diff --git a/4.x/_gen/data/access_context_manager_access_policy_iam_policy.libsonnet b/4.x/_gen/data/access_context_manager_access_policy_iam_policy.libsonnet
new file mode 100644
index 0000000..199d4fe
--- /dev/null
+++ b/4.x/_gen/data/access_context_manager_access_policy_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_access_context_manager_access_policy_iam_policy', url='', help='`google_access_context_manager_access_policy_iam_policy` represents the `google-beta_google_access_context_manager_access_policy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_access_context_manager_access_policy_iam_policy.new` injects a new `data_google-beta_google_access_context_manager_access_policy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_access_context_manager_access_policy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_access_context_manager_access_policy_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_access_context_manager_access_policy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_access_context_manager_access_policy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    _meta={}
+  ):: tf.withData(
+    type='google_access_context_manager_access_policy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_access_context_manager_access_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_access_context_manager_access_policy_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_access_context_manager_access_policy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_access_context_manager_access_policy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name
+  ):: std.prune(a={
+    name: name,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_access_context_manager_access_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/api_gateway_api_config_iam_policy.libsonnet b/4.x/_gen/data/api_gateway_api_config_iam_policy.libsonnet
new file mode 100644
index 0000000..5ea829e
--- /dev/null
+++ b/4.x/_gen/data/api_gateway_api_config_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_api_gateway_api_config_iam_policy', url='', help='`google_api_gateway_api_config_iam_policy` represents the `google-beta_google_api_gateway_api_config_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_api_gateway_api_config_iam_policy.new` injects a new `data_google-beta_google_api_gateway_api_config_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_api_gateway_api_config_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_api_gateway_api_config_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_api_gateway_api_config_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_api_gateway_api_config_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `api` (`string`): Set the `api` field on the resulting data source block.\n  - `api_config` (`string`): Set the `api_config` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    api,
+    api_config,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_api_gateway_api_config_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(api=api, api_config=api_config, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_api_gateway_api_config_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_api_gateway_api_config_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_api_gateway_api_config_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `api` (`string`): Set the `api` field on the resulting object.\n  - `api_config` (`string`): Set the `api_config` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_api_gateway_api_config_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    api,
+    api_config,
+    project=null
+  ):: std.prune(a={
+    api: api,
+    api_config: api_config,
+    project: project,
+  }),
+  '#withApi':: d.fn(help='`google-beta.string.withApi` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the api field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `api` field.\n', args=[]),
+  withApi(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_api_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          api: value,
+        },
+      },
+    },
+  },
+  '#withApiConfig':: d.fn(help='`google-beta.string.withApiConfig` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the api_config field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `api_config` field.\n', args=[]),
+  withApiConfig(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_api_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          api_config: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_api_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/api_gateway_api_iam_policy.libsonnet b/4.x/_gen/data/api_gateway_api_iam_policy.libsonnet
new file mode 100644
index 0000000..7be1282
--- /dev/null
+++ b/4.x/_gen/data/api_gateway_api_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_api_gateway_api_iam_policy', url='', help='`google_api_gateway_api_iam_policy` represents the `google-beta_google_api_gateway_api_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_api_gateway_api_iam_policy.new` injects a new `data_google-beta_google_api_gateway_api_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_api_gateway_api_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_api_gateway_api_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_api_gateway_api_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_api_gateway_api_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `api` (`string`): Set the `api` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    api,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_api_gateway_api_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(api=api, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_api_gateway_api_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_api_gateway_api_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_api_gateway_api_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `api` (`string`): Set the `api` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_api_gateway_api_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    api,
+    project=null
+  ):: std.prune(a={
+    api: api,
+    project: project,
+  }),
+  '#withApi':: d.fn(help='`google-beta.string.withApi` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the api field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `api` field.\n', args=[]),
+  withApi(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_api_iam_policy+: {
+        [dataSrcLabel]+: {
+          api: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_api_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/api_gateway_gateway_iam_policy.libsonnet b/4.x/_gen/data/api_gateway_gateway_iam_policy.libsonnet
new file mode 100644
index 0000000..c3a15ed
--- /dev/null
+++ b/4.x/_gen/data/api_gateway_gateway_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_api_gateway_gateway_iam_policy', url='', help='`google_api_gateway_gateway_iam_policy` represents the `google-beta_google_api_gateway_gateway_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_api_gateway_gateway_iam_policy.new` injects a new `data_google-beta_google_api_gateway_gateway_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_api_gateway_gateway_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_api_gateway_gateway_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_api_gateway_gateway_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_api_gateway_gateway_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `gateway` (`string`): Set the `gateway` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    gateway,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_api_gateway_gateway_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(gateway=gateway, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_api_gateway_gateway_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_api_gateway_gateway_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_api_gateway_gateway_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `gateway` (`string`): Set the `gateway` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_api_gateway_gateway_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    gateway,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    gateway: gateway,
+    project: project,
+    region: region,
+  }),
+  '#withGateway':: d.fn(help='`google-beta.string.withGateway` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the gateway field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `gateway` field.\n', args=[]),
+  withGateway(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_gateway_iam_policy+: {
+        [dataSrcLabel]+: {
+          gateway: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_gateway_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_api_gateway_gateway_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/apigee_environment_iam_policy.libsonnet b/4.x/_gen/data/apigee_environment_iam_policy.libsonnet
new file mode 100644
index 0000000..c19de30
--- /dev/null
+++ b/4.x/_gen/data/apigee_environment_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_apigee_environment_iam_policy', url='', help='`google_apigee_environment_iam_policy` represents the `google-beta_google_apigee_environment_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_apigee_environment_iam_policy.new` injects a new `data_google-beta_google_apigee_environment_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_apigee_environment_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_apigee_environment_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_apigee_environment_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_apigee_environment_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `env_id` (`string`): Set the `env_id` field on the resulting data source block.\n  - `org_id` (`string`): Set the `org_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    env_id,
+    org_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_apigee_environment_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(env_id=env_id, org_id=org_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_apigee_environment_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_apigee_environment_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_apigee_environment_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `env_id` (`string`): Set the `env_id` field on the resulting object.\n  - `org_id` (`string`): Set the `org_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_apigee_environment_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    env_id,
+    org_id
+  ):: std.prune(a={
+    env_id: env_id,
+    org_id: org_id,
+  }),
+  '#withEnvId':: d.fn(help='`google-beta.string.withEnvId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the env_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `env_id` field.\n', args=[]),
+  withEnvId(dataSrcLabel, value): {
+    data+: {
+      google_apigee_environment_iam_policy+: {
+        [dataSrcLabel]+: {
+          env_id: value,
+        },
+      },
+    },
+  },
+  '#withOrgId':: d.fn(help='`google-beta.string.withOrgId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the org_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `org_id` field.\n', args=[]),
+  withOrgId(dataSrcLabel, value): {
+    data+: {
+      google_apigee_environment_iam_policy+: {
+        [dataSrcLabel]+: {
+          org_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/artifact_registry_repository_iam_policy.libsonnet b/4.x/_gen/data/artifact_registry_repository_iam_policy.libsonnet
new file mode 100644
index 0000000..58c2e6a
--- /dev/null
+++ b/4.x/_gen/data/artifact_registry_repository_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_artifact_registry_repository_iam_policy', url='', help='`google_artifact_registry_repository_iam_policy` represents the `google-beta_google_artifact_registry_repository_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_artifact_registry_repository_iam_policy.new` injects a new `data_google-beta_google_artifact_registry_repository_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_artifact_registry_repository_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_artifact_registry_repository_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_artifact_registry_repository_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_artifact_registry_repository_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    repository,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_artifact_registry_repository_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, repository=repository),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_artifact_registry_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_artifact_registry_repository_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_artifact_registry_repository_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_artifact_registry_repository_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    repository,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    repository: repository,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_artifact_registry_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_artifact_registry_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRepository':: d.fn(help='`google-beta.string.withRepository` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the repository field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `repository` field.\n', args=[]),
+  withRepository(dataSrcLabel, value): {
+    data+: {
+      google_artifact_registry_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          repository: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_analytics_hub_data_exchange_iam_policy.libsonnet b/4.x/_gen/data/bigquery_analytics_hub_data_exchange_iam_policy.libsonnet
new file mode 100644
index 0000000..f977584
--- /dev/null
+++ b/4.x/_gen/data/bigquery_analytics_hub_data_exchange_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigquery_analytics_hub_data_exchange_iam_policy', url='', help='`google_bigquery_analytics_hub_data_exchange_iam_policy` represents the `google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.new` injects a new `data_google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    data_exchange_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_analytics_hub_data_exchange_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(data_exchange_id=data_exchange_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_analytics_hub_data_exchange_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_analytics_hub_data_exchange_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    data_exchange_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    data_exchange_id: data_exchange_id,
+    location: location,
+    project: project,
+  }),
+  '#withDataExchangeId':: d.fn(help='`google-beta.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the data_exchange_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `data_exchange_id` field.\n', args=[]),
+  withDataExchangeId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_data_exchange_iam_policy+: {
+        [dataSrcLabel]+: {
+          data_exchange_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_data_exchange_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_data_exchange_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_analytics_hub_listing_iam_policy.libsonnet b/4.x/_gen/data/bigquery_analytics_hub_listing_iam_policy.libsonnet
new file mode 100644
index 0000000..2582c3f
--- /dev/null
+++ b/4.x/_gen/data/bigquery_analytics_hub_listing_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigquery_analytics_hub_listing_iam_policy', url='', help='`google_bigquery_analytics_hub_listing_iam_policy` represents the `google-beta_google_bigquery_analytics_hub_listing_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.new` injects a new `data_google-beta_google_bigquery_analytics_hub_listing_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigquery_analytics_hub_listing_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigquery_analytics_hub_listing_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigquery_analytics_hub_listing_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.\n  - `listing_id` (`string`): Set the `listing_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    data_exchange_id,
+    listing_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_analytics_hub_listing_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      data_exchange_id=data_exchange_id,
+      listing_id=listing_id,
+      location=location,
+      project=project
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_analytics_hub_listing_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.\n  - `listing_id` (`string`): Set the `listing_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_analytics_hub_listing_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    data_exchange_id,
+    listing_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    data_exchange_id: data_exchange_id,
+    listing_id: listing_id,
+    location: location,
+    project: project,
+  }),
+  '#withDataExchangeId':: d.fn(help='`google-beta.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the data_exchange_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `data_exchange_id` field.\n', args=[]),
+  withDataExchangeId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          data_exchange_id: value,
+        },
+      },
+    },
+  },
+  '#withListingId':: d.fn(help='`google-beta.string.withListingId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the listing_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `listing_id` field.\n', args=[]),
+  withListingId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          listing_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_connection_iam_policy.libsonnet b/4.x/_gen/data/bigquery_connection_iam_policy.libsonnet
new file mode 100644
index 0000000..ce3f69f
--- /dev/null
+++ b/4.x/_gen/data/bigquery_connection_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigquery_connection_iam_policy', url='', help='`google_bigquery_connection_iam_policy` represents the `google-beta_google_bigquery_connection_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigquery_connection_iam_policy.new` injects a new `data_google-beta_google_bigquery_connection_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigquery_connection_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigquery_connection_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigquery_connection_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigquery_connection_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `connection_id` (`string`): Set the `connection_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    connection_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_connection_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(connection_id=connection_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigquery_connection_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_connection_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigquery_connection_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `connection_id` (`string`): Set the `connection_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_connection_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    connection_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    connection_id: connection_id,
+    location: location,
+    project: project,
+  }),
+  '#withConnectionId':: d.fn(help='`google-beta.string.withConnectionId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the connection_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `connection_id` field.\n', args=[]),
+  withConnectionId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          connection_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_datapolicy_data_policy_iam_policy.libsonnet b/4.x/_gen/data/bigquery_datapolicy_data_policy_iam_policy.libsonnet
new file mode 100644
index 0000000..363b9f7
--- /dev/null
+++ b/4.x/_gen/data/bigquery_datapolicy_data_policy_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigquery_datapolicy_data_policy_iam_policy', url='', help='`google_bigquery_datapolicy_data_policy_iam_policy` represents the `google-beta_google_bigquery_datapolicy_data_policy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.new` injects a new `data_google-beta_google_bigquery_datapolicy_data_policy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigquery_datapolicy_data_policy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigquery_datapolicy_data_policy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    data_policy_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_datapolicy_data_policy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(data_policy_id=data_policy_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_datapolicy_data_policy_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_datapolicy_data_policy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    data_policy_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    data_policy_id: data_policy_id,
+    location: location,
+    project: project,
+  }),
+  '#withDataPolicyId':: d.fn(help='`google-beta.string.withDataPolicyId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the data_policy_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `data_policy_id` field.\n', args=[]),
+  withDataPolicyId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_datapolicy_data_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          data_policy_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_datapolicy_data_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_datapolicy_data_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_dataset_iam_policy.libsonnet b/4.x/_gen/data/bigquery_dataset_iam_policy.libsonnet
new file mode 100644
index 0000000..cffe9f2
--- /dev/null
+++ b/4.x/_gen/data/bigquery_dataset_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigquery_dataset_iam_policy', url='', help='`google_bigquery_dataset_iam_policy` represents the `google-beta_google_bigquery_dataset_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigquery_dataset_iam_policy.new` injects a new `data_google-beta_google_bigquery_dataset_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigquery_dataset_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigquery_dataset_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigquery_dataset_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigquery_dataset_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataset_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_dataset_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dataset_id=dataset_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigquery_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_dataset_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigquery_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_dataset_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataset_id,
+    project=null
+  ):: std.prune(a={
+    dataset_id: dataset_id,
+    project: project,
+  }),
+  '#withDatasetId':: d.fn(help='`google-beta.string.withDatasetId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset_id` field.\n', args=[]),
+  withDatasetId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_dataset_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_dataset_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_table_iam_policy.libsonnet b/4.x/_gen/data/bigquery_table_iam_policy.libsonnet
new file mode 100644
index 0000000..41d0652
--- /dev/null
+++ b/4.x/_gen/data/bigquery_table_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigquery_table_iam_policy', url='', help='`google_bigquery_table_iam_policy` represents the `google-beta_google_bigquery_table_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigquery_table_iam_policy.new` injects a new `data_google-beta_google_bigquery_table_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigquery_table_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigquery_table_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigquery_table_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigquery_table_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `table_id` (`string`): Set the `table_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataset_id,
+    table_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_table_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dataset_id=dataset_id, project=project, table_id=table_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigquery_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_table_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigquery_table_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `table_id` (`string`): Set the `table_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_table_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataset_id,
+    table_id,
+    project=null
+  ):: std.prune(a={
+    dataset_id: dataset_id,
+    project: project,
+    table_id: table_id,
+  }),
+  '#withDatasetId':: d.fn(help='`google-beta.string.withDatasetId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset_id` field.\n', args=[]),
+  withDatasetId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTableId':: d.fn(help='`google-beta.string.withTableId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the table_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `table_id` field.\n', args=[]),
+  withTableId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          table_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigtable_instance_iam_policy.libsonnet b/4.x/_gen/data/bigtable_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..66a5d74
--- /dev/null
+++ b/4.x/_gen/data/bigtable_instance_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigtable_instance_iam_policy', url='', help='`google_bigtable_instance_iam_policy` represents the `google-beta_google_bigtable_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigtable_instance_iam_policy.new` injects a new `data_google-beta_google_bigtable_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigtable_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigtable_instance_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigtable_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigtable_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigtable_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigtable_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigtable_instance_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigtable_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigtable_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    project=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+  }),
+  '#withInstance':: d.fn(help='`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigtable_table_iam_policy.libsonnet b/4.x/_gen/data/bigtable_table_iam_policy.libsonnet
new file mode 100644
index 0000000..d2196e0
--- /dev/null
+++ b/4.x/_gen/data/bigtable_table_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_bigtable_table_iam_policy', url='', help='`google_bigtable_table_iam_policy` represents the `google-beta_google_bigtable_table_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_bigtable_table_iam_policy.new` injects a new `data_google-beta_google_bigtable_table_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_bigtable_table_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_bigtable_table_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_bigtable_table_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_bigtable_table_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `table` (`string`): Set the `table` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    table,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigtable_table_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project, table=table),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_bigtable_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigtable_table_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_bigtable_table_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `table` (`string`): Set the `table` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigtable_table_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    table,
+    project=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+    table: table,
+  }),
+  '#withInstance':: d.fn(help='`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTable':: d.fn(help='`google-beta.string.withTable` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the table field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `table` field.\n', args=[]),
+  withTable(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          table: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/billing_account_iam_policy.libsonnet b/4.x/_gen/data/billing_account_iam_policy.libsonnet
new file mode 100644
index 0000000..0c00fa5
--- /dev/null
+++ b/4.x/_gen/data/billing_account_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_billing_account_iam_policy', url='', help='`google_billing_account_iam_policy` represents the `google-beta_google_billing_account_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_billing_account_iam_policy.new` injects a new `data_google-beta_google_billing_account_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_billing_account_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_billing_account_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_billing_account_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_billing_account_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    billing_account_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_billing_account_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(billing_account_id=billing_account_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_billing_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_billing_account_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_billing_account_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_billing_account_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    billing_account_id
+  ):: std.prune(a={
+    billing_account_id: billing_account_id,
+  }),
+  '#withBillingAccountId':: d.fn(help='`google-beta.string.withBillingAccountId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the billing_account_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `billing_account_id` field.\n', args=[]),
+  withBillingAccountId(dataSrcLabel, value): {
+    data+: {
+      google_billing_account_iam_policy+: {
+        [dataSrcLabel]+: {
+          billing_account_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/binary_authorization_attestor_iam_policy.libsonnet b/4.x/_gen/data/binary_authorization_attestor_iam_policy.libsonnet
new file mode 100644
index 0000000..f851f6f
--- /dev/null
+++ b/4.x/_gen/data/binary_authorization_attestor_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_binary_authorization_attestor_iam_policy', url='', help='`google_binary_authorization_attestor_iam_policy` represents the `google-beta_google_binary_authorization_attestor_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_binary_authorization_attestor_iam_policy.new` injects a new `data_google-beta_google_binary_authorization_attestor_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_binary_authorization_attestor_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_binary_authorization_attestor_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_binary_authorization_attestor_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_binary_authorization_attestor_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `attestor` (`string`): Set the `attestor` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    attestor,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_binary_authorization_attestor_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(attestor=attestor, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_binary_authorization_attestor_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_binary_authorization_attestor_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_binary_authorization_attestor_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `attestor` (`string`): Set the `attestor` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_binary_authorization_attestor_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    attestor,
+    project=null
+  ):: std.prune(a={
+    attestor: attestor,
+    project: project,
+  }),
+  '#withAttestor':: d.fn(help='`google-beta.string.withAttestor` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the attestor field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `attestor` field.\n', args=[]),
+  withAttestor(dataSrcLabel, value): {
+    data+: {
+      google_binary_authorization_attestor_iam_policy+: {
+        [dataSrcLabel]+: {
+          attestor: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_binary_authorization_attestor_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_run_service_iam_policy.libsonnet b/4.x/_gen/data/cloud_run_service_iam_policy.libsonnet
new file mode 100644
index 0000000..83639e1
--- /dev/null
+++ b/4.x/_gen/data/cloud_run_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloud_run_service_iam_policy', url='', help='`google_cloud_run_service_iam_policy` represents the `google-beta_google_cloud_run_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloud_run_service_iam_policy.new` injects a new `data_google-beta_google_cloud_run_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloud_run_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloud_run_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloud_run_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloud_run_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_run_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, service=service),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloud_run_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_run_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloud_run_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_run_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    service: service,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withService':: d.fn(help='`google-beta.string.withService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service` field.\n', args=[]),
+  withService(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_run_v2_job_iam_policy.libsonnet b/4.x/_gen/data/cloud_run_v2_job_iam_policy.libsonnet
new file mode 100644
index 0000000..a6b0d3a
--- /dev/null
+++ b/4.x/_gen/data/cloud_run_v2_job_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloud_run_v2_job_iam_policy', url='', help='`google_cloud_run_v2_job_iam_policy` represents the `google-beta_google_cloud_run_v2_job_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloud_run_v2_job_iam_policy.new` injects a new `data_google-beta_google_cloud_run_v2_job_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloud_run_v2_job_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloud_run_v2_job_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloud_run_v2_job_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloud_run_v2_job_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_run_v2_job_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloud_run_v2_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_run_v2_job_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloud_run_v2_job_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_run_v2_job_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_run_v2_service_iam_policy.libsonnet b/4.x/_gen/data/cloud_run_v2_service_iam_policy.libsonnet
new file mode 100644
index 0000000..562651d
--- /dev/null
+++ b/4.x/_gen/data/cloud_run_v2_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloud_run_v2_service_iam_policy', url='', help='`google_cloud_run_v2_service_iam_policy` represents the `google-beta_google_cloud_run_v2_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloud_run_v2_service_iam_policy.new` injects a new `data_google-beta_google_cloud_run_v2_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloud_run_v2_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloud_run_v2_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloud_run_v2_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloud_run_v2_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_run_v2_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloud_run_v2_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_run_v2_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloud_run_v2_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_run_v2_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_tasks_queue_iam_policy.libsonnet b/4.x/_gen/data/cloud_tasks_queue_iam_policy.libsonnet
new file mode 100644
index 0000000..cab9565
--- /dev/null
+++ b/4.x/_gen/data/cloud_tasks_queue_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloud_tasks_queue_iam_policy', url='', help='`google_cloud_tasks_queue_iam_policy` represents the `google-beta_google_cloud_tasks_queue_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloud_tasks_queue_iam_policy.new` injects a new `data_google-beta_google_cloud_tasks_queue_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloud_tasks_queue_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloud_tasks_queue_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloud_tasks_queue_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloud_tasks_queue_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_tasks_queue_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloud_tasks_queue_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_tasks_queue_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloud_tasks_queue_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_tasks_queue_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_tasks_queue_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloud_tasks_queue_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_tasks_queue_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudbuildv2_connection_iam_policy.libsonnet b/4.x/_gen/data/cloudbuildv2_connection_iam_policy.libsonnet
new file mode 100644
index 0000000..0979c3e
--- /dev/null
+++ b/4.x/_gen/data/cloudbuildv2_connection_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloudbuildv2_connection_iam_policy', url='', help='`google_cloudbuildv2_connection_iam_policy` represents the `google-beta_google_cloudbuildv2_connection_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloudbuildv2_connection_iam_policy.new` injects a new `data_google-beta_google_cloudbuildv2_connection_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloudbuildv2_connection_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloudbuildv2_connection_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloudbuildv2_connection_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloudbuildv2_connection_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudbuildv2_connection_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloudbuildv2_connection_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudbuildv2_connection_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloudbuildv2_connection_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudbuildv2_connection_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloudbuildv2_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloudbuildv2_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudbuildv2_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudfunctions2_function_iam_policy.libsonnet b/4.x/_gen/data/cloudfunctions2_function_iam_policy.libsonnet
new file mode 100644
index 0000000..73e8749
--- /dev/null
+++ b/4.x/_gen/data/cloudfunctions2_function_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloudfunctions2_function_iam_policy', url='', help='`google_cloudfunctions2_function_iam_policy` represents the `google-beta_google_cloudfunctions2_function_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloudfunctions2_function_iam_policy.new` injects a new `data_google-beta_google_cloudfunctions2_function_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloudfunctions2_function_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloudfunctions2_function_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloudfunctions2_function_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloudfunctions2_function_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    cloud_function,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudfunctions2_function_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(cloud_function=cloud_function, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloudfunctions2_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudfunctions2_function_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloudfunctions2_function_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudfunctions2_function_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    cloud_function,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    cloud_function: cloud_function,
+    location: location,
+    project: project,
+  }),
+  '#withCloudFunction':: d.fn(help='`google-beta.string.withCloudFunction` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the cloud_function field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `cloud_function` field.\n', args=[]),
+  withCloudFunction(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions2_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          cloud_function: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions2_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions2_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudfunctions_function_iam_policy.libsonnet b/4.x/_gen/data/cloudfunctions_function_iam_policy.libsonnet
new file mode 100644
index 0000000..4caacf6
--- /dev/null
+++ b/4.x/_gen/data/cloudfunctions_function_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloudfunctions_function_iam_policy', url='', help='`google_cloudfunctions_function_iam_policy` represents the `google-beta_google_cloudfunctions_function_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloudfunctions_function_iam_policy.new` injects a new `data_google-beta_google_cloudfunctions_function_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloudfunctions_function_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloudfunctions_function_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloudfunctions_function_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloudfunctions_function_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    cloud_function,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudfunctions_function_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(cloud_function=cloud_function, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloudfunctions_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudfunctions_function_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloudfunctions_function_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudfunctions_function_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    cloud_function,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    cloud_function: cloud_function,
+    project: project,
+    region: region,
+  }),
+  '#withCloudFunction':: d.fn(help='`google-beta.string.withCloudFunction` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the cloud_function field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `cloud_function` field.\n', args=[]),
+  withCloudFunction(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          cloud_function: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudiot_registry_iam_policy.libsonnet b/4.x/_gen/data/cloudiot_registry_iam_policy.libsonnet
new file mode 100644
index 0000000..f21bc36
--- /dev/null
+++ b/4.x/_gen/data/cloudiot_registry_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_cloudiot_registry_iam_policy', url='', help='`google_cloudiot_registry_iam_policy` represents the `google-beta_google_cloudiot_registry_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_cloudiot_registry_iam_policy.new` injects a new `data_google-beta_google_cloudiot_registry_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_cloudiot_registry_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_cloudiot_registry_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_cloudiot_registry_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_cloudiot_registry_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudiot_registry_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_cloudiot_registry_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudiot_registry_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_cloudiot_registry_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudiot_registry_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloudiot_registry_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudiot_registry_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_cloudiot_registry_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_backend_bucket_iam_policy.libsonnet b/4.x/_gen/data/compute_backend_bucket_iam_policy.libsonnet
new file mode 100644
index 0000000..77589f6
--- /dev/null
+++ b/4.x/_gen/data/compute_backend_bucket_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_backend_bucket_iam_policy', url='', help='`google_compute_backend_bucket_iam_policy` represents the `google-beta_google_compute_backend_bucket_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_backend_bucket_iam_policy.new` injects a new `data_google-beta_google_compute_backend_bucket_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_backend_bucket_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_backend_bucket_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_backend_bucket_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_backend_bucket_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_backend_bucket_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_backend_bucket_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_backend_bucket_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_backend_bucket_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_backend_bucket_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_backend_bucket_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_backend_bucket_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_backend_service_iam_policy.libsonnet b/4.x/_gen/data/compute_backend_service_iam_policy.libsonnet
new file mode 100644
index 0000000..a1736ad
--- /dev/null
+++ b/4.x/_gen/data/compute_backend_service_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_backend_service_iam_policy', url='', help='`google_compute_backend_service_iam_policy` represents the `google-beta_google_compute_backend_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_backend_service_iam_policy.new` injects a new `data_google-beta_google_compute_backend_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_backend_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_backend_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_backend_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_backend_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_backend_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_backend_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_backend_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_disk_iam_policy.libsonnet b/4.x/_gen/data/compute_disk_iam_policy.libsonnet
new file mode 100644
index 0000000..97a6d5d
--- /dev/null
+++ b/4.x/_gen/data/compute_disk_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_disk_iam_policy', url='', help='`google_compute_disk_iam_policy` represents the `google-beta_google_compute_disk_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_disk_iam_policy.new` injects a new `data_google-beta_google_compute_disk_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_disk_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_disk_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_disk_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_disk_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    zone=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_disk_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, zone=zone),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_disk_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_disk_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_disk_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    zone=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    zone: zone,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withZone':: d.fn(help='`google-beta.string.withZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `zone` field.\n', args=[]),
+  withZone(dataSrcLabel, value): {
+    data+: {
+      google_compute_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          zone: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_image_iam_policy.libsonnet b/4.x/_gen/data/compute_image_iam_policy.libsonnet
new file mode 100644
index 0000000..9482cc9
--- /dev/null
+++ b/4.x/_gen/data/compute_image_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_image_iam_policy', url='', help='`google_compute_image_iam_policy` represents the `google-beta_google_compute_image_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_image_iam_policy.new` injects a new `data_google-beta_google_compute_image_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_image_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_image_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_image_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_image_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `image` (`string`): Set the `image` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    image,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_image_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(image=image, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_image_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_image_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_image_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `image` (`string`): Set the `image` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_image_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    image,
+    project=null
+  ):: std.prune(a={
+    image: image,
+    project: project,
+  }),
+  '#withImage':: d.fn(help='`google-beta.string.withImage` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the image field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `image` field.\n', args=[]),
+  withImage(dataSrcLabel, value): {
+    data+: {
+      google_compute_image_iam_policy+: {
+        [dataSrcLabel]+: {
+          image: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_image_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_instance_iam_policy.libsonnet b/4.x/_gen/data/compute_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..64b06d3
--- /dev/null
+++ b/4.x/_gen/data/compute_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_instance_iam_policy', url='', help='`google_compute_instance_iam_policy` represents the `google-beta_google_compute_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_instance_iam_policy.new` injects a new `data_google-beta_google_compute_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_instance_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance_name,
+    project=null,
+    zone=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance_name=instance_name, project=project, zone=zone),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_instance_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance_name,
+    project=null,
+    zone=null
+  ):: std.prune(a={
+    instance_name: instance_name,
+    project: project,
+    zone: zone,
+  }),
+  '#withInstanceName':: d.fn(help='`google-beta.string.withInstanceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance_name` field.\n', args=[]),
+  withInstanceName(dataSrcLabel, value): {
+    data+: {
+      google_compute_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance_name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withZone':: d.fn(help='`google-beta.string.withZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `zone` field.\n', args=[]),
+  withZone(dataSrcLabel, value): {
+    data+: {
+      google_compute_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          zone: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_machine_image_iam_policy.libsonnet b/4.x/_gen/data/compute_machine_image_iam_policy.libsonnet
new file mode 100644
index 0000000..f4a274c
--- /dev/null
+++ b/4.x/_gen/data/compute_machine_image_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_machine_image_iam_policy', url='', help='`google_compute_machine_image_iam_policy` represents the `google-beta_google_compute_machine_image_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_machine_image_iam_policy.new` injects a new `data_google-beta_google_compute_machine_image_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_machine_image_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_machine_image_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_machine_image_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_machine_image_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `machine_image` (`string`): Set the `machine_image` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    machine_image,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_machine_image_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(machine_image=machine_image, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_machine_image_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_machine_image_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_machine_image_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `machine_image` (`string`): Set the `machine_image` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_machine_image_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    machine_image,
+    project=null
+  ):: std.prune(a={
+    machine_image: machine_image,
+    project: project,
+  }),
+  '#withMachineImage':: d.fn(help='`google-beta.string.withMachineImage` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the machine_image field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `machine_image` field.\n', args=[]),
+  withMachineImage(dataSrcLabel, value): {
+    data+: {
+      google_compute_machine_image_iam_policy+: {
+        [dataSrcLabel]+: {
+          machine_image: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_machine_image_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_region_backend_service_iam_policy.libsonnet b/4.x/_gen/data/compute_region_backend_service_iam_policy.libsonnet
new file mode 100644
index 0000000..fd56320
--- /dev/null
+++ b/4.x/_gen/data/compute_region_backend_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_region_backend_service_iam_policy', url='', help='`google_compute_region_backend_service_iam_policy` represents the `google-beta_google_compute_region_backend_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_region_backend_service_iam_policy.new` injects a new `data_google-beta_google_compute_region_backend_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_region_backend_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_region_backend_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_region_backend_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_region_backend_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_region_backend_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_region_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_backend_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_region_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_region_backend_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_region_disk_iam_policy.libsonnet b/4.x/_gen/data/compute_region_disk_iam_policy.libsonnet
new file mode 100644
index 0000000..7764c3f
--- /dev/null
+++ b/4.x/_gen/data/compute_region_disk_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_region_disk_iam_policy', url='', help='`google_compute_region_disk_iam_policy` represents the `google-beta_google_compute_region_disk_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_region_disk_iam_policy.new` injects a new `data_google-beta_google_compute_region_disk_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_region_disk_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_region_disk_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_region_disk_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_region_disk_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_region_disk_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_region_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_disk_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_region_disk_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_region_disk_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_snapshot_iam_policy.libsonnet b/4.x/_gen/data/compute_snapshot_iam_policy.libsonnet
new file mode 100644
index 0000000..249af2f
--- /dev/null
+++ b/4.x/_gen/data/compute_snapshot_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_snapshot_iam_policy', url='', help='`google_compute_snapshot_iam_policy` represents the `google-beta_google_compute_snapshot_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_snapshot_iam_policy.new` injects a new `data_google-beta_google_compute_snapshot_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_snapshot_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_snapshot_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_snapshot_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_snapshot_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_snapshot_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_snapshot_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_snapshot_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_snapshot_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_snapshot_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_snapshot_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_snapshot_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_subnetwork_iam_policy.libsonnet b/4.x/_gen/data/compute_subnetwork_iam_policy.libsonnet
new file mode 100644
index 0000000..87aea53
--- /dev/null
+++ b/4.x/_gen/data/compute_subnetwork_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_compute_subnetwork_iam_policy', url='', help='`google_compute_subnetwork_iam_policy` represents the `google-beta_google_compute_subnetwork_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_compute_subnetwork_iam_policy.new` injects a new `data_google-beta_google_compute_subnetwork_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_compute_subnetwork_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_compute_subnetwork_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_compute_subnetwork_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_compute_subnetwork_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    subnetwork,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_subnetwork_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, region=region, subnetwork=subnetwork),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_compute_subnetwork_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_subnetwork_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_compute_subnetwork_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_subnetwork_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    subnetwork,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    project: project,
+    region: region,
+    subnetwork: subnetwork,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_subnetwork_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_compute_subnetwork_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withSubnetwork':: d.fn(help='`google-beta.string.withSubnetwork` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the subnetwork field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `subnetwork` field.\n', args=[]),
+  withSubnetwork(dataSrcLabel, value): {
+    data+: {
+      google_compute_subnetwork_iam_policy+: {
+        [dataSrcLabel]+: {
+          subnetwork: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/container_analysis_note_iam_policy.libsonnet b/4.x/_gen/data/container_analysis_note_iam_policy.libsonnet
new file mode 100644
index 0000000..a01d2a3
--- /dev/null
+++ b/4.x/_gen/data/container_analysis_note_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_container_analysis_note_iam_policy', url='', help='`google_container_analysis_note_iam_policy` represents the `google-beta_google_container_analysis_note_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_container_analysis_note_iam_policy.new` injects a new `data_google-beta_google_container_analysis_note_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_container_analysis_note_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_container_analysis_note_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_container_analysis_note_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_container_analysis_note_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `note` (`string`): Set the `note` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    note,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_container_analysis_note_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(note=note, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_container_analysis_note_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    note,
+    project=null
+  ):: std.prune(a={
+    note: note,
+    project: project,
+  }),
+  '#withNote':: d.fn(help='`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the note field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(dataSrcLabel, value): {
+    data+: {
+      google_container_analysis_note_iam_policy+: {
+        [dataSrcLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_container_analysis_note_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_entry_group_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_entry_group_iam_policy.libsonnet
new file mode 100644
index 0000000..e70a989
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_entry_group_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_data_catalog_entry_group_iam_policy', url='', help='`google_data_catalog_entry_group_iam_policy` represents the `google-beta_google_data_catalog_entry_group_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_data_catalog_entry_group_iam_policy.new` injects a new `data_google-beta_google_data_catalog_entry_group_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_data_catalog_entry_group_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_entry_group_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_data_catalog_entry_group_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_data_catalog_entry_group_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `entry_group` (`string`): Set the `entry_group` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    entry_group,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_entry_group_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(entry_group=entry_group, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_data_catalog_entry_group_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_entry_group_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_data_catalog_entry_group_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `entry_group` (`string`): Set the `entry_group` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_entry_group_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    entry_group,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    entry_group: entry_group,
+    project: project,
+    region: region,
+  }),
+  '#withEntryGroup':: d.fn(help='`google-beta.string.withEntryGroup` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the entry_group field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `entry_group` field.\n', args=[]),
+  withEntryGroup(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_entry_group_iam_policy+: {
+        [dataSrcLabel]+: {
+          entry_group: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_entry_group_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_entry_group_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_policy_tag_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_policy_tag_iam_policy.libsonnet
new file mode 100644
index 0000000..b089606
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_policy_tag_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_data_catalog_policy_tag_iam_policy', url='', help='`google_data_catalog_policy_tag_iam_policy` represents the `google-beta_google_data_catalog_policy_tag_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_data_catalog_policy_tag_iam_policy.new` injects a new `data_google-beta_google_data_catalog_policy_tag_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_data_catalog_policy_tag_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_policy_tag_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_data_catalog_policy_tag_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_data_catalog_policy_tag_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    policy_tag,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_policy_tag_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(policy_tag=policy_tag),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_data_catalog_policy_tag_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_policy_tag_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_data_catalog_policy_tag_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_policy_tag_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    policy_tag
+  ):: std.prune(a={
+    policy_tag: policy_tag,
+  }),
+  '#withPolicyTag':: d.fn(help='`google-beta.string.withPolicyTag` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the policy_tag field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `policy_tag` field.\n', args=[]),
+  withPolicyTag(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_policy_tag_iam_policy+: {
+        [dataSrcLabel]+: {
+          policy_tag: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_tag_template_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_tag_template_iam_policy.libsonnet
new file mode 100644
index 0000000..ee4fa97
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_tag_template_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_data_catalog_tag_template_iam_policy', url='', help='`google_data_catalog_tag_template_iam_policy` represents the `google-beta_google_data_catalog_tag_template_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_data_catalog_tag_template_iam_policy.new` injects a new `data_google-beta_google_data_catalog_tag_template_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_data_catalog_tag_template_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_tag_template_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_data_catalog_tag_template_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_data_catalog_tag_template_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n  - `tag_template` (`string`): Set the `tag_template` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    tag_template,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_tag_template_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, region=region, tag_template=tag_template),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_data_catalog_tag_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_tag_template_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_data_catalog_tag_template_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `tag_template` (`string`): Set the `tag_template` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_tag_template_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    tag_template,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    project: project,
+    region: region,
+    tag_template: tag_template,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_tag_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_tag_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withTagTemplate':: d.fn(help='`google-beta.string.withTagTemplate` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the tag_template field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `tag_template` field.\n', args=[]),
+  withTagTemplate(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_tag_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          tag_template: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_taxonomy_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_taxonomy_iam_policy.libsonnet
new file mode 100644
index 0000000..f4c616d
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_taxonomy_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_data_catalog_taxonomy_iam_policy', url='', help='`google_data_catalog_taxonomy_iam_policy` represents the `google-beta_google_data_catalog_taxonomy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_data_catalog_taxonomy_iam_policy.new` injects a new `data_google-beta_google_data_catalog_taxonomy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_data_catalog_taxonomy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_taxonomy_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_data_catalog_taxonomy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_data_catalog_taxonomy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    taxonomy,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_taxonomy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, region=region, taxonomy=taxonomy),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_data_catalog_taxonomy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_taxonomy_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_data_catalog_taxonomy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_taxonomy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    taxonomy,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    project: project,
+    region: region,
+    taxonomy: taxonomy,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_taxonomy_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_taxonomy_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withTaxonomy':: d.fn(help='`google-beta.string.withTaxonomy` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the taxonomy field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `taxonomy` field.\n', args=[]),
+  withTaxonomy(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_taxonomy_iam_policy+: {
+        [dataSrcLabel]+: {
+          taxonomy: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_fusion_instance_iam_policy.libsonnet b/4.x/_gen/data/data_fusion_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..de4980d
--- /dev/null
+++ b/4.x/_gen/data/data_fusion_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_data_fusion_instance_iam_policy', url='', help='`google_data_fusion_instance_iam_policy` represents the `google-beta_google_data_fusion_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_data_fusion_instance_iam_policy.new` injects a new `data_google-beta_google_data_fusion_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_data_fusion_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_data_fusion_instance_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_data_fusion_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_data_fusion_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_fusion_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_data_fusion_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_fusion_instance_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_data_fusion_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_fusion_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_data_fusion_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_fusion_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_fusion_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataplex_asset_iam_policy.libsonnet b/4.x/_gen/data/dataplex_asset_iam_policy.libsonnet
new file mode 100644
index 0000000..5e9879e
--- /dev/null
+++ b/4.x/_gen/data/dataplex_asset_iam_policy.libsonnet
@@ -0,0 +1,90 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataplex_asset_iam_policy', url='', help='`google_dataplex_asset_iam_policy` represents the `google-beta_google_dataplex_asset_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataplex_asset_iam_policy.new` injects a new `data_google-beta_google_dataplex_asset_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataplex_asset_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataplex_asset_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataplex_asset_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataplex_asset_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `asset` (`string`): Set the `asset` field on the resulting data source block.\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.\n  - `lake` (`string`): Set the `lake` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    asset,
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataplex_asset_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      asset=asset,
+      dataplex_zone=dataplex_zone,
+      lake=lake,
+      location=location,
+      project=project
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataplex_asset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataplex_asset_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataplex_asset_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `asset` (`string`): Set the `asset` field on the resulting object.\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.\n  - `lake` (`string`): Set the `lake` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataplex_asset_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    asset,
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    asset: asset,
+    dataplex_zone: dataplex_zone,
+    lake: lake,
+    location: location,
+    project: project,
+  }),
+  '#withAsset':: d.fn(help='`google-beta.string.withAsset` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the asset field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `asset` field.\n', args=[]),
+  withAsset(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          asset: value,
+        },
+      },
+    },
+  },
+  '#withDataplexZone':: d.fn(help='`google-beta.string.withDataplexZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataplex_zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataplex_zone` field.\n', args=[]),
+  withDataplexZone(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataplex_zone: value,
+        },
+      },
+    },
+  },
+  '#withLake':: d.fn(help='`google-beta.string.withLake` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the lake field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `lake` field.\n', args=[]),
+  withLake(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          lake: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataplex_lake_iam_policy.libsonnet b/4.x/_gen/data/dataplex_lake_iam_policy.libsonnet
new file mode 100644
index 0000000..27b3773
--- /dev/null
+++ b/4.x/_gen/data/dataplex_lake_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataplex_lake_iam_policy', url='', help='`google_dataplex_lake_iam_policy` represents the `google-beta_google_dataplex_lake_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataplex_lake_iam_policy.new` injects a new `data_google-beta_google_dataplex_lake_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataplex_lake_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataplex_lake_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataplex_lake_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataplex_lake_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `lake` (`string`): Set the `lake` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    lake,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataplex_lake_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(lake=lake, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataplex_lake_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataplex_lake_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataplex_lake_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `lake` (`string`): Set the `lake` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataplex_lake_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    lake,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    lake: lake,
+    location: location,
+    project: project,
+  }),
+  '#withLake':: d.fn(help='`google-beta.string.withLake` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the lake field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `lake` field.\n', args=[]),
+  withLake(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_lake_iam_policy+: {
+        [dataSrcLabel]+: {
+          lake: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_lake_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_lake_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataplex_zone_iam_policy.libsonnet b/4.x/_gen/data/dataplex_zone_iam_policy.libsonnet
new file mode 100644
index 0000000..27bc4dd
--- /dev/null
+++ b/4.x/_gen/data/dataplex_zone_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataplex_zone_iam_policy', url='', help='`google_dataplex_zone_iam_policy` represents the `google-beta_google_dataplex_zone_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataplex_zone_iam_policy.new` injects a new `data_google-beta_google_dataplex_zone_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataplex_zone_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataplex_zone_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataplex_zone_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataplex_zone_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.\n  - `lake` (`string`): Set the `lake` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataplex_zone_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      dataplex_zone=dataplex_zone,
+      lake=lake,
+      location=location,
+      project=project
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataplex_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataplex_zone_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataplex_zone_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.\n  - `lake` (`string`): Set the `lake` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataplex_zone_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    dataplex_zone: dataplex_zone,
+    lake: lake,
+    location: location,
+    project: project,
+  }),
+  '#withDataplexZone':: d.fn(help='`google-beta.string.withDataplexZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataplex_zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataplex_zone` field.\n', args=[]),
+  withDataplexZone(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataplex_zone: value,
+        },
+      },
+    },
+  },
+  '#withLake':: d.fn(help='`google-beta.string.withLake` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the lake field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `lake` field.\n', args=[]),
+  withLake(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          lake: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_autoscaling_policy_iam_policy.libsonnet b/4.x/_gen/data/dataproc_autoscaling_policy_iam_policy.libsonnet
new file mode 100644
index 0000000..ab53f94
--- /dev/null
+++ b/4.x/_gen/data/dataproc_autoscaling_policy_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataproc_autoscaling_policy_iam_policy', url='', help='`google_dataproc_autoscaling_policy_iam_policy` represents the `google-beta_google_dataproc_autoscaling_policy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataproc_autoscaling_policy_iam_policy.new` injects a new `data_google-beta_google_dataproc_autoscaling_policy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataproc_autoscaling_policy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataproc_autoscaling_policy_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataproc_autoscaling_policy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataproc_autoscaling_policy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `policy_id` (`string`): Set the `policy_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    policy_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_autoscaling_policy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, policy_id=policy_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataproc_autoscaling_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_autoscaling_policy_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataproc_autoscaling_policy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `policy_id` (`string`): Set the `policy_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_autoscaling_policy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    policy_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    policy_id: policy_id,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_autoscaling_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withPolicyId':: d.fn(help='`google-beta.string.withPolicyId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the policy_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `policy_id` field.\n', args=[]),
+  withPolicyId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_autoscaling_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          policy_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_autoscaling_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_cluster_iam_policy.libsonnet b/4.x/_gen/data/dataproc_cluster_iam_policy.libsonnet
new file mode 100644
index 0000000..77ab792
--- /dev/null
+++ b/4.x/_gen/data/dataproc_cluster_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataproc_cluster_iam_policy', url='', help='`google_dataproc_cluster_iam_policy` represents the `google-beta_google_dataproc_cluster_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataproc_cluster_iam_policy.new` injects a new `data_google-beta_google_dataproc_cluster_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataproc_cluster_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataproc_cluster_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataproc_cluster_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataproc_cluster_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `cluster` (`string`): Set the `cluster` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    cluster,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_cluster_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(cluster=cluster, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataproc_cluster_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_cluster_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataproc_cluster_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `cluster` (`string`): Set the `cluster` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_cluster_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    cluster,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    cluster: cluster,
+    project: project,
+    region: region,
+  }),
+  '#withCluster':: d.fn(help='`google-beta.string.withCluster` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the cluster field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `cluster` field.\n', args=[]),
+  withCluster(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_cluster_iam_policy+: {
+        [dataSrcLabel]+: {
+          cluster: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_cluster_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_cluster_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_job_iam_policy.libsonnet b/4.x/_gen/data/dataproc_job_iam_policy.libsonnet
new file mode 100644
index 0000000..43eaf28
--- /dev/null
+++ b/4.x/_gen/data/dataproc_job_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataproc_job_iam_policy', url='', help='`google_dataproc_job_iam_policy` represents the `google-beta_google_dataproc_job_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataproc_job_iam_policy.new` injects a new `data_google-beta_google_dataproc_job_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataproc_job_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataproc_job_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataproc_job_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataproc_job_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `job_id` (`string`): Set the `job_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    job_id,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_job_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(job_id=job_id, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataproc_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_job_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataproc_job_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `job_id` (`string`): Set the `job_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_job_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    job_id,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    job_id: job_id,
+    project: project,
+    region: region,
+  }),
+  '#withJobId':: d.fn(help='`google-beta.string.withJobId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the job_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `job_id` field.\n', args=[]),
+  withJobId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          job_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_metastore_federation_iam_policy.libsonnet b/4.x/_gen/data/dataproc_metastore_federation_iam_policy.libsonnet
new file mode 100644
index 0000000..d8c4005
--- /dev/null
+++ b/4.x/_gen/data/dataproc_metastore_federation_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataproc_metastore_federation_iam_policy', url='', help='`google_dataproc_metastore_federation_iam_policy` represents the `google-beta_google_dataproc_metastore_federation_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataproc_metastore_federation_iam_policy.new` injects a new `data_google-beta_google_dataproc_metastore_federation_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataproc_metastore_federation_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataproc_metastore_federation_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataproc_metastore_federation_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataproc_metastore_federation_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `federation_id` (`string`): Set the `federation_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    federation_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_metastore_federation_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(federation_id=federation_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataproc_metastore_federation_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_metastore_federation_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataproc_metastore_federation_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `federation_id` (`string`): Set the `federation_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_metastore_federation_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    federation_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    federation_id: federation_id,
+    location: location,
+    project: project,
+  }),
+  '#withFederationId':: d.fn(help='`google-beta.string.withFederationId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the federation_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `federation_id` field.\n', args=[]),
+  withFederationId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_federation_iam_policy+: {
+        [dataSrcLabel]+: {
+          federation_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_federation_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_federation_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_metastore_service_iam_policy.libsonnet b/4.x/_gen/data/dataproc_metastore_service_iam_policy.libsonnet
new file mode 100644
index 0000000..e51c1bb
--- /dev/null
+++ b/4.x/_gen/data/dataproc_metastore_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dataproc_metastore_service_iam_policy', url='', help='`google_dataproc_metastore_service_iam_policy` represents the `google-beta_google_dataproc_metastore_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dataproc_metastore_service_iam_policy.new` injects a new `data_google-beta_google_dataproc_metastore_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dataproc_metastore_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dataproc_metastore_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dataproc_metastore_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dataproc_metastore_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service_id` (`string`): Set the `service_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_metastore_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, service_id=service_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dataproc_metastore_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_metastore_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dataproc_metastore_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service_id` (`string`): Set the `service_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_metastore_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    service_id: service_id,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withServiceId':: d.fn(help='`google-beta.string.withServiceId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_id` field.\n', args=[]),
+  withServiceId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dns_managed_zone_iam_policy.libsonnet b/4.x/_gen/data/dns_managed_zone_iam_policy.libsonnet
new file mode 100644
index 0000000..5ea3cc0
--- /dev/null
+++ b/4.x/_gen/data/dns_managed_zone_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dns_managed_zone_iam_policy', url='', help='`google_dns_managed_zone_iam_policy` represents the `google-beta_google_dns_managed_zone_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_dns_managed_zone_iam_policy.new` injects a new `data_google-beta_google_dns_managed_zone_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_dns_managed_zone_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_dns_managed_zone_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_dns_managed_zone_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_dns_managed_zone_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    managed_zone,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dns_managed_zone_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(managed_zone=managed_zone, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_dns_managed_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dns_managed_zone_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_dns_managed_zone_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dns_managed_zone_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    managed_zone,
+    project=null
+  ):: std.prune(a={
+    managed_zone: managed_zone,
+    project: project,
+  }),
+  '#withManagedZone':: d.fn(help='`google-beta.string.withManagedZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the managed_zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `managed_zone` field.\n', args=[]),
+  withManagedZone(dataSrcLabel, value): {
+    data+: {
+      google_dns_managed_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          managed_zone: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dns_managed_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/endpoints_service_consumers_iam_policy.libsonnet b/4.x/_gen/data/endpoints_service_consumers_iam_policy.libsonnet
new file mode 100644
index 0000000..34d2551
--- /dev/null
+++ b/4.x/_gen/data/endpoints_service_consumers_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_endpoints_service_consumers_iam_policy', url='', help='`google_endpoints_service_consumers_iam_policy` represents the `google-beta_google_endpoints_service_consumers_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_endpoints_service_consumers_iam_policy.new` injects a new `data_google-beta_google_endpoints_service_consumers_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_endpoints_service_consumers_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_endpoints_service_consumers_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_endpoints_service_consumers_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_endpoints_service_consumers_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting data source block.\n  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    consumer_project,
+    service_name,
+    _meta={}
+  ):: tf.withData(
+    type='google_endpoints_service_consumers_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(consumer_project=consumer_project, service_name=service_name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_endpoints_service_consumers_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_endpoints_service_consumers_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_endpoints_service_consumers_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting object.\n  - `service_name` (`string`): Set the `service_name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_endpoints_service_consumers_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    consumer_project,
+    service_name
+  ):: std.prune(a={
+    consumer_project: consumer_project,
+    service_name: service_name,
+  }),
+  '#withConsumerProject':: d.fn(help='`google-beta.string.withConsumerProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the consumer_project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `consumer_project` field.\n', args=[]),
+  withConsumerProject(dataSrcLabel, value): {
+    data+: {
+      google_endpoints_service_consumers_iam_policy+: {
+        [dataSrcLabel]+: {
+          consumer_project: value,
+        },
+      },
+    },
+  },
+  '#withServiceName':: d.fn(help='`google-beta.string.withServiceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_name` field.\n', args=[]),
+  withServiceName(dataSrcLabel, value): {
+    data+: {
+      google_endpoints_service_consumers_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/endpoints_service_iam_policy.libsonnet b/4.x/_gen/data/endpoints_service_iam_policy.libsonnet
new file mode 100644
index 0000000..4820998
--- /dev/null
+++ b/4.x/_gen/data/endpoints_service_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_endpoints_service_iam_policy', url='', help='`google_endpoints_service_iam_policy` represents the `google-beta_google_endpoints_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_endpoints_service_iam_policy.new` injects a new `data_google-beta_google_endpoints_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_endpoints_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_endpoints_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_endpoints_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_endpoints_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service_name,
+    _meta={}
+  ):: tf.withData(
+    type='google_endpoints_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(service_name=service_name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_endpoints_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_endpoints_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_endpoints_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `service_name` (`string`): Set the `service_name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_endpoints_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service_name
+  ):: std.prune(a={
+    service_name: service_name,
+  }),
+  '#withServiceName':: d.fn(help='`google-beta.string.withServiceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_name` field.\n', args=[]),
+  withServiceName(dataSrcLabel, value): {
+    data+: {
+      google_endpoints_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/folder_iam_policy.libsonnet b/4.x/_gen/data/folder_iam_policy.libsonnet
new file mode 100644
index 0000000..a012727
--- /dev/null
+++ b/4.x/_gen/data/folder_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_folder_iam_policy', url='', help='`google_folder_iam_policy` represents the `google-beta_google_folder_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_folder_iam_policy.new` injects a new `data_google-beta_google_folder_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_folder_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_folder_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_folder_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_folder_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `folder` (`string`): Set the `folder` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    folder,
+    _meta={}
+  ):: tf.withData(
+    type='google_folder_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(folder=folder),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_folder_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_folder_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_folder_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `folder` (`string`): Set the `folder` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_folder_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    folder
+  ):: std.prune(a={
+    folder: folder,
+  }),
+  '#withFolder':: d.fn(help='`google-beta.string.withFolder` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the folder field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `folder` field.\n', args=[]),
+  withFolder(dataSrcLabel, value): {
+    data+: {
+      google_folder_iam_policy+: {
+        [dataSrcLabel]+: {
+          folder: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/gke_backup_backup_plan_iam_policy.libsonnet b/4.x/_gen/data/gke_backup_backup_plan_iam_policy.libsonnet
new file mode 100644
index 0000000..00338b4
--- /dev/null
+++ b/4.x/_gen/data/gke_backup_backup_plan_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_gke_backup_backup_plan_iam_policy', url='', help='`google_gke_backup_backup_plan_iam_policy` represents the `google-beta_google_gke_backup_backup_plan_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_gke_backup_backup_plan_iam_policy.new` injects a new `data_google-beta_google_gke_backup_backup_plan_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_gke_backup_backup_plan_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_gke_backup_backup_plan_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_gke_backup_backup_plan_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_gke_backup_backup_plan_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_gke_backup_backup_plan_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_gke_backup_backup_plan_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_backup_backup_plan_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_gke_backup_backup_plan_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_gke_backup_backup_plan_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_gke_backup_backup_plan_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_gke_backup_backup_plan_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_gke_backup_backup_plan_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/gke_hub_membership_iam_policy.libsonnet b/4.x/_gen/data/gke_hub_membership_iam_policy.libsonnet
new file mode 100644
index 0000000..6b61c9e
--- /dev/null
+++ b/4.x/_gen/data/gke_hub_membership_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_gke_hub_membership_iam_policy', url='', help='`google_gke_hub_membership_iam_policy` represents the `google-beta_google_gke_hub_membership_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_gke_hub_membership_iam_policy.new` injects a new `data_google-beta_google_gke_hub_membership_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_gke_hub_membership_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_gke_hub_membership_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_gke_hub_membership_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_gke_hub_membership_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `membership_id` (`string`): Set the `membership_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    membership_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_gke_hub_membership_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(membership_id=membership_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_gke_hub_membership_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_membership_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_gke_hub_membership_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `membership_id` (`string`): Set the `membership_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_gke_hub_membership_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    membership_id,
+    project=null
+  ):: std.prune(a={
+    membership_id: membership_id,
+    project: project,
+  }),
+  '#withMembershipId':: d.fn(help='`google-beta.string.withMembershipId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the membership_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `membership_id` field.\n', args=[]),
+  withMembershipId(dataSrcLabel, value): {
+    data+: {
+      google_gke_hub_membership_iam_policy+: {
+        [dataSrcLabel]+: {
+          membership_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_gke_hub_membership_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_consent_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_consent_store_iam_policy.libsonnet
new file mode 100644
index 0000000..849414f
--- /dev/null
+++ b/4.x/_gen/data/healthcare_consent_store_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_healthcare_consent_store_iam_policy', url='', help='`google_healthcare_consent_store_iam_policy` represents the `google-beta_google_healthcare_consent_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_healthcare_consent_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_consent_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_healthcare_consent_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_healthcare_consent_store_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_healthcare_consent_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_healthcare_consent_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting data source block.\n  - `dataset` (`string`): Set the `dataset` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    consent_store_id,
+    dataset,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_consent_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(consent_store_id=consent_store_id, dataset=dataset),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_healthcare_consent_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_consent_store_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_healthcare_consent_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting object.\n  - `dataset` (`string`): Set the `dataset` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_consent_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    consent_store_id,
+    dataset
+  ):: std.prune(a={
+    consent_store_id: consent_store_id,
+    dataset: dataset,
+  }),
+  '#withConsentStoreId':: d.fn(help='`google-beta.string.withConsentStoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the consent_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `consent_store_id` field.\n', args=[]),
+  withConsentStoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_consent_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          consent_store_id: value,
+        },
+      },
+    },
+  },
+  '#withDataset':: d.fn(help='`google-beta.string.withDataset` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset` field.\n', args=[]),
+  withDataset(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_consent_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_dataset_iam_policy.libsonnet b/4.x/_gen/data/healthcare_dataset_iam_policy.libsonnet
new file mode 100644
index 0000000..241a835
--- /dev/null
+++ b/4.x/_gen/data/healthcare_dataset_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_healthcare_dataset_iam_policy', url='', help='`google_healthcare_dataset_iam_policy` represents the `google-beta_google_healthcare_dataset_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_healthcare_dataset_iam_policy.new` injects a new `data_google-beta_google_healthcare_dataset_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_healthcare_dataset_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_healthcare_dataset_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_healthcare_dataset_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_healthcare_dataset_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataset_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_dataset_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dataset_id=dataset_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_healthcare_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_dataset_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_healthcare_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_dataset_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataset_id
+  ):: std.prune(a={
+    dataset_id: dataset_id,
+  }),
+  '#withDatasetId':: d.fn(help='`google-beta.string.withDatasetId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset_id` field.\n', args=[]),
+  withDatasetId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_dataset_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_dicom_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_dicom_store_iam_policy.libsonnet
new file mode 100644
index 0000000..d2044bd
--- /dev/null
+++ b/4.x/_gen/data/healthcare_dicom_store_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_healthcare_dicom_store_iam_policy', url='', help='`google_healthcare_dicom_store_iam_policy` represents the `google-beta_google_healthcare_dicom_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_healthcare_dicom_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_dicom_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_healthcare_dicom_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_healthcare_dicom_store_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_healthcare_dicom_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_healthcare_dicom_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dicom_store_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_dicom_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dicom_store_id=dicom_store_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_healthcare_dicom_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_dicom_store_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_healthcare_dicom_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_dicom_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dicom_store_id
+  ):: std.prune(a={
+    dicom_store_id: dicom_store_id,
+  }),
+  '#withDicomStoreId':: d.fn(help='`google-beta.string.withDicomStoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dicom_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dicom_store_id` field.\n', args=[]),
+  withDicomStoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_dicom_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          dicom_store_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_fhir_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_fhir_store_iam_policy.libsonnet
new file mode 100644
index 0000000..c8ac5f3
--- /dev/null
+++ b/4.x/_gen/data/healthcare_fhir_store_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_healthcare_fhir_store_iam_policy', url='', help='`google_healthcare_fhir_store_iam_policy` represents the `google-beta_google_healthcare_fhir_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_healthcare_fhir_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_fhir_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_healthcare_fhir_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_healthcare_fhir_store_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_healthcare_fhir_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_healthcare_fhir_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    fhir_store_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_fhir_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(fhir_store_id=fhir_store_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_healthcare_fhir_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_fhir_store_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_healthcare_fhir_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_fhir_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    fhir_store_id
+  ):: std.prune(a={
+    fhir_store_id: fhir_store_id,
+  }),
+  '#withFhirStoreId':: d.fn(help='`google-beta.string.withFhirStoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the fhir_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `fhir_store_id` field.\n', args=[]),
+  withFhirStoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_fhir_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          fhir_store_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_hl7_v2_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_hl7_v2_store_iam_policy.libsonnet
new file mode 100644
index 0000000..47e8573
--- /dev/null
+++ b/4.x/_gen/data/healthcare_hl7_v2_store_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_healthcare_hl7_v2_store_iam_policy', url='', help='`google_healthcare_hl7_v2_store_iam_policy` represents the `google-beta_google_healthcare_hl7_v2_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_healthcare_hl7_v2_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_hl7_v2_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_healthcare_hl7_v2_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_healthcare_hl7_v2_store_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_healthcare_hl7_v2_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_healthcare_hl7_v2_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    hl7_v2_store_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_hl7_v2_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(hl7_v2_store_id=hl7_v2_store_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_healthcare_hl7_v2_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_hl7_v2_store_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_healthcare_hl7_v2_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_hl7_v2_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    hl7_v2_store_id
+  ):: std.prune(a={
+    hl7_v2_store_id: hl7_v2_store_id,
+  }),
+  '#withHl7V2StoreId':: d.fn(help='`google-beta.string.withHl7V2StoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the hl7_v2_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `hl7_v2_store_id` field.\n', args=[]),
+  withHl7V2StoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_hl7_v2_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          hl7_v2_store_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_app_engine_service_iam_policy.libsonnet b/4.x/_gen/data/iap_app_engine_service_iam_policy.libsonnet
new file mode 100644
index 0000000..cf8644f
--- /dev/null
+++ b/4.x/_gen/data/iap_app_engine_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_app_engine_service_iam_policy', url='', help='`google_iap_app_engine_service_iam_policy` represents the `google-beta_google_iap_app_engine_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_app_engine_service_iam_policy.new` injects a new `data_google-beta_google_iap_app_engine_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_app_engine_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_app_engine_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_app_engine_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_app_engine_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    app_id,
+    service,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_app_engine_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(app_id=app_id, project=project, service=service),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_app_engine_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_app_engine_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_app_engine_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_id` (`string`): Set the `app_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_app_engine_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    app_id,
+    service,
+    project=null
+  ):: std.prune(a={
+    app_id: app_id,
+    project: project,
+    service: service,
+  }),
+  '#withAppId':: d.fn(help='`google-beta.string.withAppId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the app_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `app_id` field.\n', args=[]),
+  withAppId(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          app_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withService':: d.fn(help='`google-beta.string.withService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service` field.\n', args=[]),
+  withService(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_app_engine_version_iam_policy.libsonnet b/4.x/_gen/data/iap_app_engine_version_iam_policy.libsonnet
new file mode 100644
index 0000000..7d2955c
--- /dev/null
+++ b/4.x/_gen/data/iap_app_engine_version_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_app_engine_version_iam_policy', url='', help='`google_iap_app_engine_version_iam_policy` represents the `google-beta_google_iap_app_engine_version_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_app_engine_version_iam_policy.new` injects a new `data_google-beta_google_iap_app_engine_version_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_app_engine_version_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_app_engine_version_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_app_engine_version_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_app_engine_version_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting data source block.\n  - `version_id` (`string`): Set the `version_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    app_id,
+    service,
+    version_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_app_engine_version_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      app_id=app_id,
+      project=project,
+      service=service,
+      version_id=version_id
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_app_engine_version_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_app_engine_version_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_app_engine_version_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_id` (`string`): Set the `app_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting object.\n  - `version_id` (`string`): Set the `version_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_app_engine_version_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    app_id,
+    service,
+    version_id,
+    project=null
+  ):: std.prune(a={
+    app_id: app_id,
+    project: project,
+    service: service,
+    version_id: version_id,
+  }),
+  '#withAppId':: d.fn(help='`google-beta.string.withAppId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the app_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `app_id` field.\n', args=[]),
+  withAppId(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          app_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withService':: d.fn(help='`google-beta.string.withService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service` field.\n', args=[]),
+  withService(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          service: value,
+        },
+      },
+    },
+  },
+  '#withVersionId':: d.fn(help='`google-beta.string.withVersionId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the version_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `version_id` field.\n', args=[]),
+  withVersionId(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          version_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_tunnel_iam_policy.libsonnet b/4.x/_gen/data/iap_tunnel_iam_policy.libsonnet
new file mode 100644
index 0000000..3172d7f
--- /dev/null
+++ b/4.x/_gen/data/iap_tunnel_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_tunnel_iam_policy', url='', help='`google_iap_tunnel_iam_policy` represents the `google-beta_google_iap_tunnel_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_tunnel_iam_policy.new` injects a new `data_google-beta_google_iap_tunnel_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_tunnel_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_tunnel_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_tunnel_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_tunnel_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_tunnel_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_tunnel_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_tunnel_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_tunnel_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_tunnel_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project=null
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_tunnel_instance_iam_policy.libsonnet b/4.x/_gen/data/iap_tunnel_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..7ecb7e6
--- /dev/null
+++ b/4.x/_gen/data/iap_tunnel_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_tunnel_instance_iam_policy', url='', help='`google_iap_tunnel_instance_iam_policy` represents the `google-beta_google_iap_tunnel_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_tunnel_instance_iam_policy.new` injects a new `data_google-beta_google_iap_tunnel_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_tunnel_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_tunnel_instance_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_tunnel_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_tunnel_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    project=null,
+    zone=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_tunnel_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project, zone=zone),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_tunnel_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_tunnel_instance_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_tunnel_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_tunnel_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    project=null,
+    zone=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+    zone: zone,
+  }),
+  '#withInstance':: d.fn(help='`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withZone':: d.fn(help='`google-beta.string.withZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `zone` field.\n', args=[]),
+  withZone(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          zone: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_backend_service_iam_policy.libsonnet b/4.x/_gen/data/iap_web_backend_service_iam_policy.libsonnet
new file mode 100644
index 0000000..eedafe6
--- /dev/null
+++ b/4.x/_gen/data/iap_web_backend_service_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_web_backend_service_iam_policy', url='', help='`google_iap_web_backend_service_iam_policy` represents the `google-beta_google_iap_web_backend_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_web_backend_service_iam_policy.new` injects a new `data_google-beta_google_iap_web_backend_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_web_backend_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_web_backend_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_web_backend_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_web_backend_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    web_backend_service,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_backend_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, web_backend_service=web_backend_service),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_web_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_backend_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_web_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_backend_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    web_backend_service,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    web_backend_service: web_backend_service,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withWebBackendService':: d.fn(help='`google-beta.string.withWebBackendService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the web_backend_service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `web_backend_service` field.\n', args=[]),
+  withWebBackendService(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          web_backend_service: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_iam_policy.libsonnet b/4.x/_gen/data/iap_web_iam_policy.libsonnet
new file mode 100644
index 0000000..f12741e
--- /dev/null
+++ b/4.x/_gen/data/iap_web_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_web_iam_policy', url='', help='`google_iap_web_iam_policy` represents the `google-beta_google_iap_web_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_web_iam_policy.new` injects a new `data_google-beta_google_iap_web_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_web_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_web_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_web_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_web_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_web_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_web_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project=null
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_type_app_engine_iam_policy.libsonnet b/4.x/_gen/data/iap_web_type_app_engine_iam_policy.libsonnet
new file mode 100644
index 0000000..dc03da9
--- /dev/null
+++ b/4.x/_gen/data/iap_web_type_app_engine_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_web_type_app_engine_iam_policy', url='', help='`google_iap_web_type_app_engine_iam_policy` represents the `google-beta_google_iap_web_type_app_engine_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_web_type_app_engine_iam_policy.new` injects a new `data_google-beta_google_iap_web_type_app_engine_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_web_type_app_engine_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_web_type_app_engine_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_web_type_app_engine_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_web_type_app_engine_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    app_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_type_app_engine_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(app_id=app_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_web_type_app_engine_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_type_app_engine_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_web_type_app_engine_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_id` (`string`): Set the `app_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_type_app_engine_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    app_id,
+    project=null
+  ):: std.prune(a={
+    app_id: app_id,
+    project: project,
+  }),
+  '#withAppId':: d.fn(help='`google-beta.string.withAppId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the app_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `app_id` field.\n', args=[]),
+  withAppId(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_type_app_engine_iam_policy+: {
+        [dataSrcLabel]+: {
+          app_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_type_app_engine_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_type_compute_iam_policy.libsonnet b/4.x/_gen/data/iap_web_type_compute_iam_policy.libsonnet
new file mode 100644
index 0000000..ea1c19c
--- /dev/null
+++ b/4.x/_gen/data/iap_web_type_compute_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_iap_web_type_compute_iam_policy', url='', help='`google_iap_web_type_compute_iam_policy` represents the `google-beta_google_iap_web_type_compute_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_iap_web_type_compute_iam_policy.new` injects a new `data_google-beta_google_iap_web_type_compute_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_iap_web_type_compute_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_iap_web_type_compute_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_iap_web_type_compute_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_iap_web_type_compute_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_type_compute_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_iap_web_type_compute_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_type_compute_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_iap_web_type_compute_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_type_compute_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project=null
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_type_compute_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/kms_crypto_key_iam_policy.libsonnet b/4.x/_gen/data/kms_crypto_key_iam_policy.libsonnet
new file mode 100644
index 0000000..f6e4f74
--- /dev/null
+++ b/4.x/_gen/data/kms_crypto_key_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_kms_crypto_key_iam_policy', url='', help='`google_kms_crypto_key_iam_policy` represents the `google-beta_google_kms_crypto_key_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_kms_crypto_key_iam_policy.new` injects a new `data_google-beta_google_kms_crypto_key_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_kms_crypto_key_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_kms_crypto_key_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_kms_crypto_key_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_kms_crypto_key_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    crypto_key_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_kms_crypto_key_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(crypto_key_id=crypto_key_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_kms_crypto_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_kms_crypto_key_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_kms_crypto_key_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_kms_crypto_key_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    crypto_key_id
+  ):: std.prune(a={
+    crypto_key_id: crypto_key_id,
+  }),
+  '#withCryptoKeyId':: d.fn(help='`google-beta.string.withCryptoKeyId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the crypto_key_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `crypto_key_id` field.\n', args=[]),
+  withCryptoKeyId(dataSrcLabel, value): {
+    data+: {
+      google_kms_crypto_key_iam_policy+: {
+        [dataSrcLabel]+: {
+          crypto_key_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/kms_key_ring_iam_policy.libsonnet b/4.x/_gen/data/kms_key_ring_iam_policy.libsonnet
new file mode 100644
index 0000000..954458f
--- /dev/null
+++ b/4.x/_gen/data/kms_key_ring_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_kms_key_ring_iam_policy', url='', help='`google_kms_key_ring_iam_policy` represents the `google-beta_google_kms_key_ring_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_kms_key_ring_iam_policy.new` injects a new `data_google-beta_google_kms_key_ring_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_kms_key_ring_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_kms_key_ring_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_kms_key_ring_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_kms_key_ring_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    key_ring_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_kms_key_ring_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(key_ring_id=key_ring_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_kms_key_ring_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_kms_key_ring_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_kms_key_ring_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_kms_key_ring_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    key_ring_id
+  ):: std.prune(a={
+    key_ring_id: key_ring_id,
+  }),
+  '#withKeyRingId':: d.fn(help='`google-beta.string.withKeyRingId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the key_ring_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `key_ring_id` field.\n', args=[]),
+  withKeyRingId(dataSrcLabel, value): {
+    data+: {
+      google_kms_key_ring_iam_policy+: {
+        [dataSrcLabel]+: {
+          key_ring_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/main.libsonnet b/4.x/_gen/data/main.libsonnet
index 5cc6bea..31fcb73 100644
--- a/4.x/_gen/data/main.libsonnet
+++ b/4.x/_gen/data/main.libsonnet
@@ -4,16 +4,32 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   access_approval_folder_service_account: (import 'access_approval_folder_service_account.libsonnet'),
   access_approval_organization_service_account: (import 'access_approval_organization_service_account.libsonnet'),
   access_approval_project_service_account: (import 'access_approval_project_service_account.libsonnet'),
+  access_context_manager_access_policy_iam_policy: (import 'access_context_manager_access_policy_iam_policy.libsonnet'),
   active_folder: (import 'active_folder.libsonnet'),
   alloydb_locations: (import 'alloydb_locations.libsonnet'),
   alloydb_supported_database_flags: (import 'alloydb_supported_database_flags.libsonnet'),
+  api_gateway_api_config_iam_policy: (import 'api_gateway_api_config_iam_policy.libsonnet'),
+  api_gateway_api_iam_policy: (import 'api_gateway_api_iam_policy.libsonnet'),
+  api_gateway_gateway_iam_policy: (import 'api_gateway_gateway_iam_policy.libsonnet'),
+  apigee_environment_iam_policy: (import 'apigee_environment_iam_policy.libsonnet'),
   app_engine_default_service_account: (import 'app_engine_default_service_account.libsonnet'),
   artifact_registry_repository: (import 'artifact_registry_repository.libsonnet'),
+  artifact_registry_repository_iam_policy: (import 'artifact_registry_repository_iam_policy.libsonnet'),
   beyondcorp_app_connection: (import 'beyondcorp_app_connection.libsonnet'),
   beyondcorp_app_connector: (import 'beyondcorp_app_connector.libsonnet'),
   beyondcorp_app_gateway: (import 'beyondcorp_app_gateway.libsonnet'),
+  bigquery_analytics_hub_data_exchange_iam_policy: (import 'bigquery_analytics_hub_data_exchange_iam_policy.libsonnet'),
+  bigquery_analytics_hub_listing_iam_policy: (import 'bigquery_analytics_hub_listing_iam_policy.libsonnet'),
+  bigquery_connection_iam_policy: (import 'bigquery_connection_iam_policy.libsonnet'),
+  bigquery_datapolicy_data_policy_iam_policy: (import 'bigquery_datapolicy_data_policy_iam_policy.libsonnet'),
+  bigquery_dataset_iam_policy: (import 'bigquery_dataset_iam_policy.libsonnet'),
   bigquery_default_service_account: (import 'bigquery_default_service_account.libsonnet'),
+  bigquery_table_iam_policy: (import 'bigquery_table_iam_policy.libsonnet'),
+  bigtable_instance_iam_policy: (import 'bigtable_instance_iam_policy.libsonnet'),
+  bigtable_table_iam_policy: (import 'bigtable_table_iam_policy.libsonnet'),
   billing_account: (import 'billing_account.libsonnet'),
+  billing_account_iam_policy: (import 'billing_account_iam_policy.libsonnet'),
+  binary_authorization_attestor_iam_policy: (import 'binary_authorization_attestor_iam_policy.libsonnet'),
   client_config: (import 'client_config.libsonnet'),
   client_openid_userinfo: (import 'client_openid_userinfo.libsonnet'),
   cloud_asset_resources_search_all: (import 'cloud_asset_resources_search_all.libsonnet'),
@@ -21,33 +37,49 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   cloud_identity_groups: (import 'cloud_identity_groups.libsonnet'),
   cloud_run_locations: (import 'cloud_run_locations.libsonnet'),
   cloud_run_service: (import 'cloud_run_service.libsonnet'),
+  cloud_run_service_iam_policy: (import 'cloud_run_service_iam_policy.libsonnet'),
+  cloud_run_v2_job_iam_policy: (import 'cloud_run_v2_job_iam_policy.libsonnet'),
+  cloud_run_v2_service_iam_policy: (import 'cloud_run_v2_service_iam_policy.libsonnet'),
+  cloud_tasks_queue_iam_policy: (import 'cloud_tasks_queue_iam_policy.libsonnet'),
   cloudbuild_trigger: (import 'cloudbuild_trigger.libsonnet'),
+  cloudbuildv2_connection_iam_policy: (import 'cloudbuildv2_connection_iam_policy.libsonnet'),
   cloudfunctions2_function: (import 'cloudfunctions2_function.libsonnet'),
+  cloudfunctions2_function_iam_policy: (import 'cloudfunctions2_function_iam_policy.libsonnet'),
   cloudfunctions_function: (import 'cloudfunctions_function.libsonnet'),
+  cloudfunctions_function_iam_policy: (import 'cloudfunctions_function_iam_policy.libsonnet'),
+  cloudiot_registry_iam_policy: (import 'cloudiot_registry_iam_policy.libsonnet'),
   composer_environment: (import 'composer_environment.libsonnet'),
   composer_image_versions: (import 'composer_image_versions.libsonnet'),
   compute_address: (import 'compute_address.libsonnet'),
   compute_addresses: (import 'compute_addresses.libsonnet'),
   compute_backend_bucket: (import 'compute_backend_bucket.libsonnet'),
+  compute_backend_bucket_iam_policy: (import 'compute_backend_bucket_iam_policy.libsonnet'),
   compute_backend_service: (import 'compute_backend_service.libsonnet'),
+  compute_backend_service_iam_policy: (import 'compute_backend_service_iam_policy.libsonnet'),
   compute_default_service_account: (import 'compute_default_service_account.libsonnet'),
   compute_disk: (import 'compute_disk.libsonnet'),
+  compute_disk_iam_policy: (import 'compute_disk_iam_policy.libsonnet'),
   compute_forwarding_rule: (import 'compute_forwarding_rule.libsonnet'),
   compute_global_address: (import 'compute_global_address.libsonnet'),
   compute_global_forwarding_rule: (import 'compute_global_forwarding_rule.libsonnet'),
   compute_ha_vpn_gateway: (import 'compute_ha_vpn_gateway.libsonnet'),
   compute_health_check: (import 'compute_health_check.libsonnet'),
   compute_image: (import 'compute_image.libsonnet'),
+  compute_image_iam_policy: (import 'compute_image_iam_policy.libsonnet'),
   compute_instance: (import 'compute_instance.libsonnet'),
   compute_instance_group: (import 'compute_instance_group.libsonnet'),
   compute_instance_group_manager: (import 'compute_instance_group_manager.libsonnet'),
+  compute_instance_iam_policy: (import 'compute_instance_iam_policy.libsonnet'),
   compute_instance_serial_port: (import 'compute_instance_serial_port.libsonnet'),
