Regenerate client from commit 9ebecac of spec repo (#3661)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.generator/schemas/v2/openapi.yaml

@@ -31464,9 +31464,10 @@ components:
       additionalProperties: {}
       description: The set of attributes recorded for the entity at this revision. The keys depend on the kind of entity.
       example:
+        accounts:
+          - linked-account-123
         display_name: Test User
-        emails:
-          - user@example.com
+        email: user@example.com
         principal_id: user@example.com
       type: object
     EntityData:
@@ -88286,6 +88287,14 @@ components:
       type: string
       x-enum-varnames:
         - AGGREGATED_DNS
+    SingleEntityContextResponse:
+      description: Response from the single entity context endpoint, containing the matching entity.
+      properties:
+        data:
+          $ref: "#/components/schemas/EntityContextEntity"
+      required:
+        - data
+      type: object
     SlackIntegrationMetadata:
       description: Incident integration metadata for the Slack integration.
       properties:
@@ -166474,9 +166483,10 @@ paths:
                       - attributes:
                           revisions:
                             - attributes:
+                                accounts:
+                                  - linked-account-123
                                 display_name: Test User
-                                emails:
-                                  - user@example.com
+                                email: user@example.com
                                 principal_id: user@example.com
                               first_seen_at: "2026-04-01T00:00:00Z"
                               last_seen_at: "2026-05-01T00:00:00Z"
@@ -166507,7 +166517,98 @@ paths:
         permissions:
           - siem_entities_read
       x-unstable: |-
-        **Note**: This endpoint is in preview and is subject to change.
+        **Note**: This endpoint is in Preview and is subject to change.
+        If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
+  /api/v2/security_monitoring/entity_context/{id}:
+    get:
+      description: |-
+        Get a single entity from the Cloud SIEM entity context store by its identifier, returning the historical
+        revisions of the entity in the requested time range. The endpoint can either return revisions across an
+        interval (`from` / `to`) or the snapshot of the entity at a single point in time (`as_of`); the two modes
+        are mutually exclusive.
+      operationId: GetSingleEntityContext
+      parameters:
+        - description: The unique identifier of the entity to retrieve.
+          in: path
+          name: id
+          required: true
+          schema:
+            example: user@example.com
+            type: string
+        - description: |-
+            The start of the time range to query, as an RFC3339 timestamp or a relative time (for example, `now-7d`).
+            Defaults to `now-7d`. Ignored when `as_of` is set.
+          in: query
+          name: from
+          required: false
+          schema:
+            default: now-7d
+            example: now-7d
+            type: string
+        - description: |-
+            The end of the time range to query, as an RFC3339 timestamp or a relative time (for example, `now`).
+            Defaults to `now`. Ignored when `as_of` is set.
+          in: query
+          name: to
+          required: false
+          schema:
+            default: now
+            example: now
+            type: string
+        - description: |-
+            A point in time at which to query the entity revisions, as an RFC3339 timestamp, a Unix timestamp
+            (in seconds), or a relative time (for example, `now-1d`). When set, `from` and `to` are ignored.
+            Cannot be combined with custom `from` / `to` values.
+          example: now-1d
+          in: query
+          name: as_of
+          required: false
+          schema:
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                default:
+                  value:
+                    data:
+                      attributes:
+                        revisions:
+                          - attributes:
+                              accounts:
+                                - linked-account-123
+                              display_name: Test User
+                              email: user@example.com
+                              principal_id: user@example.com
+                            first_seen_at: "2026-04-01T00:00:00Z"
+                            last_seen_at: "2026-05-01T00:00:00Z"
+                      id: user@example.com
+                      type: siem_entity_identity
+              schema:
+                $ref: "#/components/schemas/SingleEntityContextResponse"
+          description: OK
+        "400":
+          $ref: "#/components/responses/BadRequestResponse"
+        "403":
+          $ref: "#/components/responses/NotAuthorizedResponse"
+        "404":
+          $ref: "#/components/responses/NotFoundResponse"
+        "429":
+          $ref: "#/components/responses/TooManyRequestsResponse"
+      security:
+        - apiKeyAuth: []
+          appKeyAuth: []
+        - AuthZ:
+            - siem_entities_read
+      summary: Get a single entity context
+      tags: ["Security Monitoring"]
+      x-permission:
+        operator: OR
+        permissions:
+          - siem_entities_read
+      x-unstable: |-
+        **Note**: This endpoint is in Preview and is subject to change.
         If you have any feedback, contact [Datadog support](https://docs.datadoghq.com/help/).
   /api/v2/security_monitoring/rules:
     get:

docs/datadog_api_client.v2.model.rst

@@ -37965,6 +37965,13 @@ datadog\_api\_client.v2.model.single\_aggregated\_dns\_response\_data\_type modu
    :members:
    :show-inheritance:
 
