diff --git a/3.x/_gen/main.libsonnet b/3.x/_gen/main.libsonnet
index 80b66d2a..fa9f6a01 100644
--- a/3.x/_gen/main.libsonnet
+++ b/3.x/_gen/main.libsonnet
@@ -291,6 +291,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   databricks_virtual_network_peering: (import 'resources/databricks_virtual_network_peering.libsonnet'),
   databricks_workspace: (import 'resources/databricks_workspace.libsonnet'),
   databricks_workspace_customer_managed_key: (import 'resources/databricks_workspace_customer_managed_key.libsonnet'),
+  databricks_workspace_root_dbfs_customer_managed_key: (import 'resources/databricks_workspace_root_dbfs_customer_managed_key.libsonnet'),
   datadog_monitor: (import 'resources/datadog_monitor.libsonnet'),
   datadog_monitor_sso_configuration: (import 'resources/datadog_monitor_sso_configuration.libsonnet'),
   datadog_monitor_tag_rule: (import 'resources/datadog_monitor_tag_rule.libsonnet'),
diff --git a/3.x/_gen/resources/container_group.libsonnet b/3.x/_gen/resources/container_group.libsonnet
index 4c88869d..dffcbd51 100644
--- a/3.x/_gen/resources/container_group.libsonnet
+++ b/3.x/_gen/resources/container_group.libsonnet
@@ -57,7 +57,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         timeout_seconds: timeout_seconds,
       }),
     },
-    '#new':: d.fn(help='\n`azurerm.container_group.container.new` constructs a new object with attributes and blocks configured for the `container`\nTerraform sub block.\n\n\n\n**Args**:\n  - `commands` (`list`): Set the `commands` field on the resulting object. When `null`, the `commands` field will be omitted from the resulting object.\n  - `cpu` (`number`): Set the `cpu` field on the resulting object.\n  - `cpu_limit` (`number`): Set the `cpu_limit` field on the resulting object. When `null`, the `cpu_limit` field will be omitted from the resulting object.\n  - `environment_variables` (`obj`): Set the `environment_variables` field on the resulting object. When `null`, the `environment_variables` field will be omitted from the resulting object.\n  - `image` (`string`): Set the `image` field on the resulting object.\n  - `memory` (`number`): Set the `memory` field on the resulting object.\n  - `memory_limit` (`number`): Set the `memory_limit` field on the resulting object. When `null`, the `memory_limit` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `secure_environment_variables` (`obj`): Set the `secure_environment_variables` field on the resulting object. When `null`, the `secure_environment_variables` field will be omitted from the resulting object.\n  - `gpu` (`list[obj]`): Set the `gpu` field on the resulting object. When `null`, the `gpu` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.gpu.new](#fn-containergpunew) constructor.\n  - `gpu_limit` (`list[obj]`): Set the `gpu_limit` field on the resulting object. When `null`, the `gpu_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.gpu_limit.new](#fn-containergpu_limitnew) constructor.\n  - `liveness_probe` (`list[obj]`): Set the `liveness_probe` field on the resulting object. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.liveness_probe.new](#fn-containerliveness_probenew) constructor.\n  - `ports` (`list[obj]`): Set the `ports` field on the resulting object. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.ports.new](#fn-containerportsnew) constructor.\n  - `readiness_probe` (`list[obj]`): Set the `readiness_probe` field on the resulting object. When `null`, the `readiness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.readiness_probe.new](#fn-containerreadiness_probenew) constructor.\n  - `volume` (`list[obj]`): Set the `volume` field on the resulting object. When `null`, the `volume` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.volume.new](#fn-containervolumenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `container` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`azurerm.container_group.container.new` constructs a new object with attributes and blocks configured for the `container`\nTerraform sub block.\n\n\n\n**Args**:\n  - `commands` (`list`): Set the `commands` field on the resulting object. When `null`, the `commands` field will be omitted from the resulting object.\n  - `cpu` (`number`): Set the `cpu` field on the resulting object.\n  - `cpu_limit` (`number`): Set the `cpu_limit` field on the resulting object. When `null`, the `cpu_limit` field will be omitted from the resulting object.\n  - `environment_variables` (`obj`): Set the `environment_variables` field on the resulting object. When `null`, the `environment_variables` field will be omitted from the resulting object.\n  - `image` (`string`): Set the `image` field on the resulting object.\n  - `memory` (`number`): Set the `memory` field on the resulting object.\n  - `memory_limit` (`number`): Set the `memory_limit` field on the resulting object. When `null`, the `memory_limit` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `secure_environment_variables` (`obj`): Set the `secure_environment_variables` field on the resulting object. When `null`, the `secure_environment_variables` field will be omitted from the resulting object.\n  - `gpu` (`list[obj]`): Set the `gpu` field on the resulting object. When `null`, the `gpu` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.gpu.new](#fn-containergpunew) constructor.\n  - `gpu_limit` (`list[obj]`): Set the `gpu_limit` field on the resulting object. When `null`, the `gpu_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.gpu_limit.new](#fn-containergpu_limitnew) constructor.\n  - `liveness_probe` (`list[obj]`): Set the `liveness_probe` field on the resulting object. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.liveness_probe.new](#fn-containerliveness_probenew) constructor.\n  - `ports` (`list[obj]`): Set the `ports` field on the resulting object. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.ports.new](#fn-containerportsnew) constructor.\n  - `readiness_probe` (`list[obj]`): Set the `readiness_probe` field on the resulting object. When `null`, the `readiness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.readiness_probe.new](#fn-containerreadiness_probenew) constructor.\n  - `security` (`list[obj]`): Set the `security` field on the resulting object. When `null`, the `security` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.security.new](#fn-containersecuritynew) constructor.\n  - `volume` (`list[obj]`): Set the `volume` field on the resulting object. When `null`, the `volume` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.volume.new](#fn-containervolumenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `container` sub block.\n', args=[]),
     new(
       cpu,
       image,
@@ -73,6 +73,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       ports=null,
       readiness_probe=null,
       secure_environment_variables=null,
+      security=null,
       volume=null
     ):: std.prune(a={
       commands: commands,
@@ -89,6 +90,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       ports: ports,
       readiness_probe: readiness_probe,
       secure_environment_variables: secure_environment_variables,
+      security: security,
       volume: volume,
     }),
     ports:: {
@@ -135,6 +137,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         timeout_seconds: timeout_seconds,
       }),
     },
+    security:: {
+      '#new':: d.fn(help='\n`azurerm.container_group.container.security.new` constructs a new object with attributes and blocks configured for the `security`\nTerraform sub block.\n\n\n\n**Args**:\n  - `privilege_enabled` (`bool`): Set the `privilege_enabled` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `security` sub block.\n', args=[]),
+      new(
+        privilege_enabled
+      ):: std.prune(a={
+        privilege_enabled: privilege_enabled,
+      }),
+    },
     volume:: {
       git_repo:: {
         '#new':: d.fn(help='\n`azurerm.container_group.container.volume.git_repo.new` constructs a new object with attributes and blocks configured for the `git_repo`\nTerraform sub block.\n\n\n\n**Args**:\n  - `directory` (`string`): Set the `directory` field on the resulting object. When `null`, the `directory` field will be omitted from the resulting object.\n  - `revision` (`string`): Set the `revision` field on the resulting object. When `null`, the `revision` field will be omitted from the resulting object.\n  - `url` (`string`): Set the `url` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `git_repo` sub block.\n', args=[]),
@@ -231,13 +241,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     }),
   },
   init_container:: {