   compute_instance_template: (import 'compute_instance_template.libsonnet'),
   compute_lb_ip_ranges: (import 'compute_lb_ip_ranges.libsonnet'),
+  compute_machine_image_iam_policy: (import 'compute_machine_image_iam_policy.libsonnet'),
   compute_network: (import 'compute_network.libsonnet'),
   compute_network_endpoint_group: (import 'compute_network_endpoint_group.libsonnet'),
   compute_network_peering: (import 'compute_network_peering.libsonnet'),
   compute_node_types: (import 'compute_node_types.libsonnet'),
+  compute_region_backend_service_iam_policy: (import 'compute_region_backend_service_iam_policy.libsonnet'),
+  compute_region_disk_iam_policy: (import 'compute_region_disk_iam_policy.libsonnet'),
   compute_region_instance_group: (import 'compute_region_instance_group.libsonnet'),
   compute_region_instance_template: (import 'compute_region_instance_template.libsonnet'),
   compute_region_network_endpoint_group: (import 'compute_region_network_endpoint_group.libsonnet'),
@@ -58,11 +90,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   compute_router_nat: (import 'compute_router_nat.libsonnet'),
   compute_router_status: (import 'compute_router_status.libsonnet'),
   compute_snapshot: (import 'compute_snapshot.libsonnet'),
+  compute_snapshot_iam_policy: (import 'compute_snapshot_iam_policy.libsonnet'),
   compute_ssl_certificate: (import 'compute_ssl_certificate.libsonnet'),
   compute_ssl_policy: (import 'compute_ssl_policy.libsonnet'),
   compute_subnetwork: (import 'compute_subnetwork.libsonnet'),
+  compute_subnetwork_iam_policy: (import 'compute_subnetwork_iam_policy.libsonnet'),
   compute_vpn_gateway: (import 'compute_vpn_gateway.libsonnet'),
   compute_zones: (import 'compute_zones.libsonnet'),
+  container_analysis_note_iam_policy: (import 'container_analysis_note_iam_policy.libsonnet'),
   container_attached_install_manifest: (import 'container_attached_install_manifest.libsonnet'),
   container_attached_versions: (import 'container_attached_versions.libsonnet'),
   container_aws_versions: (import 'container_aws_versions.libsonnet'),
@@ -71,11 +106,27 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   container_engine_versions: (import 'container_engine_versions.libsonnet'),
   container_registry_image: (import 'container_registry_image.libsonnet'),
   container_registry_repository: (import 'container_registry_repository.libsonnet'),
+  data_catalog_entry_group_iam_policy: (import 'data_catalog_entry_group_iam_policy.libsonnet'),
+  data_catalog_policy_tag_iam_policy: (import 'data_catalog_policy_tag_iam_policy.libsonnet'),
+  data_catalog_tag_template_iam_policy: (import 'data_catalog_tag_template_iam_policy.libsonnet'),
+  data_catalog_taxonomy_iam_policy: (import 'data_catalog_taxonomy_iam_policy.libsonnet'),
+  data_fusion_instance_iam_policy: (import 'data_fusion_instance_iam_policy.libsonnet'),
+  dataplex_asset_iam_policy: (import 'dataplex_asset_iam_policy.libsonnet'),
+  dataplex_lake_iam_policy: (import 'dataplex_lake_iam_policy.libsonnet'),
+  dataplex_zone_iam_policy: (import 'dataplex_zone_iam_policy.libsonnet'),
+  dataproc_autoscaling_policy_iam_policy: (import 'dataproc_autoscaling_policy_iam_policy.libsonnet'),
+  dataproc_cluster_iam_policy: (import 'dataproc_cluster_iam_policy.libsonnet'),
+  dataproc_job_iam_policy: (import 'dataproc_job_iam_policy.libsonnet'),
+  dataproc_metastore_federation_iam_policy: (import 'dataproc_metastore_federation_iam_policy.libsonnet'),
   dataproc_metastore_service: (import 'dataproc_metastore_service.libsonnet'),
+  dataproc_metastore_service_iam_policy: (import 'dataproc_metastore_service_iam_policy.libsonnet'),
   datastream_static_ips: (import 'datastream_static_ips.libsonnet'),
   dns_keys: (import 'dns_keys.libsonnet'),
   dns_managed_zone: (import 'dns_managed_zone.libsonnet'),
+  dns_managed_zone_iam_policy: (import 'dns_managed_zone_iam_policy.libsonnet'),
   dns_record_set: (import 'dns_record_set.libsonnet'),
+  endpoints_service_consumers_iam_policy: (import 'endpoints_service_consumers_iam_policy.libsonnet'),
+  endpoints_service_iam_policy: (import 'endpoints_service_iam_policy.libsonnet'),
   firebase_android_app: (import 'firebase_android_app.libsonnet'),
   firebase_android_app_config: (import 'firebase_android_app_config.libsonnet'),
   firebase_apple_app: (import 'firebase_apple_app.libsonnet'),
@@ -84,18 +135,36 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   firebase_web_app: (import 'firebase_web_app.libsonnet'),
   firebase_web_app_config: (import 'firebase_web_app_config.libsonnet'),
   folder: (import 'folder.libsonnet'),
+  folder_iam_policy: (import 'folder_iam_policy.libsonnet'),
   folder_organization_policy: (import 'folder_organization_policy.libsonnet'),
   folders: (import 'folders.libsonnet'),
   game_services_game_server_deployment_rollout: (import 'game_services_game_server_deployment_rollout.libsonnet'),
+  gke_backup_backup_plan_iam_policy: (import 'gke_backup_backup_plan_iam_policy.libsonnet'),
+  gke_hub_membership_iam_policy: (import 'gke_hub_membership_iam_policy.libsonnet'),
+  healthcare_consent_store_iam_policy: (import 'healthcare_consent_store_iam_policy.libsonnet'),
+  healthcare_dataset_iam_policy: (import 'healthcare_dataset_iam_policy.libsonnet'),
+  healthcare_dicom_store_iam_policy: (import 'healthcare_dicom_store_iam_policy.libsonnet'),
+  healthcare_fhir_store_iam_policy: (import 'healthcare_fhir_store_iam_policy.libsonnet'),
+  healthcare_hl7_v2_store_iam_policy: (import 'healthcare_hl7_v2_store_iam_policy.libsonnet'),
   iam_policy: (import 'iam_policy.libsonnet'),
   iam_role: (import 'iam_role.libsonnet'),
   iam_testable_permissions: (import 'iam_testable_permissions.libsonnet'),
   iam_workload_identity_pool: (import 'iam_workload_identity_pool.libsonnet'),
   iam_workload_identity_pool_provider: (import 'iam_workload_identity_pool_provider.libsonnet'),
+  iap_app_engine_service_iam_policy: (import 'iap_app_engine_service_iam_policy.libsonnet'),
+  iap_app_engine_version_iam_policy: (import 'iap_app_engine_version_iam_policy.libsonnet'),
   iap_client: (import 'iap_client.libsonnet'),
+  iap_tunnel_iam_policy: (import 'iap_tunnel_iam_policy.libsonnet'),
+  iap_tunnel_instance_iam_policy: (import 'iap_tunnel_instance_iam_policy.libsonnet'),
+  iap_web_backend_service_iam_policy: (import 'iap_web_backend_service_iam_policy.libsonnet'),
+  iap_web_iam_policy: (import 'iap_web_iam_policy.libsonnet'),
+  iap_web_type_app_engine_iam_policy: (import 'iap_web_type_app_engine_iam_policy.libsonnet'),
+  iap_web_type_compute_iam_policy: (import 'iap_web_type_compute_iam_policy.libsonnet'),
   kms_crypto_key: (import 'kms_crypto_key.libsonnet'),
+  kms_crypto_key_iam_policy: (import 'kms_crypto_key_iam_policy.libsonnet'),
   kms_crypto_key_version: (import 'kms_crypto_key_version.libsonnet'),
   kms_key_ring: (import 'kms_key_ring.libsonnet'),
+  kms_key_ring_iam_policy: (import 'kms_key_ring_iam_policy.libsonnet'),
   kms_secret: (import 'kms_secret.libsonnet'),
   kms_secret_asymmetric: (import 'kms_secret_asymmetric.libsonnet'),
   kms_secret_ciphertext: (import 'kms_secret_ciphertext.libsonnet'),
@@ -108,28 +177,45 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   monitoring_notification_channel: (import 'monitoring_notification_channel.libsonnet'),
   monitoring_uptime_check_ips: (import 'monitoring_uptime_check_ips.libsonnet'),
   netblock_ip_ranges: (import 'netblock_ip_ranges.libsonnet'),
+  notebooks_instance_iam_policy: (import 'notebooks_instance_iam_policy.libsonnet'),
+  notebooks_runtime_iam_policy: (import 'notebooks_runtime_iam_policy.libsonnet'),
   organization: (import 'organization.libsonnet'),
+  organization_iam_policy: (import 'organization_iam_policy.libsonnet'),
+  privateca_ca_pool_iam_policy: (import 'privateca_ca_pool_iam_policy.libsonnet'),
   privateca_certificate_authority: (import 'privateca_certificate_authority.libsonnet'),
+  privateca_certificate_template_iam_policy: (import 'privateca_certificate_template_iam_policy.libsonnet'),
   project: (import 'project.libsonnet'),
+  project_iam_policy: (import 'project_iam_policy.libsonnet'),
   project_organization_policy: (import 'project_organization_policy.libsonnet'),
   project_service: (import 'project_service.libsonnet'),
   projects: (import 'projects.libsonnet'),
   pubsub_subscription: (import 'pubsub_subscription.libsonnet'),
+  pubsub_subscription_iam_policy: (import 'pubsub_subscription_iam_policy.libsonnet'),
   pubsub_topic: (import 'pubsub_topic.libsonnet'),
+  pubsub_topic_iam_policy: (import 'pubsub_topic_iam_policy.libsonnet'),
   redis_instance: (import 'redis_instance.libsonnet'),
   runtimeconfig_config: (import 'runtimeconfig_config.libsonnet'),
+  runtimeconfig_config_iam_policy: (import 'runtimeconfig_config_iam_policy.libsonnet'),
   runtimeconfig_variable: (import 'runtimeconfig_variable.libsonnet'),
+  scc_source_iam_policy: (import 'scc_source_iam_policy.libsonnet'),
   secret_manager_secret: (import 'secret_manager_secret.libsonnet'),
+  secret_manager_secret_iam_policy: (import 'secret_manager_secret_iam_policy.libsonnet'),
   secret_manager_secret_version: (import 'secret_manager_secret_version.libsonnet'),
   secret_manager_secret_version_access: (import 'secret_manager_secret_version_access.libsonnet'),
   service_account: (import 'service_account.libsonnet'),
   service_account_access_token: (import 'service_account_access_token.libsonnet'),
+  service_account_iam_policy: (import 'service_account_iam_policy.libsonnet'),
   service_account_id_token: (import 'service_account_id_token.libsonnet'),
   service_account_jwt: (import 'service_account_jwt.libsonnet'),
   service_account_key: (import 'service_account_key.libsonnet'),
+  service_directory_namespace_iam_policy: (import 'service_directory_namespace_iam_policy.libsonnet'),
+  service_directory_service_iam_policy: (import 'service_directory_service_iam_policy.libsonnet'),
   service_networking_peered_dns_domain: (import 'service_networking_peered_dns_domain.libsonnet'),
   sourcerepo_repository: (import 'sourcerepo_repository.libsonnet'),
+  sourcerepo_repository_iam_policy: (import 'sourcerepo_repository_iam_policy.libsonnet'),
+  spanner_database_iam_policy: (import 'spanner_database_iam_policy.libsonnet'),
   spanner_instance: (import 'spanner_instance.libsonnet'),
+  spanner_instance_iam_policy: (import 'spanner_instance_iam_policy.libsonnet'),
   sql_backup_run: (import 'sql_backup_run.libsonnet'),
   sql_ca_certs: (import 'sql_ca_certs.libsonnet'),
   sql_database: (import 'sql_database.libsonnet'),
@@ -138,13 +224,21 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   sql_databases: (import 'sql_databases.libsonnet'),
   sql_tiers: (import 'sql_tiers.libsonnet'),
   storage_bucket: (import 'storage_bucket.libsonnet'),
+  storage_bucket_iam_policy: (import 'storage_bucket_iam_policy.libsonnet'),
   storage_bucket_object: (import 'storage_bucket_object.libsonnet'),
   storage_bucket_object_content: (import 'storage_bucket_object_content.libsonnet'),
   storage_object_signed_url: (import 'storage_object_signed_url.libsonnet'),
   storage_project_service_account: (import 'storage_project_service_account.libsonnet'),
   storage_transfer_project_service_account: (import 'storage_transfer_project_service_account.libsonnet'),
   tags_tag_key: (import 'tags_tag_key.libsonnet'),
+  tags_tag_key_iam_policy: (import 'tags_tag_key_iam_policy.libsonnet'),
   tags_tag_value: (import 'tags_tag_value.libsonnet'),
+  tags_tag_value_iam_policy: (import 'tags_tag_value_iam_policy.libsonnet'),
   tpu_tensorflow_versions: (import 'tpu_tensorflow_versions.libsonnet'),
+  vertex_ai_featurestore_entitytype_iam_policy: (import 'vertex_ai_featurestore_entitytype_iam_policy.libsonnet'),
+  vertex_ai_featurestore_iam_policy: (import 'vertex_ai_featurestore_iam_policy.libsonnet'),
+  vertex_ai_index: (import 'vertex_ai_index.libsonnet'),
   vpc_access_connector: (import 'vpc_access_connector.libsonnet'),
+  workstations_workstation_config_iam_policy: (import 'workstations_workstation_config_iam_policy.libsonnet'),
+  workstations_workstation_iam_policy: (import 'workstations_workstation_iam_policy.libsonnet'),
 }
diff --git a/4.x/_gen/data/notebooks_instance_iam_policy.libsonnet b/4.x/_gen/data/notebooks_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..0922aba
--- /dev/null
+++ b/4.x/_gen/data/notebooks_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_notebooks_instance_iam_policy', url='', help='`google_notebooks_instance_iam_policy` represents the `google-beta_google_notebooks_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_notebooks_instance_iam_policy.new` injects a new `data_google-beta_google_notebooks_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_notebooks_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_notebooks_instance_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_notebooks_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_notebooks_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance_name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_notebooks_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance_name=instance_name, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_notebooks_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_notebooks_instance_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_notebooks_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_notebooks_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance_name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    instance_name: instance_name,
+    location: location,
+    project: project,
+  }),
+  '#withInstanceName':: d.fn(help='`google-beta.string.withInstanceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance_name` field.\n', args=[]),
+  withInstanceName(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance_name: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/notebooks_runtime_iam_policy.libsonnet b/4.x/_gen/data/notebooks_runtime_iam_policy.libsonnet
new file mode 100644
index 0000000..94616a1
--- /dev/null
+++ b/4.x/_gen/data/notebooks_runtime_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_notebooks_runtime_iam_policy', url='', help='`google_notebooks_runtime_iam_policy` represents the `google-beta_google_notebooks_runtime_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_notebooks_runtime_iam_policy.new` injects a new `data_google-beta_google_notebooks_runtime_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_notebooks_runtime_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_notebooks_runtime_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_notebooks_runtime_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_notebooks_runtime_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    runtime_name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_notebooks_runtime_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, runtime_name=runtime_name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_notebooks_runtime_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_notebooks_runtime_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_notebooks_runtime_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_notebooks_runtime_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    runtime_name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    runtime_name: runtime_name,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_runtime_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_runtime_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRuntimeName':: d.fn(help='`google-beta.string.withRuntimeName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the runtime_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `runtime_name` field.\n', args=[]),
+  withRuntimeName(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_runtime_iam_policy+: {
+        [dataSrcLabel]+: {
+          runtime_name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/organization_iam_policy.libsonnet b/4.x/_gen/data/organization_iam_policy.libsonnet
new file mode 100644
index 0000000..bc0740a
--- /dev/null
+++ b/4.x/_gen/data/organization_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_organization_iam_policy', url='', help='`google_organization_iam_policy` represents the `google-beta_google_organization_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_organization_iam_policy.new` injects a new `data_google-beta_google_organization_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_organization_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_organization_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_organization_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_organization_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    org_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_organization_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(org_id=org_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_organization_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_organization_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_organization_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_organization_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    org_id
+  ):: std.prune(a={
+    org_id: org_id,
+  }),
+  '#withOrgId':: d.fn(help='`google-beta.string.withOrgId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the org_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `org_id` field.\n', args=[]),
+  withOrgId(dataSrcLabel, value): {
+    data+: {
+      google_organization_iam_policy+: {
+        [dataSrcLabel]+: {
+          org_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/privateca_ca_pool_iam_policy.libsonnet b/4.x/_gen/data/privateca_ca_pool_iam_policy.libsonnet
new file mode 100644
index 0000000..822ee07
--- /dev/null
+++ b/4.x/_gen/data/privateca_ca_pool_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_privateca_ca_pool_iam_policy', url='', help='`google_privateca_ca_pool_iam_policy` represents the `google-beta_google_privateca_ca_pool_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_privateca_ca_pool_iam_policy.new` injects a new `data_google-beta_google_privateca_ca_pool_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_privateca_ca_pool_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_privateca_ca_pool_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_privateca_ca_pool_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_privateca_ca_pool_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    ca_pool,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_privateca_ca_pool_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(ca_pool=ca_pool, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_privateca_ca_pool_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_privateca_ca_pool_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_privateca_ca_pool_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_privateca_ca_pool_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    ca_pool,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    ca_pool: ca_pool,
+    location: location,
+    project: project,
+  }),
+  '#withCaPool':: d.fn(help='`google-beta.string.withCaPool` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the ca_pool field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `ca_pool` field.\n', args=[]),
+  withCaPool(dataSrcLabel, value): {
+    data+: {
+      google_privateca_ca_pool_iam_policy+: {
+        [dataSrcLabel]+: {
+          ca_pool: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_privateca_ca_pool_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_privateca_ca_pool_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/privateca_certificate_template_iam_policy.libsonnet b/4.x/_gen/data/privateca_certificate_template_iam_policy.libsonnet
new file mode 100644
index 0000000..73fef3d
--- /dev/null
+++ b/4.x/_gen/data/privateca_certificate_template_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_privateca_certificate_template_iam_policy', url='', help='`google_privateca_certificate_template_iam_policy` represents the `google-beta_google_privateca_certificate_template_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_privateca_certificate_template_iam_policy.new` injects a new `data_google-beta_google_privateca_certificate_template_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_privateca_certificate_template_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_privateca_certificate_template_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_privateca_certificate_template_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_privateca_certificate_template_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    certificate_template,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_privateca_certificate_template_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(certificate_template=certificate_template, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_privateca_certificate_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_privateca_certificate_template_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_privateca_certificate_template_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_privateca_certificate_template_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    certificate_template,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    certificate_template: certificate_template,
+    location: location,
+    project: project,
+  }),
+  '#withCertificateTemplate':: d.fn(help='`google-beta.string.withCertificateTemplate` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the certificate_template field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `certificate_template` field.\n', args=[]),
+  withCertificateTemplate(dataSrcLabel, value): {
+    data+: {
+      google_privateca_certificate_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          certificate_template: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_privateca_certificate_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_privateca_certificate_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/project_iam_policy.libsonnet b/4.x/_gen/data/project_iam_policy.libsonnet
new file mode 100644
index 0000000..e702346
--- /dev/null
+++ b/4.x/_gen/data/project_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_project_iam_policy', url='', help='`google_project_iam_policy` represents the `google-beta_google_project_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_project_iam_policy.new` injects a new `data_google-beta_google_project_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_project_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_project_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_project_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_project_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project,
+    _meta={}
+  ):: tf.withData(
+    type='google_project_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_project_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_project_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_project_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_project_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_project_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/pubsub_subscription_iam_policy.libsonnet b/4.x/_gen/data/pubsub_subscription_iam_policy.libsonnet
new file mode 100644
index 0000000..35dd135
--- /dev/null
+++ b/4.x/_gen/data/pubsub_subscription_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_pubsub_subscription_iam_policy', url='', help='`google_pubsub_subscription_iam_policy` represents the `google-beta_google_pubsub_subscription_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_pubsub_subscription_iam_policy.new` injects a new `data_google-beta_google_pubsub_subscription_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_pubsub_subscription_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_pubsub_subscription_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_pubsub_subscription_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_pubsub_subscription_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `subscription` (`string`): Set the `subscription` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    subscription,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_pubsub_subscription_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, subscription=subscription),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_pubsub_subscription_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_pubsub_subscription_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_pubsub_subscription_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `subscription` (`string`): Set the `subscription` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_pubsub_subscription_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    subscription,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    subscription: subscription,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_subscription_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withSubscription':: d.fn(help='`google-beta.string.withSubscription` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the subscription field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `subscription` field.\n', args=[]),
+  withSubscription(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_subscription_iam_policy+: {
+        [dataSrcLabel]+: {
+          subscription: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/pubsub_topic_iam_policy.libsonnet b/4.x/_gen/data/pubsub_topic_iam_policy.libsonnet
new file mode 100644
index 0000000..96a29c3
--- /dev/null
+++ b/4.x/_gen/data/pubsub_topic_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_pubsub_topic_iam_policy', url='', help='`google_pubsub_topic_iam_policy` represents the `google-beta_google_pubsub_topic_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_pubsub_topic_iam_policy.new` injects a new `data_google-beta_google_pubsub_topic_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_pubsub_topic_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_pubsub_topic_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_pubsub_topic_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_pubsub_topic_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `topic` (`string`): Set the `topic` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    topic,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_pubsub_topic_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, topic=topic),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_pubsub_topic_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_pubsub_topic_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_pubsub_topic_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `topic` (`string`): Set the `topic` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_pubsub_topic_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    topic,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    topic: topic,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_topic_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTopic':: d.fn(help='`google-beta.string.withTopic` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the topic field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `topic` field.\n', args=[]),
+  withTopic(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_topic_iam_policy+: {
+        [dataSrcLabel]+: {
+          topic: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/runtimeconfig_config_iam_policy.libsonnet b/4.x/_gen/data/runtimeconfig_config_iam_policy.libsonnet
new file mode 100644
index 0000000..d1d1f4e
--- /dev/null
+++ b/4.x/_gen/data/runtimeconfig_config_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_runtimeconfig_config_iam_policy', url='', help='`google_runtimeconfig_config_iam_policy` represents the `google-beta_google_runtimeconfig_config_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_runtimeconfig_config_iam_policy.new` injects a new `data_google-beta_google_runtimeconfig_config_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_runtimeconfig_config_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_runtimeconfig_config_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_runtimeconfig_config_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_runtimeconfig_config_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `config` (`string`): Set the `config` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    config,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_runtimeconfig_config_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(config=config, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_runtimeconfig_config_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_runtimeconfig_config_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_runtimeconfig_config_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `config` (`string`): Set the `config` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_runtimeconfig_config_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    config,
+    project=null
+  ):: std.prune(a={
+    config: config,
+    project: project,
+  }),
+  '#withConfig':: d.fn(help='`google-beta.string.withConfig` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the config field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `config` field.\n', args=[]),
+  withConfig(dataSrcLabel, value): {
+    data+: {
+      google_runtimeconfig_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          config: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_runtimeconfig_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/scc_source_iam_policy.libsonnet b/4.x/_gen/data/scc_source_iam_policy.libsonnet
new file mode 100644
index 0000000..e373fc6
--- /dev/null
+++ b/4.x/_gen/data/scc_source_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_scc_source_iam_policy', url='', help='`google_scc_source_iam_policy` represents the `google-beta_google_scc_source_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_scc_source_iam_policy.new` injects a new `data_google-beta_google_scc_source_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_scc_source_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_scc_source_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_scc_source_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_scc_source_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `organization` (`string`): Set the `organization` field on the resulting data source block.\n  - `source` (`string`): Set the `source` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    organization,
+    source,
+    _meta={}
+  ):: tf.withData(
+    type='google_scc_source_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(organization=organization, source=source),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_scc_source_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_scc_source_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_scc_source_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `organization` (`string`): Set the `organization` field on the resulting object.\n  - `source` (`string`): Set the `source` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_scc_source_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    organization,
+    source
+  ):: std.prune(a={
+    organization: organization,
+    source: source,
+  }),
+  '#withOrganization':: d.fn(help='`google-beta.string.withOrganization` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the organization field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `organization` field.\n', args=[]),
+  withOrganization(dataSrcLabel, value): {
+    data+: {
+      google_scc_source_iam_policy+: {
+        [dataSrcLabel]+: {
+          organization: value,
+        },
+      },
+    },
+  },
+  '#withSource':: d.fn(help='`google-beta.string.withSource` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the source field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `source` field.\n', args=[]),
+  withSource(dataSrcLabel, value): {
+    data+: {
+      google_scc_source_iam_policy+: {
+        [dataSrcLabel]+: {
+          source: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/secret_manager_secret_iam_policy.libsonnet b/4.x/_gen/data/secret_manager_secret_iam_policy.libsonnet
new file mode 100644
index 0000000..b2cd85b
--- /dev/null
+++ b/4.x/_gen/data/secret_manager_secret_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_secret_manager_secret_iam_policy', url='', help='`google_secret_manager_secret_iam_policy` represents the `google-beta_google_secret_manager_secret_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_secret_manager_secret_iam_policy.new` injects a new `data_google-beta_google_secret_manager_secret_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_secret_manager_secret_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_secret_manager_secret_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_secret_manager_secret_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_secret_manager_secret_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `secret_id` (`string`): Set the `secret_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    secret_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_secret_manager_secret_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, secret_id=secret_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_secret_manager_secret_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_secret_manager_secret_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_secret_manager_secret_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `secret_id` (`string`): Set the `secret_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_secret_manager_secret_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    secret_id,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    secret_id: secret_id,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_secret_manager_secret_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withSecretId':: d.fn(help='`google-beta.string.withSecretId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the secret_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `secret_id` field.\n', args=[]),
+  withSecretId(dataSrcLabel, value): {
+    data+: {
+      google_secret_manager_secret_iam_policy+: {
+        [dataSrcLabel]+: {
+          secret_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/service_account_iam_policy.libsonnet b/4.x/_gen/data/service_account_iam_policy.libsonnet
new file mode 100644
index 0000000..9c4ba0d
--- /dev/null
+++ b/4.x/_gen/data/service_account_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_service_account_iam_policy', url='', help='`google_service_account_iam_policy` represents the `google-beta_google_service_account_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_service_account_iam_policy.new` injects a new `data_google-beta_google_service_account_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_service_account_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_service_account_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_service_account_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_service_account_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service_account_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_service_account_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(service_account_id=service_account_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_service_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_service_account_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_service_account_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_service_account_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service_account_id
+  ):: std.prune(a={
+    service_account_id: service_account_id,
+  }),
+  '#withServiceAccountId':: d.fn(help='`google-beta.string.withServiceAccountId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_account_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_account_id` field.\n', args=[]),
+  withServiceAccountId(dataSrcLabel, value): {
+    data+: {
+      google_service_account_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_account_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/service_directory_namespace_iam_policy.libsonnet b/4.x/_gen/data/service_directory_namespace_iam_policy.libsonnet
new file mode 100644
index 0000000..1a0bb8b
--- /dev/null
+++ b/4.x/_gen/data/service_directory_namespace_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_service_directory_namespace_iam_policy', url='', help='`google_service_directory_namespace_iam_policy` represents the `google-beta_google_service_directory_namespace_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_service_directory_namespace_iam_policy.new` injects a new `data_google-beta_google_service_directory_namespace_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_service_directory_namespace_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_service_directory_namespace_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_service_directory_namespace_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_service_directory_namespace_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    _meta={}
+  ):: tf.withData(
+    type='google_service_directory_namespace_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_service_directory_namespace_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_service_directory_namespace_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_service_directory_namespace_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_service_directory_namespace_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name
+  ):: std.prune(a={
+    name: name,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_service_directory_namespace_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/service_directory_service_iam_policy.libsonnet b/4.x/_gen/data/service_directory_service_iam_policy.libsonnet
new file mode 100644
index 0000000..04fab1e
--- /dev/null
+++ b/4.x/_gen/data/service_directory_service_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_service_directory_service_iam_policy', url='', help='`google_service_directory_service_iam_policy` represents the `google-beta_google_service_directory_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_service_directory_service_iam_policy.new` injects a new `data_google-beta_google_service_directory_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_service_directory_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_service_directory_service_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_service_directory_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_service_directory_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    _meta={}
+  ):: tf.withData(
+    type='google_service_directory_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_service_directory_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_service_directory_service_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_service_directory_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_service_directory_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name
+  ):: std.prune(a={
+    name: name,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_service_directory_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/sourcerepo_repository_iam_policy.libsonnet b/4.x/_gen/data/sourcerepo_repository_iam_policy.libsonnet
new file mode 100644
index 0000000..e5722a3
--- /dev/null
+++ b/4.x/_gen/data/sourcerepo_repository_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_sourcerepo_repository_iam_policy', url='', help='`google_sourcerepo_repository_iam_policy` represents the `google-beta_google_sourcerepo_repository_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_sourcerepo_repository_iam_policy.new` injects a new `data_google-beta_google_sourcerepo_repository_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_sourcerepo_repository_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_sourcerepo_repository_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_sourcerepo_repository_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_sourcerepo_repository_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    repository,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_sourcerepo_repository_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, repository=repository),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_sourcerepo_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_sourcerepo_repository_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_sourcerepo_repository_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_sourcerepo_repository_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    repository,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    repository: repository,
+  }),
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_sourcerepo_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRepository':: d.fn(help='`google-beta.string.withRepository` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the repository field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `repository` field.\n', args=[]),
+  withRepository(dataSrcLabel, value): {
+    data+: {
+      google_sourcerepo_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          repository: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/spanner_database_iam_policy.libsonnet b/4.x/_gen/data/spanner_database_iam_policy.libsonnet
new file mode 100644
index 0000000..3446197
--- /dev/null
+++ b/4.x/_gen/data/spanner_database_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_spanner_database_iam_policy', url='', help='`google_spanner_database_iam_policy` represents the `google-beta_google_spanner_database_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_spanner_database_iam_policy.new` injects a new `data_google-beta_google_spanner_database_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_spanner_database_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_spanner_database_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_spanner_database_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_spanner_database_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `database` (`string`): Set the `database` field on the resulting data source block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    database,
+    instance,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_spanner_database_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(database=database, instance=instance, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_spanner_database_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_spanner_database_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_spanner_database_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `database` (`string`): Set the `database` field on the resulting object.\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_spanner_database_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    database,
+    instance,
+    project=null
+  ):: std.prune(a={
+    database: database,
+    instance: instance,
+    project: project,
+  }),
+  '#withDatabase':: d.fn(help='`google-beta.string.withDatabase` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the database field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `database` field.\n', args=[]),
+  withDatabase(dataSrcLabel, value): {
+    data+: {
+      google_spanner_database_iam_policy+: {
+        [dataSrcLabel]+: {
+          database: value,
+        },
+      },
+    },
+  },
+  '#withInstance':: d.fn(help='`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_spanner_database_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_spanner_database_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/spanner_instance_iam_policy.libsonnet b/4.x/_gen/data/spanner_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..e705108
--- /dev/null
+++ b/4.x/_gen/data/spanner_instance_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_spanner_instance_iam_policy', url='', help='`google_spanner_instance_iam_policy` represents the `google-beta_google_spanner_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_spanner_instance_iam_policy.new` injects a new `data_google-beta_google_spanner_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_spanner_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_spanner_instance_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_spanner_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_spanner_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_spanner_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_spanner_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_spanner_instance_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_spanner_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_spanner_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    project=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+  }),
+  '#withInstance':: d.fn(help='`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_spanner_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_spanner_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/storage_bucket_iam_policy.libsonnet b/4.x/_gen/data/storage_bucket_iam_policy.libsonnet
new file mode 100644
index 0000000..d09e117
--- /dev/null
+++ b/4.x/_gen/data/storage_bucket_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_storage_bucket_iam_policy', url='', help='`google_storage_bucket_iam_policy` represents the `google-beta_google_storage_bucket_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_storage_bucket_iam_policy.new` injects a new `data_google-beta_google_storage_bucket_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_storage_bucket_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_storage_bucket_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_storage_bucket_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_storage_bucket_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `bucket` (`string`): Set the `bucket` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    bucket,
+    _meta={}
+  ):: tf.withData(
+    type='google_storage_bucket_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(bucket=bucket),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_storage_bucket_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_storage_bucket_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_storage_bucket_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `bucket` (`string`): Set the `bucket` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_storage_bucket_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    bucket
+  ):: std.prune(a={
+    bucket: bucket,
+  }),
+  '#withBucket':: d.fn(help='`google-beta.string.withBucket` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the bucket field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `bucket` field.\n', args=[]),
+  withBucket(dataSrcLabel, value): {
+    data+: {
+      google_storage_bucket_iam_policy+: {
+        [dataSrcLabel]+: {
+          bucket: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/tags_tag_key_iam_policy.libsonnet b/4.x/_gen/data/tags_tag_key_iam_policy.libsonnet
new file mode 100644
index 0000000..32a09b1
--- /dev/null
+++ b/4.x/_gen/data/tags_tag_key_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_tags_tag_key_iam_policy', url='', help='`google_tags_tag_key_iam_policy` represents the `google-beta_google_tags_tag_key_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_tags_tag_key_iam_policy.new` injects a new `data_google-beta_google_tags_tag_key_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_tags_tag_key_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_tags_tag_key_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_tags_tag_key_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_tags_tag_key_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `tag_key` (`string`): Set the `tag_key` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    tag_key,
+    _meta={}
+  ):: tf.withData(
+    type='google_tags_tag_key_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(tag_key=tag_key),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_tags_tag_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_tags_tag_key_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_tags_tag_key_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `tag_key` (`string`): Set the `tag_key` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_tags_tag_key_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    tag_key
+  ):: std.prune(a={
+    tag_key: tag_key,
+  }),
+  '#withTagKey':: d.fn(help='`google-beta.string.withTagKey` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the tag_key field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `tag_key` field.\n', args=[]),
+  withTagKey(dataSrcLabel, value): {
+    data+: {
+      google_tags_tag_key_iam_policy+: {
+        [dataSrcLabel]+: {
+          tag_key: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/tags_tag_value_iam_policy.libsonnet b/4.x/_gen/data/tags_tag_value_iam_policy.libsonnet
new file mode 100644
index 0000000..ea51e8d
--- /dev/null
+++ b/4.x/_gen/data/tags_tag_value_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_tags_tag_value_iam_policy', url='', help='`google_tags_tag_value_iam_policy` represents the `google-beta_google_tags_tag_value_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_tags_tag_value_iam_policy.new` injects a new `data_google-beta_google_tags_tag_value_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_tags_tag_value_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_tags_tag_value_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_tags_tag_value_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_tags_tag_value_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `tag_value` (`string`): Set the `tag_value` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    tag_value,
+    _meta={}
+  ):: tf.withData(
+    type='google_tags_tag_value_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(tag_value=tag_value),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_tags_tag_value_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_tags_tag_value_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_tags_tag_value_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `tag_value` (`string`): Set the `tag_value` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_tags_tag_value_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    tag_value
+  ):: std.prune(a={
+    tag_value: tag_value,
+  }),
+  '#withTagValue':: d.fn(help='`google-beta.string.withTagValue` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the tag_value field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `tag_value` field.\n', args=[]),
+  withTagValue(dataSrcLabel, value): {
+    data+: {
+      google_tags_tag_value_iam_policy+: {
+        [dataSrcLabel]+: {
+          tag_value: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/vertex_ai_featurestore_entitytype_iam_policy.libsonnet b/4.x/_gen/data/vertex_ai_featurestore_entitytype_iam_policy.libsonnet
new file mode 100644
index 0000000..bf25ea3
--- /dev/null
+++ b/4.x/_gen/data/vertex_ai_featurestore_entitytype_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_vertex_ai_featurestore_entitytype_iam_policy', url='', help='`google_vertex_ai_featurestore_entitytype_iam_policy` represents the `google-beta_google_vertex_ai_featurestore_entitytype_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.new` injects a new `data_google-beta_google_vertex_ai_featurestore_entitytype_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_vertex_ai_featurestore_entitytype_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_vertex_ai_featurestore_entitytype_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `entitytype` (`string`): Set the `entitytype` field on the resulting data source block.\n  - `featurestore` (`string`): Set the `featurestore` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    entitytype,
+    featurestore,
+    _meta={}
+  ):: tf.withData(
+    type='google_vertex_ai_featurestore_entitytype_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(entitytype=entitytype, featurestore=featurestore),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_featurestore_entitytype_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `entitytype` (`string`): Set the `entitytype` field on the resulting object.\n  - `featurestore` (`string`): Set the `featurestore` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_vertex_ai_featurestore_entitytype_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    entitytype,
+    featurestore
+  ):: std.prune(a={
+    entitytype: entitytype,
+    featurestore: featurestore,
+  }),
+  '#withEntitytype':: d.fn(help='`google-beta.string.withEntitytype` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the entitytype field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `entitytype` field.\n', args=[]),
+  withEntitytype(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_featurestore_entitytype_iam_policy+: {
+        [dataSrcLabel]+: {
+          entitytype: value,
+        },
+      },
+    },
+  },
+  '#withFeaturestore':: d.fn(help='`google-beta.string.withFeaturestore` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the featurestore field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `featurestore` field.\n', args=[]),
+  withFeaturestore(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_featurestore_entitytype_iam_policy+: {
+        [dataSrcLabel]+: {
+          featurestore: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/vertex_ai_featurestore_iam_policy.libsonnet b/4.x/_gen/data/vertex_ai_featurestore_iam_policy.libsonnet
new file mode 100644
index 0000000..5546973
--- /dev/null
+++ b/4.x/_gen/data/vertex_ai_featurestore_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_vertex_ai_featurestore_iam_policy', url='', help='`google_vertex_ai_featurestore_iam_policy` represents the `google-beta_google_vertex_ai_featurestore_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_vertex_ai_featurestore_iam_policy.new` injects a new `data_google-beta_google_vertex_ai_featurestore_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_vertex_ai_featurestore_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_vertex_ai_featurestore_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_vertex_ai_featurestore_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_vertex_ai_featurestore_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `featurestore` (`string`): Set the `featurestore` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    featurestore,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_vertex_ai_featurestore_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(featurestore=featurestore, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_vertex_ai_featurestore_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_featurestore_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_vertex_ai_featurestore_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `featurestore` (`string`): Set the `featurestore` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_vertex_ai_featurestore_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    featurestore,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    featurestore: featurestore,
+    project: project,
+    region: region,
+  }),
+  '#withFeaturestore':: d.fn(help='`google-beta.string.withFeaturestore` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the featurestore field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `featurestore` field.\n', args=[]),
+  withFeaturestore(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_featurestore_iam_policy+: {
+        [dataSrcLabel]+: {
+          featurestore: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_featurestore_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_featurestore_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/vertex_ai_index.libsonnet b/4.x/_gen/data/vertex_ai_index.libsonnet
new file mode 100644
index 0000000..d799fb4
--- /dev/null
+++ b/4.x/_gen/data/vertex_ai_index.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_vertex_ai_index', url='', help='`google_vertex_ai_index` represents the `google-beta_google_vertex_ai_index` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_vertex_ai_index.new` injects a new `data_google-beta_google_vertex_ai_index` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_vertex_ai_index.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_vertex_ai_index` using the reference:\n\n    $._ref.data_google-beta_google_vertex_ai_index.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_vertex_ai_index.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): The resource name of the Index.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index. eg us-central1\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    region,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_vertex_ai_index',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_vertex_ai_index.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_index`\nTerraform data source.\n\nUnlike [google-beta.data.google_vertex_ai_index.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): The resource name of the Index.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index. eg us-central1\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_vertex_ai_index` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    region,
+    project=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_index+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_index+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_index+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/workstations_workstation_config_iam_policy.libsonnet b/4.x/_gen/data/workstations_workstation_config_iam_policy.libsonnet
new file mode 100644
index 0000000..7889847
--- /dev/null
+++ b/4.x/_gen/data/workstations_workstation_config_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_workstations_workstation_config_iam_policy', url='', help='`google_workstations_workstation_config_iam_policy` represents the `google-beta_google_workstations_workstation_config_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_workstations_workstation_config_iam_policy.new` injects a new `data_google-beta_google_workstations_workstation_config_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_workstations_workstation_config_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_workstations_workstation_config_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_workstations_workstation_config_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_workstations_workstation_config_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting data source block.\n  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    workstation_cluster_id,
+    workstation_config_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_workstations_workstation_config_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      location=location,
+      project=project,
+      workstation_cluster_id=workstation_cluster_id,
+      workstation_config_id=workstation_config_id
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_workstations_workstation_config_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation_config_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_workstations_workstation_config_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting object.\n  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_workstations_workstation_config_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    workstation_cluster_id,
+    workstation_config_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    workstation_cluster_id: workstation_cluster_id,
+    workstation_config_id: workstation_config_id,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withWorkstationClusterId':: d.fn(help='`google-beta.string.withWorkstationClusterId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the workstation_cluster_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `workstation_cluster_id` field.\n', args=[]),
+  withWorkstationClusterId(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          workstation_cluster_id: value,
+        },
+      },
+    },
+  },
+  '#withWorkstationConfigId':: d.fn(help='`google-beta.string.withWorkstationConfigId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the workstation_config_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `workstation_config_id` field.\n', args=[]),
+  withWorkstationConfigId(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_config_iam_policy+: {
+        [dataSrcLabel]+: {
+          workstation_config_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/workstations_workstation_iam_policy.libsonnet b/4.x/_gen/data/workstations_workstation_iam_policy.libsonnet
new file mode 100644
index 0000000..a948b6e
--- /dev/null
+++ b/4.x/_gen/data/workstations_workstation_iam_policy.libsonnet
@@ -0,0 +1,90 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_workstations_workstation_iam_policy', url='', help='`google_workstations_workstation_iam_policy` represents the `google-beta_google_workstations_workstation_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.data.google_workstations_workstation_iam_policy.new` injects a new `data_google-beta_google_workstations_workstation_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.data.google_workstations_workstation_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.data.google_workstations_workstation_iam_policy` using the reference:\n\n    $._ref.data_google-beta_google_workstations_workstation_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google-beta_google_workstations_workstation_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting data source block.\n  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting data source block.\n  - `workstation_id` (`string`): Set the `workstation_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    workstation_cluster_id,
+    workstation_config_id,
+    workstation_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_workstations_workstation_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      location=location,
+      project=project,
+      workstation_cluster_id=workstation_cluster_id,
+      workstation_config_id=workstation_config_id,
+      workstation_id=workstation_id
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.data.google_workstations_workstation_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation_iam_policy`\nTerraform data source.\n\nUnlike [google-beta.data.google_workstations_workstation_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting object.\n  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting object.\n  - `workstation_id` (`string`): Set the `workstation_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_workstations_workstation_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    workstation_cluster_id,
+    workstation_config_id,
+    workstation_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    workstation_cluster_id: workstation_cluster_id,
+    workstation_config_id: workstation_config_id,
+    workstation_id: workstation_id,
+  }),
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withWorkstationClusterId':: d.fn(help='`google-beta.string.withWorkstationClusterId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the workstation_cluster_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `workstation_cluster_id` field.\n', args=[]),
+  withWorkstationClusterId(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_iam_policy+: {
+        [dataSrcLabel]+: {
+          workstation_cluster_id: value,
+        },
+      },
+    },
+  },
+  '#withWorkstationConfigId':: d.fn(help='`google-beta.string.withWorkstationConfigId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the workstation_config_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `workstation_config_id` field.\n', args=[]),
+  withWorkstationConfigId(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_iam_policy+: {
+        [dataSrcLabel]+: {
+          workstation_config_id: value,
+        },
+      },
+    },
+  },
+  '#withWorkstationId':: d.fn(help='`google-beta.string.withWorkstationId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the workstation_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `workstation_id` field.\n', args=[]),
+  withWorkstationId(dataSrcLabel, value): {
+    data+: {
+      google_workstations_workstation_iam_policy+: {
+        [dataSrcLabel]+: {
+          workstation_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/main.libsonnet b/4.x/_gen/main.libsonnet
index 53f46e6..e1583af 100644
--- a/4.x/_gen/main.libsonnet
+++ b/4.x/_gen/main.libsonnet
@@ -305,6 +305,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   compute_vpn_gateway: (import 'resources/compute_vpn_gateway.libsonnet'),
   compute_vpn_tunnel: (import 'resources/compute_vpn_tunnel.libsonnet'),
   container_analysis_note: (import 'resources/container_analysis_note.libsonnet'),
+  container_analysis_note_iam_binding: (import 'resources/container_analysis_note_iam_binding.libsonnet'),
+  container_analysis_note_iam_member: (import 'resources/container_analysis_note_iam_member.libsonnet'),
+  container_analysis_note_iam_policy: (import 'resources/container_analysis_note_iam_policy.libsonnet'),
   container_analysis_occurrence: (import 'resources/container_analysis_occurrence.libsonnet'),
   container_attached_cluster: (import 'resources/container_attached_cluster.libsonnet'),
   container_aws_cluster: (import 'resources/container_aws_cluster.libsonnet'),
@@ -569,6 +572,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   network_security_client_tls_policy: (import 'resources/network_security_client_tls_policy.libsonnet'),
   network_security_gateway_security_policy: (import 'resources/network_security_gateway_security_policy.libsonnet'),
   network_security_gateway_security_policy_rule: (import 'resources/network_security_gateway_security_policy_rule.libsonnet'),
+  network_security_server_tls_policy: (import 'resources/network_security_server_tls_policy.libsonnet'),
   network_security_tls_inspection_policy: (import 'resources/network_security_tls_inspection_policy.libsonnet'),
   network_security_url_lists: (import 'resources/network_security_url_lists.libsonnet'),
   network_services_edge_cache_keyset: (import 'resources/network_services_edge_cache_keyset.libsonnet'),
diff --git a/4.x/_gen/resources/bigquery_table.libsonnet b/4.x/_gen/resources/bigquery_table.libsonnet
index 863650e..ed8f437 100644
--- a/4.x/_gen/resources/bigquery_table.libsonnet
+++ b/4.x/_gen/resources/bigquery_table.libsonnet
@@ -59,7 +59,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         source_uri_prefix: source_uri_prefix,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_bigquery_table.external_data_configuration.new` constructs a new object with attributes and blocks configured for the `external_data_configuration`\nTerraform sub block.\n\n\n\n**Args**:\n  - `autodetect` (`bool`): Let BigQuery try to autodetect the schema and format of the table.\n  - `compression` (`string`): The compression type of the data source. Valid values are "NONE" or "GZIP". When `null`, the `compression` field will be omitted from the resulting object.\n  - `connection_id` (`string`): The connection specifying the credentials to be used to read external storage, such as Azure Blob, Cloud Storage, or S3. The connectionId can have the form "{{project}}.{{location}}.{{connection_id}}" or "projects/{{project}}/locations/{{location}}/connections/{{connection_id}}". When `null`, the `connection_id` field will be omitted from the resulting object.\n  - `ignore_unknown_values` (`bool`): Indicates if BigQuery should allow extra values that are not represented in the table schema. If true, the extra values are ignored. If false, records with extra columns are treated as bad records, and if there are too many bad records, an invalid error is returned in the job result. The default value is false. When `null`, the `ignore_unknown_values` field will be omitted from the resulting object.\n  - `max_bad_records` (`number`): The maximum number of bad records that BigQuery can ignore when reading data. When `null`, the `max_bad_records` field will be omitted from the resulting object.\n  - `reference_file_schema_uri` (`string`): When creating an external table, the user can provide a reference file with the table schema. This is enabled for the following formats: AVRO, PARQUET, ORC. When `null`, the `reference_file_schema_uri` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the external table. Schema is required for CSV and JSON formats and is disallowed for Google Cloud Bigtable, Cloud Datastore backups, and Avro formats when using external tables. When `null`, the `schema` field will be omitted from the resulting object.\n  - `source_format` (`string`): The data format. Supported values are: "CSV", "GOOGLE_SHEETS", "NEWLINE_DELIMITED_JSON", "AVRO", "PARQUET", "ORC" and "DATASTORE_BACKUP". To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".\n  - `source_uris` (`list`): A list of the fully-qualified URIs that point to your data in Google Cloud.\n  - `avro_options` (`list[obj]`): Additional options if source_format is set to "AVRO" When `null`, the `avro_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.avro_options.new](#fn-external_data_configurationavro_optionsnew) constructor.\n  - `csv_options` (`list[obj]`): Additional properties to set if source_format is set to "CSV". When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.csv_options.new](#fn-external_data_configurationcsv_optionsnew) constructor.\n  - `google_sheets_options` (`list[obj]`): Additional options if source_format is set to "GOOGLE_SHEETS". When `null`, the `google_sheets_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.google_sheets_options.new](#fn-external_data_configurationgoogle_sheets_optionsnew) constructor.\n  - `hive_partitioning_options` (`list[obj]`): When set, configures hive partitioning support. Not all storage formats support hive partitioning -- requesting hive partitioning on an unsupported format will lead to an error, as will providing an invalid specification. When `null`, the `hive_partitioning_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.hive_partitioning_options.new](#fn-external_data_configurationhive_partitioning_optionsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `external_data_configuration` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_bigquery_table.external_data_configuration.new` constructs a new object with attributes and blocks configured for the `external_data_configuration`\nTerraform sub block.\n\n\n\n**Args**:\n  - `autodetect` (`bool`): Let BigQuery try to autodetect the schema and format of the table.\n  - `compression` (`string`): The compression type of the data source. Valid values are "NONE" or "GZIP". When `null`, the `compression` field will be omitted from the resulting object.\n  - `connection_id` (`string`): The connection specifying the credentials to be used to read external storage, such as Azure Blob, Cloud Storage, or S3. The connectionId can have the form "{{project}}.{{location}}.{{connection_id}}" or "projects/{{project}}/locations/{{location}}/connections/{{connection_id}}". When `null`, the `connection_id` field will be omitted from the resulting object.\n  - `ignore_unknown_values` (`bool`): Indicates if BigQuery should allow extra values that are not represented in the table schema. If true, the extra values are ignored. If false, records with extra columns are treated as bad records, and if there are too many bad records, an invalid error is returned in the job result. The default value is false. When `null`, the `ignore_unknown_values` field will be omitted from the resulting object.\n  - `max_bad_records` (`number`): The maximum number of bad records that BigQuery can ignore when reading data. When `null`, the `max_bad_records` field will be omitted from the resulting object.\n  - `reference_file_schema_uri` (`string`): When creating an external table, the user can provide a reference file with the table schema. This is enabled for the following formats: AVRO, PARQUET, ORC. When `null`, the `reference_file_schema_uri` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the external table. Schema is required for CSV and JSON formats and is disallowed for Google Cloud Bigtable, Cloud Datastore backups, and Avro formats when using external tables. When `null`, the `schema` field will be omitted from the resulting object.\n  - `source_format` (`string`):  Please see sourceFormat under ExternalDataConfiguration in Bigquery's public API documentation (https://cloud.google.com/bigquery/docs/reference/rest/v2/tables#externaldataconfiguration) for supported formats. To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".\n  - `source_uris` (`list`): A list of the fully-qualified URIs that point to your data in Google Cloud.\n  - `avro_options` (`list[obj]`): Additional options if source_format is set to "AVRO" When `null`, the `avro_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.avro_options.new](#fn-external_data_configurationavro_optionsnew) constructor.\n  - `csv_options` (`list[obj]`): Additional properties to set if source_format is set to "CSV". When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.csv_options.new](#fn-external_data_configurationcsv_optionsnew) constructor.\n  - `google_sheets_options` (`list[obj]`): Additional options if source_format is set to "GOOGLE_SHEETS". When `null`, the `google_sheets_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.google_sheets_options.new](#fn-external_data_configurationgoogle_sheets_optionsnew) constructor.\n  - `hive_partitioning_options` (`list[obj]`): When set, configures hive partitioning support. Not all storage formats support hive partitioning -- requesting hive partitioning on an unsupported format will lead to an error, as will providing an invalid specification. When `null`, the `hive_partitioning_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.hive_partitioning_options.new](#fn-external_data_configurationhive_partitioning_optionsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `external_data_configuration` sub block.\n', args=[]),
     new(
       autodetect,
       source_format,
diff --git a/4.x/_gen/resources/cloud_run_service.libsonnet b/4.x/_gen/resources/cloud_run_service.libsonnet
index 03c7834..68ab35b 100644
--- a/4.x/_gen/resources/cloud_run_service.libsonnet
+++ b/4.x/_gen/resources/cloud_run_service.libsonnet
@@ -214,7 +214,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
             timeout_seconds: timeout_seconds,
           }),
         },
-        '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.containers.new` constructs a new object with attributes and blocks configured for the `containers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `args` (`list`): Arguments to the entrypoint.\nThe docker image's CMD is used if this is not provided. When `null`, the `args` field will be omitted from the resulting object.\n  - `command` (`list`): Entrypoint array. Not executed within a shell.\nThe docker image's ENTRYPOINT is used if this is not provided. When `null`, the `command` field will be omitted from the resulting object.\n  - `image` (`string`): Docker image name. This is most often a reference to a container located\nin the container registry, such as gcr.io/cloudrun/hello\n  - `working_dir` (`string`): Container's working directory.\nIf not specified, the container runtime's default will be used, which\nmight be configured in the container image. When `null`, the `working_dir` field will be omitted from the resulting object.\n  - `env` (`list[obj]`): List of environment variables to set in the container. When `null`, the `env` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.env.new](#fn-templatetemplatespecenvnew) constructor.\n  - `env_from` (`list[obj]`): List of sources to populate environment variables in the container.\nAll invalid keys will be reported as an event when the container is starting.\nWhen a key exists in multiple sources, the value associated with the last source will\ntake precedence. Values defined by an Env with a duplicate key will take\nprecedence. When `null`, the `env_from` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.env_from.new](#fn-templatetemplatespecenv_fromnew) constructor.\n  - `liveness_probe` (`list[obj]`): Periodic probe of container liveness. Container will be restarted if the probe fails. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.liveness_probe.new](#fn-templatetemplatespecliveness_probenew) constructor.\n  - `ports` (`list[obj]`): List of open ports in the container. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.ports.new](#fn-templatetemplatespecportsnew) constructor.\n  - `resources` (`list[obj]`): Compute Resources required by this container. Used to set values such as max memory When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.resources.new](#fn-templatetemplatespecresourcesnew) constructor.\n  - `startup_probe` (`list[obj]`): Startup probe of application within the container.\nAll other probes are disabled if a startup probe is provided, until it\nsucceeds. Container will not be added to service endpoints if the probe fails. When `null`, the `startup_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.startup_probe.new](#fn-templatetemplatespecstartup_probenew) constructor.\n  - `volume_mounts` (`list[obj]`): Volume to mount into the container's filesystem.\nOnly supports SecretVolumeSources. When `null`, the `volume_mounts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.volume_mounts.new](#fn-templatetemplatespecvolume_mountsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `containers` sub block.\n', args=[]),
+        '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.containers.new` constructs a new object with attributes and blocks configured for the `containers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `args` (`list`): Arguments to the entrypoint.\nThe docker image's CMD is used if this is not provided. When `null`, the `args` field will be omitted from the resulting object.\n  - `command` (`list`): Entrypoint array. Not executed within a shell.\nThe docker image's ENTRYPOINT is used if this is not provided. When `null`, the `command` field will be omitted from the resulting object.\n  - `image` (`string`): Docker image name. This is most often a reference to a container located\nin the container registry, such as gcr.io/cloudrun/hello\n  - `name` (`string`): Name of the container When `null`, the `name` field will be omitted from the resulting object.\n  - `working_dir` (`string`): Container's working directory.\nIf not specified, the container runtime's default will be used, which\nmight be configured in the container image. When `null`, the `working_dir` field will be omitted from the resulting object.\n  - `env` (`list[obj]`): List of environment variables to set in the container. When `null`, the `env` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.env.new](#fn-templatetemplatespecenvnew) constructor.\n  - `env_from` (`list[obj]`): List of sources to populate environment variables in the container.\nAll invalid keys will be reported as an event when the container is starting.\nWhen a key exists in multiple sources, the value associated with the last source will\ntake precedence. Values defined by an Env with a duplicate key will take\nprecedence. When `null`, the `env_from` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.env_from.new](#fn-templatetemplatespecenv_fromnew) constructor.\n  - `liveness_probe` (`list[obj]`): Periodic probe of container liveness. Container will be restarted if the probe fails. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.liveness_probe.new](#fn-templatetemplatespecliveness_probenew) constructor.\n  - `ports` (`list[obj]`): List of open ports in the container. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.ports.new](#fn-templatetemplatespecportsnew) constructor.\n  - `resources` (`list[obj]`): Compute Resources required by this container. Used to set values such as max memory When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.resources.new](#fn-templatetemplatespecresourcesnew) constructor.\n  - `startup_probe` (`list[obj]`): Startup probe of application within the container.\nAll other probes are disabled if a startup probe is provided, until it\nsucceeds. Container will not be added to service endpoints if the probe fails. When `null`, the `startup_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.startup_probe.new](#fn-templatetemplatespecstartup_probenew) constructor.\n  - `volume_mounts` (`list[obj]`): Volume to mount into the container's filesystem.\nOnly supports SecretVolumeSources. When `null`, the `volume_mounts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.volume_mounts.new](#fn-templatetemplatespecvolume_mountsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `containers` sub block.\n', args=[]),
         new(
           image,
           args=null,
@@ -222,6 +222,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           env=null,
           env_from=null,
           liveness_probe=null,
+          name=null,
           ports=null,
           resources=null,
           startup_probe=null,
@@ -234,6 +235,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           env_from: env_from,
           image: image,
           liveness_probe: liveness_probe,
+          name: name,
           ports: ports,
           resources: resources,
           startup_probe: startup_probe,
@@ -333,7 +335,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           }),
         },
       },
-      '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.new` constructs a new object with attributes and blocks configured for the `spec`\nTerraform sub block.\n\n\n\n**Args**:\n  - `container_concurrency` (`number`): ContainerConcurrency specifies the maximum allowed in-flight (concurrent)\nrequests per container of the Revision. Values are:\n- '0' thread-safe, the system should manage the max concurrency. This is\n    the default value.\n- '1' not-thread-safe. Single concurrency\n- '2-N' thread-safe, max concurrency of N When `null`, the `container_concurrency` field will be omitted from the resulting object.\n  - `service_account_name` (`string`): Email address of the IAM service account associated with the revision of the\nservice. The service account represents the identity of the running revision,\nand determines what permissions the revision has. If not provided, the revision\nwill use the project's default service account. When `null`, the `service_account_name` field will be omitted from the resulting object.\n  - `timeout_seconds` (`number`): TimeoutSeconds holds the max duration the instance is allowed for responding to a request. When `null`, the `timeout_seconds` field will be omitted from the resulting object.\n  - `containers` (`list[obj]`): Container defines the unit of execution for this Revision.\nIn the context of a Revision, we disallow a number of the fields of\nthis Container, including: name, ports, and volumeMounts. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.\n  - `volumes` (`list[obj]`): Volume represents a named volume in a container. When `null`, the `volumes` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.new](#fn-templatetemplatevolumesnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `spec` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.new` constructs a new object with attributes and blocks configured for the `spec`\nTerraform sub block.\n\n\n\n**Args**:\n  - `container_concurrency` (`number`): ContainerConcurrency specifies the maximum allowed in-flight (concurrent)\nrequests per container of the Revision. Values are:\n- '0' thread-safe, the system should manage the max concurrency. This is\n    the default value.\n- '1' not-thread-safe. Single concurrency\n- '2-N' thread-safe, max concurrency of N When `null`, the `container_concurrency` field will be omitted from the resulting object.\n  - `service_account_name` (`string`): Email address of the IAM service account associated with the revision of the\nservice. The service account represents the identity of the running revision,\nand determines what permissions the revision has. If not provided, the revision\nwill use the project's default service account. When `null`, the `service_account_name` field will be omitted from the resulting object.\n  - `timeout_seconds` (`number`): TimeoutSeconds holds the max duration the instance is allowed for responding to a request. When `null`, the `timeout_seconds` field will be omitted from the resulting object.\n  - `containers` (`list[obj]`): Containers defines the unit of execution for this Revision. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.\n  - `volumes` (`list[obj]`): Volume represents a named volume in a container. When `null`, the `volumes` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.new](#fn-templatetemplatevolumesnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `spec` sub block.\n', args=[]),
       new(
         container_concurrency=null,
         containers=null,
@@ -348,11 +350,23 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         volumes: volumes,
       }),
       volumes:: {
-        '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.volumes.new` constructs a new object with attributes and blocks configured for the `volumes`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Volume's name.\n  - `secret` (`list[obj]`): The secret's value will be presented as the content of a file whose\nname is defined in the item path. If no items are defined, the name of\nthe file is the secret_name. When `null`, the `secret` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.secret.new](#fn-templatetemplatespecsecretnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `volumes` sub block.\n', args=[]),
+        empty_dir:: {
+          '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.volumes.empty_dir.new` constructs a new object with attributes and blocks configured for the `empty_dir`\nTerraform sub block.\n\n\n\n**Args**:\n  - `medium` (`string`): The medium on which the data is stored. The default is "" which means to use the node's default medium. Must be an empty string (default) or Memory. When `null`, the `medium` field will be omitted from the resulting object.\n  - `size_limit` (`string`): Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir. When `null`, the `size_limit` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `empty_dir` sub block.\n', args=[]),
+          new(
+            medium=null,
+            size_limit=null
+          ):: std.prune(a={
+            medium: medium,
+            size_limit: size_limit,
+          }),
+        },
+        '#new':: d.fn(help='\n`google-beta.google_cloud_run_service.template.spec.volumes.new` constructs a new object with attributes and blocks configured for the `volumes`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Volume's name.\n  - `empty_dir` (`list[obj]`): Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs). When `null`, the `empty_dir` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.empty_dir.new](#fn-templatetemplatespecempty_dirnew) constructor.\n  - `secret` (`list[obj]`): The secret's value will be presented as the content of a file whose\nname is defined in the item path. If no items are defined, the name of\nthe file is the secret_name. When `null`, the `secret` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.secret.new](#fn-templatetemplatespecsecretnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `volumes` sub block.\n', args=[]),
         new(
           name,
+          empty_dir=null,
           secret=null
         ):: std.prune(a={
+          empty_dir: empty_dir,
           name: name,
           secret: secret,
         }),
diff --git a/4.x/_gen/resources/cloudbuild_trigger.libsonnet b/4.x/_gen/resources/cloudbuild_trigger.libsonnet
index 69d60a3..50b91e4 100644
--- a/4.x/_gen/resources/cloudbuild_trigger.libsonnet
+++ b/4.x/_gen/resources/cloudbuild_trigger.libsonnet
@@ -470,7 +470,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     },
   },
   source_to_build:: {
-    '#new':: d.fn(help='\n`google-beta.google_cloudbuild_trigger.source_to_build.new` constructs a new object with attributes and blocks configured for the `source_to_build`\nTerraform sub block.\n\n\n\n**Args**:\n  - `github_enterprise_config` (`string`): The full resource name of the github enterprise config.\nFormat: projects/{project}/locations/{location}/githubEnterpriseConfigs/{id}. projects/{project}/githubEnterpriseConfigs/{id}. When `null`, the `github_enterprise_config` field will be omitted from the resulting object.\n  - `ref` (`string`): The branch or tag to use. Must start with "refs/" (required).\n  - `repo_type` (`string`): The type of the repo, since it may not be explicit from the repo field (e.g from a URL).\nValues can be UNKNOWN, CLOUD_SOURCE_REPOSITORIES, GITHUB, BITBUCKET_SERVER Possible values: ["UNKNOWN", "CLOUD_SOURCE_REPOSITORIES", "GITHUB", "BITBUCKET_SERVER"]\n  - `repository` (`string`): The qualified resource name of the Repo API repository. \nEither uri or repository can be specified and is required. When `null`, the `repository` field will be omitted from the resulting object.\n  - `uri` (`string`): The URI of the repo. When `null`, the `uri` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `source_to_build` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_cloudbuild_trigger.source_to_build.new` constructs a new object with attributes and blocks configured for the `source_to_build`\nTerraform sub block.\n\n\n\n**Args**:\n  - `github_enterprise_config` (`string`): The full resource name of the github enterprise config.\nFormat: projects/{project}/locations/{location}/githubEnterpriseConfigs/{id}. projects/{project}/githubEnterpriseConfigs/{id}. When `null`, the `github_enterprise_config` field will be omitted from the resulting object.\n  - `ref` (`string`): The branch or tag to use. Must start with "refs/" (required).\n  - `repo_type` (`string`): The type of the repo, since it may not be explicit from the repo field (e.g from a URL).\nValues can be UNKNOWN, CLOUD_SOURCE_REPOSITORIES, GITHUB, BITBUCKET_SERVER Possible values: ["UNKNOWN", "CLOUD_SOURCE_REPOSITORIES", "GITHUB", "BITBUCKET_SERVER"]\n  - `repository` (`string`): The qualified resource name of the Repo API repository.\nEither uri or repository can be specified and is required. When `null`, the `repository` field will be omitted from the resulting object.\n  - `uri` (`string`): The URI of the repo. When `null`, the `uri` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `source_to_build` sub block.\n', args=[]),
     new(
       ref,
       repo_type,
diff --git a/4.x/_gen/resources/compute_disk.libsonnet b/4.x/_gen/resources/compute_disk.libsonnet
index 2c6a5d1..e5fc66c 100644
--- a/4.x/_gen/resources/compute_disk.libsonnet
+++ b/4.x/_gen/resources/compute_disk.libsonnet
@@ -24,16 +24,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       rsa_encrypted_key: rsa_encrypted_key,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_compute_disk.new` injects a new `google-beta_google_compute_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_disk` using the reference:\n\n    $._ref.google-beta_google_compute_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image\u0026#39;s \u0026#39;self_link\u0026#39;, \u0026#39;projects/{project}/global/images/{image}\u0026#39;,\n\u0026#39;projects/{project}/global/images/family/{family}\u0026#39;, \u0026#39;global/images/{image}\u0026#39;,\n\u0026#39;global/images/family/{family}\u0026#39;, \u0026#39;family/{family}\u0026#39;, \u0026#39;{project}/{family}\u0026#39;,\n\u0026#39;{project}/{image}\u0026#39;, \u0026#39;{family}\u0026#39;, or \u0026#39;{image}\u0026#39;. If referred by family, the\nimages names must include the family name. If they don\u0026#39;t, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image \u0026#39;centos-6-v20180104\u0026#39; includes its family name \u0026#39;centos-6\u0026#39;.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `multi_writer` (`bool`): Indicates whether or not the disk can be read/write attached to more than one instance. When `null`, the `multi_writer` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): Resource policies applied to this disk for automatic snapshot creations.\n\n~\u0026gt;**NOTE** This value does not support updating the\nresource policy, as resource policies can not be updated more than\none at a time. Use\n[\u0026#39;google_compute_disk_resource_policy_attachment\u0026#39;](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_disk_resource_policy_attachment)\nto allow for updating the resource policy attached to the disk. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the \u0026#39;image\u0026#39; or\n\u0026#39;snapshot\u0026#39; parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with \u0026#39;image\u0026#39; or \u0026#39;snapshot\u0026#39;,\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~\u0026gt;**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add \u0026#39;lifecycle.prevent_destroy\u0026#39; in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  guest_os_features:: {
+    '#new':: d.fn(help='\n`google-beta.google_compute_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`\nTerraform sub block.\n\n\n\n**Args**:\n  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]\n\n**Returns**:\n  - An attribute object that represents the `guest_os_features` sub block.\n', args=[]),
+    new(
+      type
+    ):: std.prune(a={
+      type: type,
+    }),
+  },
+  '#new':: d.fn(help="\n`google-beta.google_compute_disk.new` injects a new `google-beta_google_compute_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_disk` using the reference:\n\n    $._ref.google-beta_google_compute_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image\u0026#39;s \u0026#39;self_link\u0026#39;, \u0026#39;projects/{project}/global/images/{image}\u0026#39;,\n\u0026#39;projects/{project}/global/images/family/{family}\u0026#39;, \u0026#39;global/images/{image}\u0026#39;,\n\u0026#39;global/images/family/{family}\u0026#39;, \u0026#39;family/{family}\u0026#39;, \u0026#39;{project}/{family}\u0026#39;,\n\u0026#39;{project}/{image}\u0026#39;, \u0026#39;{family}\u0026#39;, or \u0026#39;{image}\u0026#39;. If referred by family, the\nimages names must include the family name. If they don\u0026#39;t, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image \u0026#39;centos-6-v20180104\u0026#39; includes its family name \u0026#39;centos-6\u0026#39;.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `multi_writer` (`bool`): Indicates whether or not the disk can be read/write attached to more than one instance. When `null`, the `multi_writer` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): Resource policies applied to this disk for automatic snapshot creations.\n\n~\u0026gt;**NOTE** This value does not support updating the\nresource policy, as resource policies can not be updated more than\none at a time. Use\n[\u0026#39;google_compute_disk_resource_policy_attachment\u0026#39;](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_disk_resource_policy_attachment)\nto allow for updating the resource policy attached to the disk. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the \u0026#39;image\u0026#39; or\n\u0026#39;snapshot\u0026#39; parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with \u0026#39;image\u0026#39; or \u0026#39;snapshot\u0026#39;,\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~\u0026gt;**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add \u0026#39;lifecycle.prevent_destroy\u0026#39; in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
     async_primary_disk=null,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     image=null,
     interface=null,
     labels=null,
+    licenses=null,
     multi_writer=null,
     physical_block_size_bytes=null,
     project=null,
@@ -55,9 +65,11 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       async_primary_disk=async_primary_disk,
       description=description,
       disk_encryption_key=disk_encryption_key,
+      guest_os_features=guest_os_features,
       image=image,
       interface=interface,
       labels=labels,
+      licenses=licenses,
       multi_writer=multi_writer,
       name=name,
       physical_block_size_bytes=physical_block_size_bytes,
@@ -75,15 +87,17 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_disk.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_disk`\nTerraform resource.\n\nUnlike [google-beta.google_compute_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image's 'self_link', 'projects/{project}/global/images/{image}',\n'projects/{project}/global/images/family/{family}', 'global/images/{image}',\n'global/images/family/{family}', 'family/{family}', '{project}/{family}',\n'{project}/{image}', '{family}', or '{image}'. If referred by family, the\nimages names must include the family name. If they don't, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image 'centos-6-v20180104' includes its family name 'centos-6'.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `multi_writer` (`bool`): Indicates whether or not the disk can be read/write attached to more than one instance. When `null`, the `multi_writer` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): Resource policies applied to this disk for automatic snapshot creations.\n\n~>**NOTE** This value does not support updating the\nresource policy, as resource policies can not be updated more than\none at a time. Use\n['google_compute_disk_resource_policy_attachment'](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_disk_resource_policy_attachment)\nto allow for updating the resource policy attached to the disk. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the 'image' or\n'snapshot' parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with 'image' or 'snapshot',\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~>**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add 'lifecycle.prevent_destroy' in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_disk` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_disk.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_disk`\nTerraform resource.\n\nUnlike [google-beta.google_compute_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image's 'self_link', 'projects/{project}/global/images/{image}',\n'projects/{project}/global/images/family/{family}', 'global/images/{image}',\n'global/images/family/{family}', 'family/{family}', '{project}/{family}',\n'{project}/{image}', '{family}', or '{image}'. If referred by family, the\nimages names must include the family name. If they don't, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image 'centos-6-v20180104' includes its family name 'centos-6'.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `multi_writer` (`bool`): Indicates whether or not the disk can be read/write attached to more than one instance. When `null`, the `multi_writer` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): Resource policies applied to this disk for automatic snapshot creations.\n\n~>**NOTE** This value does not support updating the\nresource policy, as resource policies can not be updated more than\none at a time. Use\n['google_compute_disk_resource_policy_attachment'](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_disk_resource_policy_attachment)\nto allow for updating the resource policy attached to the disk. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the 'image' or\n'snapshot' parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with 'image' or 'snapshot',\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~>**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add 'lifecycle.prevent_destroy' in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_disk` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     async_primary_disk=null,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     image=null,
     interface=null,
     labels=null,
+    licenses=null,
     multi_writer=null,
     physical_block_size_bytes=null,
     project=null,
@@ -101,9 +115,11 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     async_primary_disk: async_primary_disk,
     description: description,
     disk_encryption_key: disk_encryption_key,
+    guest_os_features: guest_os_features,
     image: image,
     interface: interface,
     labels: labels,
+    licenses: licenses,
     multi_writer: multi_writer,
     name: name,
     physical_block_size_bytes: physical_block_size_bytes,
@@ -205,6 +221,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withGuestOsFeatures':: d.fn(help='`google-beta.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withGuestOsFeaturesMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeatures(resourceLabel, value): {
+    resource+: {
+      google_compute_disk+: {
+        [resourceLabel]+: {
+          guest_os_features: value,
+        },
+      },
+    },
+  },
+  '#withGuestOsFeaturesMixin':: d.fn(help='`google-beta.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withGuestOsFeatures](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeaturesMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_disk+: {
+        [resourceLabel]+: {
+          guest_os_features+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withImage':: d.fn(help='`google-beta.string.withImage` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the image field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `image` field.\n', args=[]),
   withImage(resourceLabel, value): {
     resource+: {
@@ -235,6 +271,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withLicenses':: d.fn(help='`google-beta.list.withLicenses` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the licenses field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `licenses` field.\n', args=[]),
+  withLicenses(resourceLabel, value): {
+    resource+: {
+      google_compute_disk+: {
+        [resourceLabel]+: {
+          licenses: value,
+        },
+      },
+    },
+  },
   '#withMultiWriter':: d.fn(help='`google-beta.bool.withMultiWriter` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the multi_writer field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `multi_writer` field.\n', args=[]),
   withMultiWriter(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_image.libsonnet b/4.x/_gen/resources/compute_image.libsonnet
index 23b39e3..4adaaeb 100644
--- a/4.x/_gen/resources/compute_image.libsonnet
+++ b/4.x/_gen/resources/compute_image.libsonnet
@@ -20,7 +20,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       kms_key_service_account: kms_key_service_account,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_compute_image.new` injects a new `google-beta_google_compute_image` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_image.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_image` using the reference:\n\n    $._ref.google-beta_google_compute_image.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_image.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_compute_image.new` injects a new `google-beta_google_compute_image` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_image.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_image` using the reference:\n\n    $._ref.google-beta_google_compute_image.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_image.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image\n(regional or multi-regional).\nReference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
@@ -36,6 +36,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     source_disk=null,
     source_image=null,
     source_snapshot=null,
+    storage_locations=null,
     timeouts=null,
     _meta={}
   ):: tf.withResource(
@@ -55,11 +56,12 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       source_disk=source_disk,
       source_image=source_image,
       source_snapshot=source_snapshot,
+      storage_locations=storage_locations,
       timeouts=timeouts
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_image.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_image`\nTerraform resource.\n\nUnlike [google-beta.google_compute_image.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_image` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_image.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_image`\nTerraform resource.\n\nUnlike [google-beta.google_compute_image.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image\n(regional or multi-regional).\nReference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_image` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     description=null,
@@ -74,6 +76,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     source_disk=null,
     source_image=null,
     source_snapshot=null,
+    storage_locations=null,
     timeouts=null
   ):: std.prune(a={
     description: description,
@@ -89,6 +92,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     source_disk: source_disk,
     source_image: source_image,
     source_snapshot: source_snapshot,
+    storage_locations: storage_locations,
     timeouts: timeouts,
   }),
   raw_disk:: {
@@ -275,6 +279,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withStorageLocations':: d.fn(help='`google-beta.list.withStorageLocations` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the storage_locations field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `storage_locations` field.\n', args=[]),
+  withStorageLocations(resourceLabel, value): {
+    resource+: {
+      google_compute_image+: {
+        [resourceLabel]+: {
+          storage_locations: value,
+        },
+      },
+    },
+  },
   '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
   withTimeouts(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_region_commitment.libsonnet b/4.x/_gen/resources/compute_region_commitment.libsonnet
index f30dfa2..e99fc5b 100644
--- a/4.x/_gen/resources/compute_region_commitment.libsonnet
+++ b/4.x/_gen/resources/compute_region_commitment.libsonnet
@@ -14,7 +14,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       license: license,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_compute_region_commitment.new` injects a new `google-beta_google_compute_region_commitment` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_region_commitment.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_region_commitment` using the reference:\n\n    $._ref.google-beta_google_compute_region_commitment.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_region_commitment.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: [\u0026#34;LICENSE\u0026#34;, \u0026#34;MACHINE\u0026#34;] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: [\u0026#34;TWELVE_MONTH\u0026#34;, \u0026#34;THIRTY_SIX_MONTH\u0026#34;]\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nType MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized\nmachines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to\naccelerator optimized machines. Possible values: [\u0026#34;MEMORY_OPTIMIZED\u0026#34;, \u0026#34;ACCELERATOR_OPTIMIZED\u0026#34;] When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_compute_region_commitment.new` injects a new `google-beta_google_compute_region_commitment` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_region_commitment.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_region_commitment` using the reference:\n\n    $._ref.google-beta_google_compute_region_commitment.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_region_commitment.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: [\u0026#34;LICENSE\u0026#34;, \u0026#34;MACHINE\u0026#34;] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: [\u0026#34;TWELVE_MONTH\u0026#34;, \u0026#34;THIRTY_SIX_MONTH\u0026#34;]\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nThe type could be one of the following value: \u0026#39;MEMORY_OPTIMIZED\u0026#39;, \u0026#39;ACCELERATOR_OPTIMIZED\u0026#39;,\n\u0026#39;GENERAL_PURPOSE_N1\u0026#39;, \u0026#39;GENERAL_PURPOSE_N2\u0026#39;, \u0026#39;GENERAL_PURPOSE_N2D\u0026#39;, \u0026#39;GENERAL_PURPOSE_E2\u0026#39;,\n\u0026#39;GENERAL_PURPOSE_T2D\u0026#39;, \u0026#39;GENERAL_PURPOSE_C3\u0026#39;, \u0026#39;COMPUTE_OPTIMIZED_C2\u0026#39;, \u0026#39;COMPUTE_OPTIMIZED_C2D\u0026#39; and\n\u0026#39;GRAPHICS_OPTIMIZED_G2\u0026#39; When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
@@ -47,7 +47,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_region_commitment.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_commitment`\nTerraform resource.\n\nUnlike [google-beta.google_compute_region_commitment.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: ["LICENSE", "MACHINE"] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: ["TWELVE_MONTH", "THIRTY_SIX_MONTH"]\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nType MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized\nmachines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to\naccelerator optimized machines. Possible values: ["MEMORY_OPTIMIZED", "ACCELERATOR_OPTIMIZED"] When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_region_commitment` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_region_commitment.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_commitment`\nTerraform resource.\n\nUnlike [google-beta.google_compute_region_commitment.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: ["LICENSE", "MACHINE"] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: ["TWELVE_MONTH", "THIRTY_SIX_MONTH"]\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nThe type could be one of the following value: 'MEMORY_OPTIMIZED', 'ACCELERATOR_OPTIMIZED',\n'GENERAL_PURPOSE_N1', 'GENERAL_PURPOSE_N2', 'GENERAL_PURPOSE_N2D', 'GENERAL_PURPOSE_E2',\n'GENERAL_PURPOSE_T2D', 'GENERAL_PURPOSE_C3', 'COMPUTE_OPTIMIZED_C2', 'COMPUTE_OPTIMIZED_C2D' and\n'GRAPHICS_OPTIMIZED_G2' When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_region_commitment` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     plan,
diff --git a/4.x/_gen/resources/compute_region_disk.libsonnet b/4.x/_gen/resources/compute_region_disk.libsonnet
index 60e0427..fd3d8c6 100644
--- a/4.x/_gen/resources/compute_region_disk.libsonnet
+++ b/4.x/_gen/resources/compute_region_disk.libsonnet
@@ -20,7 +20,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       raw_key: raw_key,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_compute_region_disk.new` injects a new `google-beta_google_compute_region_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_region_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_region_disk` using the reference:\n\n    $._ref.google-beta_google_compute_region_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_region_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  guest_os_features:: {
+    '#new':: d.fn(help='\n`google-beta.google_compute_region_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`\nTerraform sub block.\n\n\n\n**Args**:\n  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]\n\n**Returns**:\n  - An attribute object that represents the `guest_os_features` sub block.\n', args=[]),
+    new(
+      type
+    ):: std.prune(a={
+      type: type,
+    }),
+  },
+  '#new':: d.fn(help="\n`google-beta.google_compute_region_disk.new` injects a new `google-beta_google_compute_region_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_compute_region_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_compute_region_disk` using the reference:\n\n    $._ref.google-beta_google_compute_region_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_compute_region_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
@@ -28,8 +36,10 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     async_primary_disk=null,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     interface=null,
     labels=null,
+    licenses=null,
     physical_block_size_bytes=null,
     project=null,
     region=null,
@@ -47,8 +57,10 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       async_primary_disk=async_primary_disk,
       description=description,
       disk_encryption_key=disk_encryption_key,
+      guest_os_features=guest_os_features,
       interface=interface,
       labels=labels,
+      licenses=licenses,
       name=name,
       physical_block_size_bytes=physical_block_size_bytes,
       project=project,
@@ -63,15 +75,17 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_region_disk.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_disk`\nTerraform resource.\n\nUnlike [google-beta.google_compute_region_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_region_disk` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_compute_region_disk.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_disk`\nTerraform resource.\n\nUnlike [google-beta.google_compute_region_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `async_primary_disk` (`list[obj]`): A nested object resource When `null`, the `async_primary_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.async_primary_disk.new](#fn-async_primary_disknew) constructor.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_compute_region_disk` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     replica_zones,
     async_primary_disk=null,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     interface=null,
     labels=null,
+    licenses=null,
     physical_block_size_bytes=null,
     project=null,
     region=null,
@@ -85,8 +99,10 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     async_primary_disk: async_primary_disk,
     description: description,
     disk_encryption_key: disk_encryption_key,
+    guest_os_features: guest_os_features,
     interface: interface,
     labels: labels,
+    licenses: licenses,
     name: name,
     physical_block_size_bytes: physical_block_size_bytes,
     project: project,
@@ -171,6 +187,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withGuestOsFeatures':: d.fn(help='`google-beta.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withGuestOsFeaturesMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeatures(resourceLabel, value): {
+    resource+: {
+      google_compute_region_disk+: {
+        [resourceLabel]+: {
+          guest_os_features: value,
+        },
+      },
+    },
+  },
+  '#withGuestOsFeaturesMixin':: d.fn(help='`google-beta.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withGuestOsFeatures](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeaturesMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_region_disk+: {
+        [resourceLabel]+: {
+          guest_os_features+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withInterface':: d.fn(help='`google-beta.string.withInterface` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the interface field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `interface` field.\n', args=[]),
   withInterface(resourceLabel, value): {
     resource+: {
@@ -191,6 +227,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withLicenses':: d.fn(help='`google-beta.list.withLicenses` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the licenses field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `licenses` field.\n', args=[]),
+  withLicenses(resourceLabel, value): {
+    resource+: {
+      google_compute_region_disk+: {
+        [resourceLabel]+: {
+          licenses: value,
+        },
+      },
+    },
+  },
   '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
   withName(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/container_analysis_note_iam_binding.libsonnet b/4.x/_gen/resources/container_analysis_note_iam_binding.libsonnet
new file mode 100644
index 0000000..32fc163
--- /dev/null
+++ b/4.x/_gen/resources/container_analysis_note_iam_binding.libsonnet
@@ -0,0 +1,112 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_container_analysis_note_iam_binding', url='', help='`google_container_analysis_note_iam_binding` represents the `google-beta_google_container_analysis_note_iam_binding` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  condition:: {
+    '#new':: d.fn(help='\n`google-beta.google_container_analysis_note_iam_binding.condition.new` constructs a new object with attributes and blocks configured for the `condition`\nTerraform sub block.\n\n\n\n**Args**:\n  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.\n  - `expression` (`string`): Set the `expression` field on the resulting object.\n  - `title` (`string`): Set the `title` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `condition` sub block.\n', args=[]),
+    new(
+      expression,
+      title,
+      description=null
+    ):: std.prune(a={
+      description: description,
+      expression: expression,
+      title: title,
+    }),
+  },
+  '#new':: d.fn(help="\n`google-beta.google_container_analysis_note_iam_binding.new` injects a new `google-beta_google_container_analysis_note_iam_binding` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_container_analysis_note_iam_binding.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_container_analysis_note_iam_binding` using the reference:\n\n    $._ref.google-beta_google_container_analysis_note_iam_binding.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_container_analysis_note_iam_binding.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `members` (`list`): Set the `members` field on the resulting resource block.\n  - `note` (`string`): Set the `note` field on the resulting resource block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting resource block.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    members,
+    note,
+    role,
+    condition=null,
+    project=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_container_analysis_note_iam_binding',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      condition=condition,
+      members=members,
+      note=note,
+      project=project,
+      role=role
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_container_analysis_note_iam_binding.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_binding`\nTerraform resource.\n\nUnlike [google-beta.google_container_analysis_note_iam_binding.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `members` (`list`): Set the `members` field on the resulting object.\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting object.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_analysis_note_iam_binding` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    members,
+    note,
+    role,
+    condition=null,
+    project=null
+  ):: std.prune(a={
+    condition: condition,
+    members: members,
+    note: note,
+    project: project,
+    role: role,
+  }),
+  '#withCondition':: d.fn(help='`google-beta.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withConditionMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withCondition(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          condition: value,
+        },
+      },
+    },
+  },
+  '#withConditionMixin':: d.fn(help='`google-beta.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withCondition](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withConditionMixin(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          condition+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withMembers':: d.fn(help='`google-beta.list.withMembers` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the members field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `members` field.\n', args=[]),
+  withMembers(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          members: value,
+        },
+      },
+    },
+  },
+  '#withNote':: d.fn(help='`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the note field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRole':: d.fn(help='`google-beta.string.withRole` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the role field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `role` field.\n', args=[]),
+  withRole(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          role: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/container_analysis_note_iam_member.libsonnet b/4.x/_gen/resources/container_analysis_note_iam_member.libsonnet
new file mode 100644
index 0000000..3c748fb
--- /dev/null
+++ b/4.x/_gen/resources/container_analysis_note_iam_member.libsonnet
@@ -0,0 +1,112 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_container_analysis_note_iam_member', url='', help='`google_container_analysis_note_iam_member` represents the `google-beta_google_container_analysis_note_iam_member` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  condition:: {
+    '#new':: d.fn(help='\n`google-beta.google_container_analysis_note_iam_member.condition.new` constructs a new object with attributes and blocks configured for the `condition`\nTerraform sub block.\n\n\n\n**Args**:\n  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.\n  - `expression` (`string`): Set the `expression` field on the resulting object.\n  - `title` (`string`): Set the `title` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `condition` sub block.\n', args=[]),
+    new(
+      expression,
+      title,
+      description=null
+    ):: std.prune(a={
+      description: description,
+      expression: expression,
+      title: title,
+    }),
+  },
+  '#new':: d.fn(help="\n`google-beta.google_container_analysis_note_iam_member.new` injects a new `google-beta_google_container_analysis_note_iam_member` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_container_analysis_note_iam_member.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_container_analysis_note_iam_member` using the reference:\n\n    $._ref.google-beta_google_container_analysis_note_iam_member.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_container_analysis_note_iam_member.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `member` (`string`): Set the `member` field on the resulting resource block.\n  - `note` (`string`): Set the `note` field on the resulting resource block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting resource block.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    member,
+    note,
+    role,
+    condition=null,
+    project=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_container_analysis_note_iam_member',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      condition=condition,
+      member=member,
+      note=note,
+      project=project,
+      role=role
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_container_analysis_note_iam_member.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_member`\nTerraform resource.\n\nUnlike [google-beta.google_container_analysis_note_iam_member.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `member` (`string`): Set the `member` field on the resulting object.\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting object.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_analysis_note_iam_member` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    member,
+    note,
+    role,
+    condition=null,
+    project=null
+  ):: std.prune(a={
+    condition: condition,
+    member: member,
+    note: note,
+    project: project,
+    role: role,
+  }),
+  '#withCondition':: d.fn(help='`google-beta.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withConditionMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withCondition(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          condition: value,
+        },
+      },
+    },
+  },
+  '#withConditionMixin':: d.fn(help='`google-beta.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withCondition](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withConditionMixin(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          condition+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withMember':: d.fn(help='`google-beta.string.withMember` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the member field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `member` field.\n', args=[]),
+  withMember(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          member: value,
+        },
+      },
+    },
+  },
+  '#withNote':: d.fn(help='`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the note field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRole':: d.fn(help='`google-beta.string.withRole` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the role field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `role` field.\n', args=[]),
+  withRole(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          role: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/container_analysis_note_iam_policy.libsonnet b/4.x/_gen/resources/container_analysis_note_iam_policy.libsonnet
new file mode 100644
index 0000000..1058b9e
--- /dev/null
+++ b/4.x/_gen/resources/container_analysis_note_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_container_analysis_note_iam_policy', url='', help='`google_container_analysis_note_iam_policy` represents the `google-beta_google_container_analysis_note_iam_policy` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.google_container_analysis_note_iam_policy.new` injects a new `google-beta_google_container_analysis_note_iam_policy` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_container_analysis_note_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_container_analysis_note_iam_policy` using the reference:\n\n    $._ref.google-beta_google_container_analysis_note_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_container_analysis_note_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `note` (`string`): Set the `note` field on the resulting resource block.\n  - `policy_data` (`string`): Set the `policy_data` field on the resulting resource block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    note,
+    policy_data,
+    project=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_container_analysis_note_iam_policy',
+    label=resourceLabel,
+    attrs=self.newAttrs(note=note, policy_data=policy_data, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_policy`\nTerraform resource.\n\nUnlike [google-beta.google_container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `policy_data` (`string`): Set the `policy_data` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_analysis_note_iam_policy` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    note,
+    policy_data,
+    project=null
+  ):: std.prune(a={
+    note: note,
+    policy_data: policy_data,
+    project: project,
+  }),
+  '#withNote':: d.fn(help='`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the note field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_policy+: {
+        [resourceLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withPolicyData':: d.fn(help='`google-beta.string.withPolicyData` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the policy_data field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `policy_data` field.\n', args=[]),
+  withPolicyData(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_policy+: {
+        [resourceLabel]+: {
+          policy_data: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_policy+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet b/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet
index b98f03f..fb21416 100644
--- a/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet
+++ b/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet
@@ -459,6 +459,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     }),
     storage_config:: {
       big_query_options:: {
+        excluded_fields:: {
+          '#new':: d.fn(help='\n`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new` constructs a new object with attributes and blocks configured for the `excluded_fields`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Name describing the field excluded from scanning.\n\n**Returns**:\n  - An attribute object that represents the `excluded_fields` sub block.\n', args=[]),
+          new(
+            name
+          ):: std.prune(a={
+            name: name,
+          }),
+        },
         identifying_fields:: {
           '#new':: d.fn(help='\n`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new` constructs a new object with attributes and blocks configured for the `identifying_fields`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Name of a BigQuery field to be returned with the findings.\n\n**Returns**:\n  - An attribute object that represents the `identifying_fields` sub block.\n', args=[]),
           new(
@@ -467,15 +475,27 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
             name: name,
           }),
         },
-        '#new':: d.fn(help='\n`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.new` constructs a new object with attributes and blocks configured for the `big_query_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `rows_limit` (`number`): Max number of rows to scan. If the table has more rows than this value, the rest of the rows are omitted.\nIf not set, or if set to 0, all rows will be scanned. Only one of rowsLimit and rowsLimitPercent can be\nspecified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit` field will be omitted from the resulting object.\n  - `rows_limit_percent` (`number`): Max percentage of rows to scan. The rest are omitted. The number of rows scanned is rounded down.\nMust be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0. Only one of\nrowsLimit and rowsLimitPercent can be specified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit_percent` field will be omitted from the resulting object.\n  - `sample_method` (`string`): How to sample rows if not all rows are scanned. Meaningful only when used in conjunction with either\nrowsLimit or rowsLimitPercent. If not specified, rows are scanned in the order BigQuery reads them. Default value: "TOP" Possible values: ["TOP", "RANDOM_START"] When `null`, the `sample_method` field will be omitted from the resulting object.\n  - `identifying_fields` (`list[obj]`): Specifies the BigQuery fields that will be returned with findings.\nIf not specified, no identifying fields will be returned for findings. When `null`, the `identifying_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new](#fn-inspect_jobinspect_jobstorage_configidentifying_fieldsnew) constructor.\n  - `table_reference` (`list[obj]`): Set of files to scan. When `null`, the `table_reference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.table_reference.new](#fn-inspect_jobinspect_jobstorage_configtable_referencenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `big_query_options` sub block.\n', args=[]),
+        included_fields:: {
+          '#new':: d.fn(help='\n`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new` constructs a new object with attributes and blocks configured for the `included_fields`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Name describing the field to which scanning is limited.\n\n**Returns**:\n  - An attribute object that represents the `included_fields` sub block.\n', args=[]),
+          new(
+            name
+          ):: std.prune(a={
+            name: name,
+          }),
+        },
+        '#new':: d.fn(help='\n`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.new` constructs a new object with attributes and blocks configured for the `big_query_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `rows_limit` (`number`): Max number of rows to scan. If the table has more rows than this value, the rest of the rows are omitted.\nIf not set, or if set to 0, all rows will be scanned. Only one of rowsLimit and rowsLimitPercent can be\nspecified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit` field will be omitted from the resulting object.\n  - `rows_limit_percent` (`number`): Max percentage of rows to scan. The rest are omitted. The number of rows scanned is rounded down.\nMust be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0. Only one of\nrowsLimit and rowsLimitPercent can be specified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit_percent` field will be omitted from the resulting object.\n  - `sample_method` (`string`): How to sample rows if not all rows are scanned. Meaningful only when used in conjunction with either\nrowsLimit or rowsLimitPercent. If not specified, rows are scanned in the order BigQuery reads them. Default value: "TOP" Possible values: ["TOP", "RANDOM_START"] When `null`, the `sample_method` field will be omitted from the resulting object.\n  - `excluded_fields` (`list[obj]`): References to fields excluded from scanning.\nThis allows you to skip inspection of entire columns which you know have no findings. When `null`, the `excluded_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new](#fn-inspect_jobinspect_jobstorage_configexcluded_fieldsnew) constructor.\n  - `identifying_fields` (`list[obj]`): Specifies the BigQuery fields that will be returned with findings.\nIf not specified, no identifying fields will be returned for findings. When `null`, the `identifying_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new](#fn-inspect_jobinspect_jobstorage_configidentifying_fieldsnew) constructor.\n  - `included_fields` (`list[obj]`): Limit scanning only to these fields. When `null`, the `included_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new](#fn-inspect_jobinspect_jobstorage_configincluded_fieldsnew) constructor.\n  - `table_reference` (`list[obj]`): Set of files to scan. When `null`, the `table_reference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.table_reference.new](#fn-inspect_jobinspect_jobstorage_configtable_referencenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `big_query_options` sub block.\n', args=[]),
         new(
+          excluded_fields=null,
           identifying_fields=null,
+          included_fields=null,
           rows_limit=null,
           rows_limit_percent=null,
           sample_method=null,
           table_reference=null
         ):: std.prune(a={
+          excluded_fields: excluded_fields,
           identifying_fields: identifying_fields,
+          included_fields: included_fields,
           rows_limit: rows_limit,
           rows_limit_percent: rows_limit_percent,
           sample_method: sample_method,
diff --git a/4.x/_gen/resources/dataflow_flex_template_job.libsonnet b/4.x/_gen/resources/dataflow_flex_template_job.libsonnet
index cb4c97a..7d9e12f 100644
--- a/4.x/_gen/resources/dataflow_flex_template_job.libsonnet
+++ b/4.x/_gen/resources/dataflow_flex_template_job.libsonnet
