 +235,7 @@ public interface PodOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Pod.
+   * A Kubernetes Pod.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.Pod}
@@ -722,7 +722,7 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * Kubernetes Pod.
+     * A Kubernetes Pod.
      * </pre>
      *
      * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.Pod}
@@ -2040,8 +2040,8 @@ public interface NodeOrBuilder
      *
      *
      * <pre>
-     * Full Resource name of the Compute Engine VM running the
-     * cluster node.
+     * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the Compute Engine VM running the cluster node.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2053,8 +2053,8 @@ public interface NodeOrBuilder
      *
      *
      * <pre>
-     * Full Resource name of the Compute Engine VM running the
-     * cluster node.
+     * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the Compute Engine VM running the cluster node.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2067,7 +2067,7 @@ public interface NodeOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Nodes associated with the finding.
+   * Kubernetes nodes associated with the finding.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.Node}
@@ -2115,8 +2115,8 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Full Resource name of the Compute Engine VM running the
-     * cluster node.
+     * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the Compute Engine VM running the cluster node.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2139,8 +2139,8 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Full Resource name of the Compute Engine VM running the
-     * cluster node.
+     * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+     * the Compute Engine VM running the cluster node.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2324,7 +2324,7 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * Kubernetes Nodes associated with the finding.
+     * Kubernetes nodes associated with the finding.
      * </pre>
      *
      * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.Node}
@@ -2511,8 +2511,8 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Full Resource name of the Compute Engine VM running the
-       * cluster node.
+       * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+       * the Compute Engine VM running the cluster node.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -2534,8 +2534,8 @@ public java.lang.String getName() {
        *
        *
        * <pre>
-       * Full Resource name of the Compute Engine VM running the
-       * cluster node.
+       * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+       * the Compute Engine VM running the cluster node.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -2557,8 +2557,8 @@ public com.google.protobuf.ByteString getNameBytes() {
        *
        *
        * <pre>
-       * Full Resource name of the Compute Engine VM running the
-       * cluster node.
+       * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+       * the Compute Engine VM running the cluster node.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -2579,8 +2579,8 @@ public Builder setName(java.lang.String value) {
        *
        *
        * <pre>
-       * Full Resource name of the Compute Engine VM running the
-       * cluster node.
+       * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+       * the Compute Engine VM running the cluster node.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -2597,8 +2597,8 @@ public Builder clearName() {
        *
        *
        * <pre>
-       * Full Resource name of the Compute Engine VM running the
-       * cluster node.
+       * [Full resource name](https://google.aip.dev/122#full-resource-names) of
+       * the Compute Engine VM running the cluster node.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -2690,7 +2690,7 @@ public interface NodePoolOrBuilder
      *
      *
      * <pre>
-     * Kubernetes Node pool name.
+     * Kubernetes node pool name.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2702,7 +2702,7 @@ public interface NodePoolOrBuilder
      *
      *
      * <pre>
-     * Kubernetes Node pool name.
+     * Kubernetes node pool name.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2767,7 +2767,7 @@ public interface NodePoolOrBuilder
    *
    *
    * <pre>
-   * Provides GKE Node Pool information.
+   * Provides GKE node pool information.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.NodePool}
@@ -2816,7 +2816,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Kubernetes Node pool name.
+     * Kubernetes node pool name.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -2839,7 +2839,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Kubernetes Node pool name.
+     * Kubernetes node pool name.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -3107,7 +3107,7 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * Provides GKE Node Pool information.
+     * Provides GKE node pool information.
      * </pre>
      *
      * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.NodePool}
@@ -3356,7 +3356,7 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Kubernetes Node pool name.
+       * Kubernetes node pool name.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -3378,7 +3378,7 @@ public java.lang.String getName() {
        *
        *
        * <pre>
-       * Kubernetes Node pool name.
+       * Kubernetes node pool name.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -3400,7 +3400,7 @@ public com.google.protobuf.ByteString getNameBytes() {
        *
        *
        * <pre>
-       * Kubernetes Node pool name.
+       * Kubernetes node pool name.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -3421,7 +3421,7 @@ public Builder setName(java.lang.String value) {
        *
        *
        * <pre>
-       * Kubernetes Node pool name.
+       * Kubernetes node pool name.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -3438,7 +3438,7 @@ public Builder clearName() {
        *
        *
        * <pre>
-       * Kubernetes Node pool name.
+       * Kubernetes node pool name.
        * </pre>
        *
        * <code>string name = 1;</code>
@@ -5069,7 +5069,7 @@ public interface BindingOrBuilder
      *
      *
      * <pre>
-     * Namespace for binding.
+     * Namespace for the binding.
      * </pre>
      *
      * <code>string ns = 1;</code>
@@ -5081,7 +5081,7 @@ public interface BindingOrBuilder
      *
      *
      * <pre>
-     * Namespace for binding.
+     * Namespace for the binding.
      * </pre>
      *
      * <code>string ns = 1;</code>
@@ -5094,7 +5094,7 @@ public interface BindingOrBuilder
      *
      *
      * <pre>
-     * Name for binding.
+     * Name for the binding.
      * </pre>
      *
      * <code>string name = 2;</code>
@@ -5106,7 +5106,7 @@ public interface BindingOrBuilder
      *
      *
      * <pre>
-     * Name for binding.
+     * Name for the binding.
      * </pre>
      *
      * <code>string name = 2;</code>
@@ -5261,7 +5261,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Namespace for binding.
+     * Namespace for the binding.
      * </pre>
      *
      * <code>string ns = 1;</code>
@@ -5284,7 +5284,7 @@ public java.lang.String getNs() {
      *
      *
      * <pre>
-     * Namespace for binding.
+     * Namespace for the binding.
      * </pre>
      *
      * <code>string ns = 1;</code>
@@ -5312,7 +5312,7 @@ public com.google.protobuf.ByteString getNsBytes() {
      *
      *
      * <pre>
-     * Name for binding.
+     * Name for the binding.
      * </pre>
      *
      * <code>string name = 2;</code>
@@ -5335,7 +5335,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Name for binding.
+     * Name for the binding.
      * </pre>
      *
      * <code>string name = 2;</code>
@@ -5962,7 +5962,7 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Namespace for binding.
+       * Namespace for the binding.
        * </pre>
        *
        * <code>string ns = 1;</code>
@@ -5984,7 +5984,7 @@ public java.lang.String getNs() {
        *
        *
        * <pre>
-       * Namespace for binding.
+       * Namespace for the binding.
        * </pre>
        *
        * <code>string ns = 1;</code>
@@ -6006,7 +6006,7 @@ public com.google.protobuf.ByteString getNsBytes() {
        *
        *
        * <pre>
-       * Namespace for binding.
+       * Namespace for the binding.
        * </pre>
        *
        * <code>string ns = 1;</code>
@@ -6027,7 +6027,7 @@ public Builder setNs(java.lang.String value) {
        *
        *
        * <pre>
-       * Namespace for binding.
+       * Namespace for the binding.
        * </pre>
        *
        * <code>string ns = 1;</code>
@@ -6044,7 +6044,7 @@ public Builder clearNs() {
        *
        *
        * <pre>
-       * Namespace for binding.
+       * Namespace for the binding.
        * </pre>
        *
        * <code>string ns = 1;</code>
@@ -6068,7 +6068,7 @@ public Builder setNsBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Name for binding.
+       * Name for the binding.
        * </pre>
        *
        * <code>string name = 2;</code>
@@ -6090,7 +6090,7 @@ public java.lang.String getName() {
        *
        *
        * <pre>
-       * Name for binding.
+       * Name for the binding.
        * </pre>
        *
        * <code>string name = 2;</code>
@@ -6112,7 +6112,7 @@ public com.google.protobuf.ByteString getNameBytes() {
        *
        *
        * <pre>
-       * Name for binding.
+       * Name for the binding.
        * </pre>
        *
        * <code>string name = 2;</code>
@@ -6133,7 +6133,7 @@ public Builder setName(java.lang.String value) {
        *
        *
        * <pre>
-       * Name for binding.
+       * Name for the binding.
        * </pre>
        *
        * <code>string name = 2;</code>
@@ -6150,7 +6150,7 @@ public Builder clearName() {
        *
        *
        * <pre>
-       * Name for binding.
+       * Name for the binding.
        * </pre>
        *
        * <code>string name = 2;</code>
@@ -6807,7 +6807,7 @@ public interface SubjectOrBuilder
      *
      *
      * <pre>
-     * Authentication type for subject.
+     * Authentication type for the subject.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -6819,7 +6819,7 @@ public interface SubjectOrBuilder
      *
      *
      * <pre>
-     * Authentication type for subject.
+     * Authentication type for the subject.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -6832,7 +6832,7 @@ public interface SubjectOrBuilder
      *
      *
      * <pre>
-     * Namespace for subject.
+     * Namespace for the subject.
      * </pre>
      *
      * <code>string ns = 2;</code>
@@ -6844,7 +6844,7 @@ public interface SubjectOrBuilder
      *
      *
      * <pre>
-     * Namespace for subject.
+     * Namespace for the subject.
      * </pre>
      *
      * <code>string ns = 2;</code>
@@ -6857,7 +6857,7 @@ public interface SubjectOrBuilder
      *
      *
      * <pre>
-     * Name for subject.
+     * Name for the subject.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -6869,7 +6869,7 @@ public interface SubjectOrBuilder
      *
      *
      * <pre>
-     * Name for subject.
+     * Name for the subject.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -6882,7 +6882,7 @@ public interface SubjectOrBuilder
    *
    *
    * <pre>
-   * Represents a Kubernetes Subject.
+   * Represents a Kubernetes subject.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.Subject}
@@ -6928,7 +6928,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Auth types that can be used for Subject's kind field.
+     * Auth types that can be used for the subject's kind field.
      * </pre>
      *
      * Protobuf enum {@code google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType}
@@ -6958,7 +6958,7 @@ public enum AuthType implements com.google.protobuf.ProtocolMessageEnum {
        *
        *
        * <pre>
-       * Users managed by Kubernetes API with credentials stored as Secrets.
+       * Users managed by Kubernetes API with credentials stored as secrets.
        * </pre>
        *
        * <code>SERVICEACCOUNT = 2;</code>
@@ -7001,7 +7001,7 @@ public enum AuthType implements com.google.protobuf.ProtocolMessageEnum {
        *
        *
        * <pre>
-       * Users managed by Kubernetes API with credentials stored as Secrets.
+       * Users managed by Kubernetes API with credentials stored as secrets.
        * </pre>
        *
        * <code>SERVICEACCOUNT = 2;</code>
@@ -7111,7 +7111,7 @@ private AuthType(int value) {
      *
      *
      * <pre>
-     * Authentication type for subject.
+     * Authentication type for the subject.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7126,7 +7126,7 @@ public int getKindValue() {
      *
      *
      * <pre>
-     * Authentication type for subject.
+     * Authentication type for the subject.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7150,7 +7150,7 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType getKind()
      *
      *
      * <pre>
-     * Namespace for subject.
+     * Namespace for the subject.
      * </pre>
      *
      * <code>string ns = 2;</code>
@@ -7173,7 +7173,7 @@ public java.lang.String getNs() {
      *
      *
      * <pre>
-     * Namespace for subject.
+     * Namespace for the subject.
      * </pre>
      *
      * <code>string ns = 2;</code>
@@ -7201,7 +7201,7 @@ public com.google.protobuf.ByteString getNsBytes() {
      *
      *
      * <pre>
-     * Name for subject.
+     * Name for the subject.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -7224,7 +7224,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Name for subject.
+     * Name for the subject.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -7431,7 +7431,7 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * Represents a Kubernetes Subject.
+     * Represents a Kubernetes subject.
      * </pre>
      *
      * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.Subject}
@@ -7646,7 +7646,7 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Authentication type for subject.
+       * Authentication type for the subject.
        * </pre>
        *
        * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7661,7 +7661,7 @@ public int getKindValue() {
        *
        *
        * <pre>
-       * Authentication type for subject.
+       * Authentication type for the subject.
        * </pre>
        *
        * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7679,7 +7679,7 @@ public Builder setKindValue(int value) {
        *
        *
        * <pre>
-       * Authentication type for subject.
+       * Authentication type for the subject.
        * </pre>
        *
        * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7698,7 +7698,7 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType getKind()
        *
        *
        * <pre>
-       * Authentication type for subject.
+       * Authentication type for the subject.
        * </pre>
        *
        * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7719,7 +7719,7 @@ public Builder setKind(com.google.cloud.securitycenter.v1.Kubernetes.Subject.Aut
        *
        *
        * <pre>
-       * Authentication type for subject.
+       * Authentication type for the subject.
        * </pre>
        *
        * <code>.google.cloud.securitycenter.v1.Kubernetes.Subject.AuthType kind = 1;</code>
@@ -7738,7 +7738,7 @@ public Builder clearKind() {
        *
        *
        * <pre>
-       * Namespace for subject.
+       * Namespace for the subject.
        * </pre>
        *
        * <code>string ns = 2;</code>
@@ -7760,7 +7760,7 @@ public java.lang.String getNs() {
        *
        *
        * <pre>
-       * Namespace for subject.
+       * Namespace for the subject.
        * </pre>
        *
        * <code>string ns = 2;</code>
@@ -7782,7 +7782,7 @@ public com.google.protobuf.ByteString getNsBytes() {
        *
        *
        * <pre>
-       * Namespace for subject.
+       * Namespace for the subject.
        * </pre>
        *
        * <code>string ns = 2;</code>
@@ -7803,7 +7803,7 @@ public Builder setNs(java.lang.String value) {
        *
        *
        * <pre>
-       * Namespace for subject.
+       * Namespace for the subject.
        * </pre>
        *
        * <code>string ns = 2;</code>
@@ -7820,7 +7820,7 @@ public Builder clearNs() {
        *
        *
        * <pre>
-       * Namespace for subject.
+       * Namespace for the subject.
        * </pre>
        *
        * <code>string ns = 2;</code>
@@ -7844,7 +7844,7 @@ public Builder setNsBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Name for subject.
+       * Name for the subject.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -7866,7 +7866,7 @@ public java.lang.String getName() {
        *
        *
        * <pre>
-       * Name for subject.
+       * Name for the subject.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -7888,7 +7888,7 @@ public com.google.protobuf.ByteString getNameBytes() {
        *
        *
        * <pre>
-       * Name for subject.
+       * Name for the subject.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -7909,7 +7909,7 @@ public Builder setName(java.lang.String value) {
        *
        *
        * <pre>
-       * Name for subject.
+       * Name for the subject.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -7926,7 +7926,7 @@ public Builder clearName() {
        *
        *
        * <pre>
-       * Name for subject.
+       * Name for the subject.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -8018,7 +8018,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Group is the API Group of the Resource. "*" means all.
+     * The API group of the resource. "*" means all.
      * </pre>
      *
      * <code>string group = 1;</code>
@@ -8030,7 +8030,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Group is the API Group of the Resource. "*" means all.
+     * The API group of the resource. "*" means all.
      * </pre>
      *
      * <code>string group = 1;</code>
@@ -8072,7 +8072,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Name is the name of the resource being requested. Empty means all.
+     * The name of the resource being requested. Empty means all.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -8084,7 +8084,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Name is the name of the resource being requested. Empty means all.
+     * The name of the resource being requested. Empty means all.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -8097,7 +8097,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Resource is the optional resource type requested. "*" means all.
+     * The optional resource type requested. "*" means all.
      * </pre>
      *
      * <code>string resource = 4;</code>
@@ -8109,7 +8109,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Resource is the optional resource type requested. "*" means all.
+     * The optional resource type requested. "*" means all.
      * </pre>
      *
      * <code>string resource = 4;</code>
@@ -8122,7 +8122,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Subresource is the optional subresource type.
+     * The optional subresource type.
      * </pre>
      *
      * <code>string subresource = 5;</code>
@@ -8134,7 +8134,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Subresource is the optional subresource type.
+     * The optional subresource type.
      * </pre>
      *
      * <code>string subresource = 5;</code>
@@ -8147,8 +8147,8 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-     * update, delete, proxy. "*" means all.