+datadog\_api\_client.v2.model.single\_entity\_context\_response module
+----------------------------------------------------------------------
+
+.. automodule:: datadog_api_client.v2.model.single_entity_context_response
+   :members:
+   :show-inheritance:
+
 datadog\_api\_client.v2.model.slack\_integration\_metadata module
 -----------------------------------------------------------------
 

examples/v2/security-monitoring/GetSingleEntityContext.py

@@ -0,0 +1,16 @@
+"""
+Get a single entity context returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["get_single_entity_context"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.get_single_entity_context(
+        id="user@example.com",
+    )
+
+    print(response)

src/datadog_api_client/configuration.py

@@ -418,6 +418,7 @@ def __init__(
                 "v2.get_security_monitoring_histsignals_by_job_id": False,
                 "v2.get_security_monitoring_integration_config": False,
                 "v2.get_signal_entities": False,
+                "v2.get_single_entity_context": False,
                 "v2.get_static_analysis_default_rulesets": False,
                 "v2.get_static_analysis_node_types": False,
                 "v2.get_static_analysis_ruleset": False,

src/datadog_api_client/v2/api/security_monitoring_api.py

@@ -156,6 +156,7 @@
     SecurityMonitoringDatasetVersionHistoryResponse,
 )
 from datadog_api_client.v2.model.entity_context_response import EntityContextResponse
+from datadog_api_client.v2.model.single_entity_context_response import SingleEntityContextResponse
 from datadog_api_client.v2.model.security_monitoring_list_rules_response import SecurityMonitoringListRulesResponse
 from datadog_api_client.v2.model.security_monitoring_rule_sort import SecurityMonitoringRuleSort
 from datadog_api_client.v2.model.security_monitoring_rule_response import SecurityMonitoringRuleResponse
@@ -2102,6 +2103,44 @@ def __init__(self, api_client=None):
             api_client=api_client,
         )
 
+        self._get_single_entity_context_endpoint = _Endpoint(
+            settings={
+                "response_type": (SingleEntityContextResponse,),
+                "auth": ["apiKeyAuth", "appKeyAuth", "AuthZ"],
+                "endpoint_path": "/api/v2/security_monitoring/entity_context/{id}",
+                "operation_id": "get_single_entity_context",
+                "http_method": "GET",
+                "version": "v2",
+            },
+            params_map={
+                "id": {
+                    "required": True,
+                    "openapi_types": (str,),
+                    "attribute": "id",
+                    "location": "path",
+                },
+                "_from": {
+                    "openapi_types": (str,),
+                    "attribute": "from",
+                    "location": "query",
+                },
+                "to": {
+                    "openapi_types": (str,),
+                    "attribute": "to",
+                    "location": "query",
+                },
+                "as_of": {
+                    "openapi_types": (str,),
+                    "attribute": "as_of",
+                    "location": "query",
+                },
+            },
+            headers_map={
+                "accept": ["application/json"],
+            },
+            api_client=api_client,
+        )
+
         self._get_static_analysis_default_rulesets_endpoint = _Endpoint(
             settings={
                 "response_type": (DefaultRulesetsPerLanguageResponse,),
@@ -5488,6 +5527,49 @@ def get_signal_notification_rules(
         kwargs: Dict[str, Any] = {}
         return self._get_signal_notification_rules_endpoint.call_with_http_info(**kwargs)
 
+    def get_single_entity_context(
+        self,
+        id: str,
+        *,
+        _from: Union[str, UnsetType] = unset,
+        to: Union[str, UnsetType] = unset,
+        as_of: Union[str, UnsetType] = unset,
+    ) -> SingleEntityContextResponse:
+        """Get a single entity context.
+
+        Get a single entity from the Cloud SIEM entity context store by its identifier, returning the historical
+        revisions of the entity in the requested time range. The endpoint can either return revisions across an
+        interval ( ``from`` / ``to`` ) or the snapshot of the entity at a single point in time ( ``as_of`` ); the two modes
+        are mutually exclusive.
+
+        :param id: The unique identifier of the entity to retrieve.
+        :type id: str
+        :param _from: The start of the time range to query, as an RFC3339 timestamp or a relative time (for example, ``now-7d`` ).
+            Defaults to ``now-7d``. Ignored when ``as_of`` is set.
+        :type _from: str, optional
+        :param to: The end of the time range to query, as an RFC3339 timestamp or a relative time (for example, ``now`` ).
+            Defaults to ``now``. Ignored when ``as_of`` is set.
+        :type to: str, optional
+        :param as_of: A point in time at which to query the entity revisions, as an RFC3339 timestamp, a Unix timestamp
+            (in seconds), or a relative time (for example, ``now-1d`` ). When set, ``from`` and ``to`` are ignored.
+            Cannot be combined with custom ``from`` / ``to`` values.
+        :type as_of: str, optional
+        :rtype: SingleEntityContextResponse
+        """
+        kwargs: Dict[str, Any] = {}
+        kwargs["id"] = id
+
+        if _from is not unset:
+            kwargs["_from"] = _from
+
+        if to is not unset:
+            kwargs["to"] = to
+
+        if as_of is not unset:
+            kwargs["as_of"] = as_of
+
+        return self._get_single_entity_context_endpoint.call_with_http_info(**kwargs)
+
     def get_static_analysis_default_rulesets(
         self,
         language: str,