-    '#new':: d.fn(help='\n`azurerm.container_group.init_container.new` constructs a new object with attributes and blocks configured for the `init_container`\nTerraform sub block.\n\n\n\n**Args**:\n  - `commands` (`list`): Set the `commands` field on the resulting object. When `null`, the `commands` field will be omitted from the resulting object.\n  - `environment_variables` (`obj`): Set the `environment_variables` field on the resulting object. When `null`, the `environment_variables` field will be omitted from the resulting object.\n  - `image` (`string`): Set the `image` field on the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `secure_environment_variables` (`obj`): Set the `secure_environment_variables` field on the resulting object. When `null`, the `secure_environment_variables` field will be omitted from the resulting object.\n  - `volume` (`list[obj]`): Set the `volume` field on the resulting object. When `null`, the `volume` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.volume.new](#fn-init_containervolumenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `init_container` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`azurerm.container_group.init_container.new` constructs a new object with attributes and blocks configured for the `init_container`\nTerraform sub block.\n\n\n\n**Args**:\n  - `commands` (`list`): Set the `commands` field on the resulting object. When `null`, the `commands` field will be omitted from the resulting object.\n  - `environment_variables` (`obj`): Set the `environment_variables` field on the resulting object. When `null`, the `environment_variables` field will be omitted from the resulting object.\n  - `image` (`string`): Set the `image` field on the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `secure_environment_variables` (`obj`): Set the `secure_environment_variables` field on the resulting object. When `null`, the `secure_environment_variables` field will be omitted from the resulting object.\n  - `security` (`list[obj]`): Set the `security` field on the resulting object. When `null`, the `security` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.security.new](#fn-init_containersecuritynew) constructor.\n  - `volume` (`list[obj]`): Set the `volume` field on the resulting object. When `null`, the `volume` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.volume.new](#fn-init_containervolumenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `init_container` sub block.\n', args=[]),
     new(
       image,
       name,
       commands=null,
       environment_variables=null,
       secure_environment_variables=null,
+      security=null,
       volume=null
     ):: std.prune(a={
       commands: commands,
@@ -245,8 +256,17 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       image: image,
       name: name,
       secure_environment_variables: secure_environment_variables,
+      security: security,
       volume: volume,
     }),
+    security:: {
+      '#new':: d.fn(help='\n`azurerm.container_group.init_container.security.new` constructs a new object with attributes and blocks configured for the `security`\nTerraform sub block.\n\n\n\n**Args**:\n  - `privilege_enabled` (`bool`): Set the `privilege_enabled` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `security` sub block.\n', args=[]),
+      new(
+        privilege_enabled
+      ):: std.prune(a={
+        privilege_enabled: privilege_enabled,
+      }),
+    },
     volume:: {
       git_repo:: {
         '#new':: d.fn(help='\n`azurerm.container_group.init_container.volume.git_repo.new` constructs a new object with attributes and blocks configured for the `git_repo`\nTerraform sub block.\n\n\n\n**Args**:\n  - `directory` (`string`): Set the `directory` field on the resulting object. When `null`, the `directory` field will be omitted from the resulting object.\n  - `revision` (`string`): Set the `revision` field on the resulting object. When `null`, the `revision` field will be omitted from the resulting object.\n  - `url` (`string`): Set the `url` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `git_repo` sub block.\n', args=[]),
@@ -284,7 +304,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       }),
     },
   },
-  '#new':: d.fn(help="\n`azurerm.container_group.new` injects a new `azurerm_container_group` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    azurerm.container_group.new('some_id')\n\nYou can get the reference to the `id` field of the created `azurerm.container_group` using the reference:\n\n    $._ref.azurerm_container_group.some_id.get('id')\n\nThis is the same as directly entering `\"${ azurerm_container_group.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `dns_name_label` (`string`): Set the `dns_name_label` field on the resulting resource block. When `null`, the `dns_name_label` field will be omitted from the resulting object.\n  - `dns_name_label_reuse_policy` (`string`): Set the `dns_name_label_reuse_policy` field on the resulting resource block. When `null`, the `dns_name_label_reuse_policy` field will be omitted from the resulting object.\n  - `exposed_port` (`list`): Set the `exposed_port` field on the resulting resource block. When `null`, the `exposed_port` field will be omitted from the resulting object.\n  - `ip_address_type` (`string`): Set the `ip_address_type` field on the resulting resource block. When `null`, the `ip_address_type` field will be omitted from the resulting object.\n  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting resource block. When `null`, the `key_vault_key_id` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting resource block.\n  - `name` (`string`): Set the `name` field on the resulting resource block.\n  - `network_profile_id` (`string`): Set the `network_profile_id` field on the resulting resource block. When `null`, the `network_profile_id` field will be omitted from the resulting object.\n  - `os_type` (`string`): Set the `os_type` field on the resulting resource block.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting resource block.\n  - `restart_policy` (`string`): Set the `restart_policy` field on the resulting resource block. When `null`, the `restart_policy` field will be omitted from the resulting object.\n  - `subnet_ids` (`list`): Set the `subnet_ids` field on the resulting resource block. When `null`, the `subnet_ids` field will be omitted from the resulting object.\n  - `tags` (`obj`): Set the `tags` field on the resulting resource block. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zones` (`list`): Set the `zones` field on the resulting resource block. When `null`, the `zones` field will be omitted from the resulting object.\n  - `container` (`list[obj]`): Set the `container` field on the resulting resource block. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.new](#fn-containernew) constructor.\n  - `diagnostics` (`list[obj]`): Set the `diagnostics` field on the resulting resource block. When `null`, the `diagnostics` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.diagnostics.new](#fn-diagnosticsnew) constructor.\n  - `dns_config` (`list[obj]`): Set the `dns_config` field on the resulting resource block. When `null`, the `dns_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.dns_config.new](#fn-dns_confignew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting resource block. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.identity.new](#fn-identitynew) constructor.\n  - `image_registry_credential` (`list[obj]`): Set the `image_registry_credential` field on the resulting resource block. When `null`, the `image_registry_credential` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.image_registry_credential.new](#fn-image_registry_credentialnew) constructor.\n  - `init_container` (`list[obj]`): Set the `init_container` field on the resulting resource block. When `null`, the `init_container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.new](#fn-init_containernew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`azurerm.container_group.new` injects a new `azurerm_container_group` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    azurerm.container_group.new('some_id')\n\nYou can get the reference to the `id` field of the created `azurerm.container_group` using the reference:\n\n    $._ref.azurerm_container_group.some_id.get('id')\n\nThis is the same as directly entering `\"${ azurerm_container_group.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `dns_name_label` (`string`): Set the `dns_name_label` field on the resulting resource block. When `null`, the `dns_name_label` field will be omitted from the resulting object.\n  - `dns_name_label_reuse_policy` (`string`): Set the `dns_name_label_reuse_policy` field on the resulting resource block. When `null`, the `dns_name_label_reuse_policy` field will be omitted from the resulting object.\n  - `exposed_port` (`list`): Set the `exposed_port` field on the resulting resource block. When `null`, the `exposed_port` field will be omitted from the resulting object.\n  - `ip_address_type` (`string`): Set the `ip_address_type` field on the resulting resource block. When `null`, the `ip_address_type` field will be omitted from the resulting object.\n  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting resource block. When `null`, the `key_vault_key_id` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting resource block.\n  - `name` (`string`): Set the `name` field on the resulting resource block.\n  - `network_profile_id` (`string`): Set the `network_profile_id` field on the resulting resource block. When `null`, the `network_profile_id` field will be omitted from the resulting object.\n  - `os_type` (`string`): Set the `os_type` field on the resulting resource block.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting resource block.\n  - `restart_policy` (`string`): Set the `restart_policy` field on the resulting resource block. When `null`, the `restart_policy` field will be omitted from the resulting object.\n  - `sku` (`string`): Set the `sku` field on the resulting resource block. When `null`, the `sku` field will be omitted from the resulting object.