@@ -2,53 +2,137 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_dataflow_flex_template_job', url='', help='`google_dataflow_flex_template_job` represents the `google-beta_google_dataflow_flex_template_job` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_dataflow_flex_template_job.new` injects a new `google-beta_google_dataflow_flex_template_job` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_dataflow_flex_template_job.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_dataflow_flex_template_job` using the reference:\n\n    $._ref.google-beta_google_dataflow_flex_template_job.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_dataflow_flex_template_job.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `container_spec_gcs_path` (`string`): Set the `container_spec_gcs_path` field on the resulting resource block.\n  - `labels` (`obj`): Set the `labels` field on the resulting resource block. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting resource block.\n  - `on_delete` (`string`): Set the `on_delete` field on the resulting resource block. When `null`, the `on_delete` field will be omitted from the resulting object.\n  - `parameters` (`obj`): Set the `parameters` field on the resulting resource block. When `null`, the `parameters` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region in which the created job should run. When `null`, the `region` field will be omitted from the resulting object.\n  - `skip_wait_on_job_termination` (`bool`): If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are different, e.g. by embedding a release ID or by using a random_id. When `null`, the `skip_wait_on_job_termination` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_dataflow_flex_template_job.new` injects a new `google-beta_google_dataflow_flex_template_job` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_dataflow_flex_template_job.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_dataflow_flex_template_job` using the reference:\n\n    $._ref.google-beta_google_dataflow_flex_template_job.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_dataflow_flex_template_job.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `additional_experiments` (`list`): List of experiments that should be used by the job. An example value is [\u0026#34;enable_stackdriver_agent_metrics\u0026#34;]. When `null`, the `additional_experiments` field will be omitted from the resulting object.\n  - `autoscaling_algorithm` (`string`): The algorithm to use for autoscaling When `null`, the `autoscaling_algorithm` field will be omitted from the resulting object.\n  - `container_spec_gcs_path` (`string`): Set the `container_spec_gcs_path` field on the resulting resource block.\n  - `enable_streaming_engine` (`bool`): Indicates if the job should use the streaming engine feature. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.\n  - `ip_configuration` (`string`): The configuration for VM IPs. Options are \u0026#34;WORKER_IP_PUBLIC\u0026#34; or \u0026#34;WORKER_IP_PRIVATE\u0026#34;. When `null`, the `ip_configuration` field will be omitted from the resulting object.\n  - `kms_key_name` (`string`): The name for the Cloud KMS key for the job. Key format is: projects/PROJECT_ID/locations/LOCATION/keyRings/KEY_RING/cryptoKeys/KEY When `null`, the `kms_key_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): User labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. NOTE: Google-provided Dataflow templates often provide default labels that begin with goog-dataflow-provided. Unless explicitly set in config, these labels will be ignored to prevent diffs on re-apply. When `null`, the `labels` field will be omitted from the resulting object.\n  - `launcher_machine_type` (`string`): The machine type to use for launching the job. The default is n1-standard-1. When `null`, the `launcher_machine_type` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to use for the job. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `max_workers` (`number`): The maximum number of Google Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting resource block.\n  - `network` (`string`): The network to which VMs will be assigned. If it is not provided, \u0026#34;default\u0026#34; will be used. When `null`, the `network` field will be omitted from the resulting object.\n  - `num_workers` (`number`): The initial number of Google Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.\n  - `on_delete` (`string`): Set the `on_delete` field on the resulting resource block. When `null`, the `on_delete` field will be omitted from the resulting object.\n  - `parameters` (`obj`): Set the `parameters` field on the resulting resource block. When `null`, the `parameters` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region in which the created job should run. When `null`, the `region` field will be omitted from the resulting object.\n  - `sdk_container_image` (`string`): Docker registry location of container image to use for the \u0026#39;worker harness. Default is the container for the version of the SDK. Note this field is only valid for portable pipelines. When `null`, the `sdk_container_image` field will be omitted from the resulting object.\n  - `service_account_email` (`string`): The Service Account email used to create the job. When `null`, the `service_account_email` field will be omitted from the resulting object.\n  - `skip_wait_on_job_termination` (`bool`): If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are different, e.g. by embedding a release ID or by using a random_id. When `null`, the `skip_wait_on_job_termination` field will be omitted from the resulting object.\n  - `staging_location` (`string`): The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `staging_location` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The subnetwork to which VMs will be assigned. Should be of the form \u0026#34;regions/REGION/subnetworks/SUBNETWORK\u0026#34;. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.\n  - `transform_name_mapping` (`obj`): Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the corresponding name prefixes of the new job. When `null`, the `transform_name_mapping` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     container_spec_gcs_path,
     name,
+    additional_experiments=null,
+    autoscaling_algorithm=null,
+    enable_streaming_engine=null,
+    ip_configuration=null,
+    kms_key_name=null,
     labels=null,
+    launcher_machine_type=null,
+    machine_type=null,
+    max_workers=null,
+    network=null,
+    num_workers=null,
     on_delete=null,
     parameters=null,
     project=null,
     region=null,
+    sdk_container_image=null,
+    service_account_email=null,
     skip_wait_on_job_termination=null,
+    staging_location=null,
+    subnetwork=null,
+    temp_location=null,
+    transform_name_mapping=null,
     _meta={}
   ):: tf.withResource(
     type='google_dataflow_flex_template_job',
     label=resourceLabel,
     attrs=self.newAttrs(
+      additional_experiments=additional_experiments,
+      autoscaling_algorithm=autoscaling_algorithm,
       container_spec_gcs_path=container_spec_gcs_path,
+      enable_streaming_engine=enable_streaming_engine,
+      ip_configuration=ip_configuration,
+      kms_key_name=kms_key_name,
       labels=labels,
+      launcher_machine_type=launcher_machine_type,
+      machine_type=machine_type,
+      max_workers=max_workers,
       name=name,
+      network=network,
+      num_workers=num_workers,
       on_delete=on_delete,
       parameters=parameters,
       project=project,
       region=region,
-      skip_wait_on_job_termination=skip_wait_on_job_termination
+      sdk_container_image=sdk_container_image,
+      service_account_email=service_account_email,
+      skip_wait_on_job_termination=skip_wait_on_job_termination,
+      staging_location=staging_location,
+      subnetwork=subnetwork,
+      temp_location=temp_location,
+      transform_name_mapping=transform_name_mapping
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_dataflow_flex_template_job.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataflow_flex_template_job`\nTerraform resource.\n\nUnlike [google-beta.google_dataflow_flex_template_job.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `container_spec_gcs_path` (`string`): Set the `container_spec_gcs_path` field on the resulting object.\n  - `labels` (`obj`): Set the `labels` field on the resulting object. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `on_delete` (`string`): Set the `on_delete` field on the resulting object. When `null`, the `on_delete` field will be omitted from the resulting object.\n  - `parameters` (`obj`): Set the `parameters` field on the resulting object. When `null`, the `parameters` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region in which the created job should run. When `null`, the `region` field will be omitted from the resulting object.\n  - `skip_wait_on_job_termination` (`bool`): If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are different, e.g. by embedding a release ID or by using a random_id. When `null`, the `skip_wait_on_job_termination` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_dataflow_flex_template_job` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_dataflow_flex_template_job.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataflow_flex_template_job`\nTerraform resource.\n\nUnlike [google-beta.google_dataflow_flex_template_job.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `additional_experiments` (`list`): List of experiments that should be used by the job. An example value is ["enable_stackdriver_agent_metrics"]. When `null`, the `additional_experiments` field will be omitted from the resulting object.\n  - `autoscaling_algorithm` (`string`): The algorithm to use for autoscaling When `null`, the `autoscaling_algorithm` field will be omitted from the resulting object.\n  - `container_spec_gcs_path` (`string`): Set the `container_spec_gcs_path` field on the resulting object.\n  - `enable_streaming_engine` (`bool`): Indicates if the job should use the streaming engine feature. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.\n  - `ip_configuration` (`string`): The configuration for VM IPs. Options are "WORKER_IP_PUBLIC" or "WORKER_IP_PRIVATE". When `null`, the `ip_configuration` field will be omitted from the resulting object.\n  - `kms_key_name` (`string`): The name for the Cloud KMS key for the job. Key format is: projects/PROJECT_ID/locations/LOCATION/keyRings/KEY_RING/cryptoKeys/KEY When `null`, the `kms_key_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): User labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. NOTE: Google-provided Dataflow templates often provide default labels that begin with goog-dataflow-provided. Unless explicitly set in config, these labels will be ignored to prevent diffs on re-apply. When `null`, the `labels` field will be omitted from the resulting object.\n  - `launcher_machine_type` (`string`): The machine type to use for launching the job. The default is n1-standard-1. When `null`, the `launcher_machine_type` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to use for the job. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `max_workers` (`number`): The maximum number of Google Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `network` (`string`): The network to which VMs will be assigned. If it is not provided, "default" will be used. When `null`, the `network` field will be omitted from the resulting object.\n  - `num_workers` (`number`): The initial number of Google Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.\n  - `on_delete` (`string`): Set the `on_delete` field on the resulting object. When `null`, the `on_delete` field will be omitted from the resulting object.\n  - `parameters` (`obj`): Set the `parameters` field on the resulting object. When `null`, the `parameters` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region in which the created job should run. When `null`, the `region` field will be omitted from the resulting object.\n  - `sdk_container_image` (`string`): Docker registry location of container image to use for the 'worker harness. Default is the container for the version of the SDK. Note this field is only valid for portable pipelines. When `null`, the `sdk_container_image` field will be omitted from the resulting object.\n  - `service_account_email` (`string`): The Service Account email used to create the job. When `null`, the `service_account_email` field will be omitted from the resulting object.\n  - `skip_wait_on_job_termination` (`bool`): If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are different, e.g. by embedding a release ID or by using a random_id. When `null`, the `skip_wait_on_job_termination` field will be omitted from the resulting object.\n  - `staging_location` (`string`): The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `staging_location` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK". When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.\n  - `transform_name_mapping` (`obj`): Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the corresponding name prefixes of the new job. When `null`, the `transform_name_mapping` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_dataflow_flex_template_job` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     container_spec_gcs_path,
     name,
+    additional_experiments=null,
+    autoscaling_algorithm=null,
+    enable_streaming_engine=null,
+    ip_configuration=null,
+    kms_key_name=null,
     labels=null,
+    launcher_machine_type=null,
+    machine_type=null,
+    max_workers=null,
+    network=null,
+    num_workers=null,
     on_delete=null,
     parameters=null,
     project=null,
     region=null,
-    skip_wait_on_job_termination=null
+    sdk_container_image=null,
+    service_account_email=null,
+    skip_wait_on_job_termination=null,
+    staging_location=null,
+    subnetwork=null,
+    temp_location=null,
+    transform_name_mapping=null
   ):: std.prune(a={
+    additional_experiments: additional_experiments,
+    autoscaling_algorithm: autoscaling_algorithm,
     container_spec_gcs_path: container_spec_gcs_path,
+    enable_streaming_engine: enable_streaming_engine,
+    ip_configuration: ip_configuration,
+    kms_key_name: kms_key_name,
     labels: labels,
+    launcher_machine_type: launcher_machine_type,
+    machine_type: machine_type,
+    max_workers: max_workers,
     name: name,
+    network: network,
+    num_workers: num_workers,
     on_delete: on_delete,
     parameters: parameters,
     project: project,
     region: region,
+    sdk_container_image: sdk_container_image,
+    service_account_email: service_account_email,
     skip_wait_on_job_termination: skip_wait_on_job_termination,
+    staging_location: staging_location,
+    subnetwork: subnetwork,
+    temp_location: temp_location,
+    transform_name_mapping: transform_name_mapping,
   }),
+  '#withAdditionalExperiments':: d.fn(help='`google-beta.list.withAdditionalExperiments` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the additional_experiments field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `additional_experiments` field.\n', args=[]),
+  withAdditionalExperiments(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          additional_experiments: value,
+        },
+      },
+    },
+  },
+  '#withAutoscalingAlgorithm':: d.fn(help='`google-beta.string.withAutoscalingAlgorithm` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the autoscaling_algorithm field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `autoscaling_algorithm` field.\n', args=[]),
+  withAutoscalingAlgorithm(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          autoscaling_algorithm: value,
+        },
+      },
+    },
+  },
   '#withContainerSpecGcsPath':: d.fn(help='`google-beta.string.withContainerSpecGcsPath` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the container_spec_gcs_path field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `container_spec_gcs_path` field.\n', args=[]),
   withContainerSpecGcsPath(resourceLabel, value): {
     resource+: {
@@ -59,6 +143,36 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withEnableStreamingEngine':: d.fn(help='`google-beta.bool.withEnableStreamingEngine` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the enable_streaming_engine field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `enable_streaming_engine` field.\n', args=[]),
+  withEnableStreamingEngine(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          enable_streaming_engine: value,
+        },
+      },
+    },
+  },
+  '#withIpConfiguration':: d.fn(help='`google-beta.string.withIpConfiguration` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the ip_configuration field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `ip_configuration` field.\n', args=[]),
+  withIpConfiguration(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          ip_configuration: value,
+        },
+      },
+    },
+  },
+  '#withKmsKeyName':: d.fn(help='`google-beta.string.withKmsKeyName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the kms_key_name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `kms_key_name` field.\n', args=[]),
+  withKmsKeyName(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          kms_key_name: value,
+        },
+      },
+    },
+  },
   '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
   withLabels(resourceLabel, value): {
     resource+: {
@@ -69,6 +183,36 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withLauncherMachineType':: d.fn(help='`google-beta.string.withLauncherMachineType` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the launcher_machine_type field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `launcher_machine_type` field.\n', args=[]),
+  withLauncherMachineType(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          launcher_machine_type: value,
+        },
+      },
+    },
+  },
+  '#withMachineType':: d.fn(help='`google-beta.string.withMachineType` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the machine_type field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `machine_type` field.\n', args=[]),
+  withMachineType(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          machine_type: value,
+        },
+      },
+    },
+  },
+  '#withMaxWorkers':: d.fn(help='`google-beta.number.withMaxWorkers` constructs a mixin object that can be merged into the `number`\nTerraform resource block to set or update the max_workers field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`number`): The value to set for the `max_workers` field.\n', args=[]),
+  withMaxWorkers(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          max_workers: value,
+        },
+      },
+    },
+  },
   '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
   withName(resourceLabel, value): {
     resource+: {
@@ -79,6 +223,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withNetwork':: d.fn(help='`google-beta.string.withNetwork` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the network field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `network` field.\n', args=[]),
+  withNetwork(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          network: value,
+        },
+      },
+    },
+  },
+  '#withNumWorkers':: d.fn(help='`google-beta.number.withNumWorkers` constructs a mixin object that can be merged into the `number`\nTerraform resource block to set or update the num_workers field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`number`): The value to set for the `num_workers` field.\n', args=[]),
+  withNumWorkers(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          num_workers: value,
+        },
+      },
+    },
+  },
   '#withOnDelete':: d.fn(help='`google-beta.string.withOnDelete` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the on_delete field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `on_delete` field.\n', args=[]),
   withOnDelete(resourceLabel, value): {
     resource+: {
@@ -119,6 +283,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withSdkContainerImage':: d.fn(help='`google-beta.string.withSdkContainerImage` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the sdk_container_image field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `sdk_container_image` field.\n', args=[]),
+  withSdkContainerImage(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          sdk_container_image: value,
+        },
+      },
+    },
+  },
+  '#withServiceAccountEmail':: d.fn(help='`google-beta.string.withServiceAccountEmail` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the service_account_email field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_account_email` field.\n', args=[]),
+  withServiceAccountEmail(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          service_account_email: value,
+        },
+      },
+    },
+  },
   '#withSkipWaitOnJobTermination':: d.fn(help='`google-beta.bool.withSkipWaitOnJobTermination` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the skip_wait_on_job_termination field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `skip_wait_on_job_termination` field.\n', args=[]),
   withSkipWaitOnJobTermination(resourceLabel, value): {
     resource+: {
@@ -129,4 +313,44 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withStagingLocation':: d.fn(help='`google-beta.string.withStagingLocation` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the staging_location field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `staging_location` field.\n', args=[]),
+  withStagingLocation(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          staging_location: value,
+        },
+      },
+    },
+  },
+  '#withSubnetwork':: d.fn(help='`google-beta.string.withSubnetwork` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the subnetwork field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `subnetwork` field.\n', args=[]),
+  withSubnetwork(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          subnetwork: value,
+        },
+      },
+    },
+  },
+  '#withTempLocation':: d.fn(help='`google-beta.string.withTempLocation` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the temp_location field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `temp_location` field.\n', args=[]),
+  withTempLocation(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          temp_location: value,
+        },
+      },
+    },
+  },
+  '#withTransformNameMapping':: d.fn(help='`google-beta.obj.withTransformNameMapping` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the transform_name_mapping field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `transform_name_mapping` field.\n', args=[]),
+  withTransformNameMapping(resourceLabel, value): {
+    resource+: {
+      google_dataflow_flex_template_job+: {
+        [resourceLabel]+: {
+          transform_name_mapping: value,
+        },
+      },
+    },
+  },
 }
diff --git a/4.x/_gen/resources/datastream_stream.libsonnet b/4.x/_gen/resources/datastream_stream.libsonnet
index d6e4c6f..f68496c 100644
--- a/4.x/_gen/resources/datastream_stream.libsonnet
+++ b/4.x/_gen/resources/datastream_stream.libsonnet
@@ -389,14 +389,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           mysql_databases: mysql_databases,
         }),
       },
-      '#new':: d.fn(help='\n`google-beta.google_datastream_stream.source_config.mysql_source_config.new` constructs a new object with attributes and blocks configured for the `mysql_source_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `max_concurrent_cdc_tasks` (`number`): Maximum number of concurrent CDC tasks. The number should be non negative.\nIf not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_cdc_tasks` field will be omitted from the resulting object.\n  - `exclude_objects` (`list[obj]`): MySQL objects to exclude from the stream. When `null`, the `exclude_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_datastream_stream.source_config.mysql_source_config.exclude_objects.new](#fn-source_configsource_configexclude_objectsnew) constructor.\n  - `include_objects` (`list[obj]`): MySQL objects to retrieve from the source. When `null`, the `include_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_datastream_stream.source_config.mysql_source_config.include_objects.new](#fn-source_configsource_configinclude_objectsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `mysql_source_config` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google-beta.google_datastream_stream.source_config.mysql_source_config.new` constructs a new object with attributes and blocks configured for the `mysql_source_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `max_concurrent_backfill_tasks` (`number`): Maximum number of concurrent backfill tasks. The number should be non negative.\nIf not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_backfill_tasks` field will be omitted from the resulting object.\n  - `max_concurrent_cdc_tasks` (`number`): Maximum number of concurrent CDC tasks. The number should be non negative.\nIf not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_cdc_tasks` field will be omitted from the resulting object.\n  - `exclude_objects` (`list[obj]`): MySQL objects to exclude from the stream. When `null`, the `exclude_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_datastream_stream.source_config.mysql_source_config.exclude_objects.new](#fn-source_configsource_configexclude_objectsnew) constructor.\n  - `include_objects` (`list[obj]`): MySQL objects to retrieve from the source. When `null`, the `include_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_datastream_stream.source_config.mysql_source_config.include_objects.new](#fn-source_configsource_configinclude_objectsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `mysql_source_config` sub block.\n', args=[]),
       new(
         exclude_objects=null,
         include_objects=null,
+        max_concurrent_backfill_tasks=null,
         max_concurrent_cdc_tasks=null
       ):: std.prune(a={
         exclude_objects: exclude_objects,
         include_objects: include_objects,
+        max_concurrent_backfill_tasks: max_concurrent_backfill_tasks,
         max_concurrent_cdc_tasks: max_concurrent_cdc_tasks,
       }),
     },
diff --git a/4.x/_gen/resources/dns_record_set.libsonnet b/4.x/_gen/resources/dns_record_set.libsonnet
index 289c892..482122f 100644
--- a/4.x/_gen/resources/dns_record_set.libsonnet
+++ b/4.x/_gen/resources/dns_record_set.libsonnet
@@ -49,7 +49,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     geo:: {
       health_checked_targets:: {
         internal_load_balancers:: {
-          '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
           new(
             ip_address,
             ip_protocol,
@@ -102,7 +102,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       backup_geo:: {
         health_checked_targets:: {
           internal_load_balancers:: {
-            '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.primary_backup.backup_geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+            '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.primary_backup.backup_geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
             new(
               ip_address,
               ip_protocol,
@@ -153,7 +153,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       }),
       primary:: {
         internal_load_balancers:: {
-          '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.primary_backup.primary.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.primary_backup.primary.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
           new(
             ip_address,
             ip_protocol,
@@ -183,7 +183,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     wrr:: {
       health_checked_targets:: {
         internal_load_balancers:: {
-          '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.wrr.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google-beta.google_dns_record_set.routing_policy.wrr.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
           new(
             ip_address,
             ip_protocol,
diff --git a/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet b/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet
index 4fbf9b7..ecb9458 100644
--- a/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet
+++ b/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet
@@ -210,10 +210,10 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     static_ip_config:: {
       ip_blocks:: {
         ips:: {
-          '#new':: d.fn(help='\n`google-beta.google_gkeonprem_vmware_cluster.network_config.static_ip_config.ip_blocks.ips.new` constructs a new object with attributes and blocks configured for the `ips`\nTerraform sub block.\n\n\n\n**Args**:\n  - `hostname` (`string`): Hostname of the machine. VM's name will be used if this field is empty.\n  - `ip` (`string`): IP could be an IP address (like 1.2.3.4) or a CIDR (like 1.2.3.0/24).\n\n**Returns**:\n  - An attribute object that represents the `ips` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google-beta.google_gkeonprem_vmware_cluster.network_config.static_ip_config.ip_blocks.ips.new` constructs a new object with attributes and blocks configured for the `ips`\nTerraform sub block.\n\n\n\n**Args**:\n  - `hostname` (`string`): Hostname of the machine. VM's name will be used if this field is empty. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `ip` (`string`): IP could be an IP address (like 1.2.3.4) or a CIDR (like 1.2.3.0/24).\n\n**Returns**:\n  - An attribute object that represents the `ips` sub block.\n', args=[]),
           new(
-            hostname,
-            ip
+            ip,
+            hostname=null
           ):: std.prune(a={
             hostname: hostname,
             ip: ip,
diff --git a/4.x/_gen/resources/monitoring_alert_policy.libsonnet b/4.x/_gen/resources/monitoring_alert_policy.libsonnet
index 7492f75..a0942ef 100644
--- a/4.x/_gen/resources/monitoring_alert_policy.libsonnet
+++ b/4.x/_gen/resources/monitoring_alert_policy.libsonnet
@@ -3,14 +3,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_monitoring_alert_policy', url='', help='`google_monitoring_alert_policy` represents the `google-beta_google_monitoring_alert_policy` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
   alert_strategy:: {
-    '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.alert_strategy.new` constructs a new object with attributes and blocks configured for the `alert_strategy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `auto_close` (`string`): If an alert policy that was active has no data for this long, any open incidents will close. When `null`, the `auto_close` field will be omitted from the resulting object.\n  - `notification_rate_limit` (`list[obj]`): Required for alert policies with a LogMatch condition.\nThis limit is not implemented for alert policies that are not log-based. When `null`, the `notification_rate_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.alert_strategy.notification_rate_limit.new](#fn-alert_strategynotification_rate_limitnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `alert_strategy` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.alert_strategy.new` constructs a new object with attributes and blocks configured for the `alert_strategy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `auto_close` (`string`): If an alert policy that was active has no data for this long, any open incidents will close. When `null`, the `auto_close` field will be omitted from the resulting object.\n  - `notification_channel_strategy` (`list[obj]`): Control over how the notification channels in 'notification_channels'\nare notified when this alert fires, on a per-channel basis. When `null`, the `notification_channel_strategy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.alert_strategy.notification_channel_strategy.new](#fn-alert_strategynotification_channel_strategynew) constructor.\n  - `notification_rate_limit` (`list[obj]`): Required for alert policies with a LogMatch condition.\nThis limit is not implemented for alert policies that are not log-based. When `null`, the `notification_rate_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.alert_strategy.notification_rate_limit.new](#fn-alert_strategynotification_rate_limitnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `alert_strategy` sub block.\n', args=[]),
     new(
       auto_close=null,
+      notification_channel_strategy=null,
       notification_rate_limit=null
     ):: std.prune(a={
       auto_close: auto_close,
+      notification_channel_strategy: notification_channel_strategy,
       notification_rate_limit: notification_rate_limit,
     }),
+    notification_channel_strategy:: {
+      '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.alert_strategy.notification_channel_strategy.new` constructs a new object with attributes and blocks configured for the `notification_channel_strategy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `notification_channel_names` (`list`): The notification channels that these settings apply to. Each of these\ncorrespond to the name field in one of the NotificationChannel objects\nreferenced in the notification_channels field of this AlertPolicy. The format is\n'projects/[PROJECT_ID_OR_NUMBER]/notificationChannels/[CHANNEL_ID]' When `null`, the `notification_channel_names` field will be omitted from the resulting object.\n  - `renotify_interval` (`string`): The frequency at which to send reminder notifications for open incidents. When `null`, the `renotify_interval` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `notification_channel_strategy` sub block.\n', args=[]),
+      new(
+        notification_channel_names=null,
+        renotify_interval=null
+      ):: std.prune(a={
+        notification_channel_names: notification_channel_names,
+        renotify_interval: renotify_interval,
+      }),
+    },
     notification_rate_limit:: {
       '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.alert_strategy.notification_rate_limit.new` constructs a new object with attributes and blocks configured for the `notification_rate_limit`\nTerraform sub block.\n\n\n\n**Args**:\n  - `period` (`string`): Not more than one notification per period. When `null`, the `period` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `notification_rate_limit` sub block.\n', args=[]),
       new(
@@ -122,7 +134,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           per_series_aligner: per_series_aligner,
         }),
       },
-      '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.conditions.condition_threshold.new` constructs a new object with attributes and blocks configured for the `condition_threshold`\nTerraform sub block.\n\n\n\n**Args**:\n  - `comparison` (`string`): The comparison to apply between the time\nseries (indicated by filter and aggregation)\nand the threshold (indicated by\nthreshold_value). The comparison is applied\non each time series, with the time series on\nthe left-hand side and the threshold on the\nright-hand side. Only COMPARISON_LT and\nCOMPARISON_GT are supported currently. Possible values: ["COMPARISON_GT", "COMPARISON_GE", "COMPARISON_LT", "COMPARISON_LE", "COMPARISON_EQ", "COMPARISON_NE"]\n  - `denominator_filter` (`string`): A filter that identifies a time series that\nshould be used as the denominator of a ratio\nthat will be compared with the threshold. If\na denominator_filter is specified, the time\nseries specified by the filter field will be\nused as the numerator.The filter is similar\nto the one that is specified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `denominator_filter` field will be omitted from the resulting object.\n  - `duration` (`string`): The amount of time that a time series must\nviolate the threshold to be considered\nfailing. Currently, only values that are a\nmultiple of a minute--e.g., 0, 60, 120, or\n300 seconds--are supported. If an invalid\nvalue is given, an error will be returned.\nWhen choosing a duration, it is useful to\nkeep in mind the frequency of the underlying\ntime series data (which may also be affected\nby any alignments specified in the\naggregations field); a good duration is long\nenough so that a single outlier does not\ngenerate spurious alerts, but short enough\nthat unhealthy states are detected and\nalerted on quickly.\n  - `evaluation_missing_data` (`string`): A condition control that determines how\nmetric-threshold conditions are evaluated when\ndata stops arriving. Possible values: ["EVALUATION_MISSING_DATA_INACTIVE", "EVALUATION_MISSING_DATA_ACTIVE", "EVALUATION_MISSING_DATA_NO_OP"] When `null`, the `evaluation_missing_data` field will be omitted from the resulting object.\n  - `filter` (`string`): A filter that identifies which time series\nshould be compared with the threshold.The\nfilter is similar to the one that is\nspecified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `filter` field will be omitted from the resulting object.\n  - `threshold_value` (`number`): A value against which to compare the time\nseries. When `null`, the `threshold_value` field will be omitted from the resulting object.\n  - `aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series as well as how to\ncombine the retrieved time series together\n(such as when aggregating multiple streams\non each resource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).\nMultiple aggregations are applied in the\norder specified.This field is similar to the\none in the MetricService.ListTimeSeries\nrequest. It is advisable to use the\nListTimeSeries method when debugging this\nfield. When `null`, the `aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.aggregations.new](#fn-conditionsconditionsaggregationsnew) constructor.\n  - `denominator_aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series selected by\ndenominatorFilter as well as how to combine\nthe retrieved time series together (such as\nwhen aggregating multiple streams on each\nresource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).When\ncomputing ratios, the aggregations and\ndenominator_aggregations fields must use the\nsame alignment period and produce time\nseries that have the same periodicity and\nlabels.This field is similar to the one in\nthe MetricService.ListTimeSeries request. It\nis advisable to use the ListTimeSeries\nmethod when debugging this field. When `null`, the `denominator_aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.denominator_aggregations.new](#fn-conditionsconditionsdenominator_aggregationsnew) constructor.\n  - `trigger` (`list[obj]`): The number/percent of time series for which\nthe comparison must hold in order for the\ncondition to trigger. If unspecified, then\nthe condition will trigger if the comparison\nis true for any of the time series that have\nbeen identified by filter and aggregations,\nor by the ratio, if denominator_filter and\ndenominator_aggregations are specified. When `null`, the `trigger` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.trigger.new](#fn-conditionsconditionstriggernew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `condition_threshold` sub block.\n', args=[]),
+      forecast_options:: {
+        '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.conditions.condition_threshold.forecast_options.new` constructs a new object with attributes and blocks configured for the `forecast_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `forecast_horizon` (`string`): The length of time into the future to forecast\nwhether a timeseries will violate the threshold.\nIf the predicted value is found to violate the\nthreshold, and the violation is observed in all\nforecasts made for the Configured 'duration',\nthen the timeseries is considered to be failing.\n\n**Returns**:\n  - An attribute object that represents the `forecast_options` sub block.\n', args=[]),
+        new(
+          forecast_horizon
+        ):: std.prune(a={
+          forecast_horizon: forecast_horizon,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_monitoring_alert_policy.conditions.condition_threshold.new` constructs a new object with attributes and blocks configured for the `condition_threshold`\nTerraform sub block.\n\n\n\n**Args**:\n  - `comparison` (`string`): The comparison to apply between the time\nseries (indicated by filter and aggregation)\nand the threshold (indicated by\nthreshold_value). The comparison is applied\non each time series, with the time series on\nthe left-hand side and the threshold on the\nright-hand side. Only COMPARISON_LT and\nCOMPARISON_GT are supported currently. Possible values: ["COMPARISON_GT", "COMPARISON_GE", "COMPARISON_LT", "COMPARISON_LE", "COMPARISON_EQ", "COMPARISON_NE"]\n  - `denominator_filter` (`string`): A filter that identifies a time series that\nshould be used as the denominator of a ratio\nthat will be compared with the threshold. If\na denominator_filter is specified, the time\nseries specified by the filter field will be\nused as the numerator.The filter is similar\nto the one that is specified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `denominator_filter` field will be omitted from the resulting object.\n  - `duration` (`string`): The amount of time that a time series must\nviolate the threshold to be considered\nfailing. Currently, only values that are a\nmultiple of a minute--e.g., 0, 60, 120, or\n300 seconds--are supported. If an invalid\nvalue is given, an error will be returned.\nWhen choosing a duration, it is useful to\nkeep in mind the frequency of the underlying\ntime series data (which may also be affected\nby any alignments specified in the\naggregations field); a good duration is long\nenough so that a single outlier does not\ngenerate spurious alerts, but short enough\nthat unhealthy states are detected and\nalerted on quickly.\n  - `evaluation_missing_data` (`string`): A condition control that determines how\nmetric-threshold conditions are evaluated when\ndata stops arriving. Possible values: ["EVALUATION_MISSING_DATA_INACTIVE", "EVALUATION_MISSING_DATA_ACTIVE", "EVALUATION_MISSING_DATA_NO_OP"] When `null`, the `evaluation_missing_data` field will be omitted from the resulting object.\n  - `filter` (`string`): A filter that identifies which time series\nshould be compared with the threshold.The\nfilter is similar to the one that is\nspecified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `filter` field will be omitted from the resulting object.\n  - `threshold_value` (`number`): A value against which to compare the time\nseries. When `null`, the `threshold_value` field will be omitted from the resulting object.\n  - `aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series as well as how to\ncombine the retrieved time series together\n(such as when aggregating multiple streams\non each resource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).\nMultiple aggregations are applied in the\norder specified.This field is similar to the\none in the MetricService.ListTimeSeries\nrequest. It is advisable to use the\nListTimeSeries method when debugging this\nfield. When `null`, the `aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.aggregations.new](#fn-conditionsconditionsaggregationsnew) constructor.\n  - `denominator_aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series selected by\ndenominatorFilter as well as how to combine\nthe retrieved time series together (such as\nwhen aggregating multiple streams on each\nresource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).When\ncomputing ratios, the aggregations and\ndenominator_aggregations fields must use the\nsame alignment period and produce time\nseries that have the same periodicity and\nlabels.This field is similar to the one in\nthe MetricService.ListTimeSeries request. It\nis advisable to use the ListTimeSeries\nmethod when debugging this field. When `null`, the `denominator_aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.denominator_aggregations.new](#fn-conditionsconditionsdenominator_aggregationsnew) constructor.\n  - `forecast_options` (`list[obj]`): When this field is present, the 'MetricThreshold'\ncondition forecasts whether the time series is\npredicted to violate the threshold within the\n'forecastHorizon'. When this field is not set, the\n'MetricThreshold' tests the current value of the\ntimeseries against the threshold. When `null`, the `forecast_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.forecast_options.new](#fn-conditionsconditionsforecast_optionsnew) constructor.\n  - `trigger` (`list[obj]`): The number/percent of time series for which\nthe comparison must hold in order for the\ncondition to trigger. If unspecified, then\nthe condition will trigger if the comparison\nis true for any of the time series that have\nbeen identified by filter and aggregations,\nor by the ratio, if denominator_filter and\ndenominator_aggregations are specified. When `null`, the `trigger` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.trigger.new](#fn-conditionsconditionstriggernew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `condition_threshold` sub block.\n', args=[]),
       new(
         comparison,
         duration,
@@ -131,6 +151,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         denominator_filter=null,
         evaluation_missing_data=null,
         filter=null,
+        forecast_options=null,
         threshold_value=null,
         trigger=null
       ):: std.prune(a={
@@ -141,6 +162,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         duration: duration,
         evaluation_missing_data: evaluation_missing_data,
         filter: filter,
+        forecast_options: forecast_options,
         threshold_value: threshold_value,
         trigger: trigger,
       }),
diff --git a/4.x/_gen/resources/network_security_server_tls_policy.libsonnet b/4.x/_gen/resources/network_security_server_tls_policy.libsonnet
new file mode 100644
index 0000000..9f26af6
--- /dev/null
+++ b/4.x/_gen/resources/network_security_server_tls_policy.libsonnet
@@ -0,0 +1,252 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_network_security_server_tls_policy', url='', help='`google_network_security_server_tls_policy` represents the `google-beta_google_network_security_server_tls_policy` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  mtls_policy:: {
+    client_validation_ca:: {
+      certificate_provider_instance:: {
+        '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.certificate_provider_instance.new` constructs a new object with attributes and blocks configured for the `certificate_provider_instance`\nTerraform sub block.\n\n\n\n**Args**:\n  - `plugin_instance` (`string`): Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.\n\n**Returns**:\n  - An attribute object that represents the `certificate_provider_instance` sub block.\n', args=[]),
+        new(
+          plugin_instance
+        ):: std.prune(a={
+          plugin_instance: plugin_instance,
+        }),
+      },
+      grpc_endpoint:: {
+        '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.grpc_endpoint.new` constructs a new object with attributes and blocks configured for the `grpc_endpoint`\nTerraform sub block.\n\n\n\n**Args**:\n  - `target_uri` (`string`): The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".\n\n**Returns**:\n  - An attribute object that represents the `grpc_endpoint` sub block.\n', args=[]),
+        new(
+          target_uri
+        ):: std.prune(a={
+          target_uri: target_uri,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.new` constructs a new object with attributes and blocks configured for the `client_validation_ca`\nTerraform sub block.\n\n\n\n**Args**:\n  - `certificate_provider_instance` (`list[obj]`): Optional if policy is to be used with Traffic Director. For external HTTPS load balancer must be empty.\nDefines a mechanism to provision server identity (public and private keys). Cannot be combined with allowOpen as a permissive mode that allows both plain text and TLS is not supported. When `null`, the `certificate_provider_instance` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.certificate_provider_instance.new](#fn-mtls_policymtls_policycertificate_provider_instancenew) constructor.\n  - `grpc_endpoint` (`list[obj]`): gRPC specific configuration to access the gRPC server to obtain the cert and private key. When `null`, the `grpc_endpoint` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.grpc_endpoint.new](#fn-mtls_policymtls_policygrpc_endpointnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `client_validation_ca` sub block.\n', args=[]),
+      new(
+        certificate_provider_instance=null,
+        grpc_endpoint=null
+      ):: std.prune(a={
+        certificate_provider_instance: certificate_provider_instance,
+        grpc_endpoint: grpc_endpoint,
+      }),
+    },
+    '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.mtls_policy.new` constructs a new object with attributes and blocks configured for the `mtls_policy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `client_validation_mode` (`string`): When the client presents an invalid certificate or no certificate to the load balancer, the clientValidationMode specifies how the client connection is handled.\nRequired if the policy is to be used with the external HTTPS load balancing. For Traffic Director it must be empty. Possible values: ["CLIENT_VALIDATION_MODE_UNSPECIFIED", "ALLOW_INVALID_OR_MISSING_CLIENT_CERT", "REJECT_INVALID"] When `null`, the `client_validation_mode` field will be omitted from the resulting object.\n  - `client_validation_trust_config` (`string`): Reference to the TrustConfig from certificatemanager.googleapis.com namespace.\nIf specified, the chain validation will be performed against certificates configured in the given TrustConfig.\nAllowed only if the policy is to be used with external HTTPS load balancers. When `null`, the `client_validation_trust_config` field will be omitted from the resulting object.\n  - `client_validation_ca` (`list[obj]`): Required if the policy is to be used with Traffic Director. For external HTTPS load balancers it must be empty.\nDefines the mechanism to obtain the Certificate Authority certificate to validate the client certificate. When `null`, the `client_validation_ca` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.new](#fn-mtls_policyclient_validation_canew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `mtls_policy` sub block.\n', args=[]),
+    new(
+      client_validation_ca=null,
+      client_validation_mode=null,
+      client_validation_trust_config=null
+    ):: std.prune(a={
+      client_validation_ca: client_validation_ca,
+      client_validation_mode: client_validation_mode,
+      client_validation_trust_config: client_validation_trust_config,
+    }),
+  },
+  '#new':: d.fn(help="\n`google-beta.google_network_security_server_tls_policy.new` injects a new `google-beta_google_network_security_server_tls_policy` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_network_security_server_tls_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_network_security_server_tls_policy` using the reference:\n\n    $._ref.google-beta_google_network_security_server_tls_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_network_security_server_tls_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `allow_open` (`bool`): This field applies only for Traffic Director policies. It is must be set to false for external HTTPS load balancer policies.\nDetermines if server allows plaintext connections. If set to true, server allows plain text connections. By default, it is set to false. This setting is not exclusive of other encryption modes. For example, if allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.\nConsider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80. When `null`, the `allow_open` field will be omitted from the resulting object.\n  - `description` (`string`): A free-text description of the resource. Max length 1024 characters. When `null`, the `description` field will be omitted from the resulting object.\n  - `labels` (`obj`): Set of label tags associated with the ServerTlsPolicy resource. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the server tls policy.\nThe default value is \u0026#39;global\u0026#39;. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the ServerTlsPolicy resource.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `mtls_policy` (`list[obj]`): This field is required if the policy is used with external HTTPS load balancers. This field can be empty for Traffic Director.\nDefines a mechanism to provision peer validation certificates for peer to peer authentication (Mutual TLS - mTLS). If not specified, client certificate will not be requested. The connection is treated as TLS and not mTLS. If allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. When `null`, the `mtls_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.new](#fn-mtls_policynew) constructor.\n  - `server_certificate` (`list[obj]`): Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. When `null`, the `server_certificate` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.new](#fn-server_certificatenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    name,
+    allow_open=null,
+    description=null,
+    labels=null,
+    location=null,
+    mtls_policy=null,
+    project=null,
+    server_certificate=null,
+    timeouts=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_network_security_server_tls_policy',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      allow_open=allow_open,
+      description=description,
+      labels=labels,
+      location=location,
+      mtls_policy=mtls_policy,
+      name=name,
+      project=project,
+      server_certificate=server_certificate,
+      timeouts=timeouts
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_network_security_server_tls_policy`\nTerraform resource.\n\nUnlike [google-beta.google_network_security_server_tls_policy.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `allow_open` (`bool`): This field applies only for Traffic Director policies. It is must be set to false for external HTTPS load balancer policies.\nDetermines if server allows plaintext connections. If set to true, server allows plain text connections. By default, it is set to false. This setting is not exclusive of other encryption modes. For example, if allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.\nConsider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80. When `null`, the `allow_open` field will be omitted from the resulting object.\n  - `description` (`string`): A free-text description of the resource. Max length 1024 characters. When `null`, the `description` field will be omitted from the resulting object.\n  - `labels` (`obj`): Set of label tags associated with the ServerTlsPolicy resource. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the server tls policy.\nThe default value is 'global'. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the ServerTlsPolicy resource.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `mtls_policy` (`list[obj]`): This field is required if the policy is used with external HTTPS load balancers. This field can be empty for Traffic Director.\nDefines a mechanism to provision peer validation certificates for peer to peer authentication (Mutual TLS - mTLS). If not specified, client certificate will not be requested. The connection is treated as TLS and not mTLS. If allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. When `null`, the `mtls_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.new](#fn-mtls_policynew) constructor.\n  - `server_certificate` (`list[obj]`): Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. When `null`, the `server_certificate` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.new](#fn-server_certificatenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_network_security_server_tls_policy` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    allow_open=null,
+    description=null,
+    labels=null,
+    location=null,
+    mtls_policy=null,
+    project=null,
+    server_certificate=null,
+    timeouts=null
+  ):: std.prune(a={
+    allow_open: allow_open,
+    description: description,
+    labels: labels,
+    location: location,
+    mtls_policy: mtls_policy,
+    name: name,
+    project: project,
+    server_certificate: server_certificate,
+    timeouts: timeouts,
+  }),
+  server_certificate:: {
+    certificate_provider_instance:: {
+      '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.server_certificate.certificate_provider_instance.new` constructs a new object with attributes and blocks configured for the `certificate_provider_instance`\nTerraform sub block.\n\n\n\n**Args**:\n  - `plugin_instance` (`string`): Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.\n\n**Returns**:\n  - An attribute object that represents the `certificate_provider_instance` sub block.\n', args=[]),
+      new(
+        plugin_instance
+      ):: std.prune(a={
+        plugin_instance: plugin_instance,
+      }),
+    },
+    grpc_endpoint:: {
+      '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.server_certificate.grpc_endpoint.new` constructs a new object with attributes and blocks configured for the `grpc_endpoint`\nTerraform sub block.\n\n\n\n**Args**:\n  - `target_uri` (`string`): The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".\n\n**Returns**:\n  - An attribute object that represents the `grpc_endpoint` sub block.\n', args=[]),
+      new(
+        target_uri
+      ):: std.prune(a={
+        target_uri: target_uri,
+      }),
+    },
+    '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.server_certificate.new` constructs a new object with attributes and blocks configured for the `server_certificate`\nTerraform sub block.\n\n\n\n**Args**:\n  - `certificate_provider_instance` (`list[obj]`): Optional if policy is to be used with Traffic Director. For external HTTPS load balancer must be empty.\nDefines a mechanism to provision server identity (public and private keys). Cannot be combined with allowOpen as a permissive mode that allows both plain text and TLS is not supported. When `null`, the `certificate_provider_instance` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.certificate_provider_instance.new](#fn-server_certificatecertificate_provider_instancenew) constructor.\n  - `grpc_endpoint` (`list[obj]`): gRPC specific configuration to access the gRPC server to obtain the cert and private key. When `null`, the `grpc_endpoint` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.grpc_endpoint.new](#fn-server_certificategrpc_endpointnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `server_certificate` sub block.\n', args=[]),
+    new(
+      certificate_provider_instance=null,
+      grpc_endpoint=null
+    ):: std.prune(a={
+      certificate_provider_instance: certificate_provider_instance,
+      grpc_endpoint: grpc_endpoint,
+    }),
+  },
+  timeouts:: {
+    '#new':: d.fn(help='\n`google-beta.google_network_security_server_tls_policy.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      update: update,
+    }),
+  },
+  '#withAllowOpen':: d.fn(help='`google-beta.bool.withAllowOpen` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the allow_open field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `allow_open` field.\n', args=[]),
+  withAllowOpen(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          allow_open: value,
+        },
+      },
+    },
+  },
+  '#withDescription':: d.fn(help='`google-beta.string.withDescription` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the description field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `description` field.\n', args=[]),
+  withDescription(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          description: value,
+        },
+      },
+    },
+  },
+  '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
+  withLabels(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          labels: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the location field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withMtlsPolicy':: d.fn(help='`google-beta.list[obj].withMtlsPolicy` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the mtls_policy field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withMtlsPolicyMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `mtls_policy` field.\n', args=[]),
+  withMtlsPolicy(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          mtls_policy: value,
+        },
+      },
+    },
+  },
+  '#withMtlsPolicyMixin':: d.fn(help='`google-beta.list[obj].withMtlsPolicyMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the mtls_policy field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withMtlsPolicy](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `mtls_policy` field.\n', args=[]),
+  withMtlsPolicyMixin(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          mtls_policy+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withServerCertificate':: d.fn(help='`google-beta.list[obj].withServerCertificate` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the server_certificate field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withServerCertificateMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `server_certificate` field.\n', args=[]),
+  withServerCertificate(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          server_certificate: value,
+        },
+      },
+    },
+  },
+  '#withServerCertificateMixin':: d.fn(help='`google-beta.list[obj].withServerCertificateMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the server_certificate field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withServerCertificate](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `server_certificate` field.\n', args=[]),
+  withServerCertificateMixin(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          server_certificate+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      google_network_security_server_tls_policy+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/privateca_ca_pool.libsonnet b/4.x/_gen/resources/privateca_ca_pool.libsonnet
index ae5dce8..a7762f3 100644
--- a/4.x/_gen/resources/privateca_ca_pool.libsonnet
+++ b/4.x/_gen/resources/privateca_ca_pool.libsonnet
@@ -276,11 +276,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     timeouts: timeouts,
   }),
   publishing_options:: {
-    '#new':: d.fn(help='\n`google-beta.google_privateca_ca_pool.publishing_options.new` constructs a new object with attributes and blocks configured for the `publishing_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `publish_ca_cert` (`bool`): When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"\nX.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding\nX.509 extension will not be written in issued certificates.\n  - `publish_crl` (`bool`): When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension\nin all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not\nbe written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are\nalso rebuilt shortly after a certificate is revoked.\n\n**Returns**:\n  - An attribute object that represents the `publishing_options` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_privateca_ca_pool.publishing_options.new` constructs a new object with attributes and blocks configured for the `publishing_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `encoding_format` (`string`): Specifies the encoding format of each CertificateAuthority's CA\ncertificate and CRLs. If this is omitted, CA certificates and CRLs\nwill be published in PEM. Possible values: ["PEM", "DER"] When `null`, the `encoding_format` field will be omitted from the resulting object.\n  - `publish_ca_cert` (`bool`): When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"\nX.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding\nX.509 extension will not be written in issued certificates.\n  - `publish_crl` (`bool`): When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension\nin all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not\nbe written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are\nalso rebuilt shortly after a certificate is revoked.\n\n**Returns**:\n  - An attribute object that represents the `publishing_options` sub block.\n', args=[]),
     new(
       publish_ca_cert,
-      publish_crl
+      publish_crl,
+      encoding_format=null
     ):: std.prune(a={
+      encoding_format: encoding_format,
       publish_ca_cert: publish_ca_cert,
       publish_crl: publish_crl,
     }),
diff --git a/4.x/_gen/resources/sql_database_instance.libsonnet b/4.x/_gen/resources/sql_database_instance.libsonnet
index 21b9b3c..18215cc 100644
--- a/4.x/_gen/resources/sql_database_instance.libsonnet
+++ b/4.x/_gen/resources/sql_database_instance.libsonnet
@@ -140,6 +140,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         domain: domain,
       }),
     },
+    advanced_machine_features:: {
+      '#new':: d.fn(help='\n`google-beta.google_sql_database_instance.settings.advanced_machine_features.new` constructs a new object with attributes and blocks configured for the `advanced_machine_features`\nTerraform sub block.\n\n\n\n**Args**:\n  - `threads_per_core` (`number`): The number of threads per physical core. Can be 1 or 2. When `null`, the `threads_per_core` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `advanced_machine_features` sub block.\n', args=[]),
+      new(
+        threads_per_core=null
+      ):: std.prune(a={
+        threads_per_core: threads_per_core,
+      }),
+    },
     backup_configuration:: {
       backup_retention_settings:: {
         '#new':: d.fn(help='\n`google-beta.google_sql_database_instance.settings.backup_configuration.backup_retention_settings.new` constructs a new object with attributes and blocks configured for the `backup_retention_settings`\nTerraform sub block.\n\n\n\n**Args**:\n  - `retained_backups` (`number`): Number of backups to retain.\n  - `retention_unit` (`string`): The unit that 'retainedBackups' represents. Defaults to COUNT When `null`, the `retention_unit` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `backup_retention_settings` sub block.\n', args=[]),
@@ -262,11 +270,12 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         update_track: update_track,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_sql_database_instance.settings.new` constructs a new object with attributes and blocks configured for the `settings`\nTerraform sub block.\n\n\n\n**Args**:\n  - `activation_policy` (`string`): This specifies when the instance should be active. Can be either ALWAYS, NEVER or ON_DEMAND. When `null`, the `activation_policy` field will be omitted from the resulting object.\n  - `availability_type` (`string`): The availability type of the Cloud SQL instance, high availability\n(REGIONAL) or single zone (ZONAL). For all instances, ensure that\nsettings.backup_configuration.enabled is set to true.\nFor MySQL instances, ensure that settings.backup_configuration.binary_log_enabled is set to true.\nFor Postgres instances, ensure that settings.backup_configuration.point_in_time_recovery_enabled\nis set to true. Defaults to ZONAL. When `null`, the `availability_type` field will be omitted from the resulting object.\n  - `collation` (`string`): The name of server instance collation. When `null`, the `collation` field will be omitted from the resulting object.\n  - `connector_enforcement` (`string`): Specifies if connections must use Cloud SQL connectors. When `null`, the `connector_enforcement` field will be omitted from the resulting object.\n  - `deletion_protection_enabled` (`bool`): Configuration to protect against accidental instance deletion. When `null`, the `deletion_protection_enabled` field will be omitted from the resulting object.\n  - `disk_autoresize` (`bool`): Enables auto-resizing of the storage size. Defaults to true. When `null`, the `disk_autoresize` field will be omitted from the resulting object.\n  - `disk_autoresize_limit` (`number`): The maximum size, in GB, to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. When `null`, the `disk_autoresize_limit` field will be omitted from the resulting object.\n  - `disk_size` (`number`): The size of data disk, in GB. Size of a running instance cannot be reduced but can be increased. The minimum value is 10GB. When `null`, the `disk_size` field will be omitted from the resulting object.\n  - `disk_type` (`string`): The type of data disk: PD_SSD or PD_HDD. Defaults to PD_SSD. When `null`, the `disk_type` field will be omitted from the resulting object.\n  - `pricing_plan` (`string`): Pricing plan for this instance, can only be PER_USE. When `null`, the `pricing_plan` field will be omitted from the resulting object.\n  - `tier` (`string`): The machine type to use. See tiers for more details and supported versions. Postgres supports only shared-core machine types, and custom machine types such as db-custom-2-13312. See the Custom Machine Type Documentation to learn about specifying custom machine types.\n  - `time_zone` (`string`): The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. When `null`, the `time_zone` field will be omitted from the resulting object.\n  - `user_labels` (`obj`): A set of key/value user label pairs to assign to the instance. When `null`, the `user_labels` field will be omitted from the resulting object.\n  - `active_directory_config` (`list[obj]`): Set the `active_directory_config` field on the resulting object. When `null`, the `active_directory_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.active_directory_config.new](#fn-settingsactive_directory_confignew) constructor.\n  - `backup_configuration` (`list[obj]`): Set the `backup_configuration` field on the resulting object. When `null`, the `backup_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.backup_configuration.new](#fn-settingsbackup_configurationnew) constructor.\n  - `database_flags` (`list[obj]`): Set the `database_flags` field on the resulting object. When `null`, the `database_flags` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.database_flags.new](#fn-settingsdatabase_flagsnew) constructor.\n  - `deny_maintenance_period` (`list[obj]`): Set the `deny_maintenance_period` field on the resulting object. When `null`, the `deny_maintenance_period` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.deny_maintenance_period.new](#fn-settingsdeny_maintenance_periodnew) constructor.\n  - `insights_config` (`list[obj]`): Configuration of Query Insights. When `null`, the `insights_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.insights_config.new](#fn-settingsinsights_confignew) constructor.\n  - `ip_configuration` (`list[obj]`): Set the `ip_configuration` field on the resulting object. When `null`, the `ip_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.ip_configuration.new](#fn-settingsip_configurationnew) constructor.\n  - `location_preference` (`list[obj]`): Set the `location_preference` field on the resulting object. When `null`, the `location_preference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.location_preference.new](#fn-settingslocation_preferencenew) constructor.\n  - `maintenance_window` (`list[obj]`): Declares a one-hour maintenance window when an Instance can automatically restart to apply updates. The maintenance window is specified in UTC time. When `null`, the `maintenance_window` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.maintenance_window.new](#fn-settingsmaintenance_windownew) constructor.\n  - `password_validation_policy` (`list[obj]`): Set the `password_validation_policy` field on the resulting object. When `null`, the `password_validation_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.password_validation_policy.new](#fn-settingspassword_validation_policynew) constructor.\n  - `sql_server_audit_config` (`list[obj]`): Set the `sql_server_audit_config` field on the resulting object. When `null`, the `sql_server_audit_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.sql_server_audit_config.new](#fn-settingssql_server_audit_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `settings` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_sql_database_instance.settings.new` constructs a new object with attributes and blocks configured for the `settings`\nTerraform sub block.\n\n\n\n**Args**:\n  - `activation_policy` (`string`): This specifies when the instance should be active. Can be either ALWAYS, NEVER or ON_DEMAND. When `null`, the `activation_policy` field will be omitted from the resulting object.\n  - `availability_type` (`string`): The availability type of the Cloud SQL instance, high availability\n(REGIONAL) or single zone (ZONAL). For all instances, ensure that\nsettings.backup_configuration.enabled is set to true.\nFor MySQL instances, ensure that settings.backup_configuration.binary_log_enabled is set to true.\nFor Postgres instances, ensure that settings.backup_configuration.point_in_time_recovery_enabled\nis set to true. Defaults to ZONAL. When `null`, the `availability_type` field will be omitted from the resulting object.\n  - `collation` (`string`): The name of server instance collation. When `null`, the `collation` field will be omitted from the resulting object.\n  - `connector_enforcement` (`string`): Specifies if connections must use Cloud SQL connectors. When `null`, the `connector_enforcement` field will be omitted from the resulting object.\n  - `deletion_protection_enabled` (`bool`): Configuration to protect against accidental instance deletion. When `null`, the `deletion_protection_enabled` field will be omitted from the resulting object.\n  - `disk_autoresize` (`bool`): Enables auto-resizing of the storage size. Defaults to true. When `null`, the `disk_autoresize` field will be omitted from the resulting object.\n  - `disk_autoresize_limit` (`number`): The maximum size, in GB, to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. When `null`, the `disk_autoresize_limit` field will be omitted from the resulting object.\n  - `disk_size` (`number`): The size of data disk, in GB. Size of a running instance cannot be reduced but can be increased. The minimum value is 10GB. When `null`, the `disk_size` field will be omitted from the resulting object.\n  - `disk_type` (`string`): The type of data disk: PD_SSD or PD_HDD. Defaults to PD_SSD. When `null`, the `disk_type` field will be omitted from the resulting object.\n  - `pricing_plan` (`string`): Pricing plan for this instance, can only be PER_USE. When `null`, the `pricing_plan` field will be omitted from the resulting object.\n  - `tier` (`string`): The machine type to use. See tiers for more details and supported versions. Postgres supports only shared-core machine types, and custom machine types such as db-custom-2-13312. See the Custom Machine Type Documentation to learn about specifying custom machine types.\n  - `time_zone` (`string`): The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. When `null`, the `time_zone` field will be omitted from the resulting object.\n  - `user_labels` (`obj`): A set of key/value user label pairs to assign to the instance. When `null`, the `user_labels` field will be omitted from the resulting object.\n  - `active_directory_config` (`list[obj]`): Set the `active_directory_config` field on the resulting object. When `null`, the `active_directory_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.active_directory_config.new](#fn-settingsactive_directory_confignew) constructor.\n  - `advanced_machine_features` (`list[obj]`): Set the `advanced_machine_features` field on the resulting object. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.advanced_machine_features.new](#fn-settingsadvanced_machine_featuresnew) constructor.\n  - `backup_configuration` (`list[obj]`): Set the `backup_configuration` field on the resulting object. When `null`, the `backup_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.backup_configuration.new](#fn-settingsbackup_configurationnew) constructor.\n  - `database_flags` (`list[obj]`): Set the `database_flags` field on the resulting object. When `null`, the `database_flags` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.database_flags.new](#fn-settingsdatabase_flagsnew) constructor.\n  - `deny_maintenance_period` (`list[obj]`): Set the `deny_maintenance_period` field on the resulting object. When `null`, the `deny_maintenance_period` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.deny_maintenance_period.new](#fn-settingsdeny_maintenance_periodnew) constructor.\n  - `insights_config` (`list[obj]`): Configuration of Query Insights. When `null`, the `insights_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.insights_config.new](#fn-settingsinsights_confignew) constructor.\n  - `ip_configuration` (`list[obj]`): Set the `ip_configuration` field on the resulting object. When `null`, the `ip_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.ip_configuration.new](#fn-settingsip_configurationnew) constructor.\n  - `location_preference` (`list[obj]`): Set the `location_preference` field on the resulting object. When `null`, the `location_preference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.location_preference.new](#fn-settingslocation_preferencenew) constructor.\n  - `maintenance_window` (`list[obj]`): Declares a one-hour maintenance window when an Instance can automatically restart to apply updates. The maintenance window is specified in UTC time. When `null`, the `maintenance_window` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.maintenance_window.new](#fn-settingsmaintenance_windownew) constructor.\n  - `password_validation_policy` (`list[obj]`): Set the `password_validation_policy` field on the resulting object. When `null`, the `password_validation_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.password_validation_policy.new](#fn-settingspassword_validation_policynew) constructor.\n  - `sql_server_audit_config` (`list[obj]`): Set the `sql_server_audit_config` field on the resulting object. When `null`, the `sql_server_audit_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.sql_server_audit_config.new](#fn-settingssql_server_audit_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `settings` sub block.\n', args=[]),
     new(
       tier,
       activation_policy=null,
       active_directory_config=null,
+      advanced_machine_features=null,
       availability_type=null,
       backup_configuration=null,
       collation=null,
@@ -290,6 +299,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       activation_policy: activation_policy,
       active_directory_config: active_directory_config,
+      advanced_machine_features: advanced_machine_features,
       availability_type: availability_type,
       backup_configuration: backup_configuration,
       collation: collation,
diff --git a/4.x/_gen/resources/storage_transfer_job.libsonnet b/4.x/_gen/resources/storage_transfer_job.libsonnet
index 6004a90..8f4fbbf 100644
--- a/4.x/_gen/resources/storage_transfer_job.libsonnet
+++ b/4.x/_gen/resources/storage_transfer_job.libsonnet
@@ -117,14 +117,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           secret_access_key: secret_access_key,
         }),
       },
-      '#new':: d.fn(help='\n`google-beta.google_storage_transfer_job.transfer_spec.aws_s3_data_source.new` constructs a new object with attributes and blocks configured for the `aws_s3_data_source`\nTerraform sub block.\n\n\n\n**Args**:\n  - `bucket_name` (`string`): S3 Bucket name.\n  - `role_arn` (`string`): The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project. When `null`, the `role_arn` field will be omitted from the resulting object.\n  - `aws_access_key` (`list[obj]`): AWS credentials block. When `null`, the `aws_access_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_transfer_job.transfer_spec.aws_s3_data_source.aws_access_key.new](#fn-transfer_spectransfer_specaws_access_keynew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `aws_s3_data_source` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google-beta.google_storage_transfer_job.transfer_spec.aws_s3_data_source.new` constructs a new object with attributes and blocks configured for the `aws_s3_data_source`\nTerraform sub block.\n\n\n\n**Args**:\n  - `bucket_name` (`string`): S3 Bucket name.\n  - `path` (`string`): S3 Bucket path in bucket to transfer. When `null`, the `path` field will be omitted from the resulting object.\n  - `role_arn` (`string`): The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project. When `null`, the `role_arn` field will be omitted from the resulting object.\n  - `aws_access_key` (`list[obj]`): AWS credentials block. When `null`, the `aws_access_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_transfer_job.transfer_spec.aws_s3_data_source.aws_access_key.new](#fn-transfer_spectransfer_specaws_access_keynew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `aws_s3_data_source` sub block.\n', args=[]),
       new(
         bucket_name,
         aws_access_key=null,
+        path=null,
         role_arn=null
       ):: std.prune(a={
         aws_access_key: aws_access_key,
         bucket_name: bucket_name,
+        path: path,
         role_arn: role_arn,
       }),
     },
diff --git a/4.x/_gen/resources/workstations_workstation_config.libsonnet b/4.x/_gen/resources/workstations_workstation_config.libsonnet
index 1425601..8663b8b 100644
--- a/4.x/_gen/resources/workstations_workstation_config.libsonnet
+++ b/4.x/_gen/resources/workstations_workstation_config.libsonnet
@@ -80,7 +80,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       gce_instance: gce_instance,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_workstations_workstation_config.new` injects a new `google-beta_google_workstations_workstation_config` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_workstations_workstation_config.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_workstations_workstation_config` using the reference:\n\n    $._ref.google-beta_google_workstations_workstation_config.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_workstations_workstation_config.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation cluster config should reside.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID to be assigned to the workstation cluster config.\n  - `container` (`list[obj]`): Container that will be run for each workstation using this configuration when that workstation is started. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.container.new](#fn-containernew) constructor.\n  - `encryption_key` (`list[obj]`): Encrypts resources of this workstation configuration using a customer-managed encryption key.\n\nIf specified, the boot disk of the Compute Engine instance and the persistent disk are encrypted using this encryption key. If this field is not set, the disks are encrypted using a generated key. Customer-managed encryption keys do not protect disk metadata.\nIf the customer-managed encryption key is rotated, when the workstation instance is stopped, the system attempts to recreate the persistent disk with the new version of the key. Be sure to keep older versions of the key until the persistent disk is recreated. Otherwise, data on the persistent disk will be lost.\nIf the encryption key is revoked, the workstation session will automatically be stopped within 7 hours. When `null`, the `encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.encryption_key.new](#fn-encryption_keynew) constructor.\n  - `host` (`list[obj]`): Runtime host for a workstation. When `null`, the `host` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.host.new](#fn-hostnew) constructor.\n  - `persistent_directories` (`list[obj]`): Directories to persist across workstation sessions. When `null`, the `persistent_directories` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.new](#fn-persistent_directoriesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_workstations_workstation_config.new` injects a new `google-beta_google_workstations_workstation_config` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_workstations_workstation_config.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_workstations_workstation_config` using the reference:\n\n    $._ref.google-beta_google_workstations_workstation_config.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_workstations_workstation_config.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `idle_timeout` (`string`): How long to wait before automatically stopping an instance that hasn\u0026#39;t recently received any user traffic. A value of 0 indicates that this instance should never time out from idleness. Defaults to 20 minutes.\nA duration in seconds with up to nine fractional digits, ending with \u0026#39;s\u0026#39;. Example: \u0026#34;3.5s\u0026#34;. When `null`, the `idle_timeout` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation cluster config should reside.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `running_timeout` (`string`): How long to wait before automatically stopping a workstation after it was started. A value of 0 indicates that workstations using this configuration should never time out from running duration. Must be greater than 0 and less than 24 hours if \u0026#39;encryption_key\u0026#39; is set. Defaults to 12 hours.\nA duration in seconds with up to nine fractional digits, ending with \u0026#39;s\u0026#39;. Example: \u0026#34;3.5s\u0026#34;. When `null`, the `running_timeout` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID to be assigned to the workstation cluster config.\n  - `container` (`list[obj]`): Container that will be run for each workstation using this configuration when that workstation is started. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.container.new](#fn-containernew) constructor.\n  - `encryption_key` (`list[obj]`): Encrypts resources of this workstation configuration using a customer-managed encryption key.\n\nIf specified, the boot disk of the Compute Engine instance and the persistent disk are encrypted using this encryption key. If this field is not set, the disks are encrypted using a generated key. Customer-managed encryption keys do not protect disk metadata.\nIf the customer-managed encryption key is rotated, when the workstation instance is stopped, the system attempts to recreate the persistent disk with the new version of the key. Be sure to keep older versions of the key until the persistent disk is recreated. Otherwise, data on the persistent disk will be lost.\nIf the encryption key is revoked, the workstation session will automatically be stopped within 7 hours. When `null`, the `encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.encryption_key.new](#fn-encryption_keynew) constructor.\n  - `host` (`list[obj]`): Runtime host for a workstation. When `null`, the `host` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.host.new](#fn-hostnew) constructor.\n  - `persistent_directories` (`list[obj]`): Directories to persist across workstation sessions. When `null`, the `persistent_directories` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.new](#fn-persistent_directoriesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     location,
@@ -91,9 +91,11 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     display_name=null,
     encryption_key=null,
     host=null,
+    idle_timeout=null,
     labels=null,
     persistent_directories=null,
     project=null,
+    running_timeout=null,
     timeouts=null,
     _meta={}
   ):: tf.withResource(
@@ -105,17 +107,19 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       display_name=display_name,
       encryption_key=encryption_key,
       host=host,
+      idle_timeout=idle_timeout,
       labels=labels,
       location=location,
       persistent_directories=persistent_directories,
       project=project,
+      running_timeout=running_timeout,
       timeouts=timeouts,
       workstation_cluster_id=workstation_cluster_id,
       workstation_config_id=workstation_config_id
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_workstations_workstation_config.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation_config`\nTerraform resource.\n\nUnlike [google-beta.google_workstations_workstation_config.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation cluster config should reside.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID to be assigned to the workstation cluster config.\n  - `container` (`list[obj]`): Container that will be run for each workstation using this configuration when that workstation is started. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.container.new](#fn-containernew) constructor.\n  - `encryption_key` (`list[obj]`): Encrypts resources of this workstation configuration using a customer-managed encryption key.\n\nIf specified, the boot disk of the Compute Engine instance and the persistent disk are encrypted using this encryption key. If this field is not set, the disks are encrypted using a generated key. Customer-managed encryption keys do not protect disk metadata.\nIf the customer-managed encryption key is rotated, when the workstation instance is stopped, the system attempts to recreate the persistent disk with the new version of the key. Be sure to keep older versions of the key until the persistent disk is recreated. Otherwise, data on the persistent disk will be lost.\nIf the encryption key is revoked, the workstation session will automatically be stopped within 7 hours. When `null`, the `encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.encryption_key.new](#fn-encryption_keynew) constructor.\n  - `host` (`list[obj]`): Runtime host for a workstation. When `null`, the `host` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.host.new](#fn-hostnew) constructor.\n  - `persistent_directories` (`list[obj]`): Directories to persist across workstation sessions. When `null`, the `persistent_directories` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.new](#fn-persistent_directoriesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_workstations_workstation_config` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_workstations_workstation_config.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation_config`\nTerraform resource.\n\nUnlike [google-beta.google_workstations_workstation_config.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `idle_timeout` (`string`): How long to wait before automatically stopping an instance that hasn't recently received any user traffic. A value of 0 indicates that this instance should never time out from idleness. Defaults to 20 minutes.\nA duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s". When `null`, the `idle_timeout` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation cluster config should reside.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `running_timeout` (`string`): How long to wait before automatically stopping a workstation after it was started. A value of 0 indicates that workstations using this configuration should never time out from running duration. Must be greater than 0 and less than 24 hours if 'encryption_key' is set. Defaults to 12 hours.\nA duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s". When `null`, the `running_timeout` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID to be assigned to the workstation cluster config.\n  - `container` (`list[obj]`): Container that will be run for each workstation using this configuration when that workstation is started. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.container.new](#fn-containernew) constructor.\n  - `encryption_key` (`list[obj]`): Encrypts resources of this workstation configuration using a customer-managed encryption key.\n\nIf specified, the boot disk of the Compute Engine instance and the persistent disk are encrypted using this encryption key. If this field is not set, the disks are encrypted using a generated key. Customer-managed encryption keys do not protect disk metadata.\nIf the customer-managed encryption key is rotated, when the workstation instance is stopped, the system attempts to recreate the persistent disk with the new version of the key. Be sure to keep older versions of the key until the persistent disk is recreated. Otherwise, data on the persistent disk will be lost.\nIf the encryption key is revoked, the workstation session will automatically be stopped within 7 hours. When `null`, the `encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.encryption_key.new](#fn-encryption_keynew) constructor.\n  - `host` (`list[obj]`): Runtime host for a workstation. When `null`, the `host` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.host.new](#fn-hostnew) constructor.\n  - `persistent_directories` (`list[obj]`): Directories to persist across workstation sessions. When `null`, the `persistent_directories` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.new](#fn-persistent_directoriesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_workstations_workstation_config` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     location,
     workstation_cluster_id,
@@ -125,9 +129,11 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     display_name=null,
     encryption_key=null,
     host=null,
+    idle_timeout=null,
     labels=null,
     persistent_directories=null,
     project=null,
+    running_timeout=null,
     timeouts=null
   ):: std.prune(a={
     annotations: annotations,
@@ -135,30 +141,34 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     display_name: display_name,
     encryption_key: encryption_key,
     host: host,
+    idle_timeout: idle_timeout,
     labels: labels,
     location: location,
     persistent_directories: persistent_directories,
     project: project,
+    running_timeout: running_timeout,
     timeouts: timeouts,
     workstation_cluster_id: workstation_cluster_id,
     workstation_config_id: workstation_config_id,
   }),
   persistent_directories:: {
     gce_pd:: {
-      '#new':: d.fn(help='\n`google-beta.google_workstations_workstation_config.persistent_directories.gce_pd.new` constructs a new object with attributes and blocks configured for the `gce_pd`\nTerraform sub block.\n\n\n\n**Args**:\n  - `disk_type` (`string`): Type of the disk to use. When `null`, the `disk_type` field will be omitted from the resulting object.\n  - `fs_type` (`string`): Type of file system that the disk should be formatted with. The workstation image must support this file system type. Must be empty if sourceSnapshot is set. When `null`, the `fs_type` field will be omitted from the resulting object.\n  - `reclaim_policy` (`string`): What should happen to the disk after the workstation is deleted. Defaults to DELETE. Possible values: ["DELETE", "RETAIN"] When `null`, the `reclaim_policy` field will be omitted from the resulting object.\n  - `size_gb` (`number`): Size of the disk in GB. Must be empty if sourceSnapshot is set. When `null`, the `size_gb` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `gce_pd` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google-beta.google_workstations_workstation_config.persistent_directories.gce_pd.new` constructs a new object with attributes and blocks configured for the `gce_pd`\nTerraform sub block.\n\n\n\n**Args**:\n  - `disk_type` (`string`): The type of the persistent disk for the home directory. Defaults to 'pd-standard'. When `null`, the `disk_type` field will be omitted from the resulting object.\n  - `fs_type` (`string`): Type of file system that the disk should be formatted with. The workstation image must support this file system type. Must be empty if 'sourceSnapshot' is set. Defaults to 'ext4'. When `null`, the `fs_type` field will be omitted from the resulting object.\n  - `reclaim_policy` (`string`): Whether the persistent disk should be deleted when the workstation is deleted. Valid values are 'DELETE' and 'RETAIN'. Defaults to 'DELETE'. Possible values: ["DELETE", "RETAIN"] When `null`, the `reclaim_policy` field will be omitted from the resulting object.\n  - `size_gb` (`number`): The GB capacity of a persistent home directory for each workstation created with this configuration. Must be empty if 'sourceSnapshot' is set.\nValid values are '10', '50', '100', '200', '500', or '1000'. Defaults to '200'. If less than '200' GB, the 'diskType' must be 'pd-balanced' or 'pd-ssd'. When `null`, the `size_gb` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): Name of the snapshot to use as the source for the disk. This can be the snapshot's 'self_link', 'id', or a string in the format of 'projects/{project}/global/snapshots/{snapshot}'. If set, 'sizeGb' and 'fsType' must be empty. Can only be updated if it has an existing value. When `null`, the `source_snapshot` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `gce_pd` sub block.\n', args=[]),
       new(
         disk_type=null,
         fs_type=null,
         reclaim_policy=null,
-        size_gb=null
+        size_gb=null,
+        source_snapshot=null
       ):: std.prune(a={
         disk_type: disk_type,
         fs_type: fs_type,
         reclaim_policy: reclaim_policy,
         size_gb: size_gb,
+        source_snapshot: source_snapshot,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_workstations_workstation_config.persistent_directories.new` constructs a new object with attributes and blocks configured for the `persistent_directories`\nTerraform sub block.\n\n\n\n**Args**:\n  - `mount_path` (`string`): Location of this directory in the running workstation. When `null`, the `mount_path` field will be omitted from the resulting object.\n  - `gce_pd` (`list[obj]`): PersistentDirectory backed by a Compute Engine regional persistent disk. When `null`, the `gce_pd` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.gce_pd.new](#fn-persistent_directoriesgce_pdnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `persistent_directories` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_workstations_workstation_config.persistent_directories.new` constructs a new object with attributes and blocks configured for the `persistent_directories`\nTerraform sub block.\n\n\n\n**Args**:\n  - `mount_path` (`string`): Location of this directory in the running workstation. When `null`, the `mount_path` field will be omitted from the resulting object.\n  - `gce_pd` (`list[obj]`): A directory to persist across workstation sessions, backed by a Compute Engine regional persistent disk. Can only be updated if not empty during creation. When `null`, the `gce_pd` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.gce_pd.new](#fn-persistent_directoriesgce_pdnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `persistent_directories` sub block.\n', args=[]),
     new(
       gce_pd=null,
       mount_path=null
@@ -259,6 +269,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withIdleTimeout':: d.fn(help='`google-beta.string.withIdleTimeout` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the idle_timeout field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `idle_timeout` field.\n', args=[]),
+  withIdleTimeout(resourceLabel, value): {
+    resource+: {
+      google_workstations_workstation_config+: {
+        [resourceLabel]+: {
+          idle_timeout: value,
+        },
+      },
+    },
+  },
   '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
   withLabels(resourceLabel, value): {
     resource+: {
@@ -309,6 +329,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withRunningTimeout':: d.fn(help='`google-beta.string.withRunningTimeout` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the running_timeout field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `running_timeout` field.\n', args=[]),
+  withRunningTimeout(resourceLabel, value): {
+    resource+: {
+      google_workstations_workstation_config+: {
+        [resourceLabel]+: {
+          running_timeout: value,
+        },
+      },
+    },
+  },
   '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
   withTimeouts(resourceLabel, value): {
     resource+: {
diff --git a/docs/4.x/README.md b/docs/4.x/README.md
index 59ee102..79e6929 100644
--- a/docs/4.x/README.md
+++ b/docs/4.x/README.md
@@ -315,6 +315,9 @@ project.
 * [google_compute_vpn_gateway](google_compute_vpn_gateway.md)
 * [google_compute_vpn_tunnel](google_compute_vpn_tunnel.md)
 * [google_container_analysis_note](google_container_analysis_note.md)
+* [google_container_analysis_note_iam_binding](google_container_analysis_note_iam_binding.md)
+* [google_container_analysis_note_iam_member](google_container_analysis_note_iam_member.md)
+* [google_container_analysis_note_iam_policy](google_container_analysis_note_iam_policy.md)
 * [google_container_analysis_occurrence](google_container_analysis_occurrence.md)
 * [google_container_attached_cluster](google_container_attached_cluster.md)
 * [google_container_aws_cluster](google_container_aws_cluster.md)
@@ -579,6 +582,7 @@ project.
 * [google_network_security_client_tls_policy](google_network_security_client_tls_policy.md)
 * [google_network_security_gateway_security_policy](google_network_security_gateway_security_policy.md)
 * [google_network_security_gateway_security_policy_rule](google_network_security_gateway_security_policy_rule.md)
+* [google_network_security_server_tls_policy](google_network_security_server_tls_policy.md)
 * [google_network_security_tls_inspection_policy](google_network_security_tls_inspection_policy.md)
 * [google_network_security_url_lists](google_network_security_url_lists.md)
 * [google_network_services_edge_cache_keyset](google_network_services_edge_cache_keyset.md)
diff --git a/docs/4.x/data/google_access_context_manager_access_policy_iam_policy.md b/docs/4.x/data/google_access_context_manager_access_policy_iam_policy.md
new file mode 100644
index 0000000..2966a50
--- /dev/null
+++ b/docs/4.x/data/google_access_context_manager_access_policy_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_access_context_manager_access_policy_iam_policy/
+---
+
+# data.google_access_context_manager_access_policy_iam_policy
+
+`google_access_context_manager_access_policy_iam_policy` represents the `google-beta_google_access_context_manager_access_policy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_access_context_manager_access_policy_iam_policy.new` injects a new `data_google-beta_google_access_context_manager_access_policy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_access_context_manager_access_policy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_access_context_manager_access_policy_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_access_context_manager_access_policy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_access_context_manager_access_policy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_access_context_manager_access_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_access_context_manager_access_policy_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_access_context_manager_access_policy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_access_context_manager_access_policy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
diff --git a/docs/4.x/data/google_api_gateway_api_config_iam_policy.md b/docs/4.x/data/google_api_gateway_api_config_iam_policy.md
new file mode 100644
index 0000000..4839975
--- /dev/null
+++ b/docs/4.x/data/google_api_gateway_api_config_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_api_gateway_api_config_iam_policy/
+---
+
+# data.google_api_gateway_api_config_iam_policy
+
+`google_api_gateway_api_config_iam_policy` represents the `google-beta_google_api_gateway_api_config_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withApi()`](#fn-withapi)
+* [`fn withApiConfig()`](#fn-withapiconfig)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_api_gateway_api_config_iam_policy.new` injects a new `data_google-beta_google_api_gateway_api_config_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_api_gateway_api_config_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_api_gateway_api_config_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_api_gateway_api_config_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_api_gateway_api_config_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `api` (`string`): Set the `api` field on the resulting data source block.
+  - `api_config` (`string`): Set the `api_config` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_api_gateway_api_config_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_api_gateway_api_config_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_api_gateway_api_config_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `api` (`string`): Set the `api` field on the resulting object.
+  - `api_config` (`string`): Set the `api_config` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_api_gateway_api_config_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withApi
+
+```ts
+withApi()
+```
+
+`google-beta.string.withApi` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the api field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `api` field.
+
+
+### fn withApiConfig
+
+```ts
+withApiConfig()
+```
+
+`google-beta.string.withApiConfig` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the api_config field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `api_config` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_api_gateway_api_iam_policy.md b/docs/4.x/data/google_api_gateway_api_iam_policy.md
new file mode 100644
index 0000000..fdbc193
--- /dev/null
+++ b/docs/4.x/data/google_api_gateway_api_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_api_gateway_api_iam_policy/
+---
+
+# data.google_api_gateway_api_iam_policy
+
+`google_api_gateway_api_iam_policy` represents the `google-beta_google_api_gateway_api_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withApi()`](#fn-withapi)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_api_gateway_api_iam_policy.new` injects a new `data_google-beta_google_api_gateway_api_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_api_gateway_api_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_api_gateway_api_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_api_gateway_api_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_api_gateway_api_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `api` (`string`): Set the `api` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_api_gateway_api_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_api_gateway_api_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_api_gateway_api_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `api` (`string`): Set the `api` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_api_gateway_api_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withApi
+
+```ts
+withApi()
+```
+
+`google-beta.string.withApi` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the api field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `api` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_api_gateway_gateway_iam_policy.md b/docs/4.x/data/google_api_gateway_gateway_iam_policy.md
new file mode 100644
index 0000000..0b42f59
--- /dev/null
+++ b/docs/4.x/data/google_api_gateway_gateway_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_api_gateway_gateway_iam_policy/
+---
+
+# data.google_api_gateway_gateway_iam_policy
+
+`google_api_gateway_gateway_iam_policy` represents the `google-beta_google_api_gateway_gateway_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withGateway()`](#fn-withgateway)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_api_gateway_gateway_iam_policy.new` injects a new `data_google-beta_google_api_gateway_gateway_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_api_gateway_gateway_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_api_gateway_gateway_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_api_gateway_gateway_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_api_gateway_gateway_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `gateway` (`string`): Set the `gateway` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_api_gateway_gateway_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_api_gateway_gateway_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_api_gateway_gateway_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `gateway` (`string`): Set the `gateway` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_api_gateway_gateway_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withGateway
+
+```ts
+withGateway()
+```
+
+`google-beta.string.withGateway` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the gateway field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `gateway` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_apigee_environment_iam_policy.md b/docs/4.x/data/google_apigee_environment_iam_policy.md
new file mode 100644
index 0000000..fe1d7ea
--- /dev/null
+++ b/docs/4.x/data/google_apigee_environment_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_apigee_environment_iam_policy/
+---
+
+# data.google_apigee_environment_iam_policy
+
+`google_apigee_environment_iam_policy` represents the `google-beta_google_apigee_environment_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withEnvId()`](#fn-withenvid)
+* [`fn withOrgId()`](#fn-withorgid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_apigee_environment_iam_policy.new` injects a new `data_google-beta_google_apigee_environment_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_apigee_environment_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_apigee_environment_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_apigee_environment_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_apigee_environment_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `env_id` (`string`): Set the `env_id` field on the resulting data source block.
+  - `org_id` (`string`): Set the `org_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_apigee_environment_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_apigee_environment_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_apigee_environment_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `env_id` (`string`): Set the `env_id` field on the resulting object.
+  - `org_id` (`string`): Set the `org_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_apigee_environment_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withEnvId
+
+```ts
+withEnvId()
+```
+
+`google-beta.string.withEnvId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the env_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `env_id` field.
+
+
+### fn withOrgId
+
+```ts
+withOrgId()
+```
+
+`google-beta.string.withOrgId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the org_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `org_id` field.
diff --git a/docs/4.x/data/google_artifact_registry_repository_iam_policy.md b/docs/4.x/data/google_artifact_registry_repository_iam_policy.md
new file mode 100644
index 0000000..77746cd
--- /dev/null
+++ b/docs/4.x/data/google_artifact_registry_repository_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_artifact_registry_repository_iam_policy/
+---
+
+# data.google_artifact_registry_repository_iam_policy
+
+`google_artifact_registry_repository_iam_policy` represents the `google-beta_google_artifact_registry_repository_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRepository()`](#fn-withrepository)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_artifact_registry_repository_iam_policy.new` injects a new `data_google-beta_google_artifact_registry_repository_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_artifact_registry_repository_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_artifact_registry_repository_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_artifact_registry_repository_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_artifact_registry_repository_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_artifact_registry_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_artifact_registry_repository_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_artifact_registry_repository_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_artifact_registry_repository_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRepository
+
+```ts
+withRepository()
+```
+
+`google-beta.string.withRepository` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the repository field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `repository` field.
diff --git a/docs/4.x/data/google_bigquery_analytics_hub_data_exchange_iam_policy.md b/docs/4.x/data/google_bigquery_analytics_hub_data_exchange_iam_policy.md
new file mode 100644
index 0000000..cd65516
--- /dev/null
+++ b/docs/4.x/data/google_bigquery_analytics_hub_data_exchange_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_bigquery_analytics_hub_data_exchange_iam_policy/
+---
+
+# data.google_bigquery_analytics_hub_data_exchange_iam_policy
+
+`google_bigquery_analytics_hub_data_exchange_iam_policy` represents the `google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataExchangeId()`](#fn-withdataexchangeid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.new` injects a new `data_google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_analytics_hub_data_exchange_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigquery_analytics_hub_data_exchange_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_analytics_hub_data_exchange_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataExchangeId
+
+```ts
+withDataExchangeId()
+```
+
+`google-beta.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the data_exchange_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `data_exchange_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_bigquery_analytics_hub_listing_iam_policy.md b/docs/4.x/data/google_bigquery_analytics_hub_listing_iam_policy.md
new file mode 100644
index 0000000..f118c21
--- /dev/null
+++ b/docs/4.x/data/google_bigquery_analytics_hub_listing_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/google_bigquery_analytics_hub_listing_iam_policy/
+---
+
+# data.google_bigquery_analytics_hub_listing_iam_policy
+
+`google_bigquery_analytics_hub_listing_iam_policy` represents the `google-beta_google_bigquery_analytics_hub_listing_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataExchangeId()`](#fn-withdataexchangeid)
+* [`fn withListingId()`](#fn-withlistingid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.new` injects a new `data_google-beta_google_bigquery_analytics_hub_listing_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigquery_analytics_hub_listing_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigquery_analytics_hub_listing_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigquery_analytics_hub_listing_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.
+  - `listing_id` (`string`): Set the `listing_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_analytics_hub_listing_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigquery_analytics_hub_listing_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.
+  - `listing_id` (`string`): Set the `listing_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_analytics_hub_listing_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataExchangeId
+
+```ts
+withDataExchangeId()
+```
+
+`google-beta.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the data_exchange_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `data_exchange_id` field.
+
+
+### fn withListingId
+
+```ts
+withListingId()
+```
+
+`google-beta.string.withListingId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the listing_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `listing_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_bigquery_connection_iam_policy.md b/docs/4.x/data/google_bigquery_connection_iam_policy.md
new file mode 100644
index 0000000..304f358
--- /dev/null
+++ b/docs/4.x/data/google_bigquery_connection_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_bigquery_connection_iam_policy/
+---
+
+# data.google_bigquery_connection_iam_policy
+
+`google_bigquery_connection_iam_policy` represents the `google-beta_google_bigquery_connection_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConnectionId()`](#fn-withconnectionid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigquery_connection_iam_policy.new` injects a new `data_google-beta_google_bigquery_connection_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigquery_connection_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigquery_connection_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigquery_connection_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigquery_connection_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `connection_id` (`string`): Set the `connection_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigquery_connection_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_connection_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigquery_connection_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `connection_id` (`string`): Set the `connection_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_connection_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConnectionId
+
+```ts
+withConnectionId()
+```
+
+`google-beta.string.withConnectionId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the connection_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `connection_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_bigquery_datapolicy_data_policy_iam_policy.md b/docs/4.x/data/google_bigquery_datapolicy_data_policy_iam_policy.md
new file mode 100644
index 0000000..13f6824
--- /dev/null
+++ b/docs/4.x/data/google_bigquery_datapolicy_data_policy_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_bigquery_datapolicy_data_policy_iam_policy/
+---
+
+# data.google_bigquery_datapolicy_data_policy_iam_policy
+
+`google_bigquery_datapolicy_data_policy_iam_policy` represents the `google-beta_google_bigquery_datapolicy_data_policy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataPolicyId()`](#fn-withdatapolicyid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.new` injects a new `data_google-beta_google_bigquery_datapolicy_data_policy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigquery_datapolicy_data_policy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigquery_datapolicy_data_policy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_datapolicy_data_policy_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigquery_datapolicy_data_policy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_datapolicy_data_policy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataPolicyId
+
+```ts
+withDataPolicyId()
+```
+
+`google-beta.string.withDataPolicyId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the data_policy_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `data_policy_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_bigquery_dataset_iam_policy.md b/docs/4.x/data/google_bigquery_dataset_iam_policy.md
new file mode 100644
index 0000000..398bf20
--- /dev/null
+++ b/docs/4.x/data/google_bigquery_dataset_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_bigquery_dataset_iam_policy/
+---
+
+# data.google_bigquery_dataset_iam_policy
+
+`google_bigquery_dataset_iam_policy` represents the `google-beta_google_bigquery_dataset_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatasetId()`](#fn-withdatasetid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigquery_dataset_iam_policy.new` injects a new `data_google-beta_google_bigquery_dataset_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigquery_dataset_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigquery_dataset_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigquery_dataset_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigquery_dataset_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigquery_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_dataset_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigquery_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_dataset_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatasetId
+
+```ts
+withDatasetId()
+```
+
+`google-beta.string.withDatasetId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_bigquery_table_iam_policy.md b/docs/4.x/data/google_bigquery_table_iam_policy.md
new file mode 100644
index 0000000..021d454
--- /dev/null
+++ b/docs/4.x/data/google_bigquery_table_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_bigquery_table_iam_policy/
+---
+
+# data.google_bigquery_table_iam_policy
+
+`google_bigquery_table_iam_policy` represents the `google-beta_google_bigquery_table_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatasetId()`](#fn-withdatasetid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTableId()`](#fn-withtableid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigquery_table_iam_policy.new` injects a new `data_google-beta_google_bigquery_table_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigquery_table_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigquery_table_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigquery_table_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigquery_table_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `table_id` (`string`): Set the `table_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigquery_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_table_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigquery_table_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `table_id` (`string`): Set the `table_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigquery_table_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatasetId
+
+```ts
+withDatasetId()
+```
+
+`google-beta.string.withDatasetId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTableId
+
+```ts
+withTableId()
+```
+
+`google-beta.string.withTableId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the table_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `table_id` field.
diff --git a/docs/4.x/data/google_bigtable_instance_iam_policy.md b/docs/4.x/data/google_bigtable_instance_iam_policy.md
new file mode 100644
index 0000000..cb209c2
--- /dev/null
+++ b/docs/4.x/data/google_bigtable_instance_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_bigtable_instance_iam_policy/
+---
+
+# data.google_bigtable_instance_iam_policy
+
+`google_bigtable_instance_iam_policy` represents the `google-beta_google_bigtable_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigtable_instance_iam_policy.new` injects a new `data_google-beta_google_bigtable_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigtable_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigtable_instance_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigtable_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigtable_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigtable_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigtable_instance_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigtable_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigtable_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_bigtable_table_iam_policy.md b/docs/4.x/data/google_bigtable_table_iam_policy.md
new file mode 100644
index 0000000..d726929
--- /dev/null
+++ b/docs/4.x/data/google_bigtable_table_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_bigtable_table_iam_policy/
+---
+
+# data.google_bigtable_table_iam_policy
+
+`google_bigtable_table_iam_policy` represents the `google-beta_google_bigtable_table_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTable()`](#fn-withtable)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_bigtable_table_iam_policy.new` injects a new `data_google-beta_google_bigtable_table_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_bigtable_table_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_bigtable_table_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_bigtable_table_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_bigtable_table_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `table` (`string`): Set the `table` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_bigtable_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigtable_table_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_bigtable_table_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `table` (`string`): Set the `table` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_bigtable_table_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTable
+
+```ts
+withTable()
+```
+
+`google-beta.string.withTable` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the table field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `table` field.
diff --git a/docs/4.x/data/google_billing_account_iam_policy.md b/docs/4.x/data/google_billing_account_iam_policy.md
new file mode 100644
index 0000000..8be7969
--- /dev/null
+++ b/docs/4.x/data/google_billing_account_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_billing_account_iam_policy/
+---
+
+# data.google_billing_account_iam_policy
+
+`google_billing_account_iam_policy` represents the `google-beta_google_billing_account_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withBillingAccountId()`](#fn-withbillingaccountid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_billing_account_iam_policy.new` injects a new `data_google-beta_google_billing_account_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_billing_account_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_billing_account_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_billing_account_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_billing_account_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_billing_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_billing_account_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_billing_account_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_billing_account_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withBillingAccountId
+
+```ts
+withBillingAccountId()
+```
+
+`google-beta.string.withBillingAccountId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the billing_account_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `billing_account_id` field.
diff --git a/docs/4.x/data/google_binary_authorization_attestor_iam_policy.md b/docs/4.x/data/google_binary_authorization_attestor_iam_policy.md
new file mode 100644
index 0000000..f20af53
--- /dev/null
+++ b/docs/4.x/data/google_binary_authorization_attestor_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_binary_authorization_attestor_iam_policy/
+---
+
+# data.google_binary_authorization_attestor_iam_policy
+
+`google_binary_authorization_attestor_iam_policy` represents the `google-beta_google_binary_authorization_attestor_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAttestor()`](#fn-withattestor)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_binary_authorization_attestor_iam_policy.new` injects a new `data_google-beta_google_binary_authorization_attestor_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_binary_authorization_attestor_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_binary_authorization_attestor_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_binary_authorization_attestor_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_binary_authorization_attestor_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `attestor` (`string`): Set the `attestor` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_binary_authorization_attestor_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_binary_authorization_attestor_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_binary_authorization_attestor_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `attestor` (`string`): Set the `attestor` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_binary_authorization_attestor_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAttestor
+
+```ts
+withAttestor()
+```
+
+`google-beta.string.withAttestor` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the attestor field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `attestor` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_cloud_run_service_iam_policy.md b/docs/4.x/data/google_cloud_run_service_iam_policy.md
new file mode 100644
index 0000000..997bb3b
--- /dev/null
+++ b/docs/4.x/data/google_cloud_run_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloud_run_service_iam_policy/
+---
+
+# data.google_cloud_run_service_iam_policy
+
+`google_cloud_run_service_iam_policy` represents the `google-beta_google_cloud_run_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withService()`](#fn-withservice)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloud_run_service_iam_policy.new` injects a new `data_google-beta_google_cloud_run_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloud_run_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloud_run_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloud_run_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloud_run_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloud_run_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_run_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloud_run_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_run_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withService
+
+```ts
+withService()
+```
+
+`google-beta.string.withService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service` field.
diff --git a/docs/4.x/data/google_cloud_run_v2_job_iam_policy.md b/docs/4.x/data/google_cloud_run_v2_job_iam_policy.md
new file mode 100644
index 0000000..790209a
--- /dev/null
+++ b/docs/4.x/data/google_cloud_run_v2_job_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloud_run_v2_job_iam_policy/
+---
+
+# data.google_cloud_run_v2_job_iam_policy
+
+`google_cloud_run_v2_job_iam_policy` represents the `google-beta_google_cloud_run_v2_job_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloud_run_v2_job_iam_policy.new` injects a new `data_google-beta_google_cloud_run_v2_job_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloud_run_v2_job_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloud_run_v2_job_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloud_run_v2_job_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloud_run_v2_job_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloud_run_v2_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_run_v2_job_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloud_run_v2_job_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_run_v2_job_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_cloud_run_v2_service_iam_policy.md b/docs/4.x/data/google_cloud_run_v2_service_iam_policy.md
new file mode 100644
index 0000000..477cb58
--- /dev/null
+++ b/docs/4.x/data/google_cloud_run_v2_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloud_run_v2_service_iam_policy/
+---
+
+# data.google_cloud_run_v2_service_iam_policy
+
+`google_cloud_run_v2_service_iam_policy` represents the `google-beta_google_cloud_run_v2_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloud_run_v2_service_iam_policy.new` injects a new `data_google-beta_google_cloud_run_v2_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloud_run_v2_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloud_run_v2_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloud_run_v2_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloud_run_v2_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloud_run_v2_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_run_v2_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloud_run_v2_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_run_v2_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_cloud_tasks_queue_iam_policy.md b/docs/4.x/data/google_cloud_tasks_queue_iam_policy.md
new file mode 100644
index 0000000..62bdb6e
--- /dev/null
+++ b/docs/4.x/data/google_cloud_tasks_queue_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloud_tasks_queue_iam_policy/
+---
+
+# data.google_cloud_tasks_queue_iam_policy
+
+`google_cloud_tasks_queue_iam_policy` represents the `google-beta_google_cloud_tasks_queue_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloud_tasks_queue_iam_policy.new` injects a new `data_google-beta_google_cloud_tasks_queue_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloud_tasks_queue_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloud_tasks_queue_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloud_tasks_queue_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloud_tasks_queue_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloud_tasks_queue_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloud_tasks_queue_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloud_tasks_queue_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloud_tasks_queue_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_cloudbuildv2_connection_iam_policy.md b/docs/4.x/data/google_cloudbuildv2_connection_iam_policy.md
new file mode 100644
index 0000000..bce06ed
--- /dev/null
+++ b/docs/4.x/data/google_cloudbuildv2_connection_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloudbuildv2_connection_iam_policy/
+---
+
+# data.google_cloudbuildv2_connection_iam_policy
+
+`google_cloudbuildv2_connection_iam_policy` represents the `google-beta_google_cloudbuildv2_connection_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloudbuildv2_connection_iam_policy.new` injects a new `data_google-beta_google_cloudbuildv2_connection_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloudbuildv2_connection_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloudbuildv2_connection_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloudbuildv2_connection_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloudbuildv2_connection_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloudbuildv2_connection_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudbuildv2_connection_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloudbuildv2_connection_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudbuildv2_connection_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_cloudfunctions2_function_iam_policy.md b/docs/4.x/data/google_cloudfunctions2_function_iam_policy.md
new file mode 100644
index 0000000..266fabf
--- /dev/null
+++ b/docs/4.x/data/google_cloudfunctions2_function_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloudfunctions2_function_iam_policy/
+---
+
+# data.google_cloudfunctions2_function_iam_policy
+
+`google_cloudfunctions2_function_iam_policy` represents the `google-beta_google_cloudfunctions2_function_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCloudFunction()`](#fn-withcloudfunction)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloudfunctions2_function_iam_policy.new` injects a new `data_google-beta_google_cloudfunctions2_function_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloudfunctions2_function_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloudfunctions2_function_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloudfunctions2_function_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloudfunctions2_function_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloudfunctions2_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudfunctions2_function_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloudfunctions2_function_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudfunctions2_function_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCloudFunction
+
+```ts
+withCloudFunction()
+```
+