src/datadog_api_client/v2/model/single_entity_context_response.py

@@ -0,0 +1,40 @@
+# Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+# This product includes software developed at Datadog (https://www.datadoghq.com/).
+# Copyright 2019-Present Datadog, Inc.
+from __future__ import annotations
+
+from typing import TYPE_CHECKING
+
+from datadog_api_client.model_utils import (
+    ModelNormal,
+    cached_property,
+)
+
+
+if TYPE_CHECKING:
+    from datadog_api_client.v2.model.entity_context_entity import EntityContextEntity
+
+
+class SingleEntityContextResponse(ModelNormal):
+    @cached_property
+    def openapi_types(_):
+        from datadog_api_client.v2.model.entity_context_entity import EntityContextEntity
+
+        return {
+            "data": (EntityContextEntity,),
+        }
+
+    attribute_map = {
+        "data": "data",
+    }
+
+    def __init__(self_, data: EntityContextEntity, **kwargs):
+        """
+        Response from the single entity context endpoint, containing the matching entity.
+
+        :param data: A single entity returned by the entity context endpoint.
+        :type data: EntityContextEntity
+        """
+        super().__init__(kwargs)
+
+        self_.data = data

src/datadog_api_client/v2/models/__init__.py

@@ -7689,6 +7689,7 @@
     SingleAggregatedDnsResponseDataAttributesMetricsItems,
 )
 from datadog_api_client.v2.model.single_aggregated_dns_response_data_type import SingleAggregatedDnsResponseDataType
+from datadog_api_client.v2.model.single_entity_context_response import SingleEntityContextResponse
 from datadog_api_client.v2.model.slack_integration_metadata import SlackIntegrationMetadata
 from datadog_api_client.v2.model.slack_integration_metadata_channel_item import SlackIntegrationMetadataChannelItem
 from datadog_api_client.v2.model.slack_trigger_wrapper import SlackTriggerWrapper
@@ -14488,6 +14489,7 @@
     "SingleAggregatedDnsResponseDataAttributesGroupByItems",
     "SingleAggregatedDnsResponseDataAttributesMetricsItems",
     "SingleAggregatedDnsResponseDataType",
+    "SingleEntityContextResponse",
     "SlackIntegrationMetadata",
     "SlackIntegrationMetadataChannelItem",
     "SlackTriggerWrapper",

tests/v2/features/security_monitoring.feature

@@ -1608,6 +1608,30 @@ Feature: Security Monitoring
     When the request is sent
     Then the response status is 200 OK
 
+  @generated @skip @team:DataDog/k9-cloud-siem
+  Scenario: Get a single entity context returns "Bad Request" response
+    Given operation "GetSingleEntityContext" enabled
+    And new "GetSingleEntityContext" request
+    And request contains "id" parameter from "REPLACE.ME"
+    When the request is sent
+    Then the response status is 400 Bad Request
+
+  @generated @skip @team:DataDog/k9-cloud-siem
+  Scenario: Get a single entity context returns "Not Found" response
+    Given operation "GetSingleEntityContext" enabled
+    And new "GetSingleEntityContext" request
+    And request contains "id" parameter from "REPLACE.ME"
+    When the request is sent
+    Then the response status is 404 Not Found
+
+  @generated @skip @team:DataDog/k9-cloud-siem
+  Scenario: Get a single entity context returns "OK" response
+    Given operation "GetSingleEntityContext" enabled
+    And new "GetSingleEntityContext" request
+    And request contains "id" parameter from "REPLACE.ME"
+    When the request is sent
+    Then the response status is 200 OK
+
   @skip-validation @team:DataDog/k9-cloud-siem
   Scenario: Get a suppression rule returns "Not Found" response
     Given new "GetSecurityMonitoringSuppression" request

tests/v2/features/undo.json

@@ -7227,6 +7227,12 @@
       "type": "safe"
     }
   },
+  "GetSingleEntityContext": {
+    "tag": "Security Monitoring",
+    "undo": {
+      "type": "safe"
+    }
+  },
   "ListSecurityMonitoringRules": {
     "tag": "Security Monitoring",
     "undo": {