\n  - `subnet_ids` (`list`): Set the `subnet_ids` field on the resulting resource block. When `null`, the `subnet_ids` field will be omitted from the resulting object.\n  - `tags` (`obj`): Set the `tags` field on the resulting resource block. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zones` (`list`): Set the `zones` field on the resulting resource block. When `null`, the `zones` field will be omitted from the resulting object.\n  - `container` (`list[obj]`): Set the `container` field on the resulting resource block. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.new](#fn-containernew) constructor.\n  - `diagnostics` (`list[obj]`): Set the `diagnostics` field on the resulting resource block. When `null`, the `diagnostics` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.diagnostics.new](#fn-diagnosticsnew) constructor.\n  - `dns_config` (`list[obj]`): Set the `dns_config` field on the resulting resource block. When `null`, the `dns_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.dns_config.new](#fn-dns_confignew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting resource block. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.identity.new](#fn-identitynew) constructor.\n  - `image_registry_credential` (`list[obj]`): Set the `image_registry_credential` field on the resulting resource block. When `null`, the `image_registry_credential` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.image_registry_credential.new](#fn-image_registry_credentialnew) constructor.\n  - `init_container` (`list[obj]`): Set the `init_container` field on the resulting resource block. When `null`, the `init_container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.new](#fn-init_containernew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     location,
@@ -304,6 +324,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     key_vault_key_id=null,
     network_profile_id=null,
     restart_policy=null,
+    sku=null,
     subnet_ids=null,
     tags=null,
     timeouts=null,
@@ -330,6 +351,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       os_type=os_type,
       resource_group_name=resource_group_name,
       restart_policy=restart_policy,
+      sku=sku,
       subnet_ids=subnet_ids,
       tags=tags,
       timeouts=timeouts,
@@ -337,7 +359,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`azurerm.container_group.newAttrs` constructs a new object with attributes and blocks configured for the `container_group`\nTerraform resource.\n\nUnlike [azurerm.container_group.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dns_name_label` (`string`): Set the `dns_name_label` field on the resulting object. When `null`, the `dns_name_label` field will be omitted from the resulting object.\n  - `dns_name_label_reuse_policy` (`string`): Set the `dns_name_label_reuse_policy` field on the resulting object. When `null`, the `dns_name_label_reuse_policy` field will be omitted from the resulting object.\n  - `exposed_port` (`list`): Set the `exposed_port` field on the resulting object. When `null`, the `exposed_port` field will be omitted from the resulting object.\n  - `ip_address_type` (`string`): Set the `ip_address_type` field on the resulting object. When `null`, the `ip_address_type` field will be omitted from the resulting object.\n  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting object. When `null`, the `key_vault_key_id` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `network_profile_id` (`string`): Set the `network_profile_id` field on the resulting object. When `null`, the `network_profile_id` field will be omitted from the resulting object.\n  - `os_type` (`string`): Set the `os_type` field on the resulting object.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting object.\n  - `restart_policy` (`string`): Set the `restart_policy` field on the resulting object. When `null`, the `restart_policy` field will be omitted from the resulting object.\n  - `subnet_ids` (`list`): Set the `subnet_ids` field on the resulting object. When `null`, the `subnet_ids` field will be omitted from the resulting object.\n  - `tags` (`obj`): Set the `tags` field on the resulting object. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zones` (`list`): Set the `zones` field on the resulting object. When `null`, the `zones` field will be omitted from the resulting object.\n  - `container` (`list[obj]`): Set the `container` field on the resulting object. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.new](#fn-containernew) constructor.\n  - `diagnostics` (`list[obj]`): Set the `diagnostics` field on the resulting object. When `null`, the `diagnostics` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.diagnostics.new](#fn-diagnosticsnew) constructor.\n  - `dns_config` (`list[obj]`): Set the `dns_config` field on the resulting object. When `null`, the `dns_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.dns_config.new](#fn-dns_confignew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting object. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.identity.new](#fn-identitynew) constructor.\n  - `image_registry_credential` (`list[obj]`): Set the `image_registry_credential` field on the resulting object. When `null`, the `image_registry_credential` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.image_registry_credential.new](#fn-image_registry_credentialnew) constructor.\n  - `init_container` (`list[obj]`): Set the `init_container` field on the resulting object. When `null`, the `init_container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.new](#fn-init_containernew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_group` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`azurerm.container_group.newAttrs` constructs a new object with attributes and blocks configured for the `container_group`\nTerraform resource.\n\nUnlike [azurerm.container_group.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dns_name_label` (`string`): Set the `dns_name_label` field on the resulting object. When `null`, the `dns_name_label` field will be omitted from the resulting object.\n  - `dns_name_label_reuse_policy` (`string`): Set the `dns_name_label_reuse_policy` field on the resulting object. When `null`, the `dns_name_label_reuse_policy` field will be omitted from the resulting object.\n  - `exposed_port` (`list`): Set the `exposed_port` field on the resulting object. When `null`, the `exposed_port` field will be omitted from the resulting object.\n  - `ip_address_type` (`string`): Set the `ip_address_type` field on the resulting object. When `null`, the `ip_address_type` field will be omitted from the resulting object.\n  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting object. When `null`, the `key_vault_key_id` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `network_profile_id` (`string`): Set the `network_profile_id` field on the resulting object. When `null`, the `network_profile_id` field will be omitted from the resulting object.\n  - `os_type` (`string`): Set the `os_type` field on the resulting object.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting object.\n  - `restart_policy` (`string`): Set the `restart_policy` field on the resulting object. When `null`, the `restart_policy` field will be omitted from the resulting object.\n  - `sku` (`string`): Set the `sku` field on the resulting object. When `null`, the `sku` field will be omitted from the resulting object.\n  - `subnet_ids` (`list`): Set the `subnet_ids` field on the resulting object. When `null`, the `subnet_ids` field will be omitted from the resulting object.\n  - `tags` (`obj`): Set the `tags` field on the resulting object. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zones` (`list`): Set the `zones` field on the resulting object. When `null`, the `zones` field will be omitted from the resulting object.\n  - `container` (`list[obj]`): Set the `container` field on the resulting object. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.new](#fn-containernew) constructor.\n  - `diagnostics` (`list[obj]`): Set the `diagnostics` field on the resulting object. When `null`, the `diagnostics` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.diagnostics.new](#fn-diagnosticsnew) constructor.\n  - `dns_config` (`list[obj]`): Set the `dns_config` field on the resulting object. When `null`, the `dns_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.dns_config.new](#fn-dns_confignew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting object. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.identity.new](#fn-identitynew) constructor.\n  - `image_registry_credential` (`list[obj]`): Set the `image_registry_credential` field on the resulting object. When `null`, the `image_registry_credential` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.image_registry_credential.new](#fn-image_registry_credentialnew) constructor.\n  - `init_container` (`list[obj]`): Set the `init_container` field on the resulting object. When `null`, the `init_container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.new](#fn-init_containernew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_group` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     location,
     name,
@@ -356,6 +378,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     key_vault_key_id=null,