+`google-beta.string.withCloudFunction` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the cloud_function field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `cloud_function` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_cloudfunctions_function_iam_policy.md b/docs/4.x/data/google_cloudfunctions_function_iam_policy.md
new file mode 100644
index 0000000..980da54
--- /dev/null
+++ b/docs/4.x/data/google_cloudfunctions_function_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloudfunctions_function_iam_policy/
+---
+
+# data.google_cloudfunctions_function_iam_policy
+
+`google_cloudfunctions_function_iam_policy` represents the `google-beta_google_cloudfunctions_function_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCloudFunction()`](#fn-withcloudfunction)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloudfunctions_function_iam_policy.new` injects a new `data_google-beta_google_cloudfunctions_function_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloudfunctions_function_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloudfunctions_function_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloudfunctions_function_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloudfunctions_function_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloudfunctions_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudfunctions_function_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloudfunctions_function_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudfunctions_function_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCloudFunction
+
+```ts
+withCloudFunction()
+```
+
+`google-beta.string.withCloudFunction` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the cloud_function field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `cloud_function` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_cloudiot_registry_iam_policy.md b/docs/4.x/data/google_cloudiot_registry_iam_policy.md
new file mode 100644
index 0000000..c06eaae
--- /dev/null
+++ b/docs/4.x/data/google_cloudiot_registry_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_cloudiot_registry_iam_policy/
+---
+
+# data.google_cloudiot_registry_iam_policy
+
+`google_cloudiot_registry_iam_policy` represents the `google-beta_google_cloudiot_registry_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_cloudiot_registry_iam_policy.new` injects a new `data_google-beta_google_cloudiot_registry_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_cloudiot_registry_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_cloudiot_registry_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_cloudiot_registry_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_cloudiot_registry_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_cloudiot_registry_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_cloudiot_registry_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_cloudiot_registry_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_cloudiot_registry_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_compute_backend_bucket_iam_policy.md b/docs/4.x/data/google_compute_backend_bucket_iam_policy.md
new file mode 100644
index 0000000..38d1100
--- /dev/null
+++ b/docs/4.x/data/google_compute_backend_bucket_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_compute_backend_bucket_iam_policy/
+---
+
+# data.google_compute_backend_bucket_iam_policy
+
+`google_compute_backend_bucket_iam_policy` represents the `google-beta_google_compute_backend_bucket_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_backend_bucket_iam_policy.new` injects a new `data_google-beta_google_compute_backend_bucket_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_backend_bucket_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_backend_bucket_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_backend_bucket_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_backend_bucket_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_backend_bucket_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_backend_bucket_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_backend_bucket_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_backend_bucket_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_compute_backend_service_iam_policy.md b/docs/4.x/data/google_compute_backend_service_iam_policy.md
new file mode 100644
index 0000000..b019dfb
--- /dev/null
+++ b/docs/4.x/data/google_compute_backend_service_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_compute_backend_service_iam_policy/
+---
+
+# data.google_compute_backend_service_iam_policy
+
+`google_compute_backend_service_iam_policy` represents the `google-beta_google_compute_backend_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_backend_service_iam_policy.new` injects a new `data_google-beta_google_compute_backend_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_backend_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_backend_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_backend_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_backend_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_backend_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_backend_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_compute_disk_iam_policy.md b/docs/4.x/data/google_compute_disk_iam_policy.md
new file mode 100644
index 0000000..5e51766
--- /dev/null
+++ b/docs/4.x/data/google_compute_disk_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_compute_disk_iam_policy/
+---
+
+# data.google_compute_disk_iam_policy
+
+`google_compute_disk_iam_policy` represents the `google-beta_google_compute_disk_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withZone()`](#fn-withzone)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_disk_iam_policy.new` injects a new `data_google-beta_google_compute_disk_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_disk_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_disk_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_disk_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_disk_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_disk_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_disk_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_disk_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withZone
+
+```ts
+withZone()
+```
+
+`google-beta.string.withZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `zone` field.
diff --git a/docs/4.x/data/google_compute_image_iam_policy.md b/docs/4.x/data/google_compute_image_iam_policy.md
new file mode 100644
index 0000000..fcd5ba4
--- /dev/null
+++ b/docs/4.x/data/google_compute_image_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_compute_image_iam_policy/
+---
+
+# data.google_compute_image_iam_policy
+
+`google_compute_image_iam_policy` represents the `google-beta_google_compute_image_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withImage()`](#fn-withimage)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_image_iam_policy.new` injects a new `data_google-beta_google_compute_image_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_image_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_image_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_image_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_image_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `image` (`string`): Set the `image` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_image_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_image_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_image_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `image` (`string`): Set the `image` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_image_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withImage
+
+```ts
+withImage()
+```
+
+`google-beta.string.withImage` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the image field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `image` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_compute_instance_iam_policy.md b/docs/4.x/data/google_compute_instance_iam_policy.md
new file mode 100644
index 0000000..5816254
--- /dev/null
+++ b/docs/4.x/data/google_compute_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_compute_instance_iam_policy/
+---
+
+# data.google_compute_instance_iam_policy
+
+`google_compute_instance_iam_policy` represents the `google-beta_google_compute_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstanceName()`](#fn-withinstancename)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withZone()`](#fn-withzone)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_instance_iam_policy.new` injects a new `data_google-beta_google_compute_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_instance_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_instance_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstanceName
+
+```ts
+withInstanceName()
+```
+
+`google-beta.string.withInstanceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance_name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withZone
+
+```ts
+withZone()
+```
+
+`google-beta.string.withZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `zone` field.
diff --git a/docs/4.x/data/google_compute_machine_image_iam_policy.md b/docs/4.x/data/google_compute_machine_image_iam_policy.md
new file mode 100644
index 0000000..f178b7f
--- /dev/null
+++ b/docs/4.x/data/google_compute_machine_image_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_compute_machine_image_iam_policy/
+---
+
+# data.google_compute_machine_image_iam_policy
+
+`google_compute_machine_image_iam_policy` represents the `google-beta_google_compute_machine_image_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withMachineImage()`](#fn-withmachineimage)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_machine_image_iam_policy.new` injects a new `data_google-beta_google_compute_machine_image_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_machine_image_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_machine_image_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_machine_image_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_machine_image_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `machine_image` (`string`): Set the `machine_image` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_machine_image_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_machine_image_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_machine_image_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `machine_image` (`string`): Set the `machine_image` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_machine_image_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withMachineImage
+
+```ts
+withMachineImage()
+```
+
+`google-beta.string.withMachineImage` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the machine_image field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `machine_image` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_compute_region_backend_service_iam_policy.md b/docs/4.x/data/google_compute_region_backend_service_iam_policy.md
new file mode 100644
index 0000000..4f32f6b
--- /dev/null
+++ b/docs/4.x/data/google_compute_region_backend_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_compute_region_backend_service_iam_policy/
+---
+
+# data.google_compute_region_backend_service_iam_policy
+
+`google_compute_region_backend_service_iam_policy` represents the `google-beta_google_compute_region_backend_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_region_backend_service_iam_policy.new` injects a new `data_google-beta_google_compute_region_backend_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_region_backend_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_region_backend_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_region_backend_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_region_backend_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_region_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_backend_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_region_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_region_backend_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_compute_region_disk_iam_policy.md b/docs/4.x/data/google_compute_region_disk_iam_policy.md
new file mode 100644
index 0000000..efe8363
--- /dev/null
+++ b/docs/4.x/data/google_compute_region_disk_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_compute_region_disk_iam_policy/
+---
+
+# data.google_compute_region_disk_iam_policy
+
+`google_compute_region_disk_iam_policy` represents the `google-beta_google_compute_region_disk_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_region_disk_iam_policy.new` injects a new `data_google-beta_google_compute_region_disk_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_region_disk_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_region_disk_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_region_disk_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_region_disk_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_region_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_region_disk_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_region_disk_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_region_disk_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_compute_snapshot_iam_policy.md b/docs/4.x/data/google_compute_snapshot_iam_policy.md
new file mode 100644
index 0000000..39842c7
--- /dev/null
+++ b/docs/4.x/data/google_compute_snapshot_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_compute_snapshot_iam_policy/
+---
+
+# data.google_compute_snapshot_iam_policy
+
+`google_compute_snapshot_iam_policy` represents the `google-beta_google_compute_snapshot_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_snapshot_iam_policy.new` injects a new `data_google-beta_google_compute_snapshot_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_snapshot_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_snapshot_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_snapshot_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_snapshot_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_snapshot_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_snapshot_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_snapshot_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_snapshot_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_compute_subnetwork_iam_policy.md b/docs/4.x/data/google_compute_subnetwork_iam_policy.md
new file mode 100644
index 0000000..e16f6e9
--- /dev/null
+++ b/docs/4.x/data/google_compute_subnetwork_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_compute_subnetwork_iam_policy/
+---
+
+# data.google_compute_subnetwork_iam_policy
+
+`google_compute_subnetwork_iam_policy` represents the `google-beta_google_compute_subnetwork_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withSubnetwork()`](#fn-withsubnetwork)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_compute_subnetwork_iam_policy.new` injects a new `data_google-beta_google_compute_subnetwork_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_compute_subnetwork_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_compute_subnetwork_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_compute_subnetwork_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_compute_subnetwork_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_compute_subnetwork_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_compute_subnetwork_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_compute_subnetwork_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_compute_subnetwork_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withSubnetwork
+
+```ts
+withSubnetwork()
+```
+
+`google-beta.string.withSubnetwork` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the subnetwork field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `subnetwork` field.
diff --git a/docs/4.x/data/google_container_analysis_note_iam_policy.md b/docs/4.x/data/google_container_analysis_note_iam_policy.md
new file mode 100644
index 0000000..8e73436
--- /dev/null
+++ b/docs/4.x/data/google_container_analysis_note_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_container_analysis_note_iam_policy/
+---
+
+# data.google_container_analysis_note_iam_policy
+
+`google_container_analysis_note_iam_policy` represents the `google-beta_google_container_analysis_note_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_container_analysis_note_iam_policy.new` injects a new `data_google-beta_google_container_analysis_note_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_container_analysis_note_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_container_analysis_note_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_container_analysis_note_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_container_analysis_note_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `note` (`string`): Set the `note` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_container_analysis_note_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the note field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_data_catalog_entry_group_iam_policy.md b/docs/4.x/data/google_data_catalog_entry_group_iam_policy.md
new file mode 100644
index 0000000..c4bb523
--- /dev/null
+++ b/docs/4.x/data/google_data_catalog_entry_group_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_data_catalog_entry_group_iam_policy/
+---
+
+# data.google_data_catalog_entry_group_iam_policy
+
+`google_data_catalog_entry_group_iam_policy` represents the `google-beta_google_data_catalog_entry_group_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withEntryGroup()`](#fn-withentrygroup)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_data_catalog_entry_group_iam_policy.new` injects a new `data_google-beta_google_data_catalog_entry_group_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_data_catalog_entry_group_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_entry_group_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_data_catalog_entry_group_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_data_catalog_entry_group_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `entry_group` (`string`): Set the `entry_group` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_data_catalog_entry_group_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_entry_group_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_data_catalog_entry_group_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `entry_group` (`string`): Set the `entry_group` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_entry_group_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withEntryGroup
+
+```ts
+withEntryGroup()
+```
+
+`google-beta.string.withEntryGroup` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the entry_group field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `entry_group` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_data_catalog_policy_tag_iam_policy.md b/docs/4.x/data/google_data_catalog_policy_tag_iam_policy.md
new file mode 100644
index 0000000..b75e873
--- /dev/null
+++ b/docs/4.x/data/google_data_catalog_policy_tag_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_data_catalog_policy_tag_iam_policy/
+---
+
+# data.google_data_catalog_policy_tag_iam_policy
+
+`google_data_catalog_policy_tag_iam_policy` represents the `google-beta_google_data_catalog_policy_tag_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withPolicyTag()`](#fn-withpolicytag)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_data_catalog_policy_tag_iam_policy.new` injects a new `data_google-beta_google_data_catalog_policy_tag_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_data_catalog_policy_tag_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_policy_tag_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_data_catalog_policy_tag_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_data_catalog_policy_tag_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_data_catalog_policy_tag_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_policy_tag_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_data_catalog_policy_tag_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_policy_tag_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withPolicyTag
+
+```ts
+withPolicyTag()
+```
+
+`google-beta.string.withPolicyTag` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the policy_tag field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `policy_tag` field.
diff --git a/docs/4.x/data/google_data_catalog_tag_template_iam_policy.md b/docs/4.x/data/google_data_catalog_tag_template_iam_policy.md
new file mode 100644
index 0000000..c612d46
--- /dev/null
+++ b/docs/4.x/data/google_data_catalog_tag_template_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_data_catalog_tag_template_iam_policy/
+---
+
+# data.google_data_catalog_tag_template_iam_policy
+
+`google_data_catalog_tag_template_iam_policy` represents the `google-beta_google_data_catalog_tag_template_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withTagTemplate()`](#fn-withtagtemplate)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_data_catalog_tag_template_iam_policy.new` injects a new `data_google-beta_google_data_catalog_tag_template_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_data_catalog_tag_template_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_tag_template_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_data_catalog_tag_template_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_data_catalog_tag_template_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+  - `tag_template` (`string`): Set the `tag_template` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_data_catalog_tag_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_tag_template_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_data_catalog_tag_template_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+  - `tag_template` (`string`): Set the `tag_template` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_tag_template_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withTagTemplate
+
+```ts
+withTagTemplate()
+```
+
+`google-beta.string.withTagTemplate` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the tag_template field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `tag_template` field.
diff --git a/docs/4.x/data/google_data_catalog_taxonomy_iam_policy.md b/docs/4.x/data/google_data_catalog_taxonomy_iam_policy.md
new file mode 100644
index 0000000..9616dc7
--- /dev/null
+++ b/docs/4.x/data/google_data_catalog_taxonomy_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_data_catalog_taxonomy_iam_policy/
+---
+
+# data.google_data_catalog_taxonomy_iam_policy
+
+`google_data_catalog_taxonomy_iam_policy` represents the `google-beta_google_data_catalog_taxonomy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withTaxonomy()`](#fn-withtaxonomy)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_data_catalog_taxonomy_iam_policy.new` injects a new `data_google-beta_google_data_catalog_taxonomy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_data_catalog_taxonomy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_data_catalog_taxonomy_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_data_catalog_taxonomy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_data_catalog_taxonomy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_data_catalog_taxonomy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_catalog_taxonomy_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_data_catalog_taxonomy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_catalog_taxonomy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withTaxonomy
+
+```ts
+withTaxonomy()
+```
+
+`google-beta.string.withTaxonomy` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the taxonomy field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `taxonomy` field.
diff --git a/docs/4.x/data/google_data_fusion_instance_iam_policy.md b/docs/4.x/data/google_data_fusion_instance_iam_policy.md
new file mode 100644
index 0000000..2af9be1
--- /dev/null
+++ b/docs/4.x/data/google_data_fusion_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_data_fusion_instance_iam_policy/
+---
+
+# data.google_data_fusion_instance_iam_policy
+
+`google_data_fusion_instance_iam_policy` represents the `google-beta_google_data_fusion_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_data_fusion_instance_iam_policy.new` injects a new `data_google-beta_google_data_fusion_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_data_fusion_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_data_fusion_instance_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_data_fusion_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_data_fusion_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_data_fusion_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_fusion_instance_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_data_fusion_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_data_fusion_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_dataplex_asset_iam_policy.md b/docs/4.x/data/google_dataplex_asset_iam_policy.md
new file mode 100644
index 0000000..9ca850b
--- /dev/null
+++ b/docs/4.x/data/google_dataplex_asset_iam_policy.md
@@ -0,0 +1,168 @@
+---
+permalink: /data/google_dataplex_asset_iam_policy/
+---
+
+# data.google_dataplex_asset_iam_policy
+
+`google_dataplex_asset_iam_policy` represents the `google-beta_google_dataplex_asset_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAsset()`](#fn-withasset)
+* [`fn withDataplexZone()`](#fn-withdataplexzone)
+* [`fn withLake()`](#fn-withlake)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataplex_asset_iam_policy.new` injects a new `data_google-beta_google_dataplex_asset_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataplex_asset_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataplex_asset_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataplex_asset_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataplex_asset_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `asset` (`string`): Set the `asset` field on the resulting data source block.
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.
+  - `lake` (`string`): Set the `lake` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataplex_asset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataplex_asset_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataplex_asset_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `asset` (`string`): Set the `asset` field on the resulting object.
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.
+  - `lake` (`string`): Set the `lake` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataplex_asset_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAsset
+
+```ts
+withAsset()
+```
+
+`google-beta.string.withAsset` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the asset field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `asset` field.
+
+
+### fn withDataplexZone
+
+```ts
+withDataplexZone()
+```
+
+`google-beta.string.withDataplexZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataplex_zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataplex_zone` field.
+
+
+### fn withLake
+
+```ts
+withLake()
+```
+
+`google-beta.string.withLake` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the lake field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `lake` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_dataplex_lake_iam_policy.md b/docs/4.x/data/google_dataplex_lake_iam_policy.md
new file mode 100644
index 0000000..9593638
--- /dev/null
+++ b/docs/4.x/data/google_dataplex_lake_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_dataplex_lake_iam_policy/
+---
+
+# data.google_dataplex_lake_iam_policy
+
+`google_dataplex_lake_iam_policy` represents the `google-beta_google_dataplex_lake_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLake()`](#fn-withlake)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataplex_lake_iam_policy.new` injects a new `data_google-beta_google_dataplex_lake_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataplex_lake_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataplex_lake_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataplex_lake_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataplex_lake_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `lake` (`string`): Set the `lake` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataplex_lake_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataplex_lake_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataplex_lake_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `lake` (`string`): Set the `lake` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataplex_lake_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLake
+
+```ts
+withLake()
+```
+
+`google-beta.string.withLake` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the lake field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `lake` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_dataplex_zone_iam_policy.md b/docs/4.x/data/google_dataplex_zone_iam_policy.md
new file mode 100644
index 0000000..6fe9167
--- /dev/null
+++ b/docs/4.x/data/google_dataplex_zone_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/google_dataplex_zone_iam_policy/
+---
+
+# data.google_dataplex_zone_iam_policy
+
+`google_dataplex_zone_iam_policy` represents the `google-beta_google_dataplex_zone_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataplexZone()`](#fn-withdataplexzone)
+* [`fn withLake()`](#fn-withlake)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataplex_zone_iam_policy.new` injects a new `data_google-beta_google_dataplex_zone_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataplex_zone_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataplex_zone_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataplex_zone_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataplex_zone_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.
+  - `lake` (`string`): Set the `lake` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataplex_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataplex_zone_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataplex_zone_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.
+  - `lake` (`string`): Set the `lake` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataplex_zone_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataplexZone
+
+```ts
+withDataplexZone()
+```
+
+`google-beta.string.withDataplexZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataplex_zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataplex_zone` field.
+
+
+### fn withLake
+
+```ts
+withLake()
+```
+
+`google-beta.string.withLake` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the lake field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `lake` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_dataproc_autoscaling_policy_iam_policy.md b/docs/4.x/data/google_dataproc_autoscaling_policy_iam_policy.md
new file mode 100644
index 0000000..bd44487
--- /dev/null
+++ b/docs/4.x/data/google_dataproc_autoscaling_policy_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_dataproc_autoscaling_policy_iam_policy/
+---
+
+# data.google_dataproc_autoscaling_policy_iam_policy
+
+`google_dataproc_autoscaling_policy_iam_policy` represents the `google-beta_google_dataproc_autoscaling_policy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withPolicyId()`](#fn-withpolicyid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataproc_autoscaling_policy_iam_policy.new` injects a new `data_google-beta_google_dataproc_autoscaling_policy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataproc_autoscaling_policy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataproc_autoscaling_policy_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataproc_autoscaling_policy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataproc_autoscaling_policy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `policy_id` (`string`): Set the `policy_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataproc_autoscaling_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_autoscaling_policy_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataproc_autoscaling_policy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `policy_id` (`string`): Set the `policy_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_autoscaling_policy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withPolicyId
+
+```ts
+withPolicyId()
+```
+
+`google-beta.string.withPolicyId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the policy_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `policy_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_dataproc_cluster_iam_policy.md b/docs/4.x/data/google_dataproc_cluster_iam_policy.md
new file mode 100644
index 0000000..7cb355e
--- /dev/null
+++ b/docs/4.x/data/google_dataproc_cluster_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_dataproc_cluster_iam_policy/
+---
+
+# data.google_dataproc_cluster_iam_policy
+
+`google_dataproc_cluster_iam_policy` represents the `google-beta_google_dataproc_cluster_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCluster()`](#fn-withcluster)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataproc_cluster_iam_policy.new` injects a new `data_google-beta_google_dataproc_cluster_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataproc_cluster_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataproc_cluster_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataproc_cluster_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataproc_cluster_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `cluster` (`string`): Set the `cluster` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataproc_cluster_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_cluster_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataproc_cluster_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `cluster` (`string`): Set the `cluster` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_cluster_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCluster
+
+```ts
+withCluster()
+```
+
+`google-beta.string.withCluster` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the cluster field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `cluster` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_dataproc_job_iam_policy.md b/docs/4.x/data/google_dataproc_job_iam_policy.md
new file mode 100644
index 0000000..d2b1968
--- /dev/null
+++ b/docs/4.x/data/google_dataproc_job_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_dataproc_job_iam_policy/
+---
+
+# data.google_dataproc_job_iam_policy
+
+`google_dataproc_job_iam_policy` represents the `google-beta_google_dataproc_job_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withJobId()`](#fn-withjobid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataproc_job_iam_policy.new` injects a new `data_google-beta_google_dataproc_job_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataproc_job_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataproc_job_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataproc_job_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataproc_job_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `job_id` (`string`): Set the `job_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataproc_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_job_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataproc_job_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `job_id` (`string`): Set the `job_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_job_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withJobId
+
+```ts
+withJobId()
+```
+
+`google-beta.string.withJobId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the job_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `job_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_dataproc_metastore_federation_iam_policy.md b/docs/4.x/data/google_dataproc_metastore_federation_iam_policy.md
new file mode 100644
index 0000000..958ba00
--- /dev/null
+++ b/docs/4.x/data/google_dataproc_metastore_federation_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_dataproc_metastore_federation_iam_policy/
+---
+
+# data.google_dataproc_metastore_federation_iam_policy
+
+`google_dataproc_metastore_federation_iam_policy` represents the `google-beta_google_dataproc_metastore_federation_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withFederationId()`](#fn-withfederationid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataproc_metastore_federation_iam_policy.new` injects a new `data_google-beta_google_dataproc_metastore_federation_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataproc_metastore_federation_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataproc_metastore_federation_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataproc_metastore_federation_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataproc_metastore_federation_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `federation_id` (`string`): Set the `federation_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataproc_metastore_federation_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_metastore_federation_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataproc_metastore_federation_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `federation_id` (`string`): Set the `federation_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_metastore_federation_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withFederationId
+
+```ts
+withFederationId()
+```
+
+`google-beta.string.withFederationId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the federation_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `federation_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_dataproc_metastore_service_iam_policy.md b/docs/4.x/data/google_dataproc_metastore_service_iam_policy.md
new file mode 100644
index 0000000..31c8a38
--- /dev/null
+++ b/docs/4.x/data/google_dataproc_metastore_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_dataproc_metastore_service_iam_policy/
+---
+
+# data.google_dataproc_metastore_service_iam_policy
+
+`google_dataproc_metastore_service_iam_policy` represents the `google-beta_google_dataproc_metastore_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withServiceId()`](#fn-withserviceid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dataproc_metastore_service_iam_policy.new` injects a new `data_google-beta_google_dataproc_metastore_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dataproc_metastore_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dataproc_metastore_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dataproc_metastore_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dataproc_metastore_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service_id` (`string`): Set the `service_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dataproc_metastore_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dataproc_metastore_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dataproc_metastore_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service_id` (`string`): Set the `service_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dataproc_metastore_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withServiceId
+
+```ts
+withServiceId()
+```
+
+`google-beta.string.withServiceId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_id` field.
diff --git a/docs/4.x/data/google_dns_managed_zone_iam_policy.md b/docs/4.x/data/google_dns_managed_zone_iam_policy.md
new file mode 100644
index 0000000..43d71cd
--- /dev/null
+++ b/docs/4.x/data/google_dns_managed_zone_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_dns_managed_zone_iam_policy/
+---
+
+# data.google_dns_managed_zone_iam_policy
+
+`google_dns_managed_zone_iam_policy` represents the `google-beta_google_dns_managed_zone_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withManagedZone()`](#fn-withmanagedzone)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_dns_managed_zone_iam_policy.new` injects a new `data_google-beta_google_dns_managed_zone_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_dns_managed_zone_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_dns_managed_zone_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_dns_managed_zone_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_dns_managed_zone_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_dns_managed_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_dns_managed_zone_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_dns_managed_zone_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_dns_managed_zone_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withManagedZone
+
+```ts
+withManagedZone()
+```
+
+`google-beta.string.withManagedZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the managed_zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `managed_zone` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_endpoints_service_consumers_iam_policy.md b/docs/4.x/data/google_endpoints_service_consumers_iam_policy.md
new file mode 100644
index 0000000..5813452
--- /dev/null
+++ b/docs/4.x/data/google_endpoints_service_consumers_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_endpoints_service_consumers_iam_policy/
+---
+
+# data.google_endpoints_service_consumers_iam_policy
+
+`google_endpoints_service_consumers_iam_policy` represents the `google-beta_google_endpoints_service_consumers_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConsumerProject()`](#fn-withconsumerproject)
+* [`fn withServiceName()`](#fn-withservicename)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_endpoints_service_consumers_iam_policy.new` injects a new `data_google-beta_google_endpoints_service_consumers_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_endpoints_service_consumers_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_endpoints_service_consumers_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_endpoints_service_consumers_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_endpoints_service_consumers_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting data source block.
+  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_endpoints_service_consumers_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_endpoints_service_consumers_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_endpoints_service_consumers_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting object.
+  - `service_name` (`string`): Set the `service_name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_endpoints_service_consumers_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConsumerProject
+
+```ts
+withConsumerProject()
+```
+
+`google-beta.string.withConsumerProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the consumer_project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `consumer_project` field.
+
+
+### fn withServiceName
+
+```ts
+withServiceName()
+```
+
+`google-beta.string.withServiceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_name` field.
diff --git a/docs/4.x/data/google_endpoints_service_iam_policy.md b/docs/4.x/data/google_endpoints_service_iam_policy.md
new file mode 100644
index 0000000..e14d1a0
--- /dev/null
+++ b/docs/4.x/data/google_endpoints_service_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_endpoints_service_iam_policy/
+---
+
+# data.google_endpoints_service_iam_policy
+
+`google_endpoints_service_iam_policy` represents the `google-beta_google_endpoints_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withServiceName()`](#fn-withservicename)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_endpoints_service_iam_policy.new` injects a new `data_google-beta_google_endpoints_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_endpoints_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_endpoints_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_endpoints_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_endpoints_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_endpoints_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_endpoints_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_endpoints_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `service_name` (`string`): Set the `service_name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_endpoints_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withServiceName
+
+```ts
+withServiceName()
+```
+
+`google-beta.string.withServiceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_name` field.
diff --git a/docs/4.x/data/google_folder_iam_policy.md b/docs/4.x/data/google_folder_iam_policy.md
new file mode 100644
index 0000000..cc64977
--- /dev/null
+++ b/docs/4.x/data/google_folder_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_folder_iam_policy/
+---
+
+# data.google_folder_iam_policy
+
+`google_folder_iam_policy` represents the `google-beta_google_folder_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withFolder()`](#fn-withfolder)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_folder_iam_policy.new` injects a new `data_google-beta_google_folder_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_folder_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_folder_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_folder_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_folder_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `folder` (`string`): Set the `folder` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_folder_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_folder_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_folder_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `folder` (`string`): Set the `folder` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_folder_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withFolder
+
+```ts
+withFolder()
+```
+
+`google-beta.string.withFolder` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the folder field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `folder` field.
diff --git a/docs/4.x/data/google_gke_backup_backup_plan_iam_policy.md b/docs/4.x/data/google_gke_backup_backup_plan_iam_policy.md
new file mode 100644
index 0000000..4f132ea
--- /dev/null
+++ b/docs/4.x/data/google_gke_backup_backup_plan_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_gke_backup_backup_plan_iam_policy/
+---
+
+# data.google_gke_backup_backup_plan_iam_policy
+
+`google_gke_backup_backup_plan_iam_policy` represents the `google-beta_google_gke_backup_backup_plan_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_gke_backup_backup_plan_iam_policy.new` injects a new `data_google-beta_google_gke_backup_backup_plan_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_gke_backup_backup_plan_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_gke_backup_backup_plan_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_gke_backup_backup_plan_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_gke_backup_backup_plan_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_gke_backup_backup_plan_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_backup_backup_plan_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_gke_backup_backup_plan_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_gke_backup_backup_plan_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_gke_hub_membership_iam_policy.md b/docs/4.x/data/google_gke_hub_membership_iam_policy.md
new file mode 100644
index 0000000..4466301
--- /dev/null
+++ b/docs/4.x/data/google_gke_hub_membership_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_gke_hub_membership_iam_policy/
+---
+
+# data.google_gke_hub_membership_iam_policy
+
+`google_gke_hub_membership_iam_policy` represents the `google-beta_google_gke_hub_membership_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withMembershipId()`](#fn-withmembershipid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_gke_hub_membership_iam_policy.new` injects a new `data_google-beta_google_gke_hub_membership_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_gke_hub_membership_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_gke_hub_membership_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_gke_hub_membership_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_gke_hub_membership_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `membership_id` (`string`): Set the `membership_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_gke_hub_membership_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_membership_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_gke_hub_membership_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `membership_id` (`string`): Set the `membership_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_gke_hub_membership_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withMembershipId
+
+```ts
+withMembershipId()
+```
+
+`google-beta.string.withMembershipId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the membership_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `membership_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_healthcare_consent_store_iam_policy.md b/docs/4.x/data/google_healthcare_consent_store_iam_policy.md
new file mode 100644
index 0000000..df59b11
--- /dev/null
+++ b/docs/4.x/data/google_healthcare_consent_store_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_healthcare_consent_store_iam_policy/
+---
+
+# data.google_healthcare_consent_store_iam_policy
+
+`google_healthcare_consent_store_iam_policy` represents the `google-beta_google_healthcare_consent_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConsentStoreId()`](#fn-withconsentstoreid)
+* [`fn withDataset()`](#fn-withdataset)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_healthcare_consent_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_consent_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_healthcare_consent_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_healthcare_consent_store_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_healthcare_consent_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_healthcare_consent_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting data source block.
+  - `dataset` (`string`): Set the `dataset` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_healthcare_consent_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_consent_store_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_healthcare_consent_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting object.
+  - `dataset` (`string`): Set the `dataset` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_consent_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConsentStoreId
+
+```ts
+withConsentStoreId()
+```
+
+`google-beta.string.withConsentStoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the consent_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `consent_store_id` field.
+
+
+### fn withDataset
+
+```ts
+withDataset()
+```
+
+`google-beta.string.withDataset` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset` field.
diff --git a/docs/4.x/data/google_healthcare_dataset_iam_policy.md b/docs/4.x/data/google_healthcare_dataset_iam_policy.md
new file mode 100644
index 0000000..fc5bc4f
--- /dev/null
+++ b/docs/4.x/data/google_healthcare_dataset_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_healthcare_dataset_iam_policy/
+---
+
+# data.google_healthcare_dataset_iam_policy
+
+`google_healthcare_dataset_iam_policy` represents the `google-beta_google_healthcare_dataset_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatasetId()`](#fn-withdatasetid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_healthcare_dataset_iam_policy.new` injects a new `data_google-beta_google_healthcare_dataset_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_healthcare_dataset_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_healthcare_dataset_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_healthcare_dataset_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_healthcare_dataset_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_healthcare_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_dataset_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_healthcare_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_dataset_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatasetId
+
+```ts
+withDatasetId()
+```
+
+`google-beta.string.withDatasetId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset_id` field.
diff --git a/docs/4.x/data/google_healthcare_dicom_store_iam_policy.md b/docs/4.x/data/google_healthcare_dicom_store_iam_policy.md
new file mode 100644
index 0000000..be81faf
--- /dev/null
+++ b/docs/4.x/data/google_healthcare_dicom_store_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_healthcare_dicom_store_iam_policy/
+---
+
+# data.google_healthcare_dicom_store_iam_policy
+
+`google_healthcare_dicom_store_iam_policy` represents the `google-beta_google_healthcare_dicom_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDicomStoreId()`](#fn-withdicomstoreid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_healthcare_dicom_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_dicom_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_healthcare_dicom_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_healthcare_dicom_store_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_healthcare_dicom_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_healthcare_dicom_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_healthcare_dicom_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_dicom_store_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_healthcare_dicom_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_dicom_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDicomStoreId
+
+```ts
+withDicomStoreId()
+```
+
+`google-beta.string.withDicomStoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dicom_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dicom_store_id` field.
diff --git a/docs/4.x/data/google_healthcare_fhir_store_iam_policy.md b/docs/4.x/data/google_healthcare_fhir_store_iam_policy.md
new file mode 100644
index 0000000..030aebc
--- /dev/null
+++ b/docs/4.x/data/google_healthcare_fhir_store_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_healthcare_fhir_store_iam_policy/
+---
+
+# data.google_healthcare_fhir_store_iam_policy
+
+`google_healthcare_fhir_store_iam_policy` represents the `google-beta_google_healthcare_fhir_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withFhirStoreId()`](#fn-withfhirstoreid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_healthcare_fhir_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_fhir_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_healthcare_fhir_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_healthcare_fhir_store_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_healthcare_fhir_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_healthcare_fhir_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_healthcare_fhir_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_fhir_store_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_healthcare_fhir_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_fhir_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withFhirStoreId
+
+```ts
+withFhirStoreId()
+```
+
+`google-beta.string.withFhirStoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the fhir_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `fhir_store_id` field.
diff --git a/docs/4.x/data/google_healthcare_hl7_v2_store_iam_policy.md b/docs/4.x/data/google_healthcare_hl7_v2_store_iam_policy.md
new file mode 100644
index 0000000..b6a3dc9
--- /dev/null
+++ b/docs/4.x/data/google_healthcare_hl7_v2_store_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_healthcare_hl7_v2_store_iam_policy/
+---
+
+# data.google_healthcare_hl7_v2_store_iam_policy
+
+`google_healthcare_hl7_v2_store_iam_policy` represents the `google-beta_google_healthcare_hl7_v2_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withHl7V2StoreId()`](#fn-withhl7v2storeid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_healthcare_hl7_v2_store_iam_policy.new` injects a new `data_google-beta_google_healthcare_hl7_v2_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_healthcare_hl7_v2_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_healthcare_hl7_v2_store_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_healthcare_hl7_v2_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_healthcare_hl7_v2_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_healthcare_hl7_v2_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_healthcare_hl7_v2_store_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_healthcare_hl7_v2_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_healthcare_hl7_v2_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withHl7V2StoreId
+
+```ts
+withHl7V2StoreId()
+```
+
+`google-beta.string.withHl7V2StoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the hl7_v2_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `hl7_v2_store_id` field.
diff --git a/docs/4.x/data/google_iap_app_engine_service_iam_policy.md b/docs/4.x/data/google_iap_app_engine_service_iam_policy.md
new file mode 100644
index 0000000..5bf2196
--- /dev/null
+++ b/docs/4.x/data/google_iap_app_engine_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_iap_app_engine_service_iam_policy/
+---
+
+# data.google_iap_app_engine_service_iam_policy
+
+`google_iap_app_engine_service_iam_policy` represents the `google-beta_google_iap_app_engine_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAppId()`](#fn-withappid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withService()`](#fn-withservice)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_app_engine_service_iam_policy.new` injects a new `data_google-beta_google_iap_app_engine_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_app_engine_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_app_engine_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_app_engine_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_app_engine_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_app_engine_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_app_engine_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_app_engine_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `app_id` (`string`): Set the `app_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_app_engine_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAppId
+
+```ts
+withAppId()
+```
+
+`google-beta.string.withAppId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the app_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `app_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withService
+
+```ts
+withService()
+```
+
+`google-beta.string.withService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service` field.
diff --git a/docs/4.x/data/google_iap_app_engine_version_iam_policy.md b/docs/4.x/data/google_iap_app_engine_version_iam_policy.md
new file mode 100644
index 0000000..9f21da6
--- /dev/null
+++ b/docs/4.x/data/google_iap_app_engine_version_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/google_iap_app_engine_version_iam_policy/
+---
+
+# data.google_iap_app_engine_version_iam_policy
+
+`google_iap_app_engine_version_iam_policy` represents the `google-beta_google_iap_app_engine_version_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAppId()`](#fn-withappid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withService()`](#fn-withservice)
+* [`fn withVersionId()`](#fn-withversionid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_app_engine_version_iam_policy.new` injects a new `data_google-beta_google_iap_app_engine_version_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_app_engine_version_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_app_engine_version_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_app_engine_version_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_app_engine_version_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting data source block.
+  - `version_id` (`string`): Set the `version_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_app_engine_version_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_app_engine_version_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_app_engine_version_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `app_id` (`string`): Set the `app_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting object.
+  - `version_id` (`string`): Set the `version_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_app_engine_version_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAppId
+
+```ts
+withAppId()
+```
+
+`google-beta.string.withAppId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the app_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `app_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withService
+
+```ts
+withService()
+```
+
+`google-beta.string.withService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service` field.
+
+
+### fn withVersionId
+
+```ts
+withVersionId()
+```
+
+`google-beta.string.withVersionId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the version_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `version_id` field.
diff --git a/docs/4.x/data/google_iap_tunnel_iam_policy.md b/docs/4.x/data/google_iap_tunnel_iam_policy.md
new file mode 100644
index 0000000..48b7df7
--- /dev/null
+++ b/docs/4.x/data/google_iap_tunnel_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_iap_tunnel_iam_policy/
+---
+
+# data.google_iap_tunnel_iam_policy
+
+`google_iap_tunnel_iam_policy` represents the `google-beta_google_iap_tunnel_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_tunnel_iam_policy.new` injects a new `data_google-beta_google_iap_tunnel_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_tunnel_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_tunnel_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_tunnel_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_tunnel_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_tunnel_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_tunnel_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_tunnel_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_tunnel_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_iap_tunnel_instance_iam_policy.md b/docs/4.x/data/google_iap_tunnel_instance_iam_policy.md
new file mode 100644
index 0000000..dc79321
--- /dev/null
+++ b/docs/4.x/data/google_iap_tunnel_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_iap_tunnel_instance_iam_policy/
+---
+
+# data.google_iap_tunnel_instance_iam_policy
+
+`google_iap_tunnel_instance_iam_policy` represents the `google-beta_google_iap_tunnel_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withZone()`](#fn-withzone)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_tunnel_instance_iam_policy.new` injects a new `data_google-beta_google_iap_tunnel_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_tunnel_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_tunnel_instance_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_tunnel_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_tunnel_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_tunnel_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_tunnel_instance_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_tunnel_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_tunnel_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withZone
+
+```ts
+withZone()
+```
+
+`google-beta.string.withZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `zone` field.
diff --git a/docs/4.x/data/google_iap_web_backend_service_iam_policy.md b/docs/4.x/data/google_iap_web_backend_service_iam_policy.md
new file mode 100644
index 0000000..e847f03
--- /dev/null
+++ b/docs/4.x/data/google_iap_web_backend_service_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_iap_web_backend_service_iam_policy/
+---
+
+# data.google_iap_web_backend_service_iam_policy
+
+`google_iap_web_backend_service_iam_policy` represents the `google-beta_google_iap_web_backend_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withWebBackendService()`](#fn-withwebbackendservice)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_web_backend_service_iam_policy.new` injects a new `data_google-beta_google_iap_web_backend_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_web_backend_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_web_backend_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_web_backend_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_web_backend_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_web_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_backend_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_web_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_backend_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withWebBackendService
+
+```ts
+withWebBackendService()
+```
+
+`google-beta.string.withWebBackendService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the web_backend_service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `web_backend_service` field.
diff --git a/docs/4.x/data/google_iap_web_iam_policy.md b/docs/4.x/data/google_iap_web_iam_policy.md
new file mode 100644
index 0000000..a095774
--- /dev/null
+++ b/docs/4.x/data/google_iap_web_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_iap_web_iam_policy/
+---
+
+# data.google_iap_web_iam_policy
+
+`google_iap_web_iam_policy` represents the `google-beta_google_iap_web_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_web_iam_policy.new` injects a new `data_google-beta_google_iap_web_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_web_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_web_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_web_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_web_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_web_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_web_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_iap_web_type_app_engine_iam_policy.md b/docs/4.x/data/google_iap_web_type_app_engine_iam_policy.md
new file mode 100644
index 0000000..f600c7a
--- /dev/null
+++ b/docs/4.x/data/google_iap_web_type_app_engine_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_iap_web_type_app_engine_iam_policy/
+---
+
+# data.google_iap_web_type_app_engine_iam_policy
+
+`google_iap_web_type_app_engine_iam_policy` represents the `google-beta_google_iap_web_type_app_engine_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAppId()`](#fn-withappid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_web_type_app_engine_iam_policy.new` injects a new `data_google-beta_google_iap_web_type_app_engine_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_web_type_app_engine_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_web_type_app_engine_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_web_type_app_engine_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_web_type_app_engine_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_web_type_app_engine_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_type_app_engine_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_web_type_app_engine_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `app_id` (`string`): Set the `app_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_type_app_engine_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAppId
+
+```ts
+withAppId()
+```
+
+`google-beta.string.withAppId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the app_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `app_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_iap_web_type_compute_iam_policy.md b/docs/4.x/data/google_iap_web_type_compute_iam_policy.md
new file mode 100644
index 0000000..f1866fd
--- /dev/null
+++ b/docs/4.x/data/google_iap_web_type_compute_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_iap_web_type_compute_iam_policy/
+---
+
+# data.google_iap_web_type_compute_iam_policy
+
+`google_iap_web_type_compute_iam_policy` represents the `google-beta_google_iap_web_type_compute_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_iap_web_type_compute_iam_policy.new` injects a new `data_google-beta_google_iap_web_type_compute_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_iap_web_type_compute_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_iap_web_type_compute_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_iap_web_type_compute_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_iap_web_type_compute_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_iap_web_type_compute_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_iap_web_type_compute_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_iap_web_type_compute_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_iap_web_type_compute_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_kms_crypto_key_iam_policy.md b/docs/4.x/data/google_kms_crypto_key_iam_policy.md
new file mode 100644
index 0000000..470c69d
--- /dev/null
+++ b/docs/4.x/data/google_kms_crypto_key_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_kms_crypto_key_iam_policy/
+---
+
+# data.google_kms_crypto_key_iam_policy
+
+`google_kms_crypto_key_iam_policy` represents the `google-beta_google_kms_crypto_key_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCryptoKeyId()`](#fn-withcryptokeyid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_kms_crypto_key_iam_policy.new` injects a new `data_google-beta_google_kms_crypto_key_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_kms_crypto_key_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_kms_crypto_key_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_kms_crypto_key_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_kms_crypto_key_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_kms_crypto_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_kms_crypto_key_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_kms_crypto_key_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_kms_crypto_key_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCryptoKeyId
+
+```ts
+withCryptoKeyId()
+```
+
+`google-beta.string.withCryptoKeyId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the crypto_key_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `crypto_key_id` field.
diff --git a/docs/4.x/data/google_kms_key_ring_iam_policy.md b/docs/4.x/data/google_kms_key_ring_iam_policy.md
new file mode 100644
index 0000000..2bbe5a9
--- /dev/null
+++ b/docs/4.x/data/google_kms_key_ring_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_kms_key_ring_iam_policy/
+---
+
+# data.google_kms_key_ring_iam_policy
+
+`google_kms_key_ring_iam_policy` represents the `google-beta_google_kms_key_ring_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withKeyRingId()`](#fn-withkeyringid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_kms_key_ring_iam_policy.new` injects a new `data_google-beta_google_kms_key_ring_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_kms_key_ring_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_kms_key_ring_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_kms_key_ring_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_kms_key_ring_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_kms_key_ring_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_kms_key_ring_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_kms_key_ring_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_kms_key_ring_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withKeyRingId
+
+```ts
+withKeyRingId()
+```
+
+`google-beta.string.withKeyRingId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the key_ring_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `key_ring_id` field.
diff --git a/docs/4.x/data/google_notebooks_instance_iam_policy.md b/docs/4.x/data/google_notebooks_instance_iam_policy.md
new file mode 100644
index 0000000..2638302
--- /dev/null
+++ b/docs/4.x/data/google_notebooks_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_notebooks_instance_iam_policy/
+---
+
+# data.google_notebooks_instance_iam_policy
+
+`google_notebooks_instance_iam_policy` represents the `google-beta_google_notebooks_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstanceName()`](#fn-withinstancename)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_notebooks_instance_iam_policy.new` injects a new `data_google-beta_google_notebooks_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_notebooks_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_notebooks_instance_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_notebooks_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_notebooks_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_notebooks_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_notebooks_instance_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_notebooks_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_notebooks_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstanceName
+
+```ts
+withInstanceName()
+```
+
+`google-beta.string.withInstanceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance_name` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_notebooks_runtime_iam_policy.md b/docs/4.x/data/google_notebooks_runtime_iam_policy.md
new file mode 100644
index 0000000..48b1bbd
--- /dev/null
+++ b/docs/4.x/data/google_notebooks_runtime_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_notebooks_runtime_iam_policy/
+---
+
+# data.google_notebooks_runtime_iam_policy
+
+`google_notebooks_runtime_iam_policy` represents the `google-beta_google_notebooks_runtime_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRuntimeName()`](#fn-withruntimename)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_notebooks_runtime_iam_policy.new` injects a new `data_google-beta_google_notebooks_runtime_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_notebooks_runtime_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_notebooks_runtime_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_notebooks_runtime_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_notebooks_runtime_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_notebooks_runtime_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_notebooks_runtime_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_notebooks_runtime_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_notebooks_runtime_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRuntimeName
+
+```ts
+withRuntimeName()
+```
+
+`google-beta.string.withRuntimeName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the runtime_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `runtime_name` field.
diff --git a/docs/4.x/data/google_organization_iam_policy.md b/docs/4.x/data/google_organization_iam_policy.md
new file mode 100644
index 0000000..9fb2998
--- /dev/null
+++ b/docs/4.x/data/google_organization_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_organization_iam_policy/
+---
+
+# data.google_organization_iam_policy
+
+`google_organization_iam_policy` represents the `google-beta_google_organization_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withOrgId()`](#fn-withorgid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_organization_iam_policy.new` injects a new `data_google-beta_google_organization_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_organization_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_organization_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_organization_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_organization_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_organization_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_organization_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_organization_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_organization_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withOrgId
+
+```ts
+withOrgId()
+```
+
+`google-beta.string.withOrgId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the org_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `org_id` field.
diff --git a/docs/4.x/data/google_privateca_ca_pool_iam_policy.md b/docs/4.x/data/google_privateca_ca_pool_iam_policy.md
new file mode 100644
index 0000000..6dce72a
--- /dev/null
+++ b/docs/4.x/data/google_privateca_ca_pool_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_privateca_ca_pool_iam_policy/
+---
+
+# data.google_privateca_ca_pool_iam_policy
+
+`google_privateca_ca_pool_iam_policy` represents the `google-beta_google_privateca_ca_pool_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCaPool()`](#fn-withcapool)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_privateca_ca_pool_iam_policy.new` injects a new `data_google-beta_google_privateca_ca_pool_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_privateca_ca_pool_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_privateca_ca_pool_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_privateca_ca_pool_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_privateca_ca_pool_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_privateca_ca_pool_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_privateca_ca_pool_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_privateca_ca_pool_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_privateca_ca_pool_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCaPool
+
+```ts
+withCaPool()
+```
+
+`google-beta.string.withCaPool` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the ca_pool field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `ca_pool` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_privateca_certificate_template_iam_policy.md b/docs/4.x/data/google_privateca_certificate_template_iam_policy.md
new file mode 100644
index 0000000..365ef0b
--- /dev/null
+++ b/docs/4.x/data/google_privateca_certificate_template_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_privateca_certificate_template_iam_policy/
+---
+
+# data.google_privateca_certificate_template_iam_policy
+
+`google_privateca_certificate_template_iam_policy` represents the `google-beta_google_privateca_certificate_template_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCertificateTemplate()`](#fn-withcertificatetemplate)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_privateca_certificate_template_iam_policy.new` injects a new `data_google-beta_google_privateca_certificate_template_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_privateca_certificate_template_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_privateca_certificate_template_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_privateca_certificate_template_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_privateca_certificate_template_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_privateca_certificate_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_privateca_certificate_template_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_privateca_certificate_template_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_privateca_certificate_template_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCertificateTemplate
+
+```ts
+withCertificateTemplate()
+```
+
+`google-beta.string.withCertificateTemplate` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the certificate_template field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `certificate_template` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_project_iam_policy.md b/docs/4.x/data/google_project_iam_policy.md
new file mode 100644
index 0000000..6e09d97
--- /dev/null
+++ b/docs/4.x/data/google_project_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_project_iam_policy/
+---
+
+# data.google_project_iam_policy
+
+`google_project_iam_policy` represents the `google-beta_google_project_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_project_iam_policy.new` injects a new `data_google-beta_google_project_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_project_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_project_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_project_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_project_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_project_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_project_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_project_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_project_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_pubsub_subscription_iam_policy.md b/docs/4.x/data/google_pubsub_subscription_iam_policy.md
new file mode 100644
index 0000000..4c3223a
--- /dev/null
+++ b/docs/4.x/data/google_pubsub_subscription_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_pubsub_subscription_iam_policy/
+---
+
+# data.google_pubsub_subscription_iam_policy
+
+`google_pubsub_subscription_iam_policy` represents the `google-beta_google_pubsub_subscription_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withSubscription()`](#fn-withsubscription)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_pubsub_subscription_iam_policy.new` injects a new `data_google-beta_google_pubsub_subscription_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_pubsub_subscription_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_pubsub_subscription_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_pubsub_subscription_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_pubsub_subscription_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `subscription` (`string`): Set the `subscription` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_pubsub_subscription_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_pubsub_subscription_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_pubsub_subscription_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `subscription` (`string`): Set the `subscription` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_pubsub_subscription_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withSubscription
+
+```ts
+withSubscription()
+```
+
+`google-beta.string.withSubscription` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the subscription field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `subscription` field.
diff --git a/docs/4.x/data/google_pubsub_topic_iam_policy.md b/docs/4.x/data/google_pubsub_topic_iam_policy.md
new file mode 100644
index 0000000..7ae0c0d
--- /dev/null
+++ b/docs/4.x/data/google_pubsub_topic_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_pubsub_topic_iam_policy/
+---
+
+# data.google_pubsub_topic_iam_policy
+
+`google_pubsub_topic_iam_policy` represents the `google-beta_google_pubsub_topic_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTopic()`](#fn-withtopic)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_pubsub_topic_iam_policy.new` injects a new `data_google-beta_google_pubsub_topic_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_pubsub_topic_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_pubsub_topic_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_pubsub_topic_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_pubsub_topic_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `topic` (`string`): Set the `topic` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_pubsub_topic_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_pubsub_topic_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_pubsub_topic_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `topic` (`string`): Set the `topic` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_pubsub_topic_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTopic
+
+```ts
+withTopic()
+```
+
+`google-beta.string.withTopic` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the topic field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `topic` field.
diff --git a/docs/4.x/data/google_runtimeconfig_config_iam_policy.md b/docs/4.x/data/google_runtimeconfig_config_iam_policy.md
new file mode 100644
index 0000000..1845a31
--- /dev/null
+++ b/docs/4.x/data/google_runtimeconfig_config_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_runtimeconfig_config_iam_policy/
+---
+
+# data.google_runtimeconfig_config_iam_policy
+
+`google_runtimeconfig_config_iam_policy` represents the `google-beta_google_runtimeconfig_config_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConfig()`](#fn-withconfig)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_runtimeconfig_config_iam_policy.new` injects a new `data_google-beta_google_runtimeconfig_config_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_runtimeconfig_config_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_runtimeconfig_config_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_runtimeconfig_config_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_runtimeconfig_config_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `config` (`string`): Set the `config` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_runtimeconfig_config_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_runtimeconfig_config_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_runtimeconfig_config_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `config` (`string`): Set the `config` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_runtimeconfig_config_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConfig
+
+```ts
+withConfig()
+```
+
+`google-beta.string.withConfig` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the config field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `config` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_scc_source_iam_policy.md b/docs/4.x/data/google_scc_source_iam_policy.md
new file mode 100644
index 0000000..4cac509
--- /dev/null
+++ b/docs/4.x/data/google_scc_source_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_scc_source_iam_policy/
+---
+
+# data.google_scc_source_iam_policy
+
+`google_scc_source_iam_policy` represents the `google-beta_google_scc_source_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withOrganization()`](#fn-withorganization)
+* [`fn withSource()`](#fn-withsource)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_scc_source_iam_policy.new` injects a new `data_google-beta_google_scc_source_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_scc_source_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_scc_source_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_scc_source_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_scc_source_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `organization` (`string`): Set the `organization` field on the resulting data source block.
+  - `source` (`string`): Set the `source` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_scc_source_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_scc_source_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_scc_source_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `organization` (`string`): Set the `organization` field on the resulting object.
+  - `source` (`string`): Set the `source` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_scc_source_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withOrganization
+
+```ts
+withOrganization()
+```
+
+`google-beta.string.withOrganization` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the organization field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `organization` field.
+
+
+### fn withSource
+
+```ts
+withSource()
+```
+
+`google-beta.string.withSource` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the source field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `source` field.
diff --git a/docs/4.x/data/google_secret_manager_secret_iam_policy.md b/docs/4.x/data/google_secret_manager_secret_iam_policy.md
new file mode 100644
index 0000000..00aecfb
--- /dev/null
+++ b/docs/4.x/data/google_secret_manager_secret_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_secret_manager_secret_iam_policy/
+---
+
+# data.google_secret_manager_secret_iam_policy
+
+`google_secret_manager_secret_iam_policy` represents the `google-beta_google_secret_manager_secret_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withSecretId()`](#fn-withsecretid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_secret_manager_secret_iam_policy.new` injects a new `data_google-beta_google_secret_manager_secret_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_secret_manager_secret_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_secret_manager_secret_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_secret_manager_secret_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_secret_manager_secret_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `secret_id` (`string`): Set the `secret_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_secret_manager_secret_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_secret_manager_secret_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_secret_manager_secret_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `secret_id` (`string`): Set the `secret_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_secret_manager_secret_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withSecretId
+
+```ts
+withSecretId()
+```
+
+`google-beta.string.withSecretId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the secret_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `secret_id` field.
diff --git a/docs/4.x/data/google_service_account_iam_policy.md b/docs/4.x/data/google_service_account_iam_policy.md
new file mode 100644
index 0000000..dfdcb10
--- /dev/null
+++ b/docs/4.x/data/google_service_account_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_service_account_iam_policy/
+---
+
+# data.google_service_account_iam_policy
+
+`google_service_account_iam_policy` represents the `google-beta_google_service_account_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withServiceAccountId()`](#fn-withserviceaccountid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_service_account_iam_policy.new` injects a new `data_google-beta_google_service_account_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_service_account_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_service_account_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_service_account_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_service_account_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_service_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_service_account_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_service_account_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_service_account_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withServiceAccountId
+
+```ts
+withServiceAccountId()
+```
+
+`google-beta.string.withServiceAccountId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_account_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_account_id` field.
diff --git a/docs/4.x/data/google_service_directory_namespace_iam_policy.md b/docs/4.x/data/google_service_directory_namespace_iam_policy.md
new file mode 100644
index 0000000..06963ff
--- /dev/null
+++ b/docs/4.x/data/google_service_directory_namespace_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_service_directory_namespace_iam_policy/
+---
+
+# data.google_service_directory_namespace_iam_policy
+
+`google_service_directory_namespace_iam_policy` represents the `google-beta_google_service_directory_namespace_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_service_directory_namespace_iam_policy.new` injects a new `data_google-beta_google_service_directory_namespace_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_service_directory_namespace_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_service_directory_namespace_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_service_directory_namespace_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_service_directory_namespace_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_service_directory_namespace_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_service_directory_namespace_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_service_directory_namespace_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_service_directory_namespace_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
diff --git a/docs/4.x/data/google_service_directory_service_iam_policy.md b/docs/4.x/data/google_service_directory_service_iam_policy.md
new file mode 100644
index 0000000..d77ae2e
--- /dev/null
+++ b/docs/4.x/data/google_service_directory_service_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_service_directory_service_iam_policy/
+---
+
+# data.google_service_directory_service_iam_policy
+
+`google_service_directory_service_iam_policy` represents the `google-beta_google_service_directory_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_service_directory_service_iam_policy.new` injects a new `data_google-beta_google_service_directory_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_service_directory_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_service_directory_service_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_service_directory_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_service_directory_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_service_directory_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_service_directory_service_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_service_directory_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_service_directory_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
diff --git a/docs/4.x/data/google_sourcerepo_repository_iam_policy.md b/docs/4.x/data/google_sourcerepo_repository_iam_policy.md
new file mode 100644
index 0000000..a128f2c
--- /dev/null
+++ b/docs/4.x/data/google_sourcerepo_repository_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_sourcerepo_repository_iam_policy/
+---
+
+# data.google_sourcerepo_repository_iam_policy
+
+`google_sourcerepo_repository_iam_policy` represents the `google-beta_google_sourcerepo_repository_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRepository()`](#fn-withrepository)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_sourcerepo_repository_iam_policy.new` injects a new `data_google-beta_google_sourcerepo_repository_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_sourcerepo_repository_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_sourcerepo_repository_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_sourcerepo_repository_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_sourcerepo_repository_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_sourcerepo_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_sourcerepo_repository_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_sourcerepo_repository_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_sourcerepo_repository_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRepository
+
+```ts
+withRepository()
+```
+
+`google-beta.string.withRepository` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the repository field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `repository` field.
diff --git a/docs/4.x/data/google_spanner_database_iam_policy.md b/docs/4.x/data/google_spanner_database_iam_policy.md
new file mode 100644
index 0000000..4c0d202
--- /dev/null
+++ b/docs/4.x/data/google_spanner_database_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_spanner_database_iam_policy/
+---
+
+# data.google_spanner_database_iam_policy
+
+`google_spanner_database_iam_policy` represents the `google-beta_google_spanner_database_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatabase()`](#fn-withdatabase)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_spanner_database_iam_policy.new` injects a new `data_google-beta_google_spanner_database_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_spanner_database_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_spanner_database_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_spanner_database_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_spanner_database_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `database` (`string`): Set the `database` field on the resulting data source block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_spanner_database_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_spanner_database_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_spanner_database_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `database` (`string`): Set the `database` field on the resulting object.
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_spanner_database_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatabase
+
+```ts
+withDatabase()
+```
+
+`google-beta.string.withDatabase` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the database field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `database` field.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_spanner_instance_iam_policy.md b/docs/4.x/data/google_spanner_instance_iam_policy.md
new file mode 100644
index 0000000..dfda13c
--- /dev/null
+++ b/docs/4.x/data/google_spanner_instance_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_spanner_instance_iam_policy/
+---
+
+# data.google_spanner_instance_iam_policy
+
+`google_spanner_instance_iam_policy` represents the `google-beta_google_spanner_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_spanner_instance_iam_policy.new` injects a new `data_google-beta_google_spanner_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_spanner_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_spanner_instance_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_spanner_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_spanner_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_spanner_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_spanner_instance_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_spanner_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_spanner_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google-beta.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/google_storage_bucket_iam_policy.md b/docs/4.x/data/google_storage_bucket_iam_policy.md
new file mode 100644
index 0000000..9268076
--- /dev/null
+++ b/docs/4.x/data/google_storage_bucket_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_storage_bucket_iam_policy/
+---
+
+# data.google_storage_bucket_iam_policy
+
+`google_storage_bucket_iam_policy` represents the `google-beta_google_storage_bucket_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withBucket()`](#fn-withbucket)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_storage_bucket_iam_policy.new` injects a new `data_google-beta_google_storage_bucket_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_storage_bucket_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_storage_bucket_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_storage_bucket_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_storage_bucket_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `bucket` (`string`): Set the `bucket` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_storage_bucket_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_storage_bucket_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_storage_bucket_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `bucket` (`string`): Set the `bucket` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_storage_bucket_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withBucket
+
+```ts
+withBucket()
+```
+
+`google-beta.string.withBucket` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the bucket field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `bucket` field.
diff --git a/docs/4.x/data/google_tags_tag_key_iam_policy.md b/docs/4.x/data/google_tags_tag_key_iam_policy.md
new file mode 100644
index 0000000..03293e4
--- /dev/null
+++ b/docs/4.x/data/google_tags_tag_key_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_tags_tag_key_iam_policy/
+---
+
+# data.google_tags_tag_key_iam_policy
+
+`google_tags_tag_key_iam_policy` represents the `google-beta_google_tags_tag_key_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withTagKey()`](#fn-withtagkey)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_tags_tag_key_iam_policy.new` injects a new `data_google-beta_google_tags_tag_key_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_tags_tag_key_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_tags_tag_key_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_tags_tag_key_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_tags_tag_key_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `tag_key` (`string`): Set the `tag_key` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_tags_tag_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_tags_tag_key_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_tags_tag_key_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `tag_key` (`string`): Set the `tag_key` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_tags_tag_key_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withTagKey
+
+```ts
+withTagKey()
+```
+
+`google-beta.string.withTagKey` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the tag_key field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `tag_key` field.
diff --git a/docs/4.x/data/google_tags_tag_value_iam_policy.md b/docs/4.x/data/google_tags_tag_value_iam_policy.md
new file mode 100644
index 0000000..3076daa
--- /dev/null
+++ b/docs/4.x/data/google_tags_tag_value_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/google_tags_tag_value_iam_policy/
+---
+
+# data.google_tags_tag_value_iam_policy
+
+`google_tags_tag_value_iam_policy` represents the `google-beta_google_tags_tag_value_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withTagValue()`](#fn-withtagvalue)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_tags_tag_value_iam_policy.new` injects a new `data_google-beta_google_tags_tag_value_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_tags_tag_value_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_tags_tag_value_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_tags_tag_value_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_tags_tag_value_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `tag_value` (`string`): Set the `tag_value` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_tags_tag_value_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_tags_tag_value_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_tags_tag_value_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `tag_value` (`string`): Set the `tag_value` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_tags_tag_value_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withTagValue
+
+```ts
+withTagValue()
+```
+
+`google-beta.string.withTagValue` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the tag_value field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `tag_value` field.
diff --git a/docs/4.x/data/google_vertex_ai_featurestore_entitytype_iam_policy.md b/docs/4.x/data/google_vertex_ai_featurestore_entitytype_iam_policy.md
new file mode 100644
index 0000000..e24199b
--- /dev/null
+++ b/docs/4.x/data/google_vertex_ai_featurestore_entitytype_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/google_vertex_ai_featurestore_entitytype_iam_policy/
+---
+
+# data.google_vertex_ai_featurestore_entitytype_iam_policy
+
+`google_vertex_ai_featurestore_entitytype_iam_policy` represents the `google-beta_google_vertex_ai_featurestore_entitytype_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withEntitytype()`](#fn-withentitytype)
+* [`fn withFeaturestore()`](#fn-withfeaturestore)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.new` injects a new `data_google-beta_google_vertex_ai_featurestore_entitytype_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_vertex_ai_featurestore_entitytype_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_vertex_ai_featurestore_entitytype_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `entitytype` (`string`): Set the `entitytype` field on the resulting data source block.
+  - `featurestore` (`string`): Set the `featurestore` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_featurestore_entitytype_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_vertex_ai_featurestore_entitytype_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `entitytype` (`string`): Set the `entitytype` field on the resulting object.
+  - `featurestore` (`string`): Set the `featurestore` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_vertex_ai_featurestore_entitytype_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withEntitytype
+
+```ts
+withEntitytype()
+```
+
+`google-beta.string.withEntitytype` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the entitytype field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `entitytype` field.
+
+
+### fn withFeaturestore
+
+```ts
+withFeaturestore()
+```
+
+`google-beta.string.withFeaturestore` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the featurestore field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `featurestore` field.
diff --git a/docs/4.x/data/google_vertex_ai_featurestore_iam_policy.md b/docs/4.x/data/google_vertex_ai_featurestore_iam_policy.md
new file mode 100644
index 0000000..30178e7
--- /dev/null
+++ b/docs/4.x/data/google_vertex_ai_featurestore_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_vertex_ai_featurestore_iam_policy/
+---
+
+# data.google_vertex_ai_featurestore_iam_policy
+
+`google_vertex_ai_featurestore_iam_policy` represents the `google-beta_google_vertex_ai_featurestore_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withFeaturestore()`](#fn-withfeaturestore)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_vertex_ai_featurestore_iam_policy.new` injects a new `data_google-beta_google_vertex_ai_featurestore_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_vertex_ai_featurestore_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_vertex_ai_featurestore_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_vertex_ai_featurestore_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_vertex_ai_featurestore_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `featurestore` (`string`): Set the `featurestore` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_vertex_ai_featurestore_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_featurestore_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_vertex_ai_featurestore_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `featurestore` (`string`): Set the `featurestore` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_vertex_ai_featurestore_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withFeaturestore
+
+```ts
+withFeaturestore()
+```
+
+`google-beta.string.withFeaturestore` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the featurestore field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `featurestore` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_vertex_ai_index.md b/docs/4.x/data/google_vertex_ai_index.md
new file mode 100644
index 0000000..9754062
--- /dev/null
+++ b/docs/4.x/data/google_vertex_ai_index.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/google_vertex_ai_index/
+---
+
+# data.google_vertex_ai_index
+
+`google_vertex_ai_index` represents the `google-beta_google_vertex_ai_index` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_vertex_ai_index.new` injects a new `data_google-beta_google_vertex_ai_index` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_vertex_ai_index.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_vertex_ai_index` using the reference:
+
+    $._ref.data_google-beta_google_vertex_ai_index.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_vertex_ai_index.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): The resource name of the Index.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): The region of the index. eg us-central1
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_vertex_ai_index.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_index`
+Terraform data source.
+
+Unlike [google-beta.data.google_vertex_ai_index.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): The resource name of the Index.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): The region of the index. eg us-central1
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_vertex_ai_index` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/google_workstations_workstation_config_iam_policy.md b/docs/4.x/data/google_workstations_workstation_config_iam_policy.md
new file mode 100644
index 0000000..d404f20
--- /dev/null
+++ b/docs/4.x/data/google_workstations_workstation_config_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/google_workstations_workstation_config_iam_policy/
+---
+
+# data.google_workstations_workstation_config_iam_policy
+
+`google_workstations_workstation_config_iam_policy` represents the `google-beta_google_workstations_workstation_config_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withWorkstationClusterId()`](#fn-withworkstationclusterid)
+* [`fn withWorkstationConfigId()`](#fn-withworkstationconfigid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_workstations_workstation_config_iam_policy.new` injects a new `data_google-beta_google_workstations_workstation_config_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_workstations_workstation_config_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_workstations_workstation_config_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_workstations_workstation_config_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_workstations_workstation_config_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting data source block.
+  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_workstations_workstation_config_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation_config_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_workstations_workstation_config_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting object.
+  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_workstations_workstation_config_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withWorkstationClusterId
+
+```ts
+withWorkstationClusterId()
+```
+
+`google-beta.string.withWorkstationClusterId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the workstation_cluster_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `workstation_cluster_id` field.
+
+
+### fn withWorkstationConfigId
+
+```ts
+withWorkstationConfigId()
+```
+
+`google-beta.string.withWorkstationConfigId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the workstation_config_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `workstation_config_id` field.
diff --git a/docs/4.x/data/google_workstations_workstation_iam_policy.md b/docs/4.x/data/google_workstations_workstation_iam_policy.md
new file mode 100644
index 0000000..06cc0f0
--- /dev/null
+++ b/docs/4.x/data/google_workstations_workstation_iam_policy.md
@@ -0,0 +1,168 @@
+---
+permalink: /data/google_workstations_workstation_iam_policy/
+---
+
+# data.google_workstations_workstation_iam_policy
+
+`google_workstations_workstation_iam_policy` represents the `google-beta_google_workstations_workstation_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withWorkstationClusterId()`](#fn-withworkstationclusterid)
+* [`fn withWorkstationConfigId()`](#fn-withworkstationconfigid)
+* [`fn withWorkstationId()`](#fn-withworkstationid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.data.google_workstations_workstation_iam_policy.new` injects a new `data_google-beta_google_workstations_workstation_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.data.google_workstations_workstation_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.data.google_workstations_workstation_iam_policy` using the reference:
+
+    $._ref.data_google-beta_google_workstations_workstation_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google-beta_google_workstations_workstation_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting data source block.
+  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting data source block.
+  - `workstation_id` (`string`): Set the `workstation_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.data.google_workstations_workstation_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation_iam_policy`
+Terraform data source.
+
+Unlike [google-beta.data.google_workstations_workstation_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `workstation_cluster_id` (`string`): Set the `workstation_cluster_id` field on the resulting object.
+  - `workstation_config_id` (`string`): Set the `workstation_config_id` field on the resulting object.
+  - `workstation_id` (`string`): Set the `workstation_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `google_workstations_workstation_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withWorkstationClusterId
+
+```ts
+withWorkstationClusterId()
+```
+
+`google-beta.string.withWorkstationClusterId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the workstation_cluster_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `workstation_cluster_id` field.
+
+
+### fn withWorkstationConfigId
+
+```ts
+withWorkstationConfigId()
+```
+
+`google-beta.string.withWorkstationConfigId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the workstation_config_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `workstation_config_id` field.
+
+
+### fn withWorkstationId
+
+```ts
+withWorkstationId()
+```
+
+`google-beta.string.withWorkstationId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the workstation_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `workstation_id` field.
diff --git a/docs/4.x/data/index.md b/docs/4.x/data/index.md
index 9ebedee..18e910c 100644
--- a/docs/4.x/data/index.md
+++ b/docs/4.x/data/index.md
@@ -9,16 +9,32 @@ permalink: /data/
 * [google_access_approval_folder_service_account](google_access_approval_folder_service_account.md)
 * [google_access_approval_organization_service_account](google_access_approval_organization_service_account.md)
 * [google_access_approval_project_service_account](google_access_approval_project_service_account.md)
+* [google_access_context_manager_access_policy_iam_policy](google_access_context_manager_access_policy_iam_policy.md)
 * [google_active_folder](google_active_folder.md)
 * [google_alloydb_locations](google_alloydb_locations.md)
 * [google_alloydb_supported_database_flags](google_alloydb_supported_database_flags.md)
+* [google_api_gateway_api_config_iam_policy](google_api_gateway_api_config_iam_policy.md)
+* [google_api_gateway_api_iam_policy](google_api_gateway_api_iam_policy.md)
+* [google_api_gateway_gateway_iam_policy](google_api_gateway_gateway_iam_policy.md)
+* [google_apigee_environment_iam_policy](google_apigee_environment_iam_policy.md)
 * [google_app_engine_default_service_account](google_app_engine_default_service_account.md)
 * [google_artifact_registry_repository](google_artifact_registry_repository.md)
+* [google_artifact_registry_repository_iam_policy](google_artifact_registry_repository_iam_policy.md)
 * [google_beyondcorp_app_connection](google_beyondcorp_app_connection.md)
 * [google_beyondcorp_app_connector](google_beyondcorp_app_connector.md)
 * [google_beyondcorp_app_gateway](google_beyondcorp_app_gateway.md)
+* [google_bigquery_analytics_hub_data_exchange_iam_policy](google_bigquery_analytics_hub_data_exchange_iam_policy.md)
+* [google_bigquery_analytics_hub_listing_iam_policy](google_bigquery_analytics_hub_listing_iam_policy.md)
+* [google_bigquery_connection_iam_policy](google_bigquery_connection_iam_policy.md)
+* [google_bigquery_datapolicy_data_policy_iam_policy](google_bigquery_datapolicy_data_policy_iam_policy.md)
+* [google_bigquery_dataset_iam_policy](google_bigquery_dataset_iam_policy.md)
 * [google_bigquery_default_service_account](google_bigquery_default_service_account.md)
+* [google_bigquery_table_iam_policy](google_bigquery_table_iam_policy.md)
+* [google_bigtable_instance_iam_policy](google_bigtable_instance_iam_policy.md)
+* [google_bigtable_table_iam_policy](google_bigtable_table_iam_policy.md)
 * [google_billing_account](google_billing_account.md)
+* [google_billing_account_iam_policy](google_billing_account_iam_policy.md)
+* [google_binary_authorization_attestor_iam_policy](google_binary_authorization_attestor_iam_policy.md)
 * [google_client_config](google_client_config.md)
 * [google_client_openid_userinfo](google_client_openid_userinfo.md)
 * [google_cloud_asset_resources_search_all](google_cloud_asset_resources_search_all.md)
@@ -26,33 +42,49 @@ permalink: /data/
 * [google_cloud_identity_groups](google_cloud_identity_groups.md)
 * [google_cloud_run_locations](google_cloud_run_locations.md)
 * [google_cloud_run_service](google_cloud_run_service.md)
+* [google_cloud_run_service_iam_policy](google_cloud_run_service_iam_policy.md)
+* [google_cloud_run_v2_job_iam_policy](google_cloud_run_v2_job_iam_policy.md)
+* [google_cloud_run_v2_service_iam_policy](google_cloud_run_v2_service_iam_policy.md)
+* [google_cloud_tasks_queue_iam_policy](google_cloud_tasks_queue_iam_policy.md)
 * [google_cloudbuild_trigger](google_cloudbuild_trigger.md)
+* [google_cloudbuildv2_connection_iam_policy](google_cloudbuildv2_connection_iam_policy.md)
 * [google_cloudfunctions2_function](google_cloudfunctions2_function.md)
+* [google_cloudfunctions2_function_iam_policy](google_cloudfunctions2_function_iam_policy.md)
 * [google_cloudfunctions_function](google_cloudfunctions_function.md)
+* [google_cloudfunctions_function_iam_policy](google_cloudfunctions_function_iam_policy.md)
+* [google_cloudiot_registry_iam_policy](google_cloudiot_registry_iam_policy.md)
 * [google_composer_environment](google_composer_environment.md)
 * [google_composer_image_versions](google_composer_image_versions.md)
 * [google_compute_address](google_compute_address.md)
 * [google_compute_addresses](google_compute_addresses.md)
 * [google_compute_backend_bucket](google_compute_backend_bucket.md)
+* [google_compute_backend_bucket_iam_policy](google_compute_backend_bucket_iam_policy.md)
 * [google_compute_backend_service](google_compute_backend_service.md)
+* [google_compute_backend_service_iam_policy](google_compute_backend_service_iam_policy.md)
 * [google_compute_default_service_account](google_compute_default_service_account.md)
 * [google_compute_disk](google_compute_disk.md)
+* [google_compute_disk_iam_policy](google_compute_disk_iam_policy.md)
 * [google_compute_forwarding_rule](google_compute_forwarding_rule.md)
 * [google_compute_global_address](google_compute_global_address.md)
 * [google_compute_global_forwarding_rule](google_compute_global_forwarding_rule.md)
 * [google_compute_ha_vpn_gateway](google_compute_ha_vpn_gateway.md)
 * [google_compute_health_check](google_compute_health_check.md)
 * [google_compute_image](google_compute_image.md)
+* [google_compute_image_iam_policy](google_compute_image_iam_policy.md)
 * [google_compute_instance](google_compute_instance.md)
 * [google_compute_instance_group](google_compute_instance_group.md)
 * [google_compute_instance_group_manager](google_compute_instance_group_manager.md)
+* [google_compute_instance_iam_policy](google_compute_instance_iam_policy.md)
 * [google_compute_instance_serial_port](google_compute_instance_serial_port.md)
 * [google_compute_instance_template](google_compute_instance_template.md)
 * [google_compute_lb_ip_ranges](google_compute_lb_ip_ranges.md)
+* [google_compute_machine_image_iam_policy](google_compute_machine_image_iam_policy.md)
 * [google_compute_network](google_compute_network.md)
 * [google_compute_network_endpoint_group](google_compute_network_endpoint_group.md)
 * [google_compute_network_peering](google_compute_network_peering.md)
 * [google_compute_node_types](google_compute_node_types.md)
+* [google_compute_region_backend_service_iam_policy](google_compute_region_backend_service_iam_policy.md)
+* [google_compute_region_disk_iam_policy](google_compute_region_disk_iam_policy.md)
 * [google_compute_region_instance_group](google_compute_region_instance_group.md)
 * [google_compute_region_instance_template](google_compute_region_instance_template.md)
 * [google_compute_region_network_endpoint_group](google_compute_region_network_endpoint_group.md)
@@ -63,11 +95,14 @@ permalink: /data/
 * [google_compute_router_nat](google_compute_router_nat.md)
 * [google_compute_router_status](google_compute_router_status.md)
 * [google_compute_snapshot](google_compute_snapshot.md)
+* [google_compute_snapshot_iam_policy](google_compute_snapshot_iam_policy.md)
 * [google_compute_ssl_certificate](google_compute_ssl_certificate.md)
 * [google_compute_ssl_policy](google_compute_ssl_policy.md)
 * [google_compute_subnetwork](google_compute_subnetwork.md)
+* [google_compute_subnetwork_iam_policy](google_compute_subnetwork_iam_policy.md)
 * [google_compute_vpn_gateway](google_compute_vpn_gateway.md)
 * [google_compute_zones](google_compute_zones.md)
+* [google_container_analysis_note_iam_policy](google_container_analysis_note_iam_policy.md)
 * [google_container_attached_install_manifest](google_container_attached_install_manifest.md)
 * [google_container_attached_versions](google_container_attached_versions.md)
 * [google_container_aws_versions](google_container_aws_versions.md)
@@ -76,11 +111,27 @@ permalink: /data/
 * [google_container_engine_versions](google_container_engine_versions.md)
 * [google_container_registry_image](google_container_registry_image.md)
 * [google_container_registry_repository](google_container_registry_repository.md)
+* [google_data_catalog_entry_group_iam_policy](google_data_catalog_entry_group_iam_policy.md)
+* [google_data_catalog_policy_tag_iam_policy](google_data_catalog_policy_tag_iam_policy.md)
+* [google_data_catalog_tag_template_iam_policy](google_data_catalog_tag_template_iam_policy.md)
+* [google_data_catalog_taxonomy_iam_policy](google_data_catalog_taxonomy_iam_policy.md)
+* [google_data_fusion_instance_iam_policy](google_data_fusion_instance_iam_policy.md)
+* [google_dataplex_asset_iam_policy](google_dataplex_asset_iam_policy.md)
+* [google_dataplex_lake_iam_policy](google_dataplex_lake_iam_policy.md)
+* [google_dataplex_zone_iam_policy](google_dataplex_zone_iam_policy.md)
+* [google_dataproc_autoscaling_policy_iam_policy](google_dataproc_autoscaling_policy_iam_policy.md)
+* [google_dataproc_cluster_iam_policy](google_dataproc_cluster_iam_policy.md)
+* [google_dataproc_job_iam_policy](google_dataproc_job_iam_policy.md)
+* [google_dataproc_metastore_federation_iam_policy](google_dataproc_metastore_federation_iam_policy.md)
 * [google_dataproc_metastore_service](google_dataproc_metastore_service.md)
+* [google_dataproc_metastore_service_iam_policy](google_dataproc_metastore_service_iam_policy.md)
 * [google_datastream_static_ips](google_datastream_static_ips.md)
 * [google_dns_keys](google_dns_keys.md)
 * [google_dns_managed_zone](google_dns_managed_zone.md)
+* [google_dns_managed_zone_iam_policy](google_dns_managed_zone_iam_policy.md)
 * [google_dns_record_set](google_dns_record_set.md)
+* [google_endpoints_service_consumers_iam_policy](google_endpoints_service_consumers_iam_policy.md)
+* [google_endpoints_service_iam_policy](google_endpoints_service_iam_policy.md)
 * [google_firebase_android_app](google_firebase_android_app.md)
 * [google_firebase_android_app_config](google_firebase_android_app_config.md)
 * [google_firebase_apple_app](google_firebase_apple_app.md)
@@ -89,18 +140,36 @@ permalink: /data/
 * [google_firebase_web_app](google_firebase_web_app.md)
 * [google_firebase_web_app_config](google_firebase_web_app_config.md)
 * [google_folder](google_folder.md)
+* [google_folder_iam_policy](google_folder_iam_policy.md)
 * [google_folder_organization_policy](google_folder_organization_policy.md)
 * [google_folders](google_folders.md)
 * [google_game_services_game_server_deployment_rollout](google_game_services_game_server_deployment_rollout.md)
+* [google_gke_backup_backup_plan_iam_policy](google_gke_backup_backup_plan_iam_policy.md)
+* [google_gke_hub_membership_iam_policy](google_gke_hub_membership_iam_policy.md)
+* [google_healthcare_consent_store_iam_policy](google_healthcare_consent_store_iam_policy.md)
+* [google_healthcare_dataset_iam_policy](google_healthcare_dataset_iam_policy.md)
+* [google_healthcare_dicom_store_iam_policy](google_healthcare_dicom_store_iam_policy.md)
+* [google_healthcare_fhir_store_iam_policy](google_healthcare_fhir_store_iam_policy.md)
+* [google_healthcare_hl7_v2_store_iam_policy](google_healthcare_hl7_v2_store_iam_policy.md)
 * [google_iam_policy](google_iam_policy.md)
 * [google_iam_role](google_iam_role.md)
 * [google_iam_testable_permissions](google_iam_testable_permissions.md)
 * [google_iam_workload_identity_pool](google_iam_workload_identity_pool.md)
 * [google_iam_workload_identity_pool_provider](google_iam_workload_identity_pool_provider.md)
+* [google_iap_app_engine_service_iam_policy](google_iap_app_engine_service_iam_policy.md)
+* [google_iap_app_engine_version_iam_policy](google_iap_app_engine_version_iam_policy.md)
 * [google_iap_client](google_iap_client.md)
+* [google_iap_tunnel_iam_policy](google_iap_tunnel_iam_policy.md)
+* [google_iap_tunnel_instance_iam_policy](google_iap_tunnel_instance_iam_policy.md)
+* [google_iap_web_backend_service_iam_policy](google_iap_web_backend_service_iam_policy.md)
+* [google_iap_web_iam_policy](google_iap_web_iam_policy.md)
+* [google_iap_web_type_app_engine_iam_policy](google_iap_web_type_app_engine_iam_policy.md)
+* [google_iap_web_type_compute_iam_policy](google_iap_web_type_compute_iam_policy.md)
 * [google_kms_crypto_key](google_kms_crypto_key.md)
+* [google_kms_crypto_key_iam_policy](google_kms_crypto_key_iam_policy.md)
 * [google_kms_crypto_key_version](google_kms_crypto_key_version.md)
 * [google_kms_key_ring](google_kms_key_ring.md)
+* [google_kms_key_ring_iam_policy](google_kms_key_ring_iam_policy.md)
 * [google_kms_secret](google_kms_secret.md)
 * [google_kms_secret_asymmetric](google_kms_secret_asymmetric.md)
 * [google_kms_secret_ciphertext](google_kms_secret_ciphertext.md)
@@ -113,28 +182,45 @@ permalink: /data/
 * [google_monitoring_notification_channel](google_monitoring_notification_channel.md)
 * [google_monitoring_uptime_check_ips](google_monitoring_uptime_check_ips.md)
 * [google_netblock_ip_ranges](google_netblock_ip_ranges.md)
+* [google_notebooks_instance_iam_policy](google_notebooks_instance_iam_policy.md)
+* [google_notebooks_runtime_iam_policy](google_notebooks_runtime_iam_policy.md)
 * [google_organization](google_organization.md)
+* [google_organization_iam_policy](google_organization_iam_policy.md)
+* [google_privateca_ca_pool_iam_policy](google_privateca_ca_pool_iam_policy.md)
 * [google_privateca_certificate_authority](google_privateca_certificate_authority.md)
+* [google_privateca_certificate_template_iam_policy](google_privateca_certificate_template_iam_policy.md)
 * [google_project](google_project.md)
+* [google_project_iam_policy](google_project_iam_policy.md)
 * [google_project_organization_policy](google_project_organization_policy.md)
 * [google_project_service](google_project_service.md)
 * [google_projects](google_projects.md)
 * [google_pubsub_subscription](google_pubsub_subscription.md)
+* [google_pubsub_subscription_iam_policy](google_pubsub_subscription_iam_policy.md)
 * [google_pubsub_topic](google_pubsub_topic.md)
+* [google_pubsub_topic_iam_policy](google_pubsub_topic_iam_policy.md)
 * [google_redis_instance](google_redis_instance.md)
 * [google_runtimeconfig_config](google_runtimeconfig_config.md)
+* [google_runtimeconfig_config_iam_policy](google_runtimeconfig_config_iam_policy.md)
 * [google_runtimeconfig_variable](google_runtimeconfig_variable.md)
+* [google_scc_source_iam_policy](google_scc_source_iam_policy.md)
 * [google_secret_manager_secret](google_secret_manager_secret.md)
+* [google_secret_manager_secret_iam_policy](google_secret_manager_secret_iam_policy.md)
 * [google_secret_manager_secret_version](google_secret_manager_secret_version.md)
 * [google_secret_manager_secret_version_access](google_secret_manager_secret_version_access.md)
 * [google_service_account](google_service_account.md)
 * [google_service_account_access_token](google_service_account_access_token.md)
+* [google_service_account_iam_policy](google_service_account_iam_policy.md)
 * [google_service_account_id_token](google_service_account_id_token.md)
 * [google_service_account_jwt](google_service_account_jwt.md)
 * [google_service_account_key](google_service_account_key.md)
+* [google_service_directory_namespace_iam_policy](google_service_directory_namespace_iam_policy.md)
+* [google_service_directory_service_iam_policy](google_service_directory_service_iam_policy.md)
 * [google_service_networking_peered_dns_domain](google_service_networking_peered_dns_domain.md)
 * [google_sourcerepo_repository](google_sourcerepo_repository.md)
+* [google_sourcerepo_repository_iam_policy](google_sourcerepo_repository_iam_policy.md)
+* [google_spanner_database_iam_policy](google_spanner_database_iam_policy.md)
 * [google_spanner_instance](google_spanner_instance.md)
+* [google_spanner_instance_iam_policy](google_spanner_instance_iam_policy.md)
 * [google_sql_backup_run](google_sql_backup_run.md)
 * [google_sql_ca_certs](google_sql_ca_certs.md)
 * [google_sql_database](google_sql_database.md)
@@ -143,12 +229,20 @@ permalink: /data/
 * [google_sql_databases](google_sql_databases.md)
 * [google_sql_tiers](google_sql_tiers.md)
 * [google_storage_bucket](google_storage_bucket.md)
+* [google_storage_bucket_iam_policy](google_storage_bucket_iam_policy.md)
 * [google_storage_bucket_object](google_storage_bucket_object.md)
 * [google_storage_bucket_object_content](google_storage_bucket_object_content.md)
 * [google_storage_object_signed_url](google_storage_object_signed_url.md)
 * [google_storage_project_service_account](google_storage_project_service_account.md)
 * [google_storage_transfer_project_service_account](google_storage_transfer_project_service_account.md)
 * [google_tags_tag_key](google_tags_tag_key.md)
+* [google_tags_tag_key_iam_policy](google_tags_tag_key_iam_policy.md)
 * [google_tags_tag_value](google_tags_tag_value.md)
+* [google_tags_tag_value_iam_policy](google_tags_tag_value_iam_policy.md)
 * [google_tpu_tensorflow_versions](google_tpu_tensorflow_versions.md)
-* [google_vpc_access_connector](google_vpc_access_connector.md)
\ No newline at end of file
+* [google_vertex_ai_featurestore_entitytype_iam_policy](google_vertex_ai_featurestore_entitytype_iam_policy.md)
+* [google_vertex_ai_featurestore_iam_policy](google_vertex_ai_featurestore_iam_policy.md)
+* [google_vertex_ai_index](google_vertex_ai_index.md)
+* [google_vpc_access_connector](google_vpc_access_connector.md)
+* [google_workstations_workstation_config_iam_policy](google_workstations_workstation_config_iam_policy.md)
+* [google_workstations_workstation_iam_policy](google_workstations_workstation_iam_policy.md)
\ No newline at end of file
diff --git a/docs/4.x/google_bigquery_table.md b/docs/4.x/google_bigquery_table.md
index bd0816b..d2dfc90 100644
--- a/docs/4.x/google_bigquery_table.md
+++ b/docs/4.x/google_bigquery_table.md
@@ -578,7 +578,7 @@ Terraform sub block.
   - `max_bad_records` (`number`): The maximum number of bad records that BigQuery can ignore when reading data. When `null`, the `max_bad_records` field will be omitted from the resulting object.
   - `reference_file_schema_uri` (`string`): When creating an external table, the user can provide a reference file with the table schema. This is enabled for the following formats: AVRO, PARQUET, ORC. When `null`, the `reference_file_schema_uri` field will be omitted from the resulting object.
   - `schema` (`string`): A JSON schema for the external table. Schema is required for CSV and JSON formats and is disallowed for Google Cloud Bigtable, Cloud Datastore backups, and Avro formats when using external tables. When `null`, the `schema` field will be omitted from the resulting object.
-  - `source_format` (`string`): The data format. Supported values are: "CSV", "GOOGLE_SHEETS", "NEWLINE_DELIMITED_JSON", "AVRO", "PARQUET", "ORC" and "DATASTORE_BACKUP". To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".
+  - `source_format` (`string`):  Please see sourceFormat under ExternalDataConfiguration in Bigquery's public API documentation (https://cloud.google.com/bigquery/docs/reference/rest/v2/tables#externaldataconfiguration) for supported formats. To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".
   - `source_uris` (`list`): A list of the fully-qualified URIs that point to your data in Google Cloud.
   - `avro_options` (`list[obj]`): Additional options if source_format is set to "AVRO" When `null`, the `avro_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.avro_options.new](#fn-external_data_configurationavro_optionsnew) constructor.
   - `csv_options` (`list[obj]`): Additional properties to set if source_format is set to "CSV". When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.csv_options.new](#fn-external_data_configurationcsv_optionsnew) constructor.
diff --git a/docs/4.x/google_cloud_run_service.md b/docs/4.x/google_cloud_run_service.md
index 892ab83..eba138e 100644
--- a/docs/4.x/google_cloud_run_service.md
+++ b/docs/4.x/google_cloud_run_service.md
@@ -79,6 +79,8 @@ This package contains functions and utilities for setting up the resource using
         * [`fn new()`](#fn-templatespeccontainersvolume_mountsnew)
     * [`obj template.spec.volumes`](#obj-templatespecvolumes)
       * [`fn new()`](#fn-templatespecvolumesnew)
+      * [`obj template.spec.volumes.empty_dir`](#obj-templatespecvolumesempty_dir)
+        * [`fn new()`](#fn-templatespecvolumesempty_dirnew)
       * [`obj template.spec.volumes.secret`](#obj-templatespecvolumessecret)
         * [`fn new()`](#fn-templatespecvolumessecretnew)
         * [`obj template.spec.volumes.secret.items`](#obj-templatespecvolumessecretitems)
@@ -584,9 +586,7 @@ service. The service account represents the identity of the running revision,
 and determines what permissions the revision has. If not provided, the revision
 will use the project's default service account. When `null`, the `service_account_name` field will be omitted from the resulting object.
   - `timeout_seconds` (`number`): TimeoutSeconds holds the max duration the instance is allowed for responding to a request. When `null`, the `timeout_seconds` field will be omitted from the resulting object.
-  - `containers` (`list[obj]`): Container defines the unit of execution for this Revision.
-In the context of a Revision, we disallow a number of the fields of
-this Container, including: name, ports, and volumeMounts. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.
+  - `containers` (`list[obj]`): Containers defines the unit of execution for this Revision. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.
   - `volumes` (`list[obj]`): Volume represents a named volume in a container. When `null`, the `volumes` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.new](#fn-templatetemplatevolumesnew) constructor.
 
