diff --git a/clients/go/zms/model.go b/clients/go/zms/model.go
index bebb3a363e4..2121bb2325b 100644
--- a/clients/go/zms/model.go
+++ b/clients/go/zms/model.go
@@ -8093,6 +8093,11 @@ type ReviewObject struct {
 	// last review timestamp of the object
 	//
 	LastReviewedDate *rdl.Timestamp `json:"lastReviewedDate,omitempty" rdl:"optional" yaml:",omitempty"`
+
+	//
+	// creation time of the object
+	//
+	Created rdl.Timestamp `json:"created"`
 }
 
 // NewReviewObject - creates an initialized ReviewObject instance, returns a pointer to it
@@ -8138,6 +8143,9 @@ func (self *ReviewObject) Validate() error {
 			return fmt.Errorf("ReviewObject.name does not contain a valid EntityName (%v)", val.Error)
 		}
 	}
+	if self.Created.IsZero() {
+		return fmt.Errorf("ReviewObject: Missing required field: created")
+	}
 	return nil
 }
 
diff --git a/clients/go/zms/zms_schema.go b/clients/go/zms/zms_schema.go
index 8defef753d3..654b8c5fb8f 100644
--- a/clients/go/zms/zms_schema.go
+++ b/clients/go/zms/zms_schema.go
@@ -833,6 +833,7 @@ func init() {
 	tReviewObject.Field("groupExpiryDays", "Int32", false, nil, "all groups in the object have specified max expiry days")
 	tReviewObject.Field("groupReviewDays", "Int32", false, nil, "all groups in the object have specified max review days")
 	tReviewObject.Field("lastReviewedDate", "Timestamp", true, nil, "last review timestamp of the object")
+	tReviewObject.Field("created", "Timestamp", false, nil, "creation time of the object")
 	sb.AddType(tReviewObject.Build())
 
 	tReviewObjects := rdl.NewStructTypeBuilder("Struct", "ReviewObjects")
diff --git a/provider/aws/sia-ec2/provider.go b/provider/aws/sia-ec2/provider.go
index 9e5fab35807..55c9092a6c3 100644
--- a/provider/aws/sia-ec2/provider.go
+++ b/provider/aws/sia-ec2/provider.go
@@ -76,8 +76,8 @@ func (ec2 EC2Provider) GetSanIp(_ map[string]bool, _ []net.IP, _ ip.Opts) []net.
 	return nil
 }
 
-func (ec2 EC2Provider) GetSuffix() string {
-	return ""
+func (ec2 EC2Provider) GetSuffixes() []string {
+	return []string{}
 }
 
 func (ec2 EC2Provider) CloudAttestationData(_, _, _ string) (string, error) {
diff --git a/provider/aws/sia-eks/provider.go b/provider/aws/sia-eks/provider.go
index 670e00d7d1a..7fa4b775ab8 100644
--- a/provider/aws/sia-eks/provider.go
+++ b/provider/aws/sia-eks/provider.go
@@ -74,8 +74,8 @@ func (eks EKSProvider) GetSanIp(_ map[string]bool, _ []net.IP, _ ip.Opts) []net.
 	return nil
 }
 
-func (eks EKSProvider) GetSuffix() string {
-	return ""
+func (eks EKSProvider) GetSuffixes() []string {
+	return []string{}
 }
 
 func (eks EKSProvider) CloudAttestationData(_, _, _ string) (string, error) {
diff --git a/provider/aws/sia-fargate/provider.go b/provider/aws/sia-fargate/provider.go
index 72999fe4728..59f12e0f16c 100644
--- a/provider/aws/sia-fargate/provider.go
+++ b/provider/aws/sia-fargate/provider.go
@@ -73,8 +73,8 @@ func (fargate FargateProvider) GetSanIp(_ map[string]bool, _ []net.IP, _ ip.Opts
 	return nil
 }
 
-func (fargate FargateProvider) GetSuffix() string {
-	return ""
+func (fargate FargateProvider) GetSuffixes() []string {
+	return []string{}
 }
 
 func (fargate FargateProvider) CloudAttestationData(_, _, _ string) (string, error) {
diff --git a/provider/gcp/sia-gce/provider.go b/provider/gcp/sia-gce/provider.go
index a3eb0a2a651..261668268dc 100644
--- a/provider/gcp/sia-gce/provider.go
+++ b/provider/gcp/sia-gce/provider.go
@@ -80,8 +80,8 @@ func (gce GCEProvider) GetSanIp(_ map[string]bool, _ []net.IP, _ ip.Opts) []net.
 	return nil
 }
 
-func (gce GCEProvider) GetSuffix() string {
-	return ""
+func (gce GCEProvider) GetSuffixes() []string {
+	return []string{}
 }
 
 func (gce GCEProvider) CloudAttestationData(base, svc, ztsServerName string) (string, error) {
diff --git a/provider/gcp/sia-gke/provider.go b/provider/gcp/sia-gke/provider.go
index 9529863c37d..b779c61a504 100644
--- a/provider/gcp/sia-gke/provider.go
+++ b/provider/gcp/sia-gke/provider.go
@@ -80,8 +80,8 @@ func (gke GKEProvider) GetSanIp(_ map[string]bool, _ []net.IP, _ ip.Opts) []net.
 	return nil
 }
 
-func (gke GKEProvider) GetSuffix() string {
-	return ""
+func (gke GKEProvider) GetSuffixes() []string {
+	return []string{}
 }
 
 func (gke GKEProvider) CloudAttestationData(base, svc, ztsServerName string) (string, error) {