     network_profile_id=null,
     restart_policy=null,
+    sku=null,
     subnet_ids=null,
     tags=null,
     timeouts=null,
@@ -378,6 +401,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     os_type: os_type,
     resource_group_name: resource_group_name,
     restart_policy: restart_policy,
+    sku: sku,
     subnet_ids: subnet_ids,
     tags: tags,
     timeouts: timeouts,
@@ -627,6 +651,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withSku':: d.fn(help='`azurerm.string.withSku` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the sku field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `sku` field.\n', args=[]),
+  withSku(resourceLabel, value): {
+    resource+: {
+      azurerm_container_group+: {
+        [resourceLabel]+: {
+          sku: value,
+        },
+      },
+    },
+  },
   '#withSubnetIds':: d.fn(help='`azurerm.list.withSubnetIds` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the subnet_ids field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `subnet_ids` field.\n', args=[]),
   withSubnetIds(resourceLabel, value): {
     resource+: {
diff --git a/3.x/_gen/resources/databricks_workspace_root_dbfs_customer_managed_key.libsonnet b/3.x/_gen/resources/databricks_workspace_root_dbfs_customer_managed_key.libsonnet
new file mode 100644
index 00000000..ac61da87
--- /dev/null
+++ b/3.x/_gen/resources/databricks_workspace_root_dbfs_customer_managed_key.libsonnet
@@ -0,0 +1,82 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='databricks_workspace_root_dbfs_customer_managed_key', url='', help='`databricks_workspace_root_dbfs_customer_managed_key` represents the `azurerm_databricks_workspace_root_dbfs_customer_managed_key` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`azurerm.databricks_workspace_root_dbfs_customer_managed_key.new` injects a new `azurerm_databricks_workspace_root_dbfs_customer_managed_key` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    azurerm.databricks_workspace_root_dbfs_customer_managed_key.new('some_id')\n\nYou can get the reference to the `id` field of the created `azurerm.databricks_workspace_root_dbfs_customer_managed_key` using the reference:\n\n    $._ref.azurerm_databricks_workspace_root_dbfs_customer_managed_key.some_id.get('id')\n\nThis is the same as directly entering `\"${ azurerm_databricks_workspace_root_dbfs_customer_managed_key.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting resource block.\n  - `workspace_id` (`string`): Set the `workspace_id` field on the resulting resource block.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.databricks_workspace_root_dbfs_customer_managed_key.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    key_vault_key_id,
+    workspace_id,
+    timeouts=null,
+    _meta={}
+  ):: tf.withResource(
+    type='azurerm_databricks_workspace_root_dbfs_customer_managed_key',
+    label=resourceLabel,
+    attrs=self.newAttrs(key_vault_key_id=key_vault_key_id, timeouts=timeouts, workspace_id=workspace_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`azurerm.databricks_workspace_root_dbfs_customer_managed_key.newAttrs` constructs a new object with attributes and blocks configured for the `databricks_workspace_root_dbfs_customer_managed_key`\nTerraform resource.\n\nUnlike [azurerm.databricks_workspace_root_dbfs_customer_managed_key.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting object.\n  - `workspace_id` (`string`): Set the `workspace_id` field on the resulting object.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.databricks_workspace_root_dbfs_customer_managed_key.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `databricks_workspace_root_dbfs_customer_managed_key` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    key_vault_key_id,
+    workspace_id,
+    timeouts=null
+  ):: std.prune(a={
+    key_vault_key_id: key_vault_key_id,
+    timeouts: timeouts,
+    workspace_id: workspace_id,
+  }),
+  timeouts:: {
+    '#new':: d.fn(help='\n`azurerm.databricks_workspace_root_dbfs_customer_managed_key.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `read` (`string`): Set the `read` field on the resulting object. When `null`, the `read` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      read=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      read: read,
+      update: update,
+    }),
+  },
+  '#withKeyVaultKeyId':: d.fn(help='`azurerm.string.withKeyVaultKeyId` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the key_vault_key_id field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `key_vault_key_id` field.\n', args=[]),
+  withKeyVaultKeyId(resourceLabel, value): {
+    resource+: {
+      azurerm_databricks_workspace_root_dbfs_customer_managed_key+: {
+        [resourceLabel]+: {
+          key_vault_key_id: value,
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`azurerm.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [azurerm.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      azurerm_databricks_workspace_root_dbfs_customer_managed_key+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`azurerm.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [azurerm.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      azurerm_databricks_workspace_root_dbfs_customer_managed_key+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+  '#withWorkspaceId':: d.fn(help='`azurerm.string.withWorkspaceId` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the workspace_id field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `workspace_id` field.\n', args=[]),
+  withWorkspaceId(resourceLabel, value): {
+    resource+: {
+      azurerm_databricks_workspace_root_dbfs_customer_managed_key+: {
+        [resourceLabel]+: {
+          workspace_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/3.x/_gen/resources/linux_web_app.libsonnet b/3.x/_gen/resources/linux_web_app.libsonnet
index 532be2f3..ce22b533 100644
--- a/3.x/_gen/resources/linux_web_app.libsonnet
+++ b/3.x/_gen/resources/linux_web_app.libsonnet
@@ -655,21 +655,21 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           }),
         },
         status_code:: {
-          '#new':: d.fn(help='\n`azurerm.linux_web_app.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`azurerm.linux_web_app.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
           new(
             count,
             interval,
             status_code_range,
             path=null,
             sub_status=null,
-            win32_status=null
+            win32_status_code=null
           ):: std.prune(a={
             count: count,
             interval: interval,
             path: path,
             status_code_range: status_code_range,
             sub_status: sub_status,
-            win32_status: win32_status,
+            win32_status_code: win32_status_code,
           }),
         },
       },
diff --git a/3.x/_gen/resources/linux_web_app_slot.libsonnet b/3.x/_gen/resources/linux_web_app_slot.libsonnet
index 9c359554..5460cd76 100644
--- a/3.x/_gen/resources/linux_web_app_slot.libsonnet
+++ b/3.x/_gen/resources/linux_web_app_slot.libsonnet
@@ -647,21 +647,21 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           }),
         },
         status_code:: {
-          '#new':: d.fn(help='\n`azurerm.linux_web_app_slot.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`azurerm.linux_web_app_slot.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
           new(
             count,
             interval,
             status_code_range,
             path=null,
             sub_status=null,
-            win32_status=null
+            win32_status_code=null
           ):: std.prune(a={
             count: count,
             interval: interval,
             path: path,
             status_code_range: status_code_range,
             sub_status: sub_status,
-            win32_status: win32_status,
+            win32_status_code: win32_status_code,
           }),
         },
       },
diff --git a/3.x/_gen/resources/servicebus_namespace.libsonnet b/3.x/_gen/resources/servicebus_namespace.libsonnet
index 315c8c5b..3c469ad8 100644
--- a/3.x/_gen/resources/servicebus_namespace.libsonnet
+++ b/3.x/_gen/resources/servicebus_namespace.libsonnet
@@ -24,7 +24,33 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       type: type,
     }),
   },