+     * A Kubernetes resource API verb, like get, list, watch, create, update,
+     * delete, proxy. "*" means all.
      * </pre>
      *
      * <code>string verb = 6;</code>
@@ -8160,8 +8160,8 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-     * update, delete, proxy. "*" means all.
+     * A Kubernetes resource API verb, like get, list, watch, create, update,
+     * delete, proxy. "*" means all.
      * </pre>
      *
      * <code>string verb = 6;</code>
@@ -8174,7 +8174,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Version is the API Version of the Resource. "*" means all.
+     * The API version of the resource. "*" means all.
      * </pre>
      *
      * <code>string version = 7;</code>
@@ -8186,7 +8186,7 @@ public interface AccessReviewOrBuilder
      *
      *
      * <pre>
-     * Version is the API Version of the Resource. "*" means all.
+     * The API version of the resource. "*" means all.
      * </pre>
      *
      * <code>string version = 7;</code>
@@ -8199,8 +8199,10 @@ public interface AccessReviewOrBuilder
    *
    *
    * <pre>
-   * Conveys information about a Kubernetes access review (e.g. kubectl auth
-   * can-i ...) that was involved in a finding.
+   * Conveys information about a Kubernetes access review (such as one returned
+   * by a [`kubectl auth
+   * can-i`](https://kubernetes.io/docs/reference/access-authn-authz/authorization/#checking-api-access)
+   * command) that was involved in a finding.
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.AccessReview}
@@ -8254,7 +8256,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Group is the API Group of the Resource. "*" means all.
+     * The API group of the resource. "*" means all.
      * </pre>
      *
      * <code>string group = 1;</code>
@@ -8277,7 +8279,7 @@ public java.lang.String getGroup() {
      *
      *
      * <pre>
-     * Group is the API Group of the Resource. "*" means all.
+     * The API group of the resource. "*" means all.
      * </pre>
      *
      * <code>string group = 1;</code>
@@ -8360,7 +8362,7 @@ public com.google.protobuf.ByteString getNsBytes() {
      *
      *
      * <pre>
-     * Name is the name of the resource being requested. Empty means all.
+     * The name of the resource being requested. Empty means all.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -8383,7 +8385,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Name is the name of the resource being requested. Empty means all.
+     * The name of the resource being requested. Empty means all.
      * </pre>
      *
      * <code>string name = 3;</code>
@@ -8411,7 +8413,7 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Resource is the optional resource type requested. "*" means all.
+     * The optional resource type requested. "*" means all.
      * </pre>
      *
      * <code>string resource = 4;</code>
@@ -8434,7 +8436,7 @@ public java.lang.String getResource() {
      *
      *
      * <pre>
-     * Resource is the optional resource type requested. "*" means all.
+     * The optional resource type requested. "*" means all.
      * </pre>
      *
      * <code>string resource = 4;</code>
@@ -8462,7 +8464,7 @@ public com.google.protobuf.ByteString getResourceBytes() {
      *
      *
      * <pre>
-     * Subresource is the optional subresource type.
+     * The optional subresource type.
      * </pre>
      *
      * <code>string subresource = 5;</code>
@@ -8485,7 +8487,7 @@ public java.lang.String getSubresource() {
      *
      *
      * <pre>
-     * Subresource is the optional subresource type.
+     * The optional subresource type.
      * </pre>
      *
      * <code>string subresource = 5;</code>
@@ -8513,8 +8515,8 @@ public com.google.protobuf.ByteString getSubresourceBytes() {
      *
      *
      * <pre>
-     * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-     * update, delete, proxy. "*" means all.
+     * A Kubernetes resource API verb, like get, list, watch, create, update,
+     * delete, proxy. "*" means all.
      * </pre>
      *
      * <code>string verb = 6;</code>
@@ -8537,8 +8539,8 @@ public java.lang.String getVerb() {
      *
      *
      * <pre>
-     * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-     * update, delete, proxy. "*" means all.
+     * A Kubernetes resource API verb, like get, list, watch, create, update,
+     * delete, proxy. "*" means all.
      * </pre>
      *
      * <code>string verb = 6;</code>
@@ -8566,7 +8568,7 @@ public com.google.protobuf.ByteString getVerbBytes() {
      *
      *
      * <pre>
-     * Version is the API Version of the Resource. "*" means all.
+     * The API version of the resource. "*" means all.
      * </pre>
      *
      * <code>string version = 7;</code>
@@ -8589,7 +8591,7 @@ public java.lang.String getVersion() {
      *
      *
      * <pre>
-     * Version is the API Version of the Resource. "*" means all.
+     * The API version of the resource. "*" means all.
      * </pre>
      *
      * <code>string version = 7;</code>
@@ -8828,8 +8830,10 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * Conveys information about a Kubernetes access review (e.g. kubectl auth
-     * can-i ...) that was involved in a finding.
+     * Conveys information about a Kubernetes access review (such as one returned
+     * by a [`kubectl auth
+     * can-i`](https://kubernetes.io/docs/reference/access-authn-authz/authorization/#checking-api-access)
+     * command) that was involved in a finding.
      * </pre>
      *
      * Protobuf type {@code google.cloud.securitycenter.v1.Kubernetes.AccessReview}
@@ -9109,7 +9113,7 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Group is the API Group of the Resource. "*" means all.
+       * The API group of the resource. "*" means all.
        * </pre>
        *
        * <code>string group = 1;</code>
@@ -9131,7 +9135,7 @@ public java.lang.String getGroup() {
        *
        *
        * <pre>
-       * Group is the API Group of the Resource. "*" means all.
+       * The API group of the resource. "*" means all.
        * </pre>
        *
        * <code>string group = 1;</code>
@@ -9153,7 +9157,7 @@ public com.google.protobuf.ByteString getGroupBytes() {
        *
        *
        * <pre>
-       * Group is the API Group of the Resource. "*" means all.
+       * The API group of the resource. "*" means all.
        * </pre>
        *
        * <code>string group = 1;</code>
@@ -9174,7 +9178,7 @@ public Builder setGroup(java.lang.String value) {
        *
        *
        * <pre>
-       * Group is the API Group of the Resource. "*" means all.
+       * The API group of the resource. "*" means all.
        * </pre>
        *
        * <code>string group = 1;</code>
@@ -9191,7 +9195,7 @@ public Builder clearGroup() {
        *
        *
        * <pre>
-       * Group is the API Group of the Resource. "*" means all.
+       * The API group of the resource. "*" means all.
        * </pre>
        *
        * <code>string group = 1;</code>
@@ -9331,7 +9335,7 @@ public Builder setNsBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Name is the name of the resource being requested. Empty means all.
+       * The name of the resource being requested. Empty means all.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -9353,7 +9357,7 @@ public java.lang.String getName() {
        *
        *
        * <pre>
-       * Name is the name of the resource being requested. Empty means all.
+       * The name of the resource being requested. Empty means all.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -9375,7 +9379,7 @@ public com.google.protobuf.ByteString getNameBytes() {
        *
        *
        * <pre>
-       * Name is the name of the resource being requested. Empty means all.
+       * The name of the resource being requested. Empty means all.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -9396,7 +9400,7 @@ public Builder setName(java.lang.String value) {
        *
        *
        * <pre>
-       * Name is the name of the resource being requested. Empty means all.
+       * The name of the resource being requested. Empty means all.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -9413,7 +9417,7 @@ public Builder clearName() {
        *
        *
        * <pre>
-       * Name is the name of the resource being requested. Empty means all.
+       * The name of the resource being requested. Empty means all.
        * </pre>
        *
        * <code>string name = 3;</code>
@@ -9437,7 +9441,7 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Resource is the optional resource type requested. "*" means all.
+       * The optional resource type requested. "*" means all.
        * </pre>
        *
        * <code>string resource = 4;</code>
@@ -9459,7 +9463,7 @@ public java.lang.String getResource() {
        *
        *
        * <pre>
-       * Resource is the optional resource type requested. "*" means all.
+       * The optional resource type requested. "*" means all.
        * </pre>
        *
        * <code>string resource = 4;</code>
@@ -9481,7 +9485,7 @@ public com.google.protobuf.ByteString getResourceBytes() {
        *
        *
        * <pre>
-       * Resource is the optional resource type requested. "*" means all.
+       * The optional resource type requested. "*" means all.
        * </pre>
        *
        * <code>string resource = 4;</code>
@@ -9502,7 +9506,7 @@ public Builder setResource(java.lang.String value) {
        *
        *
        * <pre>
-       * Resource is the optional resource type requested. "*" means all.
+       * The optional resource type requested. "*" means all.
        * </pre>
        *
        * <code>string resource = 4;</code>
@@ -9519,7 +9523,7 @@ public Builder clearResource() {
        *
        *
        * <pre>
-       * Resource is the optional resource type requested. "*" means all.
+       * The optional resource type requested. "*" means all.
        * </pre>
        *
        * <code>string resource = 4;</code>
@@ -9543,7 +9547,7 @@ public Builder setResourceBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Subresource is the optional subresource type.
+       * The optional subresource type.
        * </pre>
        *
        * <code>string subresource = 5;</code>
@@ -9565,7 +9569,7 @@ public java.lang.String getSubresource() {
        *
        *
        * <pre>
-       * Subresource is the optional subresource type.
+       * The optional subresource type.
        * </pre>
        *
        * <code>string subresource = 5;</code>
@@ -9587,7 +9591,7 @@ public com.google.protobuf.ByteString getSubresourceBytes() {
        *
        *
        * <pre>
-       * Subresource is the optional subresource type.
+       * The optional subresource type.
        * </pre>
        *
        * <code>string subresource = 5;</code>
@@ -9608,7 +9612,7 @@ public Builder setSubresource(java.lang.String value) {
        *
        *
        * <pre>
-       * Subresource is the optional subresource type.
+       * The optional subresource type.
        * </pre>
        *
        * <code>string subresource = 5;</code>
@@ -9625,7 +9629,7 @@ public Builder clearSubresource() {
        *
        *
        * <pre>
-       * Subresource is the optional subresource type.
+       * The optional subresource type.
        * </pre>
        *
        * <code>string subresource = 5;</code>
@@ -9649,8 +9653,8 @@ public Builder setSubresourceBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-       * update, delete, proxy. "*" means all.
+       * A Kubernetes resource API verb, like get, list, watch, create, update,
+       * delete, proxy. "*" means all.
        * </pre>
        *
        * <code>string verb = 6;</code>
@@ -9672,8 +9676,8 @@ public java.lang.String getVerb() {
        *
        *
        * <pre>
-       * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-       * update, delete, proxy. "*" means all.
+       * A Kubernetes resource API verb, like get, list, watch, create, update,
+       * delete, proxy. "*" means all.
        * </pre>
        *
        * <code>string verb = 6;</code>
@@ -9695,8 +9699,8 @@ public com.google.protobuf.ByteString getVerbBytes() {
        *
        *
        * <pre>
-       * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-       * update, delete, proxy. "*" means all.
+       * A Kubernetes resource API verb, like get, list, watch, create, update,
+       * delete, proxy. "*" means all.
        * </pre>
        *
        * <code>string verb = 6;</code>
@@ -9717,8 +9721,8 @@ public Builder setVerb(java.lang.String value) {
        *
        *
        * <pre>
-       * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-       * update, delete, proxy. "*" means all.
+       * A Kubernetes resource API verb, like get, list, watch, create, update,
+       * delete, proxy. "*" means all.
        * </pre>
        *
        * <code>string verb = 6;</code>
@@ -9735,8 +9739,8 @@ public Builder clearVerb() {
        *
        *
        * <pre>
-       * Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-       * update, delete, proxy. "*" means all.
+       * A Kubernetes resource API verb, like get, list, watch, create, update,
+       * delete, proxy. "*" means all.
        * </pre>
        *
        * <code>string verb = 6;</code>
@@ -9760,7 +9764,7 @@ public Builder setVerbBytes(com.google.protobuf.ByteString value) {
        *
        *
        * <pre>
-       * Version is the API Version of the Resource. "*" means all.
+       * The API version of the resource. "*" means all.
        * </pre>
        *
        * <code>string version = 7;</code>
@@ -9782,7 +9786,7 @@ public java.lang.String getVersion() {
        *
        *
        * <pre>
-       * Version is the API Version of the Resource. "*" means all.
+       * The API version of the resource. "*" means all.
        * </pre>
        *
        * <code>string version = 7;</code>
@@ -9804,7 +9808,7 @@ public com.google.protobuf.ByteString getVersionBytes() {
        *
        *
        * <pre>
-       * Version is the API Version of the Resource. "*" means all.
+       * The API version of the resource. "*" means all.
        * </pre>
        *
        * <code>string version = 7;</code>
@@ -9825,7 +9829,7 @@ public Builder setVersion(java.lang.String value) {
        *
        *
        * <pre>
-       * Version is the API Version of the Resource. "*" means all.
+       * The API version of the resource. "*" means all.
        * </pre>
        *
        * <code>string version = 7;</code>
@@ -9842,7 +9846,7 @@ public Builder clearVersion() {
        *
        *
        * <pre>
-       * Version is the API Version of the Resource. "*" means all.
+       * The API version of the resource. "*" means all.
        * </pre>
        *
        * <code>string version = 7;</code>
@@ -9934,8 +9938,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.AccessReview getDefaultInst
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -9948,8 +9954,10 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Pod> getPods
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -9963,8 +9971,10 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Pod> getPods
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -9977,8 +9987,10 @@ public int getPodsCount() {
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -9991,8 +10003,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Pod getPods(int index) {
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -10010,7 +10024,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.PodOrBuilder getPodsOrBuild
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -10023,7 +10039,9 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Node> getNod
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -10037,7 +10055,9 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Node> getNod
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -10050,7 +10070,9 @@ public int getNodesCount() {
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -10063,7 +10085,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Node getNodes(int index) {
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -10081,8 +10105,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodeOrBuilder getNodesOrBui
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -10095,8 +10121,10 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.NodePool> ge
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -10110,8 +10138,10 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.NodePool> ge
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -10124,8 +10154,10 @@ public int getNodePoolsCount() {
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -10138,8 +10170,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePool getNodePools(int i
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -10158,8 +10192,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePoolOrBuilder getNodePo
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -10172,8 +10206,8 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Role> getRol
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -10187,8 +10221,8 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Role> getRol
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -10201,8 +10235,8 @@ public int getRolesCount() {
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -10215,8 +10249,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Role getRoles(int index) {
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -10235,7 +10269,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.RoleOrBuilder getRolesOrBui
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -10249,7 +10284,8 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Binding> get
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -10264,7 +10300,8 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Binding> get
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -10278,7 +10315,8 @@ public int getBindingsCount() {
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -10292,7 +10330,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Binding getBindings(int ind
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -10311,8 +10350,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.BindingOrBuilder getBinding
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -10327,8 +10366,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.BindingOrBuilder getBinding
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -10344,8 +10383,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.BindingOrBuilder getBinding
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -10359,8 +10398,8 @@ public int getAccessReviewsCount() {
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -10374,8 +10413,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.AccessReview getAccessRevie
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -11136,8 +11175,10 @@ private void ensurePodsIsMutable() {
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11153,8 +11194,10 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Pod> getPods
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11170,8 +11213,10 @@ public int getPodsCount() {
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11187,8 +11232,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Pod getPods(int index) {
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11210,8 +11257,10 @@ public Builder setPods(int index, com.google.cloud.securitycenter.v1.Kubernetes.
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11231,8 +11280,10 @@ public Builder setPods(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11254,8 +11305,10 @@ public Builder addPods(com.google.cloud.securitycenter.v1.Kubernetes.Pod value)
