Bigtable
Feature
As part of Bigtable Enterprise Plus edition, you can configure a retention period of up to 365 days for backups. This feature is generally available (GA). For more information, see Bigtable backups overview.
Cloud Logging
Announcement
You can view the available regional endpoints for the Cloud Logging API on the REST reference pages. For an example, see Method: projects.locations.buckets.list.
Error Reporting
Announcement
You can view the available regional endpoints for the Error Reporting API on the REST reference pages. For an example, see Method: projects.events.list.
Gemini Enterprise Agent Platform
Feature
Agent Platform Gemini 3.1 Flash Image and Gemini 3 Pro Image
Gemini Enterprise Agent Platform Gemini 3.1 Flash Image and Gemini 3 Pro Image are Generally Available.
With this release, Gemini 3.1 Flash Image and Gemini 3 Pro Image support 4K image outputs in Preview.
Also supported in this release, Gemini 3.1 Flash Image supports video inputs in Preview. You can use video inputs to generate thumbnails or representative images of videos.
For more information, see the following:
Feature
Anthropic’s Claude Opus 4.8
Claude Opus 4.8 is available in Model Garden.
Google SecOps
Feature
[Spotlight Feature] Unified and Upgraded Chronicle API
Chronicle API has been unified with API resources from legacy SOAR API. Further, we’ve upgraded the following Chronicle API resources from v1 beta to v1. This upgrade signals API stability and functional completeness, enabling customer and partner adoption for production usage. We recommend that customers and partners use Chronicle API for a more robust, secure, and extensible experience. Learn more about API Stability.
The following features and resources are included in this update:
For a full list of updated resources and links to the documentation, please see the Chronicle API documentation.
Feature
[Spotlight Feature] Manage access to preview features
Google Sec0ps tenant administrators can enable or disable access to public preview features. Previously, all public preview features needed to be enabled through official Support channels.
The new Public Preview Features page lists all the public preview features, the status of each feature (on or off)—along with (when available) the expected GA date and a link to a relevant user guide.
For more information, see Manage access to preview features.
Google SecOps SIEM
Feature
Upgraded Chronicle API
We’ve upgraded the following Chronicle API resources from v1 beta to v1. This upgrade signals API stability and functional completeness, enabling customer and partner adoption for production usage. We recommend that customers and partners use Chronicle API for all new integrations, for a more robust, secure, and extensible experience. Learn more about API Stability.
The following features and resources are included in this update:
- Alerts and ATIs, UEBA: Threat Collection, IoC, CoverageDetail, EntityRisk
- Dashboards: NativeDashboard, DashboardChart, DashboardQuery, FeaturedContentNativeDashboard
- Data Tables: DataTable, DataTableRow, DataTableOperationError
- Ingestion: Logs, Feed, LogTypeSchema, FeedSourceSchema, FeedPack, Forwarder
- Normalization: Logtype, Parser, IngestionLogLabel
- Detections: FindingsRefinement, VerifyRuleText, FeaturedContentRule, RuleExecutionError
- Search & Investigation: Event, Entity, SearchQuery, SavedColumnSet
- Exports: BigQueryExportService
- Enrichment Controls: EnrichmentControl, EnrichmentCombination
For a full list of updated resources and links to the documentation, please see the Chronicle API documentation.
Google SecOps SOAR
Feature
Unified and Upgraded Chronicle API
Chronicle API has been unified with API resources from legacy SOAR API. This unification provides a more robust, secure, and extensible experience. This upgrade signals API stability and functional completeness, enabling customer and partner adoption for production usage. We recommend that customers and partners use Chronicle API for a more robust, secure, and extensible experience. Learn more about API Stability.
This update includes the following resources: Case, CaseAlert, CaseStageDefinition, CaseTagDefinition, CaseQueueFilter, CaseCloseDefinition, ContextProperty, InvolvedEntity, Task, CaseComment, CaseWallRecord, ChatMessage, View, VisualFamily, ChatMessages.attachment, ContentPack, SocRole, EmailTemplate, DynamicParameter, EntitiesBlocklist, Environment, EnvironmentGroup, Integration, Integrationaction, UserNotification, Integrationactionrevision, Connector, ConnectorInstance, RemoteAgent, Connectorlog, Connectorrevision, IntegrationInstance, UniqueEntity, Integrationsjob, JobInstance, JobInstances.log, Jobs.revision, Integrationmanager, Integrationmanagerrevision, AlertGroupingRule, Announcement, Attachment, CustomList, FormDynamicParameter, MarketplaceIntegration, ModuleSetting, SlaDefinition, NotificationSetting, PropertySchemaDefinition, RequestTemplate, SoarDomain, SoarNetwork, WorkdeskLink, SystemNotification, WorkdeskContact, WorkdeskNote, LegacySoarUsers.localization.
For a full list of updated resources and links to the documentation, please see the Chronicle API documentation.
Security Command Center
Feature
Risk Engine detects toxic combinations that are related to Managed Service for Apache Spark (formerly known as Dataproc), including Lightning Engine.
Feature
Risk reports are updated to include more content in the Risk Engine introduction and the System attack exposure pages. For more information about what’s included in risk reports, see Risk reports overview.
Source: Google Cloud Platform