 **Returns**:
@@ -616,6 +616,7 @@ The docker image's CMD is used if this is not provided. When `null`, the `ar
 The docker image's ENTRYPOINT is used if this is not provided. When `null`, the `command` field will be omitted from the resulting object.
   - `image` (`string`): Docker image name. This is most often a reference to a container located
 in the container registry, such as gcr.io/cloudrun/hello
+  - `name` (`string`): Name of the container When `null`, the `name` field will be omitted from the resulting object.
   - `working_dir` (`string`): Container's working directory.
 If not specified, the container runtime's default will be used, which
 might be configured in the container image. When `null`, the `working_dir` field will be omitted from the resulting object.
@@ -1179,6 +1180,7 @@ Terraform sub block.
 
 **Args**:
   - `name` (`string`): Volume's name.
+  - `empty_dir` (`list[obj]`): Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs). When `null`, the `empty_dir` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.empty_dir.new](#fn-templatetemplatespecempty_dirnew) constructor.
   - `secret` (`list[obj]`): The secret's value will be presented as the content of a file whose
 name is defined in the item path. If no items are defined, the name of
 the file is the secret_name. When `null`, the `secret` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_cloud_run_service.template.spec.volumes.secret.new](#fn-templatetemplatespecsecretnew) constructor.
@@ -1187,6 +1189,30 @@ the file is the secret_name. When `null`, the `secret` sub block will be omitted
   - An attribute object that represents the `volumes` sub block.
 