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11277,8 +11330,10 @@ public Builder addPods(int index, com.google.cloud.securitycenter.v1.Kubernetes.
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11298,8 +11353,10 @@ public Builder addPods(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11319,8 +11376,10 @@ public Builder addPods(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11340,8 +11399,10 @@ public Builder addAllPods(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11360,8 +11421,10 @@ public Builder clearPods() {
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11380,8 +11443,10 @@ public Builder removePods(int index) {
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11393,8 +11458,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Pod.Builder getPodsBuilder(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11410,8 +11477,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.PodOrBuilder getPodsOrBuild
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11428,8 +11497,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.PodOrBuilder getPodsOrBuild
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11442,8 +11513,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Pod.Builder addPodsBuilder(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11457,8 +11530,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Pod.Builder addPodsBuilder(
      *
      *
      * <pre>
-     * Kubernetes Pods associated with the finding. This field will contain Pod
-     * records for each container that is owned by a Pod.
+     * Kubernetes
+     * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+     * associated with the finding. This field contains Pod records for each
+     * container that is owned by a Pod.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -11506,7 +11581,9 @@ private void ensureNodesIsMutable() {
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11522,7 +11599,9 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Node> getNod
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11538,7 +11617,9 @@ public int getNodesCount() {
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11554,7 +11635,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Node getNodes(int index) {
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11576,7 +11659,9 @@ public Builder setNodes(int index, com.google.cloud.securitycenter.v1.Kubernetes
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11596,7 +11681,9 @@ public Builder setNodes(
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11618,7 +11705,9 @@ public Builder addNodes(com.google.cloud.securitycenter.v1.Kubernetes.Node value
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11640,7 +11729,9 @@ public Builder addNodes(int index, com.google.cloud.securitycenter.v1.Kubernetes
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11660,7 +11751,9 @@ public Builder addNodes(
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11680,7 +11773,9 @@ public Builder addNodes(
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11700,7 +11795,9 @@ public Builder addAllNodes(
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11719,7 +11816,9 @@ public Builder clearNodes() {
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11738,7 +11837,9 @@ public Builder removeNodes(int index) {
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11750,7 +11851,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Node.Builder getNodesBuilde
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11767,7 +11870,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodeOrBuilder getNodesOrBui
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11784,7 +11889,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodeOrBuilder getNodesOrBui
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11797,7 +11904,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Node.Builder addNodesBuilde
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11811,7 +11920,9 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Node.Builder addNodesBuilde
      *
      *
      * <pre>
-     * Provides Kubernetes Node information.
+     * Provides Kubernetes
+     * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+     * information.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -11860,8 +11971,10 @@ private void ensureNodePoolsIsMutable() {
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -11878,8 +11991,10 @@ private void ensureNodePoolsIsMutable() {
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -11895,8 +12010,10 @@ public int getNodePoolsCount() {
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -11912,8 +12029,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePool getNodePools(int i
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -11936,8 +12055,10 @@ public Builder setNodePools(
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -11957,8 +12078,10 @@ public Builder setNodePools(
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -11980,8 +12103,10 @@ public Builder addNodePools(com.google.cloud.securitycenter.v1.Kubernetes.NodePo
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12004,8 +12129,10 @@ public Builder addNodePools(
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12025,8 +12152,10 @@ public Builder addNodePools(
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12046,8 +12175,10 @@ public Builder addNodePools(
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12068,8 +12199,10 @@ public Builder addAllNodePools(
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12088,8 +12221,10 @@ public Builder clearNodePools() {
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12108,8 +12243,10 @@ public Builder removeNodePools(int index) {
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12122,8 +12259,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePool.Builder getNodePoo
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12140,8 +12279,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePoolOrBuilder getNodePo
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12158,8 +12299,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePoolOrBuilder getNodePo
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12172,8 +12315,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePool.Builder addNodePoo
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12188,8 +12333,10 @@ public com.google.cloud.securitycenter.v1.Kubernetes.NodePool.Builder addNodePoo
      *
      *
      * <pre>
-     * GKE Node Pools associated with the finding. This field will
-     * contain NodePool information for each Node, when it is available.
+     * GKE [node
+     * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+     * associated with the finding. This field contains node pool information for
+     * each node, when it is available.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -12237,8 +12384,8 @@ private void ensureRolesIsMutable() {
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12254,8 +12401,8 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Role> getRol
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12271,8 +12418,8 @@ public int getRolesCount() {
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12288,8 +12435,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Role getRoles(int index) {
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12311,8 +12458,8 @@ public Builder setRoles(int index, com.google.cloud.securitycenter.v1.Kubernetes
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12332,8 +12479,8 @@ public Builder setRoles(
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12355,8 +12502,8 @@ public Builder addRoles(com.google.cloud.securitycenter.v1.Kubernetes.Role value
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12378,8 +12525,8 @@ public Builder addRoles(int index, com.google.cloud.securitycenter.v1.Kubernetes
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12399,8 +12546,8 @@ public Builder addRoles(
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12420,8 +12567,8 @@ public Builder addRoles(
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12441,8 +12588,8 @@ public Builder addAllRoles(
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12461,8 +12608,8 @@ public Builder clearRoles() {
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12481,8 +12628,8 @@ public Builder removeRoles(int index) {
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12494,8 +12641,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Role.Builder getRolesBuilde
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12512,8 +12659,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.RoleOrBuilder getRolesOrBui
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12530,8 +12677,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.RoleOrBuilder getRolesOrBui
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12544,8 +12691,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Role.Builder addRolesBuilde
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12559,8 +12706,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Role.Builder addRolesBuilde
      *
      *
      * <pre>
-     * Provides Kubernetes role information for findings that involve
-     * Roles or ClusterRoles.
+     * Provides Kubernetes role information for findings that involve [Roles or
+     * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -12610,7 +12757,8 @@ private void ensureBindingsIsMutable() {
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12627,7 +12775,8 @@ public java.util.List<com.google.cloud.securitycenter.v1.Kubernetes.Binding> get
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12644,7 +12793,8 @@ public int getBindingsCount() {
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12661,7 +12811,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Binding getBindings(int ind
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12685,7 +12836,8 @@ public Builder setBindings(
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12706,7 +12858,8 @@ public Builder setBindings(
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12729,7 +12882,8 @@ public Builder addBindings(com.google.cloud.securitycenter.v1.Kubernetes.Binding
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12753,7 +12907,8 @@ public Builder addBindings(
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12774,7 +12929,8 @@ public Builder addBindings(
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12795,7 +12951,8 @@ public Builder addBindings(
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12817,7 +12974,8 @@ public Builder addAllBindings(
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12837,7 +12995,8 @@ public Builder clearBindings() {
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12857,7 +13016,8 @@ public Builder removeBindings(int index) {
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12871,7 +13031,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Binding.Builder getBindings
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12889,7 +13050,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.BindingOrBuilder getBinding
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12907,7 +13069,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.BindingOrBuilder getBinding
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12921,7 +13084,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Binding.Builder addBindings
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12937,7 +13101,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.Binding.Builder addBindings
      *
      * <pre>
      * Provides Kubernetes role binding information for findings that involve
-     * RoleBindings or ClusterRoleBindings.
+     * [RoleBindings or
+     * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -12986,8 +13151,8 @@ private void ensureAccessReviewsIsMutable() {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13005,8 +13170,8 @@ private void ensureAccessReviewsIsMutable() {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13023,8 +13188,8 @@ public int getAccessReviewsCount() {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13041,8 +13206,8 @@ public com.google.cloud.securitycenter.v1.Kubernetes.AccessReview getAccessRevie
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13066,8 +13231,8 @@ public Builder setAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13089,8 +13254,8 @@ public Builder setAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13114,8 +13279,8 @@ public Builder addAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13139,8 +13304,8 @@ public Builder addAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13161,8 +13326,8 @@ public Builder addAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13184,8 +13349,8 @@ public Builder addAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13207,8 +13372,8 @@ public Builder addAllAccessReviews(
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13228,8 +13393,8 @@ public Builder clearAccessReviews() {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13249,8 +13414,8 @@ public Builder removeAccessReviews(int index) {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13264,8 +13429,8 @@ public Builder removeAccessReviews(int index) {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13283,8 +13448,8 @@ public Builder removeAccessReviews(int index) {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13303,8 +13468,8 @@ public Builder removeAccessReviews(int index) {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13320,8 +13485,8 @@ public Builder removeAccessReviews(int index) {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -13338,8 +13503,8 @@ public Builder removeAccessReviews(int index) {
      *
      *
      * <pre>
-     * Provides information on any Kubernetes access reviews (i.e. privilege
-     * checks) relevant to the finding.
+     * Provides information on any Kubernetes access reviews (privilege checks)
+     * relevant to the finding.
      * </pre>
      *
      * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KubernetesOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KubernetesOrBuilder.java
index 4763dda08e91..a9e6e544cd35 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KubernetesOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/KubernetesOrBuilder.java
@@ -27,8 +27,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -38,8 +40,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -49,8 +53,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -60,8 +66,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -72,8 +80,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Kubernetes Pods associated with the finding. This field will contain Pod
-   * records for each container that is owned by a Pod.
+   * Kubernetes
+   * [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+   * associated with the finding. This field contains Pod records for each
+   * container that is owned by a Pod.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Pod pods = 1;</code>
@@ -84,7 +94,9 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -94,7 +106,9 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -104,7 +118,9 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -114,7 +130,9 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -125,7 +143,9 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes Node information.
+   * Provides Kubernetes
+   * [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+   * information.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Node nodes = 2;</code>
@@ -136,8 +156,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -147,8 +169,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -158,8 +182,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -169,8 +195,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -181,8 +209,10 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * GKE Node Pools associated with the finding. This field will
-   * contain NodePool information for each Node, when it is available.
+   * GKE [node
+   * pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+   * associated with the finding. This field contains node pool information for
+   * each node, when it is available.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.NodePool node_pools = 3;</code>
@@ -193,8 +223,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -204,8 +234,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -215,8 +245,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -226,8 +256,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -238,8 +268,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides Kubernetes role information for findings that involve
-   * Roles or ClusterRoles.
+   * Provides Kubernetes role information for findings that involve [Roles or
+   * ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Role roles = 4;</code>
@@ -251,7 +281,8 @@ public interface KubernetesOrBuilder
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -262,7 +293,8 @@ public interface KubernetesOrBuilder
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -273,7 +305,8 @@ public interface KubernetesOrBuilder
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -284,7 +317,8 @@ public interface KubernetesOrBuilder
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -296,7 +330,8 @@ public interface KubernetesOrBuilder
    *
    * <pre>
    * Provides Kubernetes role binding information for findings that involve
-   * RoleBindings or ClusterRoleBindings.
+   * [RoleBindings or
+   * ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.Binding bindings = 5;</code>
@@ -307,8 +342,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -319,8 +354,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -331,8 +366,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -343,8 +378,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
@@ -356,8 +391,8 @@ public interface KubernetesOrBuilder
    *
    *
    * <pre>
-   * Provides information on any Kubernetes access reviews (i.e. privilege
-   * checks) relevant to the finding.
+   * Provides information on any Kubernetes access reviews (privilege checks)
+   * relevant to the finding.
    * </pre>
    *
    * <code>repeated .google.cloud.securitycenter.v1.Kubernetes.AccessReview access_reviews = 6;
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Label.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Label.java
index 4665b54e5b0f..8563ad6a49dc 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Label.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Label.java
@@ -22,8 +22,10 @@
  *
  *
  * <pre>
- * Label represents a generic name=value label. Label has separate name and
- * value fields to support filtering with contains().
+ * Represents a generic name-value label. A label has separate name and value
+ * fields to support filtering with the `contains()` function. For more
+ * information, see [Filtering on array-type
+ * fields](https://cloud.google.com/security-command-center/docs/how-to-api-list-findings#array-contains-filtering).
  * </pre>
  *
  * Protobuf type {@code google.cloud.securitycenter.v1.Label}
@@ -72,7 +74,7 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Label name.
+   * Name of the label.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -95,7 +97,7 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Label name.
+   * Name of the label.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -123,7 +125,7 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * Label value.
+   * Value that corresponds to the label's name.
    * </pre>
    *
    * <code>string value = 2;</code>