-  '#new':: d.fn(help="\n`azurerm.servicebus_namespace.new` injects a new `azurerm_servicebus_namespace` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    azurerm.servicebus_namespace.new('some_id')\n\nYou can get the reference to the `id` field of the created `azurerm.servicebus_namespace` using the reference:\n\n    $._ref.azurerm_servicebus_namespace.some_id.get('id')\n\nThis is the same as directly entering `\"${ azurerm_servicebus_namespace.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `capacity` (`number`): Set the `capacity` field on the resulting resource block. When `null`, the `capacity` field will be omitted from the resulting object.\n  - `local_auth_enabled` (`bool`): Set the `local_auth_enabled` field on the resulting resource block. When `null`, the `local_auth_enabled` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting resource block.\n  - `minimum_tls_version` (`string`): Set the `minimum_tls_version` field on the resulting resource block. When `null`, the `minimum_tls_version` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting resource block.\n  - `public_network_access_enabled` (`bool`): Set the `public_network_access_enabled` field on the resulting resource block. When `null`, the `public_network_access_enabled` field will be omitted from the resulting object.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting resource block.\n  - `sku` (`string`): Set the `sku` field on the resulting resource block.\n  - `tags` (`obj`): Set the `tags` field on the resulting resource block. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone_redundant` (`bool`): Set the `zone_redundant` field on the resulting resource block. When `null`, the `zone_redundant` field will be omitted from the resulting object.\n  - `customer_managed_key` (`list[obj]`): Set the `customer_managed_key` field on the resulting resource block. When `null`, the `customer_managed_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.customer_managed_key.new](#fn-customer_managed_keynew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting resource block. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.identity.new](#fn-identitynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  network_rule_set:: {
+    network_rules:: {
+      '#new':: d.fn(help='\n`azurerm.servicebus_namespace.network_rule_set.network_rules.new` constructs a new object with attributes and blocks configured for the `network_rules`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ignore_missing_vnet_service_endpoint` (`bool`): Set the `ignore_missing_vnet_service_endpoint` field on the resulting object. When `null`, the `ignore_missing_vnet_service_endpoint` field will be omitted from the resulting object.\n  - `subnet_id` (`string`): Set the `subnet_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `network_rules` sub block.\n', args=[]),
+      new(
+        subnet_id,
+        ignore_missing_vnet_service_endpoint=null
+      ):: std.prune(a={
+        ignore_missing_vnet_service_endpoint: ignore_missing_vnet_service_endpoint,
+        subnet_id: subnet_id,
+      }),
+    },
+    '#new':: d.fn(help='\n`azurerm.servicebus_namespace.network_rule_set.new` constructs a new object with attributes and blocks configured for the `network_rule_set`\nTerraform sub block.\n\n\n\n**Args**:\n  - `default_action` (`string`): Set the `default_action` field on the resulting object. When `null`, the `default_action` field will be omitted from the resulting object.\n  - `ip_rules` (`list`): Set the `ip_rules` field on the resulting object. When `null`, the `ip_rules` field will be omitted from the resulting object.\n  - `public_network_access_enabled` (`bool`): Set the `public_network_access_enabled` field on the resulting object. When `null`, the `public_network_access_enabled` field will be omitted from the resulting object.\n  - `trusted_services_allowed` (`bool`): Set the `trusted_services_allowed` field on the resulting object. When `null`, the `trusted_services_allowed` field will be omitted from the resulting object.\n  - `network_rules` (`list[obj]`): Set the `network_rules` field on the resulting object. When `null`, the `network_rules` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.network_rule_set.network_rules.new](#fn-network_rule_setnetwork_rulesnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_rule_set` sub block.\n', args=[]),
+    new(
+      default_action=null,
+      ip_rules=null,
+      network_rules=null,
+      public_network_access_enabled=null,
+      trusted_services_allowed=null
+    ):: std.prune(a={
+      default_action: default_action,
+      ip_rules: ip_rules,
+      network_rules: network_rules,
+      public_network_access_enabled: public_network_access_enabled,
+      trusted_services_allowed: trusted_services_allowed,
+    }),
+  },
+  '#new':: d.fn(help="\n`azurerm.servicebus_namespace.new` injects a new `azurerm_servicebus_namespace` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    azurerm.servicebus_namespace.new('some_id')\n\nYou can get the reference to the `id` field of the created `azurerm.servicebus_namespace` using the reference:\n\n    $._ref.azurerm_servicebus_namespace.some_id.get('id')\n\nThis is the same as directly entering `\"${ azurerm_servicebus_namespace.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `capacity` (`number`): Set the `capacity` field on the resulting resource block. When `null`, the `capacity` field will be omitted from the resulting object.\n  - `local_auth_enabled` (`bool`): Set the `local_auth_enabled` field on the resulting resource block. When `null`, the `local_auth_enabled` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting resource block.\n  - `minimum_tls_version` (`string`): Set the `minimum_tls_version` field on the resulting resource block. When `null`, the `minimum_tls_version` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting resource block.\n  - `public_network_access_enabled` (`bool`): Set the `public_network_access_enabled` field on the resulting resource block. When `null`, the `public_network_access_enabled` field will be omitted from the resulting object.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting resource block.\n  - `sku` (`string`): Set the `sku` field on the resulting resource block.\n  - `tags` (`obj`): Set the `tags` field on the resulting resource block. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone_redundant` (`bool`): Set the `zone_redundant` field on the resulting resource block. When `null`, the `zone_redundant` field will be omitted from the resulting object.\n  - `customer_managed_key` (`list[obj]`): Set the `customer_managed_key` field on the resulting resource block. When `null`, the `customer_managed_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.customer_managed_key.new](#fn-customer_managed_keynew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting resource block. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.identity.new](#fn-identitynew) constructor.\n  - `network_rule_set` (`list[obj]`): Set the `network_rule_set` field on the resulting resource block. When `null`, the `network_rule_set` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.network_rule_set.new](#fn-network_rule_setnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     location,
@@ -36,6 +62,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     identity=null,
     local_auth_enabled=null,
     minimum_tls_version=null,
+    network_rule_set=null,
     public_network_access_enabled=null,
     tags=null,
     timeouts=null,
@@ -52,6 +79,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       location=location,
       minimum_tls_version=minimum_tls_version,
       name=name,
+      network_rule_set=network_rule_set,
       public_network_access_enabled=public_network_access_enabled,
       resource_group_name=resource_group_name,
       sku=sku,
@@ -61,7 +89,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`azurerm.servicebus_namespace.newAttrs` constructs a new object with attributes and blocks configured for the `servicebus_namespace`\nTerraform resource.\n\nUnlike [azurerm.servicebus_namespace.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `capacity` (`number`): Set the `capacity` field on the resulting object. When `null`, the `capacity` field will be omitted from the resulting object.\n  - `local_auth_enabled` (`bool`): Set the `local_auth_enabled` field on the resulting object. When `null`, the `local_auth_enabled` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object.\n  - `minimum_tls_version` (`string`): Set the `minimum_tls_version` field on the resulting object. When `null`, the `minimum_tls_version` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `public_network_access_enabled` (`bool`): Set the `public_network_access_enabled` field on the resulting object. When `null`, the `public_network_access_enabled` field will be omitted from the resulting object.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting object.\n  - `sku` (`string`): Set the `sku` field on the resulting object.\n  - `tags` (`obj`): Set the `tags` field on the resulting object. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone_redundant` (`bool`): Set the `zone_redundant` field on the resulting object. When `null`, the `zone_redundant` field will be omitted from the resulting object.\n  - `customer_managed_key` (`list[obj]`): Set the `customer_managed_key` field on the resulting object. When `null`, the `customer_managed_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.customer_managed_key.new](#fn-customer_managed_keynew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting object. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.identity.new](#fn-identitynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `servicebus_namespace` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`azurerm.servicebus_namespace.newAttrs` constructs a new object with attributes and blocks configured for the `servicebus_namespace`\nTerraform resource.\n\nUnlike [azurerm.servicebus_namespace.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `capacity` (`number`): Set the `capacity` field on the resulting object. When `null`, the `capacity` field will be omitted from the resulting object.\n  - `local_auth_enabled` (`bool`): Set the `local_auth_enabled` field on the resulting object. When `null`, the `local_auth_enabled` field will be omitted from the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object.