 
+## obj template.spec.volumes.empty_dir
+
+
+
+### fn template.spec.volumes.empty_dir.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_cloud_run_service.template.spec.volumes.empty_dir.new` constructs a new object with attributes and blocks configured for the `empty_dir`
+Terraform sub block.
+
+
+
+**Args**:
+  - `medium` (`string`): The medium on which the data is stored. The default is "" which means to use the node's default medium. Must be an empty string (default) or Memory. When `null`, the `medium` field will be omitted from the resulting object.
+  - `size_limit` (`string`): Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: http://kubernetes.io/docs/user-guide/volumes#emptydir. When `null`, the `size_limit` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `empty_dir` sub block.
+
+
 ## obj template.spec.volumes.secret
 
 
diff --git a/docs/4.x/google_cloudbuild_trigger.md b/docs/4.x/google_cloudbuild_trigger.md
index fcb99fe..d8c8a29 100644
--- a/docs/4.x/google_cloudbuild_trigger.md
+++ b/docs/4.x/google_cloudbuild_trigger.md
@@ -1767,7 +1767,7 @@ Format: projects/{project}/locations/{location}/githubEnterpriseConfigs/{id}. pr
   - `ref` (`string`): The branch or tag to use. Must start with "refs/" (required).
   - `repo_type` (`string`): The type of the repo, since it may not be explicit from the repo field (e.g from a URL).
 Values can be UNKNOWN, CLOUD_SOURCE_REPOSITORIES, GITHUB, BITBUCKET_SERVER Possible values: ["UNKNOWN", "CLOUD_SOURCE_REPOSITORIES", "GITHUB", "BITBUCKET_SERVER"]
-  - `repository` (`string`): The qualified resource name of the Repo API repository. 
+  - `repository` (`string`): The qualified resource name of the Repo API repository.
 Either uri or repository can be specified and is required. When `null`, the `repository` field will be omitted from the resulting object.
   - `uri` (`string`): The URI of the repo. When `null`, the `uri` field will be omitted from the resulting object.
 