@@ -146,7 +148,7 @@ public java.lang.String getValue() {
    *
    *
    * <pre>
-   * Label value.
+   * Value that corresponds to the label's name.
    * </pre>
    *
    * <code>string value = 2;</code>
@@ -337,8 +339,10 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * Label represents a generic name=value label. Label has separate name and
-   * value fields to support filtering with contains().
+   * Represents a generic name-value label. A label has separate name and value
+   * fields to support filtering with the `contains()` function. For more
+   * information, see [Filtering on array-type
+   * fields](https://cloud.google.com/security-command-center/docs/how-to-api-list-findings#array-contains-filtering).
    * </pre>
    *
    * Protobuf type {@code google.cloud.securitycenter.v1.Label}
@@ -536,7 +540,7 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Label name.
+     * Name of the label.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -558,7 +562,7 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Label name.
+     * Name of the label.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -580,7 +584,7 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Label name.
+     * Name of the label.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -601,7 +605,7 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Label name.
+     * Name of the label.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -618,7 +622,7 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Label name.
+     * Name of the label.
      * </pre>
      *
      * <code>string name = 1;</code>
@@ -642,7 +646,7 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Label value.
+     * Value that corresponds to the label's name.
      * </pre>
      *
      * <code>string value = 2;</code>
@@ -664,7 +668,7 @@ public java.lang.String getValue() {
      *
      *
      * <pre>
-     * Label value.
+     * Value that corresponds to the label's name.
      * </pre>
      *
      * <code>string value = 2;</code>
@@ -686,7 +690,7 @@ public com.google.protobuf.ByteString getValueBytes() {
      *
      *
      * <pre>
-     * Label value.
+     * Value that corresponds to the label's name.
      * </pre>
      *
      * <code>string value = 2;</code>
@@ -707,7 +711,7 @@ public Builder setValue(java.lang.String value) {
      *
      *
      * <pre>
-     * Label value.
+     * Value that corresponds to the label's name.
      * </pre>
      *
      * <code>string value = 2;</code>
@@ -724,7 +728,7 @@ public Builder clearValue() {
      *
      *
      * <pre>
-     * Label value.
+     * Value that corresponds to the label's name.
      * </pre>
      *
      * <code>string value = 2;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/LabelOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/LabelOrBuilder.java
index b3eba58259ba..5b6509df1df9 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/LabelOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/LabelOrBuilder.java
@@ -27,7 +27,7 @@ public interface LabelOrBuilder
    *
    *
    * <pre>
-   * Label name.
+   * Name of the label.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -39,7 +39,7 @@ public interface LabelOrBuilder
    *
    *
    * <pre>
-   * Label name.
+   * Name of the label.
    * </pre>
    *
    * <code>string name = 1;</code>
@@ -52,7 +52,7 @@ public interface LabelOrBuilder
    *
    *
    * <pre>
-   * Label value.
+   * Value that corresponds to the label's name.
    * </pre>
    *
    * <code>string value = 2;</code>
@@ -64,7 +64,7 @@ public interface LabelOrBuilder
    *
    *
    * <pre>
-   * Label value.
+   * Value that corresponds to the label's name.
    * </pre>
    *
    * <code>string value = 2;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettings.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettings.java
index 64acd833eb50..bd6d560e8c05 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettings.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettings.java
@@ -1652,9 +1652,9 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    * <pre>
    * A flag that indicates if Asset Discovery should be enabled. If the flag is
-   * set to `true`, then discovery of assets will occur. If it is set to `false,
-   * all historical assets will remain, but discovery of future assets will not
-   * occur.
+   * set to `true`, then discovery of assets will occur. If it is set to
+   * `false`, all historical assets will remain, but discovery of future assets
+   * will not occur.
    * </pre>
    *
    * <code>bool enable_asset_discovery = 2;</code>
@@ -2256,9 +2256,9 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      * <pre>
      * A flag that indicates if Asset Discovery should be enabled. If the flag is
-     * set to `true`, then discovery of assets will occur. If it is set to `false,
-     * all historical assets will remain, but discovery of future assets will not
-     * occur.
+     * set to `true`, then discovery of assets will occur. If it is set to
+     * `false`, all historical assets will remain, but discovery of future assets
+     * will not occur.
      * </pre>
      *
      * <code>bool enable_asset_discovery = 2;</code>
@@ -2274,9 +2274,9 @@ public boolean getEnableAssetDiscovery() {
      *
      * <pre>
      * A flag that indicates if Asset Discovery should be enabled. If the flag is
-     * set to `true`, then discovery of assets will occur. If it is set to `false,
-     * all historical assets will remain, but discovery of future assets will not
-     * occur.
+     * set to `true`, then discovery of assets will occur. If it is set to
+     * `false`, all historical assets will remain, but discovery of future assets
+     * will not occur.
      * </pre>
      *
      * <code>bool enable_asset_discovery = 2;</code>
@@ -2296,9 +2296,9 @@ public Builder setEnableAssetDiscovery(boolean value) {
      *
      * <pre>
      * A flag that indicates if Asset Discovery should be enabled. If the flag is
-     * set to `true`, then discovery of assets will occur. If it is set to `false,
-     * all historical assets will remain, but discovery of future assets will not
-     * occur.
+     * set to `true`, then discovery of assets will occur. If it is set to
+     * `false`, all historical assets will remain, but discovery of future assets
+     * will not occur.
      * </pre>
      *
      * <code>bool enable_asset_discovery = 2;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettingsOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettingsOrBuilder.java
index e2174a8a07b8..60f4f0fb8841 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettingsOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/OrganizationSettingsOrBuilder.java
@@ -59,9 +59,9 @@ public interface OrganizationSettingsOrBuilder
    *
    * <pre>
    * A flag that indicates if Asset Discovery should be enabled. If the flag is
-   * set to `true`, then discovery of assets will occur. If it is set to `false,
-   * all historical assets will remain, but discovery of future assets will not
-   * occur.
+   * set to `true`, then discovery of assets will occur. If it is set to
+   * `false`, all historical assets will remain, but discovery of future assets
+   * will not occur.
    * </pre>
    *
    * <code>bool enable_asset_discovery = 2;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Process.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Process.java
index 3bd9ce4a7a62..ab79e91cf526 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Process.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/Process.java
@@ -73,8 +73,9 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * The process name visible in utilities like `top` and `ps`; it can
-   * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+   * The process name, as displayed in utilities like `top` and `ps`. This name
+   * can be accessed through `/proc/[pid]/comm` and changed with
+   * `prctl(PR_SET_NAME)`.
    * </pre>
    *
    * <code>string name = 12;</code>
@@ -97,8 +98,9 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * The process name visible in utilities like `top` and `ps`; it can
-   * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+   * The process name, as displayed in utilities like `top` and `ps`. This name
+   * can be accessed through `/proc/[pid]/comm` and changed with
+   * `prctl(PR_SET_NAME)`.
    * </pre>
    *
    * <code>string name = 12;</code>
@@ -241,10 +243,9 @@ public com.google.cloud.securitycenter.v1.FileOrBuilder getLibrariesOrBuilder(in
    *
    *
    * <pre>
-   * When the process represents the invocation of a script,
-   * `binary` provides information about the interpreter while `script`
-   * provides information about the script file provided to the
-   * interpreter.
+   * When the process represents the invocation of a script, `binary` provides
+   * information about the interpreter, while `script` provides information
+   * about the script file provided to the interpreter.
    * </pre>
    *
    * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -259,10 +260,9 @@ public boolean hasScript() {
    *
    *
    * <pre>
-   * When the process represents the invocation of a script,
-   * `binary` provides information about the interpreter while `script`
-   * provides information about the script file provided to the
-   * interpreter.
+   * When the process represents the invocation of a script, `binary` provides
+   * information about the interpreter, while `script` provides information
+   * about the script file provided to the interpreter.
    * </pre>
    *
    * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -277,10 +277,9 @@ public com.google.cloud.securitycenter.v1.File getScript() {
    *
    *
    * <pre>
-   * When the process represents the invocation of a script,
-   * `binary` provides information about the interpreter while `script`
-   * provides information about the script file provided to the
-   * interpreter.
+   * When the process represents the invocation of a script, `binary` provides
+   * information about the interpreter, while `script` provides information
+   * about the script file provided to the interpreter.
    * </pre>
    *
    * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -469,7 +468,7 @@ public boolean getEnvVariablesTruncated() {
    *
    *
    * <pre>
-   * The process id.
+   * The process ID.
    * </pre>
    *
    * <code>int64 pid = 10;</code>
@@ -487,7 +486,7 @@ public long getPid() {
    *
    *
    * <pre>
-   * The parent process id.
+   * The parent process ID.
    * </pre>
    *
    * <code>int64 parent_pid = 11;</code>
@@ -1172,8 +1171,9 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * The process name visible in utilities like `top` and `ps`; it can
-     * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+     * The process name, as displayed in utilities like `top` and `ps`. This name
+     * can be accessed through `/proc/[pid]/comm` and changed with
+     * `prctl(PR_SET_NAME)`.
      * </pre>
      *
      * <code>string name = 12;</code>
@@ -1195,8 +1195,9 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * The process name visible in utilities like `top` and `ps`; it can
-     * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+     * The process name, as displayed in utilities like `top` and `ps`. This name
+     * can be accessed through `/proc/[pid]/comm` and changed with
+     * `prctl(PR_SET_NAME)`.
      * </pre>
      *
      * <code>string name = 12;</code>
@@ -1218,8 +1219,9 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * The process name visible in utilities like `top` and `ps`; it can
-     * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+     * The process name, as displayed in utilities like `top` and `ps`. This name
+     * can be accessed through `/proc/[pid]/comm` and changed with
+     * `prctl(PR_SET_NAME)`.
      * </pre>
      *
      * <code>string name = 12;</code>
@@ -1240,8 +1242,9 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * The process name visible in utilities like `top` and `ps`; it can
-     * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+     * The process name, as displayed in utilities like `top` and `ps`. This name
+     * can be accessed through `/proc/[pid]/comm` and changed with
+     * `prctl(PR_SET_NAME)`.
      * </pre>
      *
      * <code>string name = 12;</code>
@@ -1258,8 +1261,9 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * The process name visible in utilities like `top` and `ps`; it can
-     * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+     * The process name, as displayed in utilities like `top` and `ps`. This name
+     * can be accessed through `/proc/[pid]/comm` and changed with
+     * `prctl(PR_SET_NAME)`.
      * </pre>
      *
      * <code>string name = 12;</code>
@@ -1820,10 +1824,9 @@ public com.google.cloud.securitycenter.v1.File.Builder addLibrariesBuilder(int i
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1837,10 +1840,9 @@ public boolean hasScript() {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1860,10 +1862,9 @@ public com.google.cloud.securitycenter.v1.File getScript() {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1885,10 +1886,9 @@ public Builder setScript(com.google.cloud.securitycenter.v1.File value) {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1907,10 +1907,9 @@ public Builder setScript(com.google.cloud.securitycenter.v1.File.Builder builder
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1935,10 +1934,9 @@ public Builder mergeScript(com.google.cloud.securitycenter.v1.File value) {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1957,10 +1955,9 @@ public Builder clearScript() {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1974,10 +1971,9 @@ public com.google.cloud.securitycenter.v1.File.Builder getScriptBuilder() {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -1995,10 +1991,9 @@ public com.google.cloud.securitycenter.v1.FileOrBuilder getScriptOrBuilder() {
      *
      *
      * <pre>
-     * When the process represents the invocation of a script,
-     * `binary` provides information about the interpreter while `script`
-     * provides information about the script file provided to the
-     * interpreter.
+     * When the process represents the invocation of a script, `binary` provides
+     * information about the interpreter, while `script` provides information
+     * about the script file provided to the interpreter.
      * </pre>
      *
      * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -2665,7 +2660,7 @@ public Builder clearEnvVariablesTruncated() {
      *
      *
      * <pre>
-     * The process id.
+     * The process ID.
      * </pre>
      *
      * <code>int64 pid = 10;</code>
@@ -2680,7 +2675,7 @@ public long getPid() {
      *
      *
      * <pre>
-     * The process id.
+     * The process ID.
      * </pre>
      *
      * <code>int64 pid = 10;</code>
@@ -2699,7 +2694,7 @@ public Builder setPid(long value) {
      *
      *
      * <pre>
-     * The process id.
+     * The process ID.
      * </pre>
      *
      * <code>int64 pid = 10;</code>
@@ -2718,7 +2713,7 @@ public Builder clearPid() {
      *
      *
      * <pre>
-     * The parent process id.
+     * The parent process ID.
      * </pre>
      *
      * <code>int64 parent_pid = 11;</code>
@@ -2733,7 +2728,7 @@ public long getParentPid() {
      *
      *
      * <pre>
-     * The parent process id.
+     * The parent process ID.
      * </pre>
      *
      * <code>int64 parent_pid = 11;</code>
@@ -2752,7 +2747,7 @@ public Builder setParentPid(long value) {
      *
      *
      * <pre>
-     * The parent process id.
+     * The parent process ID.
      * </pre>
      *
      * <code>int64 parent_pid = 11;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ProcessOrBuilder.java b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ProcessOrBuilder.java
index 1367332dd852..96bc99571e9a 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ProcessOrBuilder.java
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/java/com/google/cloud/securitycenter/v1/ProcessOrBuilder.java
@@ -27,8 +27,9 @@ public interface ProcessOrBuilder
    *
    *
    * <pre>
-   * The process name visible in utilities like `top` and `ps`; it can
-   * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+   * The process name, as displayed in utilities like `top` and `ps`. This name
+   * can be accessed through `/proc/[pid]/comm` and changed with
+   * `prctl(PR_SET_NAME)`.
    * </pre>
    *
    * <code>string name = 12;</code>
@@ -40,8 +41,9 @@ public interface ProcessOrBuilder
    *
    *
    * <pre>
-   * The process name visible in utilities like `top` and `ps`; it can
-   * be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+   * The process name, as displayed in utilities like `top` and `ps`. This name
+   * can be accessed through `/proc/[pid]/comm` and changed with
+   * `prctl(PR_SET_NAME)`.
    * </pre>
    *
    * <code>string name = 12;</code>
@@ -141,10 +143,9 @@ public interface ProcessOrBuilder
    *
    *
    * <pre>
-   * When the process represents the invocation of a script,
-   * `binary` provides information about the interpreter while `script`
-   * provides information about the script file provided to the
-   * interpreter.
+   * When the process represents the invocation of a script, `binary` provides
+   * information about the interpreter, while `script` provides information
+   * about the script file provided to the interpreter.
    * </pre>
    *
    * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -156,10 +157,9 @@ public interface ProcessOrBuilder
    *
    *
    * <pre>
-   * When the process represents the invocation of a script,
-   * `binary` provides information about the interpreter while `script`
-   * provides information about the script file provided to the
-   * interpreter.
+   * When the process represents the invocation of a script, `binary` provides
+   * information about the interpreter, while `script` provides information
+   * about the script file provided to the interpreter.
    * </pre>
    *
    * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -171,10 +171,9 @@ public interface ProcessOrBuilder
    *
    *
    * <pre>
-   * When the process represents the invocation of a script,
-   * `binary` provides information about the interpreter while `script`
-   * provides information about the script file provided to the
-   * interpreter.
+   * When the process represents the invocation of a script, `binary` provides
+   * information about the interpreter, while `script` provides information
+   * about the script file provided to the interpreter.
    * </pre>
    *
    * <code>.google.cloud.securitycenter.v1.File script = 5;</code>
@@ -315,7 +314,7 @@ com.google.cloud.securitycenter.v1.EnvironmentVariableOrBuilder getEnvVariablesO
    *
    *
    * <pre>
-   * The process id.
+   * The process ID.
    * </pre>
    *
    * <code>int64 pid = 10;</code>
@@ -328,7 +327,7 @@ com.google.cloud.securitycenter.v1.EnvironmentVariableOrBuilder getEnvVariablesO
    *
    *
    * <pre>
-   * The parent process id.
+   * The parent process ID.
    * </pre>
    *
    * <code>int64 parent_pid = 11;</code>
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/access.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/access.proto
index d30e670f5a69..b8b0e77f2c9a 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/access.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/access.proto
@@ -46,6 +46,9 @@ message Access {
   // system shell or an embedded or standalone application.
   string user_agent_family = 4;
 