\n  - `minimum_tls_version` (`string`): Set the `minimum_tls_version` field on the resulting object. When `null`, the `minimum_tls_version` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `public_network_access_enabled` (`bool`): Set the `public_network_access_enabled` field on the resulting object. When `null`, the `public_network_access_enabled` field will be omitted from the resulting object.\n  - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting object.\n  - `sku` (`string`): Set the `sku` field on the resulting object.\n  - `tags` (`obj`): Set the `tags` field on the resulting object. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone_redundant` (`bool`): Set the `zone_redundant` field on the resulting object. When `null`, the `zone_redundant` field will be omitted from the resulting object.\n  - `customer_managed_key` (`list[obj]`): Set the `customer_managed_key` field on the resulting object. When `null`, the `customer_managed_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.customer_managed_key.new](#fn-customer_managed_keynew) constructor.\n  - `identity` (`list[obj]`): Set the `identity` field on the resulting object. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.identity.new](#fn-identitynew) constructor.\n  - `network_rule_set` (`list[obj]`): Set the `network_rule_set` field on the resulting object. When `null`, the `network_rule_set` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.network_rule_set.new](#fn-network_rule_setnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `servicebus_namespace` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     location,
     name,
@@ -72,6 +100,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     identity=null,
     local_auth_enabled=null,
     minimum_tls_version=null,
+    network_rule_set=null,
     public_network_access_enabled=null,
     tags=null,
     timeouts=null,
@@ -84,6 +113,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     location: location,
     minimum_tls_version: minimum_tls_version,
     name: name,
+    network_rule_set: network_rule_set,
     public_network_access_enabled: public_network_access_enabled,
     resource_group_name: resource_group_name,
     sku: sku,
@@ -195,6 +225,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withNetworkRuleSet':: d.fn(help='`azurerm.list[obj].withNetworkRuleSet` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_rule_set field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [azurerm.list[obj].withNetworkRuleSetMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_rule_set` field.\n', args=[]),
+  withNetworkRuleSet(resourceLabel, value): {
+    resource+: {
+      azurerm_servicebus_namespace+: {
+        [resourceLabel]+: {
+          network_rule_set: value,
+        },
+      },
+    },
+  },
+  '#withNetworkRuleSetMixin':: d.fn(help='`azurerm.list[obj].withNetworkRuleSetMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_rule_set field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [azurerm.list[obj].withNetworkRuleSet](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_rule_set` field.\n', args=[]),
+  withNetworkRuleSetMixin(resourceLabel, value): {
+    resource+: {
+      azurerm_servicebus_namespace+: {
+        [resourceLabel]+: {
+          network_rule_set+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withPublicNetworkAccessEnabled':: d.fn(help='`azurerm.bool.withPublicNetworkAccessEnabled` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the public_network_access_enabled field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `public_network_access_enabled` field.\n', args=[]),
   withPublicNetworkAccessEnabled(resourceLabel, value): {
     resource+: {
diff --git a/3.x/_gen/resources/windows_web_app.libsonnet b/3.x/_gen/resources/windows_web_app.libsonnet
index ca6ade4a..2fd4d6bd 100644
--- a/3.x/_gen/resources/windows_web_app.libsonnet
+++ b/3.x/_gen/resources/windows_web_app.libsonnet
@@ -677,21 +677,21 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           }),
         },
         status_code:: {
-          '#new':: d.fn(help='\n`azurerm.windows_web_app.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`azurerm.windows_web_app.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
           new(
             count,
             interval,
             status_code_range,
             path=null,
             sub_status=null,
-            win32_status=null
+            win32_status_code=null
           ):: std.prune(a={
             count: count,
             interval: interval,
             path: path,
             status_code_range: status_code_range,
             sub_status: sub_status,
-            win32_status: win32_status,
+            win32_status_code: win32_status_code,
           }),
         },
       },
diff --git a/3.x/_gen/resources/windows_web_app_slot.libsonnet b/3.x/_gen/resources/windows_web_app_slot.libsonnet
index ab726f83..afb1a3f3 100644
--- a/3.x/_gen/resources/windows_web_app_slot.libsonnet
+++ b/3.x/_gen/resources/windows_web_app_slot.libsonnet
@@ -669,21 +669,21 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           }),
         },
         status_code:: {
-          '#new':: d.fn(help='\n`azurerm.windows_web_app_slot.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`azurerm.windows_web_app_slot.site_config.auto_heal_setting.trigger.status_code.new` constructs a new object with attributes and blocks configured for the `status_code`\nTerraform sub block.\n\n\n\n**Args**:\n  - `count` (`number`): Set the `count` field on the resulting object.\n  - `interval` (`string`): Set the `interval` field on the resulting object.\n  - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.\n  - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.\n  - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.\n  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `status_code` sub block.\n', args=[]),
           new(
             count,
             interval,
             status_code_range,
             path=null,
             sub_status=null,
-            win32_status=null
+            win32_status_code=null
           ):: std.prune(a={
             count: count,
             interval: interval,
             path: path,
             status_code_range: status_code_range,
             sub_status: sub_status,
-            win32_status: win32_status,
+            win32_status_code: win32_status_code,
           }),
         },
       },
diff --git a/docs/3.x/README.md b/docs/3.x/README.md
index 6d3fac34..daf8a564 100644
--- a/docs/3.x/README.md
+++ b/docs/3.x/README.md
@@ -301,6 +301,7 @@ project.
 * [databricks_virtual_network_peering](databricks_virtual_network_peering.md)
 * [databricks_workspace](databricks_workspace.md)
 * [databricks_workspace_customer_managed_key](databricks_workspace_customer_managed_key.md)
+* [databricks_workspace_root_dbfs_customer_managed_key](databricks_workspace_root_dbfs_customer_managed_key.md)
 * [datadog_monitor](datadog_monitor.md)
 * [datadog_monitor_sso_configuration](datadog_monitor_sso_configuration.md)
 * [datadog_monitor_tag_rule](datadog_monitor_tag_rule.md)
diff --git a/docs/3.x/container_group.md b/docs/3.x/container_group.md
index 53cd1983..00af2519 100644
--- a/docs/3.x/container_group.md
+++ b/docs/3.x/container_group.md
@@ -38,6 +38,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withOsType()`](#fn-withostype)
 * [`fn withResourceGroupName()`](#fn-withresourcegroupname)
 * [`fn withRestartPolicy()`](#fn-withrestartpolicy)
+* [`fn withSku()`](#fn-withsku)
 * [`fn withSubnetIds()`](#fn-withsubnetids)
 * [`fn withTags()`](#fn-withtags)
 * [`fn withTimeouts()`](#fn-withtimeouts)
@@ -59,6 +60,8 @@ This package contains functions and utilities for setting up the resource using
     * [`fn new()`](#fn-containerreadiness_probenew)
     * [`obj container.readiness_probe.http_get`](#obj-containerreadiness_probehttp_get)
       * [`fn new()`](#fn-containerreadiness_probehttp_getnew)
+  * [`obj container.security`](#obj-containersecurity)
+    * [`fn new()`](#fn-containersecuritynew)
   * [`obj container.volume`](#obj-containervolume)
     * [`fn new()`](#fn-containervolumenew)
     * [`obj container.volume.git_repo`](#obj-containervolumegit_repo)
@@ -75,6 +78,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-image_registry_credentialnew)
 * [`obj init_container`](#obj-init_container)
   * [`fn new()`](#fn-init_containernew)
+  * [`obj init_container.security`](#obj-init_containersecurity)
+    * [`fn new()`](#fn-init_containersecuritynew)
   * [`obj init_container.volume`](#obj-init_containervolume)
     * [`fn new()`](#fn-init_containervolumenew)
     * [`obj init_container.volume.git_repo`](#obj-init_containervolumegit_repo)
@@ -122,6 +127,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `os_type` (`string`): Set the `os_type` field on the resulting resource block.
   - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting resource block.
   - `restart_policy` (`string`): Set the `restart_policy` field on the resulting resource block. When `null`, the `restart_policy` field will be omitted from the resulting object.
+  - `sku` (`string`): Set the `sku` field on the resulting resource block. When `null`, the `sku` field will be omitted from the resulting object.