diff --git a/docs/4.x/google_compute_disk.md b/docs/4.x/google_compute_disk.md
index 18426ec..b62b61a 100644
--- a/docs/4.x/google_compute_disk.md
+++ b/docs/4.x/google_compute_disk.md
@@ -20,9 +20,12 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withDescription()`](#fn-withdescription)
 * [`fn withDiskEncryptionKey()`](#fn-withdiskencryptionkey)
 * [`fn withDiskEncryptionKeyMixin()`](#fn-withdiskencryptionkeymixin)
+* [`fn withGuestOsFeatures()`](#fn-withguestosfeatures)
+* [`fn withGuestOsFeaturesMixin()`](#fn-withguestosfeaturesmixin)
 * [`fn withImage()`](#fn-withimage)
 * [`fn withInterface()`](#fn-withinterface)
 * [`fn withLabels()`](#fn-withlabels)
+* [`fn withLicenses()`](#fn-withlicenses)
 * [`fn withMultiWriter()`](#fn-withmultiwriter)
 * [`fn withName()`](#fn-withname)
 * [`fn withPhysicalBlockSizeBytes()`](#fn-withphysicalblocksizebytes)
@@ -44,6 +47,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-async_primary_disknew)
 * [`obj disk_encryption_key`](#obj-disk_encryption_key)
   * [`fn new()`](#fn-disk_encryption_keynew)
+* [`obj guest_os_features`](#obj-guest_os_features)
+  * [`fn new()`](#fn-guest_os_featuresnew)
 * [`obj source_image_encryption_key`](#obj-source_image_encryption_key)
   * [`fn new()`](#fn-source_image_encryption_keynew)
 * [`obj source_snapshot_encryption_key`](#obj-source_snapshot_encryption_key)
@@ -93,6 +98,7 @@ For instance, the image 'centos-6-v20180104' includes its family name &#
 These images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.
   - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `multi_writer` (`bool`): Indicates whether or not the disk can be read/write attached to more than one instance. When `null`, the `multi_writer` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
@@ -162,6 +168,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if
 the source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
@@ -204,6 +212,7 @@ For instance, the image 'centos-6-v20180104' includes its family name &#
 These images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.
   - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `multi_writer` (`bool`): Indicates whether or not the disk can be read/write attached to more than one instance. When `null`, the `multi_writer` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
@@ -273,6 +282,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if
 the source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
@@ -374,6 +385,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `disk_encryption_key` field.
 