+  // The caller's user agent string associated with the finding.
+  string user_agent = 12;
+
   // This is the API service that the service account made a call to, e.g.
   // "iam.googleapis.com"
   string service_name = 5;
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_data_profile.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_data_profile.proto
index 2a513f1dc037..8bb30eb50f2e 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_data_profile.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_data_profile.proto
@@ -34,9 +34,24 @@ option (google.api.resource_definition) = {
 // The [data profile](https://cloud.google.com/dlp/docs/data-profiles)
 // associated with the finding.
 message CloudDlpDataProfile {
+  // Parents for configurations that produce data profile findings.
+  enum ParentType {
+    // Unspecified parent type.
+    PARENT_TYPE_UNSPECIFIED = 0;
+
+    // Organization-level configurations.
+    ORGANIZATION = 1;
+
+    // Project-level configurations.
+    PROJECT = 2;
+  }
+
   // Name of the data profile, for example,
   // `projects/123/locations/europe/tableProfiles/8383929`.
   string data_profile = 1 [(google.api.resource_reference) = {
     type: "dlp.googleapis.com/TableDataProfile"
   }];
+
+  // The resource hierarchy level at which the data profile was generated.
+  ParentType parent_type = 2;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_inspection.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_inspection.proto
index 5d76ee71ee98..bfab2e93424b 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_inspection.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/cloud_dlp_inspection.proto
@@ -40,8 +40,8 @@ message CloudDlpInspection {
   string inspect_job = 1
       [(google.api.resource_reference) = { type: "dlp.googleapis.com/DlpJob" }];
 