   - `subnet_ids` (`list`): Set the `subnet_ids` field on the resulting resource block. When `null`, the `subnet_ids` field will be omitted from the resulting object.
   - `tags` (`obj`): Set the `tags` field on the resulting resource block. When `null`, the `tags` field will be omitted from the resulting object.
   - `zones` (`list`): Set the `zones` field on the resulting resource block. When `null`, the `zones` field will be omitted from the resulting object.
@@ -166,6 +172,7 @@ injecting into a complete block.
   - `os_type` (`string`): Set the `os_type` field on the resulting object.
   - `resource_group_name` (`string`): Set the `resource_group_name` field on the resulting object.
   - `restart_policy` (`string`): Set the `restart_policy` field on the resulting object. When `null`, the `restart_policy` field will be omitted from the resulting object.
+  - `sku` (`string`): Set the `sku` field on the resulting object. When `null`, the `sku` field will be omitted from the resulting object.
   - `subnet_ids` (`list`): Set the `subnet_ids` field on the resulting object. When `null`, the `subnet_ids` field will be omitted from the resulting object.
   - `tags` (`obj`): Set the `tags` field on the resulting object. When `null`, the `tags` field will be omitted from the resulting object.
   - `zones` (`list`): Set the `zones` field on the resulting object. When `null`, the `zones` field will be omitted from the resulting object.
@@ -579,6 +586,22 @@ Terraform resource block to set or update the restart_policy field.
   - `value` (`string`): The value to set for the `restart_policy` field.
 
 
+### fn withSku
+
+```ts
+withSku()
+```
+
+`azurerm.string.withSku` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the sku field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `sku` field.
+
+
 ### fn withSubnetIds
 
 ```ts
@@ -694,6 +717,7 @@ Terraform sub block.
   - `liveness_probe` (`list[obj]`): Set the `liveness_probe` field on the resulting object. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.liveness_probe.new](#fn-containerliveness_probenew) constructor.
   - `ports` (`list[obj]`): Set the `ports` field on the resulting object. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.ports.new](#fn-containerportsnew) constructor.
   - `readiness_probe` (`list[obj]`): Set the `readiness_probe` field on the resulting object. When `null`, the `readiness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.readiness_probe.new](#fn-containerreadiness_probenew) constructor.
+  - `security` (`list[obj]`): Set the `security` field on the resulting object. When `null`, the `security` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.security.new](#fn-containersecuritynew) constructor.
   - `volume` (`list[obj]`): Set the `volume` field on the resulting object. When `null`, the `volume` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.container.volume.new](#fn-containervolumenew) constructor.
 
 **Returns**:
@@ -882,6 +906,29 @@ Terraform sub block.
   - An attribute object that represents the `http_get` sub block.
 
 
+## obj container.security
+
+
+
+### fn container.security.new
+
+```ts
+new()
+```
+
+
+`azurerm.container_group.container.security.new` constructs a new object with attributes and blocks configured for the `security`
+Terraform sub block.
+
+
+
+**Args**:
+  - `privilege_enabled` (`bool`): Set the `privilege_enabled` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `security` sub block.
+
+
 ## obj container.volume
 
 
@@ -1084,12 +1131,36 @@ Terraform sub block.
   - `image` (`string`): Set the `image` field on the resulting object.
   - `name` (`string`): Set the `name` field on the resulting object.
   - `secure_environment_variables` (`obj`): Set the `secure_environment_variables` field on the resulting object. When `null`, the `secure_environment_variables` field will be omitted from the resulting object.
+  - `security` (`list[obj]`): Set the `security` field on the resulting object. When `null`, the `security` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.security.new](#fn-init_containersecuritynew) constructor.
   - `volume` (`list[obj]`): Set the `volume` field on the resulting object. When `null`, the `volume` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.container_group.init_container.volume.new](#fn-init_containervolumenew) constructor.
 
 **Returns**:
   - An attribute object that represents the `init_container` sub block.
 
 
+## obj init_container.security
+
+
+
+### fn init_container.security.new
+
+```ts
+new()
+```
+
+
+`azurerm.container_group.init_container.security.new` constructs a new object with attributes and blocks configured for the `security`
+Terraform sub block.
+
+
+
+**Args**:
+  - `privilege_enabled` (`bool`): Set the `privilege_enabled` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `security` sub block.
+
+
 ## obj init_container.volume
 
 
diff --git a/docs/3.x/databricks_workspace_root_dbfs_customer_managed_key.md b/docs/3.x/databricks_workspace_root_dbfs_customer_managed_key.md
new file mode 100644
index 00000000..56773131
--- /dev/null
+++ b/docs/3.x/databricks_workspace_root_dbfs_customer_managed_key.md
@@ -0,0 +1,179 @@
+---
+permalink: /databricks_workspace_root_dbfs_customer_managed_key/
+---
+
+# databricks_workspace_root_dbfs_customer_managed_key
+
+`databricks_workspace_root_dbfs_customer_managed_key` represents the `azurerm_databricks_workspace_root_dbfs_customer_managed_key` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withKeyVaultKeyId()`](#fn-withkeyvaultkeyid)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`fn withWorkspaceId()`](#fn-withworkspaceid)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`azurerm.databricks_workspace_root_dbfs_customer_managed_key.new` injects a new `azurerm_databricks_workspace_root_dbfs_customer_managed_key` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    azurerm.databricks_workspace_root_dbfs_customer_managed_key.new('some_id')
+
+You can get the reference to the `id` field of the created `azurerm.databricks_workspace_root_dbfs_customer_managed_key` using the reference:
+
+    $._ref.azurerm_databricks_workspace_root_dbfs_customer_managed_key.some_id.get('id')
+
+This is the same as directly entering `"${ azurerm_databricks_workspace_root_dbfs_customer_managed_key.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting resource block.
+  - `workspace_id` (`string`): Set the `workspace_id` field on the resulting resource block.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.databricks_workspace_root_dbfs_customer_managed_key.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`azurerm.databricks_workspace_root_dbfs_customer_managed_key.newAttrs` constructs a new object with attributes and blocks configured for the `databricks_workspace_root_dbfs_customer_managed_key`
+Terraform resource.
+
+Unlike [azurerm.databricks_workspace_root_dbfs_customer_managed_key.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `key_vault_key_id` (`string`): Set the `key_vault_key_id` field on the resulting object.
+  - `workspace_id` (`string`): Set the `workspace_id` field on the resulting object.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.databricks_workspace_root_dbfs_customer_managed_key.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `databricks_workspace_root_dbfs_customer_managed_key` resource into the root Terraform configuration.
+
+
+### fn withKeyVaultKeyId
+
+```ts
+withKeyVaultKeyId()
+```
+
+`azurerm.string.withKeyVaultKeyId` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the key_vault_key_id field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `key_vault_key_id` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`azurerm.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [azurerm.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`azurerm.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [azurerm.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withWorkspaceId
+
+```ts
+withWorkspaceId()
+```
+
+`azurerm.string.withWorkspaceId` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the workspace_id field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `workspace_id` field.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`azurerm.databricks_workspace_root_dbfs_customer_managed_key.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `read` (`string`): Set the `read` field on the resulting object. When `null`, the `read` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/3.x/linux_web_app.md b/docs/3.x/linux_web_app.md
index 4ad7b15a..cbbbf4c6 100644
--- a/docs/3.x/linux_web_app.md
+++ b/docs/3.x/linux_web_app.md
@@ -1856,7 +1856,7 @@ Terraform sub block.
   - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.
   - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.
   - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.
-  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.