-  // The [type of
-  // information](https://cloud.google.com/dlp/docs/infotypes-reference) found,
+  // The type of information (or
+  // *[infoType](https://cloud.google.com/dlp/docs/infotypes-reference)*) found,
   // for example, `EMAIL_ADDRESS` or `STREET_ADDRESS`.
   string info_type = 2;
 
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/compliance.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/compliance.proto
index bc183bb5e37d..466808dfa94e 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/compliance.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/compliance.proto
@@ -27,13 +27,13 @@ option ruby_package = "Google::Cloud::SecurityCenter::V1";
 // Contains compliance information about a security standard indicating unmet
 // recommendations.
 message Compliance {
-  // Refers to industry wide standards or benchmarks e.g. "cis", "pci", "owasp",
-  // etc.
+  // Industry-wide compliance standards or benchmarks, such as CIS, PCI, and
+  // OWASP.
   string standard = 1;
 
-  // Version of the standard/benchmark e.g. 1.1
+  // Version of the standard or benchmark, for example, 1.1
   string version = 2;
 
-  // Policies within the standard/benchmark e.g. A.12.4.1
+  // Policies within the standard or benchmark, for example, A.12.4.1
   repeated string ids = 3;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/contact_details.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/contact_details.proto
index 741ad8fae1da..f2e9bf0329be 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/contact_details.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/contact_details.proto
@@ -24,7 +24,7 @@ option java_package = "com.google.cloud.securitycenter.v1";
 option php_namespace = "Google\\Cloud\\SecurityCenter\\V1";
 option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
-// The details pertaining to specific contacts
+// Details about specific contacts
 message ContactDetails {
   // A list of contacts
   repeated Contact contacts = 1;
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/container.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/container.proto
index c90168991f6a..dab20aea310a 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/container.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/container.proto
@@ -28,16 +28,15 @@ option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
 // Container associated with the finding.
 message Container {
-  // Container name.
+  // Name of the container.
   string name = 1;
 
-  // Container image URI provided when configuring a pod/container.
-  // May identify a container image version using mutable tags.
+  // Container image URI provided when configuring a pod or container. This
+  // string can identify a container image version using mutable tags.
   string uri = 2;
 
-  // Optional container image id, when provided by the container runtime.
-  // Uniquely identifies the container image launched using a container image
-  // digest.
+  // Optional container image ID, if provided by the container runtime. Uniquely
+  // identifies the container image launched using a container image digest.
   string image_id = 3;
 
   // Container labels, as provided by the container runtime.
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/database.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/database.proto
index 70bf35161032..2e5f51b86141 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/database.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/database.proto
@@ -24,29 +24,35 @@ option java_package = "com.google.cloud.securitycenter.v1";
 option php_namespace = "Google\\Cloud\\SecurityCenter\\V1";
 option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
-// Represents database access information, such as queries.
-// A database may be a sub-resource of an instance (as in the case of CloudSQL
-// instances or Cloud Spanner instances), or the database instance itself.
-// Some database resources may not have the full resource name populated
-// because these resource types are not yet supported by Cloud Asset Inventory
-// (e.g. CloudSQL databases). In these cases only the display name will be
+// Represents database access information, such as queries. A database may be a
+// sub-resource of an instance (as in the case of Cloud SQL instances or Cloud
+// Spanner instances), or the database instance itself. Some database resources
+// might not have the [full resource
+// name](https://google.aip.dev/122#full-resource-names) populated because these
+// resource types, such as Cloud SQL databases, are not yet supported by Cloud
+// Asset Inventory. In these cases only the display name is provided.
+// Some database resources may not have the [full resource
+// name](https://google.aip.dev/122#full-resource-names) populated because
+// these resource types are not yet supported by Cloud Asset Inventory (e.g.
+// Cloud SQL databases). In these cases only the display name will be
 // provided.
 message Database {
-  // The full resource name of the database the user connected to, if it is
-  // supported by CAI. (https://google.aip.dev/122#full-resource-names)
+  // The [full resource name](https://google.aip.dev/122#full-resource-names) of
+  // the database that the user connected to, if it is supported by Cloud Asset
+  // Inventory.
   string name = 1;
 
-  // The human readable name of the database the user connected to.
+  // The human-readable name of the database that the user connected to.
   string display_name = 2;
 
-  // The username used to connect to the DB. This may not necessarily be an IAM
-  // principal, and has no required format.
+  // The username used to connect to the database. The username might not be an
+  // IAM principal and does not have a set format.
   string user_name = 3;
 
-  // The SQL statement associated with the relevant access.
+  // The SQL statement that is associated with the database access.
   string query = 4;
 
-  // The target usernames/roles/groups of a SQL privilege grant (not an IAM
-  // policy change).
+  // The target usernames, roles, or groups of an SQL privilege grant, which is
+  // not an IAM policy change.
   repeated string grantees = 5;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/exfiltration.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/exfiltration.proto
index 4c3735dedf28..071c162a6348 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/exfiltration.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/exfiltration.proto
@@ -24,10 +24,10 @@ option java_package = "com.google.cloud.securitycenter.v1";
 option php_namespace = "Google\\Cloud\\SecurityCenter\\V1";
 option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
-// Exfiltration represents a data exfiltration attempt of one or more
-// sources to one or more targets. Sources represent the source
-// of data that is exfiltrated, and Targets represents the destination the
-// data was copied to.
+// Exfiltration represents a data exfiltration attempt from one or more sources
+// to one or more targets. The `sources` attribute lists the sources of the
+// exfiltrated data. The `targets` attribute lists the destinations the data was
+// copied to.
 message Exfiltration {
   // If there are multiple sources, then the data is considered "joined" between
   // them. For instance, BigQuery can join multiple tables, and each
@@ -39,14 +39,16 @@ message Exfiltration {
   repeated ExfilResource targets = 2;
 }
 
-// Resource that has been exfiltrated or exfiltrated_to.
+// Resource where data was exfiltrated from or exfiltrated to.
 message ExfilResource {
-  // Resource's URI (https://google.aip.dev/122#full-resource-names)
+  // The resource's [full resource
+  // name](https://cloud.google.com/apis/design/resource_names#full_resource_name).
   string name = 1;
 
-  // Subcomponents of the asset that is exfiltrated - these could be
-  // URIs used during exfiltration, table names, databases, filenames, etc.
-  // For example, multiple tables may be exfiltrated from the same CloudSQL
-  // instance, or multiple files from the same Cloud Storage bucket.
+  // Subcomponents of the asset that was exfiltrated, like URIs used during
+  // exfiltration, table names, databases, and filenames. For example, multiple
+  // tables might have been exfiltrated from the same Cloud SQL instance, or
+  // multiple files might have been exfiltrated from the same Cloud Storage
+  // bucket.
   repeated string components = 2;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/file.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/file.proto
index 4d7a459590c8..618e7b7eacc6 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/file.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/file.proto
@@ -46,7 +46,6 @@ message File {
   // True when the hash covers only a prefix of the file.
   bool partially_hashed = 5;
 
-  // Prefix of the file contents as a JSON encoded string.
-  // (Currently only populated for Malicious Script Executed findings.)
+  // Prefix of the file contents as a JSON-encoded string.
   string contents = 6;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/iam_binding.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/iam_binding.proto
index 533ac4bdadc8..3aee0bc5f05e 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/iam_binding.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/iam_binding.proto
@@ -46,7 +46,7 @@ message IamBinding {
   // For example, "roles/viewer", "roles/editor", or "roles/owner".
   string role = 2;
 
-  // A single identity requesting access for a Cloud Platform resource,
-  // e.g. "foo@google.com".
+  // A single identity requesting access for a Cloud Platform resource, for
+  // example, "foo@google.com".
   string member = 3;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kernel_rootkit.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kernel_rootkit.proto
index 6af2840bf068..ee516db4a39d 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kernel_rootkit.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kernel_rootkit.proto
@@ -26,37 +26,37 @@ option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
 // Kernel mode rootkit signatures.
 message KernelRootkit {
-  // Rootkit name when available.
+  // Rootkit name, when available.
   string name = 1;
 
-  // True when unexpected modifications of kernel code memory are present.
+  // True if unexpected modifications of kernel code memory are present.
   bool unexpected_code_modification = 2;
 
-  // True when unexpected modifications of kernel read-only data memory are
+  // True if unexpected modifications of kernel read-only data memory are
   // present.
   bool unexpected_read_only_data_modification = 3;
 
-  // True when `ftrace` points are present with callbacks pointing to regions
+  // True if `ftrace` points are present with callbacks pointing to regions
   // that are not in the expected kernel or module code range.
   bool unexpected_ftrace_handler = 4;
 
-  // True when `kprobe` points are present with callbacks pointing to regions
+  // True if `kprobe` points are present with callbacks pointing to regions
   // that are not in the expected kernel or module code range.
   bool unexpected_kprobe_handler = 5;
 
-  // True when kernel code pages that are not in the expected kernel or module
+  // True if kernel code pages that are not in the expected kernel or module
   // code regions are present.
   bool unexpected_kernel_code_pages = 6;
 
-  // True when system call handlers that are are not in the expected kernel or
+  // True if system call handlers that are are not in the expected kernel or
   // module code regions are present.
   bool unexpected_system_call_handler = 7;
 
-  // True when interrupt handlers that are are not in the expected kernel or
+  // True if interrupt handlers that are are not in the expected kernel or
   // module code regions are present.
   bool unexpected_interrupt_handler = 8;
 