+  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `status_code` sub block.
diff --git a/docs/3.x/linux_web_app_slot.md b/docs/3.x/linux_web_app_slot.md
index f0e58e40..6ccba13f 100644
--- a/docs/3.x/linux_web_app_slot.md
+++ b/docs/3.x/linux_web_app_slot.md
@@ -1795,7 +1795,7 @@ Terraform sub block.
   - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.
   - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.
   - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.
-  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.
+  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `status_code` sub block.
diff --git a/docs/3.x/servicebus_namespace.md b/docs/3.x/servicebus_namespace.md
index d6fc0b17..69df7124 100644
--- a/docs/3.x/servicebus_namespace.md
+++ b/docs/3.x/servicebus_namespace.md
@@ -24,6 +24,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withLocation()`](#fn-withlocation)
 * [`fn withMinimumTlsVersion()`](#fn-withminimumtlsversion)
 * [`fn withName()`](#fn-withname)
+* [`fn withNetworkRuleSet()`](#fn-withnetworkruleset)
+* [`fn withNetworkRuleSetMixin()`](#fn-withnetworkrulesetmixin)
 * [`fn withPublicNetworkAccessEnabled()`](#fn-withpublicnetworkaccessenabled)
 * [`fn withResourceGroupName()`](#fn-withresourcegroupname)
 * [`fn withSku()`](#fn-withsku)
@@ -35,6 +37,10 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-customer_managed_keynew)
 * [`obj identity`](#obj-identity)
   * [`fn new()`](#fn-identitynew)
+* [`obj network_rule_set`](#obj-network_rule_set)
+  * [`fn new()`](#fn-network_rule_setnew)
+  * [`obj network_rule_set.network_rules`](#obj-network_rule_setnetwork_rules)
+    * [`fn new()`](#fn-network_rule_setnetwork_rulesnew)
 * [`obj timeouts`](#obj-timeouts)
   * [`fn new()`](#fn-timeoutsnew)
 
@@ -79,6 +85,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `zone_redundant` (`bool`): Set the `zone_redundant` field on the resulting resource block. When `null`, the `zone_redundant` field will be omitted from the resulting object.
   - `customer_managed_key` (`list[obj]`): Set the `customer_managed_key` field on the resulting resource block. When `null`, the `customer_managed_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.customer_managed_key.new](#fn-customer_managed_keynew) constructor.
   - `identity` (`list[obj]`): Set the `identity` field on the resulting resource block. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.identity.new](#fn-identitynew) constructor.
+  - `network_rule_set` (`list[obj]`): Set the `network_rule_set` field on the resulting resource block. When `null`, the `network_rule_set` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.network_rule_set.new](#fn-network_rule_setnew) constructor.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.timeouts.new](#fn-timeoutsnew) constructor.
 
 **Returns**:
@@ -115,6 +122,7 @@ injecting into a complete block.
   - `zone_redundant` (`bool`): Set the `zone_redundant` field on the resulting object. When `null`, the `zone_redundant` field will be omitted from the resulting object.
   - `customer_managed_key` (`list[obj]`): Set the `customer_managed_key` field on the resulting object. When `null`, the `customer_managed_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.customer_managed_key.new](#fn-customer_managed_keynew) constructor.
   - `identity` (`list[obj]`): Set the `identity` field on the resulting object. When `null`, the `identity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.identity.new](#fn-identitynew) constructor.
+  - `network_rule_set` (`list[obj]`): Set the `network_rule_set` field on the resulting object. When `null`, the `network_rule_set` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.network_rule_set.new](#fn-network_rule_setnew) constructor.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.timeouts.new](#fn-timeoutsnew) constructor.
 
 **Returns**:
@@ -275,6 +283,43 @@ Terraform resource block to set or update the name field.
   - `value` (`string`): The value to set for the `name` field.
 
 
+### fn withNetworkRuleSet
+
+```ts
+withNetworkRuleSet()
+```
+
+`azurerm.list[obj].withNetworkRuleSet` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_rule_set field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [azurerm.list[obj].withNetworkRuleSetMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_rule_set` field.
+
+
+### fn withNetworkRuleSetMixin
+
+```ts
+withNetworkRuleSetMixin()
+```
+
+`azurerm.list[obj].withNetworkRuleSetMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_rule_set field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [azurerm.list[obj].withNetworkRuleSet](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_rule_set` field.
+
+
 ### fn withPublicNetworkAccessEnabled
 
 ```ts
@@ -440,6 +485,57 @@ Terraform sub block.
   - An attribute object that represents the `identity` sub block.
 
 
+## obj network_rule_set
+
+
+
+### fn network_rule_set.new
+
+```ts
+new()
+```
+
+
+`azurerm.servicebus_namespace.network_rule_set.new` constructs a new object with attributes and blocks configured for the `network_rule_set`
+Terraform sub block.
+
+
+
+**Args**:
+  - `default_action` (`string`): Set the `default_action` field on the resulting object. When `null`, the `default_action` field will be omitted from the resulting object.
+  - `ip_rules` (`list`): Set the `ip_rules` field on the resulting object. When `null`, the `ip_rules` field will be omitted from the resulting object.
+  - `public_network_access_enabled` (`bool`): Set the `public_network_access_enabled` field on the resulting object. When `null`, the `public_network_access_enabled` field will be omitted from the resulting object.
+  - `trusted_services_allowed` (`bool`): Set the `trusted_services_allowed` field on the resulting object. When `null`, the `trusted_services_allowed` field will be omitted from the resulting object.
+  - `network_rules` (`list[obj]`): Set the `network_rules` field on the resulting object. When `null`, the `network_rules` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [azurerm.servicebus_namespace.network_rule_set.network_rules.new](#fn-network_rule_setnetwork_rulesnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `network_rule_set` sub block.
+
+
+## obj network_rule_set.network_rules
+
+
+
+### fn network_rule_set.network_rules.new
+
+```ts
+new()
+```
+
+
+`azurerm.servicebus_namespace.network_rule_set.network_rules.new` constructs a new object with attributes and blocks configured for the `network_rules`
+Terraform sub block.
+
+
+
+**Args**:
+  - `ignore_missing_vnet_service_endpoint` (`bool`): Set the `ignore_missing_vnet_service_endpoint` field on the resulting object. When `null`, the `ignore_missing_vnet_service_endpoint` field will be omitted from the resulting object.
+  - `subnet_id` (`string`): Set the `subnet_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `network_rules` sub block.
+
+
 ## obj timeouts
 
 
diff --git a/docs/3.x/windows_web_app.md b/docs/3.x/windows_web_app.md
index 2e376b8f..5837724e 100644
--- a/docs/3.x/windows_web_app.md
+++ b/docs/3.x/windows_web_app.md
@@ -1893,7 +1893,7 @@ Terraform sub block.
   - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.
   - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.
   - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.
-  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.
+  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `status_code` sub block.
diff --git a/docs/3.x/windows_web_app_slot.md b/docs/3.x/windows_web_app_slot.md
index 350cbffe..3dbe4e56 100644
--- a/docs/3.x/windows_web_app_slot.md
+++ b/docs/3.x/windows_web_app_slot.md
@@ -1832,7 +1832,7 @@ Terraform sub block.
   - `path` (`string`): Set the `path` field on the resulting object. When `null`, the `path` field will be omitted from the resulting object.
   - `status_code_range` (`string`): Set the `status_code_range` field on the resulting object.
   - `sub_status` (`number`): Set the `sub_status` field on the resulting object. When `null`, the `sub_status` field will be omitted from the resulting object.
-  - `win32_status` (`number`): Set the `win32_status` field on the resulting object. When `null`, the `win32_status` field will be omitted from the resulting object.
+  - `win32_status_code` (`number`): Set the `win32_status_code` field on the resulting object. When `null`, the `win32_status_code` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `status_code` sub block.