-  // True when unexpected processes in the scheduler run queue are present. Such
+  // True if unexpected processes in the scheduler run queue are present. Such
   // processes are in the run queue, but not in the process task list.
   bool unexpected_processes_in_runqueue = 9;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kubernetes.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kubernetes.proto
index ac1df835116c..fc79be79ba66 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kubernetes.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/kubernetes.proto
@@ -29,7 +29,7 @@ option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
 // Kubernetes-related attributes.
 message Kubernetes {
-  // Kubernetes Pod.
+  // A Kubernetes Pod.
   message Pod {
     // Kubernetes Pod namespace.
     string ns = 1;
@@ -45,16 +45,16 @@ message Kubernetes {
     repeated Container containers = 4;
   }
 
-  // Kubernetes Nodes associated with the finding.
+  // Kubernetes nodes associated with the finding.
   message Node {
-    // Full Resource name of the Compute Engine VM running the
-    // cluster node.
+    // [Full resource name](https://google.aip.dev/122#full-resource-names) of
+    // the Compute Engine VM running the cluster node.
     string name = 1;
   }
 
-  // Provides GKE Node Pool information.
+  // Provides GKE node pool information.
   message NodePool {
-    // Kubernetes Node pool name.
+    // Kubernetes node pool name.
     string name = 1;
 
     // Nodes associated with the finding.
@@ -87,10 +87,10 @@ message Kubernetes {
 
   // Represents a Kubernetes RoleBinding or ClusterRoleBinding.
   message Binding {
-    // Namespace for binding.
+    // Namespace for the binding.
     string ns = 1;
 
-    // Name for binding.
+    // Name for the binding.
     string name = 2;
 
     // The Role or ClusterRole referenced by the binding.
@@ -101,9 +101,9 @@ message Kubernetes {
     repeated Subject subjects = 4;
   }
 
-  // Represents a Kubernetes Subject.
+  // Represents a Kubernetes subject.
   message Subject {
-    // Auth types that can be used for Subject's kind field.
+    // Auth types that can be used for the subject's kind field.
     enum AuthType {
       // Authentication is not specified.
       AUTH_TYPE_UNSPECIFIED = 0;
@@ -111,27 +111,29 @@ message Kubernetes {
       // User with valid certificate.
       USER = 1;
 
-      // Users managed by Kubernetes API with credentials stored as Secrets.
+      // Users managed by Kubernetes API with credentials stored as secrets.
       SERVICEACCOUNT = 2;
 
       // Collection of users.
       GROUP = 3;
     }
 
-    // Authentication type for subject.
+    // Authentication type for the subject.
     AuthType kind = 1;
 
-    // Namespace for subject.
+    // Namespace for the subject.
     string ns = 2;
 
-    // Name for subject.
+    // Name for the subject.
     string name = 3;
   }
 
-  // Conveys information about a Kubernetes access review (e.g. kubectl auth
-  // can-i ...) that was involved in a finding.
+  // Conveys information about a Kubernetes access review (such as one returned
+  // by a [`kubectl auth
+  // can-i`](https://kubernetes.io/docs/reference/access-authn-authz/authorization/#checking-api-access)
+  // command) that was involved in a finding.
   message AccessReview {
-    // Group is the API Group of the Resource. "*" means all.
+    // The API group of the resource. "*" means all.
     string group = 1;
 
     // Namespace of the action being requested. Currently, there is no
@@ -139,43 +141,50 @@ message Kubernetes {
     // are represented by "" (empty).
     string ns = 2;
 
-    // Name is the name of the resource being requested. Empty means all.
+    // The name of the resource being requested. Empty means all.
     string name = 3;
 
-    // Resource is the optional resource type requested. "*" means all.
+    // The optional resource type requested. "*" means all.
     string resource = 4;
 
-    // Subresource is the optional subresource type.
+    // The optional subresource type.
     string subresource = 5;
 
-    // Verb is a Kubernetes resource API verb, like: get, list, watch, create,
-    // update, delete, proxy. "*" means all.
+    // A Kubernetes resource API verb, like get, list, watch, create, update,
+    // delete, proxy. "*" means all.
     string verb = 6;
 
-    // Version is the API Version of the Resource. "*" means all.
+    // The API version of the resource. "*" means all.
     string version = 7;
   }
 
-  // Kubernetes Pods associated with the finding. This field will contain Pod
-  // records for each container that is owned by a Pod.
+  // Kubernetes
+  // [Pods](https://cloud.google.com/kubernetes-engine/docs/concepts/pod)
+  // associated with the finding. This field contains Pod records for each
+  // container that is owned by a Pod.
   repeated Pod pods = 1;
 
-  // Provides Kubernetes Node information.
+  // Provides Kubernetes
+  // [node](https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes)
+  // information.
   repeated Node nodes = 2;
 
-  // GKE Node Pools associated with the finding. This field will
-  // contain NodePool information for each Node, when it is available.
+  // GKE [node
+  // pools](https://cloud.google.com/kubernetes-engine/docs/concepts/node-pools)
+  // associated with the finding. This field contains node pool information for
+  // each node, when it is available.
   repeated NodePool node_pools = 3;
 
-  // Provides Kubernetes role information for findings that involve
-  // Roles or ClusterRoles.
+  // Provides Kubernetes role information for findings that involve [Roles or
+  // ClusterRoles](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
   repeated Role roles = 4;
 
   // Provides Kubernetes role binding information for findings that involve
-  // RoleBindings or ClusterRoleBindings.
+  // [RoleBindings or
+  // ClusterRoleBindings](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control).
   repeated Binding bindings = 5;
 
-  // Provides information on any Kubernetes access reviews (i.e. privilege
-  // checks) relevant to the finding.
+  // Provides information on any Kubernetes access reviews (privilege checks)
+  // relevant to the finding.
   repeated AccessReview access_reviews = 6;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/label.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/label.proto
index 0760c82d8408..3a256e5689fc 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/label.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/label.proto
@@ -24,12 +24,14 @@ option java_package = "com.google.cloud.securitycenter.v1";
 option php_namespace = "Google\\Cloud\\SecurityCenter\\V1";
 option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
-// Label represents a generic name=value label. Label has separate name and
-// value fields to support filtering with contains().
+// Represents a generic name-value label. A label has separate name and value
+// fields to support filtering with the `contains()` function. For more
+// information, see [Filtering on array-type
+// fields](https://cloud.google.com/security-command-center/docs/how-to-api-list-findings#array-contains-filtering).
 message Label {
-  // Label name.
+  // Name of the label.
   string name = 1;
 
-  // Label value.
+  // Value that corresponds to the label's name.
   string value = 2;
 }
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/organization_settings.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/organization_settings.proto
index 66880a17c63b..eaf8dbc9cc1b 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/organization_settings.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/organization_settings.proto
@@ -75,9 +75,9 @@ message OrganizationSettings {
   string name = 1;
 
   // A flag that indicates if Asset Discovery should be enabled. If the flag is
-  // set to `true`, then discovery of assets will occur. If it is set to `false,
-  // all historical assets will remain, but discovery of future assets will not
-  // occur.
+  // set to `true`, then discovery of assets will occur. If it is set to
+  // `false`, all historical assets will remain, but discovery of future assets
+  // will not occur.
   bool enable_asset_discovery = 2;
 
   // The configuration used for Asset Discovery runs.
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/process.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/process.proto
index 3ec0a5c29f1b..5f960cc643a0 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/process.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/process.proto
@@ -28,8 +28,9 @@ option ruby_package = "Google::Cloud::SecurityCenter::V1";
 
 // Represents an operating system process.
 message Process {
-  // The process name visible in utilities like `top` and `ps`; it can
-  // be accessed via `/proc/[pid]/comm` and changed with `prctl(PR_SET_NAME)`.
+  // The process name, as displayed in utilities like `top` and `ps`. This name
+  // can be accessed through `/proc/[pid]/comm` and changed with
+  // `prctl(PR_SET_NAME)`.
   string name = 12;
 
   // File information for the process executable.
@@ -38,10 +39,9 @@ message Process {
   // File information for libraries loaded by the process.
   repeated File libraries = 4;
 
-  // When the process represents the invocation of a script,
-  // `binary` provides information about the interpreter while `script`
-  // provides information about the script file provided to the
-  // interpreter.
+  // When the process represents the invocation of a script, `binary` provides
+  // information about the interpreter, while `script` provides information
+  // about the script file provided to the interpreter.
   File script = 5;
 
   // Process arguments as JSON encoded strings.
@@ -56,15 +56,15 @@ message Process {
   // True if `env_variables` is incomplete.
   bool env_variables_truncated = 9;
 
-  // The process id.
+  // The process ID.
   int64 pid = 10;
 
-  // The parent process id.
+  // The parent process ID.
   int64 parent_pid = 11;
 }
 
-// EnvironmentVariable is a name-value pair to store environment variables for
-// Process.
+// A name-value pair representing an environment variable used in an operating
+// system process.
 message EnvironmentVariable {
   // Environment variable name as a JSON encoded string.
   string name = 1;
diff --git a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/securitycenter_service.proto b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/securitycenter_service.proto
index 052c9cebccb2..0957861595b7 100644
--- a/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/securitycenter_service.proto
+++ b/java-securitycenter/proto-google-cloud-securitycenter-v1/src/main/proto/google/cloud/securitycenter/v1/securitycenter_service.proto
@@ -804,9 +804,9 @@ message CreateMuteConfigRequest {
   MuteConfig mute_config = 2 [(google.api.field_behavior) = REQUIRED];
 
   // Required. Unique identifier provided by the client within the parent scope.
-  // It must consist of lower case letters, numbers, and hyphen, with the first
-  // character a letter, the last a letter or a number, and a 63 character
-  // maximum.
+  // It must consist of only lowercase letters, numbers, and hyphens, must start
+  // with a letter, must end with either a letter or a number, and must be 63
+  // characters or less.
   string mute_config_id = 3 [(google.api.field_behavior) = REQUIRED];
 }
 
@@ -2148,9 +2148,9 @@ message CreateBigQueryExportRequest {
   BigQueryExport big_query_export = 2 [(google.api.field_behavior) = REQUIRED];
 
   // Required. Unique identifier provided by the client within the parent scope.
-  // It must consist of lower case letters, numbers, and hyphen, with the first
-  // character a letter, the last a letter or a number, and a 63 character
-  // maximum.
+  // It must consist of only lowercase letters, numbers, and hyphens, must start
+  // with a letter, must end with either a letter or a number, and must be 63
+  // characters or less.
   string big_query_export_id = 3 [(google.api.field_behavior) = REQUIRED];
 }