 
+### fn withGuestOsFeatures
+
+```ts
+withGuestOsFeatures()
+```
+
+`google-beta.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withGuestOsFeaturesMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
+### fn withGuestOsFeaturesMixin
+
+```ts
+withGuestOsFeaturesMixin()
+```
+
+`google-beta.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withGuestOsFeatures](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
 ### fn withImage
 
 ```ts
@@ -422,6 +470,22 @@ Terraform resource block to set or update the labels field.
   - `value` (`obj`): The value to set for the `labels` field.
 
 
+### fn withLicenses
+
+```ts
+withLicenses()
+```
+
+`google-beta.list.withLicenses` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the licenses field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `licenses` field.
+
+
 ### fn withMultiWriter
 
 ```ts
@@ -765,6 +829,29 @@ this resource. You can provide either the rawKey or the rsaEncryptedKey. When `n
   - An attribute object that represents the `disk_encryption_key` sub block.
 
 
+## obj guest_os_features
+
+
+
+### fn guest_os_features.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_compute_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`
+Terraform sub block.
+
+
+
+**Args**:
+  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]
+
+**Returns**:
+  - An attribute object that represents the `guest_os_features` sub block.
+
+
 ## obj source_image_encryption_key
 
 
diff --git a/docs/4.x/google_compute_image.md b/docs/4.x/google_compute_image.md
index d7cd7e2..29fcf5b 100644
--- a/docs/4.x/google_compute_image.md
+++ b/docs/4.x/google_compute_image.md
@@ -31,6 +31,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withSourceDisk()`](#fn-withsourcedisk)
 * [`fn withSourceImage()`](#fn-withsourceimage)
 * [`fn withSourceSnapshot()`](#fn-withsourcesnapshot)
+* [`fn withStorageLocations()`](#fn-withstoragelocations)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
 * [`obj guest_os_features`](#obj-guest_os_features)
@@ -108,6 +109,9 @@ In order to create an image, you must provide the full or partial URL of one of
 * The sourceImage URL
 * The rawDisk.source URL
 * The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.
+  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image
+(regional or multi-regional).
+Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.
   - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
 Applicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.
@@ -177,6 +181,9 @@ In order to create an image, you must provide the full or partial URL of one of
 * The sourceImage URL
 * The rawDisk.source URL
 * The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.
+  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image
+(regional or multi-regional).
+Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.
   - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
 Applicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.
@@ -462,6 +469,22 @@ Terraform resource block to set or update the source_snapshot field.
   - `value` (`string`): The value to set for the `source_snapshot` field.
 
 
+### fn withStorageLocations
+
+```ts
+withStorageLocations()
+```
+
+`google-beta.list.withStorageLocations` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the storage_locations field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `storage_locations` field.
+
+
 ### fn withTimeouts
 
 ```ts
diff --git a/docs/4.x/google_compute_region_commitment.md b/docs/4.x/google_compute_region_commitment.md
index c18633a..b364034 100644
--- a/docs/4.x/google_compute_region_commitment.md
+++ b/docs/4.x/google_compute_region_commitment.md
@@ -84,9 +84,10 @@ The currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.
   - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.
-Type MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized
-machines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to
-accelerator optimized machines. Possible values: ["MEMORY_OPTIMIZED", "ACCELERATOR_OPTIMIZED"] When `null`, the `type` field will be omitted from the resulting object.
+The type could be one of the following value: 'MEMORY_OPTIMIZED', 'ACCELERATOR_OPTIMIZED',
+'GENERAL_PURPOSE_N1', 'GENERAL_PURPOSE_N2', 'GENERAL_PURPOSE_N2D', 'GENERAL_PURPOSE_E2',
+'GENERAL_PURPOSE_T2D', 'GENERAL_PURPOSE_C3', 'COMPUTE_OPTIMIZED_C2', 'COMPUTE_OPTIMIZED_C2D' and
+'GRAPHICS_OPTIMIZED_G2' When `null`, the `type` field will be omitted from the resulting object.
   - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.
   - `resources` (`list[obj]`): A list of commitment amounts for particular resources.
 Note that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.resources.new](#fn-resourcesnew) constructor.
@@ -133,9 +134,10 @@ The currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.
   - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.
-Type MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized
-machines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to
-accelerator optimized machines. Possible values: ["MEMORY_OPTIMIZED", "ACCELERATOR_OPTIMIZED"] When `null`, the `type` field will be omitted from the resulting object.
+The type could be one of the following value: 'MEMORY_OPTIMIZED', 'ACCELERATOR_OPTIMIZED',
+'GENERAL_PURPOSE_N1', 'GENERAL_PURPOSE_N2', 'GENERAL_PURPOSE_N2D', 'GENERAL_PURPOSE_E2',
+'GENERAL_PURPOSE_T2D', 'GENERAL_PURPOSE_C3', 'COMPUTE_OPTIMIZED_C2', 'COMPUTE_OPTIMIZED_C2D' and
+'GRAPHICS_OPTIMIZED_G2' When `null`, the `type` field will be omitted from the resulting object.
   - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.
   - `resources` (`list[obj]`): A list of commitment amounts for particular resources.
 Note that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_commitment.resources.new](#fn-resourcesnew) constructor.
diff --git a/docs/4.x/google_compute_region_disk.md b/docs/4.x/google_compute_region_disk.md
index b82006c..1e42a27 100644
--- a/docs/4.x/google_compute_region_disk.md
+++ b/docs/4.x/google_compute_region_disk.md
@@ -20,8 +20,11 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withDescription()`](#fn-withdescription)
 * [`fn withDiskEncryptionKey()`](#fn-withdiskencryptionkey)
 * [`fn withDiskEncryptionKeyMixin()`](#fn-withdiskencryptionkeymixin)
+* [`fn withGuestOsFeatures()`](#fn-withguestosfeatures)
+* [`fn withGuestOsFeaturesMixin()`](#fn-withguestosfeaturesmixin)
 * [`fn withInterface()`](#fn-withinterface)
 * [`fn withLabels()`](#fn-withlabels)
+* [`fn withLicenses()`](#fn-withlicenses)
 * [`fn withName()`](#fn-withname)
 * [`fn withPhysicalBlockSizeBytes()`](#fn-withphysicalblocksizebytes)
 * [`fn withProject()`](#fn-withproject)
@@ -39,6 +42,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-async_primary_disknew)
 * [`obj disk_encryption_key`](#obj-disk_encryption_key)
   * [`fn new()`](#fn-disk_encryption_keynew)
+* [`obj guest_os_features`](#obj-guest_os_features)
+  * [`fn new()`](#fn-guest_os_featuresnew)
 * [`obj source_snapshot_encryption_key`](#obj-source_snapshot_encryption_key)
   * [`fn new()`](#fn-source_snapshot_encryption_keynew)
 * [`obj timeouts`](#obj-timeouts)
@@ -77,6 +82,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
 you create the resource. When `null`, the `description` field will be omitted from the resulting object.
   - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
 RFC1035. Specifically, the name must be 1-63 characters long and match
@@ -132,6 +138,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
 if the source snapshot is protected by a customer-supplied encryption
 key. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.
@@ -163,6 +171,7 @@ injecting into a complete block.
 you create the resource. When `null`, the `description` field will be omitted from the resulting object.
   - `interface` (`string`): Specifies the disk interface to use for attaching this disk, which is either SCSI or NVME. The default is SCSI. When `null`, the `interface` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
 RFC1035. Specifically, the name must be 1-63 characters long and match
@@ -218,6 +227,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
 if the source snapshot is protected by a customer-supplied encryption
 key. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.
@@ -317,6 +328,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `disk_encryption_key` field.
 
 
+### fn withGuestOsFeatures
+
+```ts
+withGuestOsFeatures()
+```
+
+`google-beta.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withGuestOsFeaturesMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
+### fn withGuestOsFeaturesMixin
+
+```ts
+withGuestOsFeaturesMixin()
+```
+
+`google-beta.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withGuestOsFeatures](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
 ### fn withInterface
 
 ```ts
@@ -349,6 +397,22 @@ Terraform resource block to set or update the labels field.
   - `value` (`obj`): The value to set for the `labels` field.
 
 
+### fn withLicenses
+
+```ts
+withLicenses()
+```
+
+`google-beta.list.withLicenses` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the licenses field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `licenses` field.
+
+
 ### fn withName
 
 ```ts
@@ -614,6 +678,29 @@ RFC 4648 base64 to either encrypt or decrypt this resource. When `null`, the `ra
   - An attribute object that represents the `disk_encryption_key` sub block.
 
 
+## obj guest_os_features
+
+
+
+### fn guest_os_features.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_compute_region_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`
+Terraform sub block.
+
+
+
+**Args**:
+  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]
+
+**Returns**:
+  - An attribute object that represents the `guest_os_features` sub block.
+
+
 ## obj source_snapshot_encryption_key
 
 
diff --git a/docs/4.x/google_container_analysis_note_iam_binding.md b/docs/4.x/google_container_analysis_note_iam_binding.md
new file mode 100644
index 0000000..ca0c4dc
--- /dev/null
+++ b/docs/4.x/google_container_analysis_note_iam_binding.md
@@ -0,0 +1,217 @@
+---
+permalink: /google_container_analysis_note_iam_binding/
+---
+
+# google_container_analysis_note_iam_binding
+
+`google_container_analysis_note_iam_binding` represents the `google-beta_google_container_analysis_note_iam_binding` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCondition()`](#fn-withcondition)
+* [`fn withConditionMixin()`](#fn-withconditionmixin)
+* [`fn withMembers()`](#fn-withmembers)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRole()`](#fn-withrole)
+* [`obj condition`](#obj-condition)
+  * [`fn new()`](#fn-conditionnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_container_analysis_note_iam_binding.new` injects a new `google-beta_google_container_analysis_note_iam_binding` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_container_analysis_note_iam_binding.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_container_analysis_note_iam_binding` using the reference:
+
+    $._ref.google-beta_google_container_analysis_note_iam_binding.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_container_analysis_note_iam_binding.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `members` (`list`): Set the `members` field on the resulting resource block.
+  - `note` (`string`): Set the `note` field on the resulting resource block.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting resource block.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_container_analysis_note_iam_binding.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_binding`
+Terraform resource.
+
+Unlike [google-beta.google_container_analysis_note_iam_binding.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `members` (`list`): Set the `members` field on the resulting object.
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting object.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_analysis_note_iam_binding` resource into the root Terraform configuration.
+
+
+### fn withCondition
+
+```ts
+withCondition()
+```
+
+`google-beta.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withConditionMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withConditionMixin
+
+```ts
+withConditionMixin()
+```
+
+`google-beta.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withCondition](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withMembers
+
+```ts
+withMembers()
+```
+
+`google-beta.list.withMembers` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the members field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `members` field.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the note field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRole
+
+```ts
+withRole()
+```
+
+`google-beta.string.withRole` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the role field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `role` field.
+
+
+## obj condition
+
+
+
+### fn condition.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_container_analysis_note_iam_binding.condition.new` constructs a new object with attributes and blocks configured for the `condition`
+Terraform sub block.
+
+
+
+**Args**:
+  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.
+  - `expression` (`string`): Set the `expression` field on the resulting object.
+  - `title` (`string`): Set the `title` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `condition` sub block.
diff --git a/docs/4.x/google_container_analysis_note_iam_member.md b/docs/4.x/google_container_analysis_note_iam_member.md
new file mode 100644
index 0000000..4c486e7
--- /dev/null
+++ b/docs/4.x/google_container_analysis_note_iam_member.md
@@ -0,0 +1,217 @@
+---
+permalink: /google_container_analysis_note_iam_member/
+---
+
+# google_container_analysis_note_iam_member
+
+`google_container_analysis_note_iam_member` represents the `google-beta_google_container_analysis_note_iam_member` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCondition()`](#fn-withcondition)
+* [`fn withConditionMixin()`](#fn-withconditionmixin)
+* [`fn withMember()`](#fn-withmember)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRole()`](#fn-withrole)
+* [`obj condition`](#obj-condition)
+  * [`fn new()`](#fn-conditionnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_container_analysis_note_iam_member.new` injects a new `google-beta_google_container_analysis_note_iam_member` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_container_analysis_note_iam_member.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_container_analysis_note_iam_member` using the reference:
+
+    $._ref.google-beta_google_container_analysis_note_iam_member.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_container_analysis_note_iam_member.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `member` (`string`): Set the `member` field on the resulting resource block.
+  - `note` (`string`): Set the `note` field on the resulting resource block.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting resource block.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_container_analysis_note_iam_member.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_member`
+Terraform resource.
+
+Unlike [google-beta.google_container_analysis_note_iam_member.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `member` (`string`): Set the `member` field on the resulting object.
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting object.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_analysis_note_iam_member` resource into the root Terraform configuration.
+
+
+### fn withCondition
+
+```ts
+withCondition()
+```
+
+`google-beta.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withConditionMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withConditionMixin
+
+```ts
+withConditionMixin()
+```
+
+`google-beta.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withCondition](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withMember
+
+```ts
+withMember()
+```
+
+`google-beta.string.withMember` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the member field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `member` field.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the note field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRole
+
+```ts
+withRole()
+```
+
+`google-beta.string.withRole` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the role field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `role` field.
+
+
+## obj condition
+
+
+
+### fn condition.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_container_analysis_note_iam_member.condition.new` constructs a new object with attributes and blocks configured for the `condition`
+Terraform sub block.
+
+
+
+**Args**:
+  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.
+  - `expression` (`string`): Set the `expression` field on the resulting object.
+  - `title` (`string`): Set the `title` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `condition` sub block.
diff --git a/docs/4.x/google_container_analysis_note_iam_policy.md b/docs/4.x/google_container_analysis_note_iam_policy.md
new file mode 100644
index 0000000..1021604
--- /dev/null
+++ b/docs/4.x/google_container_analysis_note_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /google_container_analysis_note_iam_policy/
+---
+
+# google_container_analysis_note_iam_policy
+
+`google_container_analysis_note_iam_policy` represents the `google-beta_google_container_analysis_note_iam_policy` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withPolicyData()`](#fn-withpolicydata)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_container_analysis_note_iam_policy.new` injects a new `google-beta_google_container_analysis_note_iam_policy` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_container_analysis_note_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_container_analysis_note_iam_policy` using the reference:
+
+    $._ref.google-beta_google_container_analysis_note_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_container_analysis_note_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `note` (`string`): Set the `note` field on the resulting resource block.
+  - `policy_data` (`string`): Set the `policy_data` field on the resulting resource block.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_analysis_note_iam_policy`
+Terraform resource.
+
+Unlike [google-beta.google_container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `policy_data` (`string`): Set the `policy_data` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_analysis_note_iam_policy` resource into the root Terraform configuration.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google-beta.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the note field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withPolicyData
+
+```ts
+withPolicyData()
+```
+
+`google-beta.string.withPolicyData` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the policy_data field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `policy_data` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/google_data_loss_prevention_job_trigger.md b/docs/4.x/google_data_loss_prevention_job_trigger.md
index 9ff27d8..40f87c6 100644
--- a/docs/4.x/google_data_loss_prevention_job_trigger.md
+++ b/docs/4.x/google_data_loss_prevention_job_trigger.md
@@ -117,8 +117,12 @@ This package contains functions and utilities for setting up the resource using
     * [`fn new()`](#fn-inspect_jobstorage_confignew)
     * [`obj inspect_job.storage_config.big_query_options`](#obj-inspect_jobstorage_configbig_query_options)
       * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsnew)
+      * [`obj inspect_job.storage_config.big_query_options.excluded_fields`](#obj-inspect_jobstorage_configbig_query_optionsexcluded_fields)
+        * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsexcluded_fieldsnew)
       * [`obj inspect_job.storage_config.big_query_options.identifying_fields`](#obj-inspect_jobstorage_configbig_query_optionsidentifying_fields)
         * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsidentifying_fieldsnew)
+      * [`obj inspect_job.storage_config.big_query_options.included_fields`](#obj-inspect_jobstorage_configbig_query_optionsincluded_fields)
+        * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsincluded_fieldsnew)
       * [`obj inspect_job.storage_config.big_query_options.table_reference`](#obj-inspect_jobstorage_configbig_query_optionstable_reference)
         * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionstable_referencenew)
     * [`obj inspect_job.storage_config.cloud_storage_options`](#obj-inspect_jobstorage_configcloud_storage_options)
@@ -1565,14 +1569,40 @@ Must be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults
 rowsLimit and rowsLimitPercent can be specified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit_percent` field will be omitted from the resulting object.
   - `sample_method` (`string`): How to sample rows if not all rows are scanned. Meaningful only when used in conjunction with either
 rowsLimit or rowsLimitPercent. If not specified, rows are scanned in the order BigQuery reads them. Default value: "TOP" Possible values: ["TOP", "RANDOM_START"] When `null`, the `sample_method` field will be omitted from the resulting object.
+  - `excluded_fields` (`list[obj]`): References to fields excluded from scanning.
+This allows you to skip inspection of entire columns which you know have no findings. When `null`, the `excluded_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new](#fn-inspect_jobinspect_jobstorage_configexcluded_fieldsnew) constructor.
   - `identifying_fields` (`list[obj]`): Specifies the BigQuery fields that will be returned with findings.
 If not specified, no identifying fields will be returned for findings. When `null`, the `identifying_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new](#fn-inspect_jobinspect_jobstorage_configidentifying_fieldsnew) constructor.
+  - `included_fields` (`list[obj]`): Limit scanning only to these fields. When `null`, the `included_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new](#fn-inspect_jobinspect_jobstorage_configincluded_fieldsnew) constructor.
   - `table_reference` (`list[obj]`): Set of files to scan. When `null`, the `table_reference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.table_reference.new](#fn-inspect_jobinspect_jobstorage_configtable_referencenew) constructor.
 
 **Returns**:
   - An attribute object that represents the `big_query_options` sub block.
 
 
+## obj inspect_job.storage_config.big_query_options.excluded_fields
+
+
+
+### fn inspect_job.storage_config.big_query_options.excluded_fields.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new` constructs a new object with attributes and blocks configured for the `excluded_fields`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): Name describing the field excluded from scanning.
+
+**Returns**:
+  - An attribute object that represents the `excluded_fields` sub block.
+
+
 ## obj inspect_job.storage_config.big_query_options.identifying_fields
 
 
@@ -1596,6 +1626,29 @@ Terraform sub block.
   - An attribute object that represents the `identifying_fields` sub block.
 
 
+## obj inspect_job.storage_config.big_query_options.included_fields
+
+
+
+### fn inspect_job.storage_config.big_query_options.included_fields.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new` constructs a new object with attributes and blocks configured for the `included_fields`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): Name describing the field to which scanning is limited.
+
+**Returns**:
+  - An attribute object that represents the `included_fields` sub block.
+
+
 ## obj inspect_job.storage_config.big_query_options.table_reference
 
 
diff --git a/docs/4.x/google_dataflow_flex_template_job.md b/docs/4.x/google_dataflow_flex_template_job.md
index 214f329..01e2cfa 100644
--- a/docs/4.x/google_dataflow_flex_template_job.md
+++ b/docs/4.x/google_dataflow_flex_template_job.md
@@ -15,14 +15,30 @@ This package contains functions and utilities for setting up the resource using
 
 * [`fn new()`](#fn-new)
 * [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAdditionalExperiments()`](#fn-withadditionalexperiments)
+* [`fn withAutoscalingAlgorithm()`](#fn-withautoscalingalgorithm)
 * [`fn withContainerSpecGcsPath()`](#fn-withcontainerspecgcspath)
+* [`fn withEnableStreamingEngine()`](#fn-withenablestreamingengine)
+* [`fn withIpConfiguration()`](#fn-withipconfiguration)
+* [`fn withKmsKeyName()`](#fn-withkmskeyname)
 * [`fn withLabels()`](#fn-withlabels)
+* [`fn withLauncherMachineType()`](#fn-withlaunchermachinetype)
+* [`fn withMachineType()`](#fn-withmachinetype)
+* [`fn withMaxWorkers()`](#fn-withmaxworkers)
 * [`fn withName()`](#fn-withname)
+* [`fn withNetwork()`](#fn-withnetwork)
+* [`fn withNumWorkers()`](#fn-withnumworkers)
 * [`fn withOnDelete()`](#fn-withondelete)
 * [`fn withParameters()`](#fn-withparameters)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withRegion()`](#fn-withregion)
+* [`fn withSdkContainerImage()`](#fn-withsdkcontainerimage)
+* [`fn withServiceAccountEmail()`](#fn-withserviceaccountemail)
 * [`fn withSkipWaitOnJobTermination()`](#fn-withskipwaitonjobtermination)
+* [`fn withStagingLocation()`](#fn-withstaginglocation)
+* [`fn withSubnetwork()`](#fn-withsubnetwork)
+* [`fn withTempLocation()`](#fn-withtemplocation)
+* [`fn withTransformNameMapping()`](#fn-withtransformnamemapping)
 
 ## Fields
 
@@ -53,14 +69,30 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
 
 **Args**:
   - `resourceLabel` (`string`): The name label of the block.
+  - `additional_experiments` (`list`): List of experiments that should be used by the job. An example value is ["enable_stackdriver_agent_metrics"]. When `null`, the `additional_experiments` field will be omitted from the resulting object.
+  - `autoscaling_algorithm` (`string`): The algorithm to use for autoscaling When `null`, the `autoscaling_algorithm` field will be omitted from the resulting object.
   - `container_spec_gcs_path` (`string`): Set the `container_spec_gcs_path` field on the resulting resource block.
-  - `labels` (`obj`): Set the `labels` field on the resulting resource block. When `null`, the `labels` field will be omitted from the resulting object.
+  - `enable_streaming_engine` (`bool`): Indicates if the job should use the streaming engine feature. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.
+  - `ip_configuration` (`string`): The configuration for VM IPs. Options are "WORKER_IP_PUBLIC" or "WORKER_IP_PRIVATE". When `null`, the `ip_configuration` field will be omitted from the resulting object.
+  - `kms_key_name` (`string`): The name for the Cloud KMS key for the job. Key format is: projects/PROJECT_ID/locations/LOCATION/keyRings/KEY_RING/cryptoKeys/KEY When `null`, the `kms_key_name` field will be omitted from the resulting object.
+  - `labels` (`obj`): User labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. NOTE: Google-provided Dataflow templates often provide default labels that begin with goog-dataflow-provided. Unless explicitly set in config, these labels will be ignored to prevent diffs on re-apply. When `null`, the `labels` field will be omitted from the resulting object.
+  - `launcher_machine_type` (`string`): The machine type to use for launching the job. The default is n1-standard-1. When `null`, the `launcher_machine_type` field will be omitted from the resulting object.
+  - `machine_type` (`string`): The machine type to use for the job. When `null`, the `machine_type` field will be omitted from the resulting object.
+  - `max_workers` (`number`): The maximum number of Google Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.
   - `name` (`string`): Set the `name` field on the resulting resource block.
+  - `network` (`string`): The network to which VMs will be assigned. If it is not provided, "default" will be used. When `null`, the `network` field will be omitted from the resulting object.
+  - `num_workers` (`number`): The initial number of Google Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.
   - `on_delete` (`string`): Set the `on_delete` field on the resulting resource block. When `null`, the `on_delete` field will be omitted from the resulting object.
   - `parameters` (`obj`): Set the `parameters` field on the resulting resource block. When `null`, the `parameters` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `region` (`string`): The region in which the created job should run. When `null`, the `region` field will be omitted from the resulting object.
+  - `sdk_container_image` (`string`): Docker registry location of container image to use for the 'worker harness. Default is the container for the version of the SDK. Note this field is only valid for portable pipelines. When `null`, the `sdk_container_image` field will be omitted from the resulting object.
+  - `service_account_email` (`string`): The Service Account email used to create the job. When `null`, the `service_account_email` field will be omitted from the resulting object.
   - `skip_wait_on_job_termination` (`bool`): If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are different, e.g. by embedding a release ID or by using a random_id. When `null`, the `skip_wait_on_job_termination` field will be omitted from the resulting object.
+  - `staging_location` (`string`): The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `staging_location` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK". When `null`, the `subnetwork` field will be omitted from the resulting object.
+  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.
+  - `transform_name_mapping` (`obj`): Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the corresponding name prefixes of the new job. When `null`, the `transform_name_mapping` field will be omitted from the resulting object.
 
 **Returns**:
 - A mixin object that injects the new resource into the root Terraform configuration.
@@ -84,19 +116,67 @@ This is most useful when you need to preprocess the attributes with functions, c
 injecting into a complete block.
 
 **Args**:
+  - `additional_experiments` (`list`): List of experiments that should be used by the job. An example value is ["enable_stackdriver_agent_metrics"]. When `null`, the `additional_experiments` field will be omitted from the resulting object.
+  - `autoscaling_algorithm` (`string`): The algorithm to use for autoscaling When `null`, the `autoscaling_algorithm` field will be omitted from the resulting object.
   - `container_spec_gcs_path` (`string`): Set the `container_spec_gcs_path` field on the resulting object.
-  - `labels` (`obj`): Set the `labels` field on the resulting object. When `null`, the `labels` field will be omitted from the resulting object.
+  - `enable_streaming_engine` (`bool`): Indicates if the job should use the streaming engine feature. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.
+  - `ip_configuration` (`string`): The configuration for VM IPs. Options are "WORKER_IP_PUBLIC" or "WORKER_IP_PRIVATE". When `null`, the `ip_configuration` field will be omitted from the resulting object.
+  - `kms_key_name` (`string`): The name for the Cloud KMS key for the job. Key format is: projects/PROJECT_ID/locations/LOCATION/keyRings/KEY_RING/cryptoKeys/KEY When `null`, the `kms_key_name` field will be omitted from the resulting object.
+  - `labels` (`obj`): User labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. NOTE: Google-provided Dataflow templates often provide default labels that begin with goog-dataflow-provided. Unless explicitly set in config, these labels will be ignored to prevent diffs on re-apply. When `null`, the `labels` field will be omitted from the resulting object.
+  - `launcher_machine_type` (`string`): The machine type to use for launching the job. The default is n1-standard-1. When `null`, the `launcher_machine_type` field will be omitted from the resulting object.
+  - `machine_type` (`string`): The machine type to use for the job. When `null`, the `machine_type` field will be omitted from the resulting object.
+  - `max_workers` (`number`): The maximum number of Google Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.
   - `name` (`string`): Set the `name` field on the resulting object.
+  - `network` (`string`): The network to which VMs will be assigned. If it is not provided, "default" will be used. When `null`, the `network` field will be omitted from the resulting object.
+  - `num_workers` (`number`): The initial number of Google Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.
   - `on_delete` (`string`): Set the `on_delete` field on the resulting object. When `null`, the `on_delete` field will be omitted from the resulting object.
   - `parameters` (`obj`): Set the `parameters` field on the resulting object. When `null`, the `parameters` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `region` (`string`): The region in which the created job should run. When `null`, the `region` field will be omitted from the resulting object.
+  - `sdk_container_image` (`string`): Docker registry location of container image to use for the 'worker harness. Default is the container for the version of the SDK. Note this field is only valid for portable pipelines. When `null`, the `sdk_container_image` field will be omitted from the resulting object.
+  - `service_account_email` (`string`): The Service Account email used to create the job. When `null`, the `service_account_email` field will be omitted from the resulting object.
   - `skip_wait_on_job_termination` (`bool`): If true, treat DRAINING and CANCELLING as terminal job states and do not wait for further changes before removing from terraform state and moving on. WARNING: this will lead to job name conflicts if you do not ensure that the job names are different, e.g. by embedding a release ID or by using a random_id. When `null`, the `skip_wait_on_job_termination` field will be omitted from the resulting object.
+  - `staging_location` (`string`): The Cloud Storage path to use for staging files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `staging_location` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK". When `null`, the `subnetwork` field will be omitted from the resulting object.
+  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.
+  - `transform_name_mapping` (`obj`): Only applicable when updating a pipeline. Map of transform name prefixes of the job to be replaced with the corresponding name prefixes of the new job. When `null`, the `transform_name_mapping` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_dataflow_flex_template_job` resource into the root Terraform configuration.
 
 
+### fn withAdditionalExperiments
+
+```ts
+withAdditionalExperiments()
+```
+
+`google-beta.list.withAdditionalExperiments` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the additional_experiments field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `additional_experiments` field.
+
+
+### fn withAutoscalingAlgorithm
+
+```ts
+withAutoscalingAlgorithm()
+```
+
+`google-beta.string.withAutoscalingAlgorithm` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the autoscaling_algorithm field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `autoscaling_algorithm` field.
+
+
 ### fn withContainerSpecGcsPath
 
 ```ts
@@ -113,6 +193,54 @@ Terraform resource block to set or update the container_spec_gcs_path field.
   - `value` (`string`): The value to set for the `container_spec_gcs_path` field.
 
 
+### fn withEnableStreamingEngine
+
+```ts
+withEnableStreamingEngine()
+```
+
+`google-beta.bool.withEnableStreamingEngine` constructs a mixin object that can be merged into the `bool`
+Terraform resource block to set or update the enable_streaming_engine field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`bool`): The value to set for the `enable_streaming_engine` field.
+
+
+### fn withIpConfiguration
+
+```ts
+withIpConfiguration()
+```
+
+`google-beta.string.withIpConfiguration` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the ip_configuration field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `ip_configuration` field.
+
+
+### fn withKmsKeyName
+
+```ts
+withKmsKeyName()
+```
+
+`google-beta.string.withKmsKeyName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the kms_key_name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `kms_key_name` field.
+
+
 ### fn withLabels
 
 ```ts
@@ -129,6 +257,54 @@ Terraform resource block to set or update the labels field.
   - `value` (`obj`): The value to set for the `labels` field.
 
 
+### fn withLauncherMachineType
+
+```ts
+withLauncherMachineType()
+```
+
+`google-beta.string.withLauncherMachineType` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the launcher_machine_type field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `launcher_machine_type` field.
+
+
+### fn withMachineType
+
+```ts
+withMachineType()
+```
+
+`google-beta.string.withMachineType` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the machine_type field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `machine_type` field.
+
+
+### fn withMaxWorkers
+
+```ts
+withMaxWorkers()
+```
+
+`google-beta.number.withMaxWorkers` constructs a mixin object that can be merged into the `number`
+Terraform resource block to set or update the max_workers field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`number`): The value to set for the `max_workers` field.
+
+
 ### fn withName
 
 ```ts
@@ -145,6 +321,38 @@ Terraform resource block to set or update the name field.
   - `value` (`string`): The value to set for the `name` field.
 
 
+### fn withNetwork
+
+```ts
+withNetwork()
+```
+
+`google-beta.string.withNetwork` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the network field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `network` field.
+
+
+### fn withNumWorkers
+
+```ts
+withNumWorkers()
+```
+
+`google-beta.number.withNumWorkers` constructs a mixin object that can be merged into the `number`
+Terraform resource block to set or update the num_workers field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`number`): The value to set for the `num_workers` field.
+
+
 ### fn withOnDelete
 
 ```ts
@@ -209,6 +417,38 @@ Terraform resource block to set or update the region field.
   - `value` (`string`): The value to set for the `region` field.
 
 
+### fn withSdkContainerImage
+
+```ts
+withSdkContainerImage()
+```
+
+`google-beta.string.withSdkContainerImage` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the sdk_container_image field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `sdk_container_image` field.
+
+
+### fn withServiceAccountEmail
+
+```ts
+withServiceAccountEmail()
+```
+
+`google-beta.string.withServiceAccountEmail` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the service_account_email field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_account_email` field.
+
+
 ### fn withSkipWaitOnJobTermination
 
 ```ts
@@ -223,3 +463,67 @@ Terraform resource block to set or update the skip_wait_on_job_termination field
 **Args**:
   - `resourceLabel` (`string`): The name label of the block to update.
   - `value` (`bool`): The value to set for the `skip_wait_on_job_termination` field.
+
+
+### fn withStagingLocation
+
+```ts
+withStagingLocation()
+```
+
+`google-beta.string.withStagingLocation` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the staging_location field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `staging_location` field.
+
+
+### fn withSubnetwork
+
+```ts
+withSubnetwork()
+```
+
+`google-beta.string.withSubnetwork` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the subnetwork field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `subnetwork` field.
+
+
+### fn withTempLocation
+
+```ts
+withTempLocation()
+```
+
+`google-beta.string.withTempLocation` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the temp_location field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `temp_location` field.
+
+
+### fn withTransformNameMapping
+
+```ts
+withTransformNameMapping()
+```
+
+`google-beta.obj.withTransformNameMapping` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the transform_name_mapping field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `transform_name_mapping` field.
diff --git a/docs/4.x/google_datastream_stream.md b/docs/4.x/google_datastream_stream.md
index e395cfe..f9fe641 100644
--- a/docs/4.x/google_datastream_stream.md
+++ b/docs/4.x/google_datastream_stream.md
@@ -1103,6 +1103,8 @@ Terraform sub block.
 
 
 **Args**:
+  - `max_concurrent_backfill_tasks` (`number`): Maximum number of concurrent backfill tasks. The number should be non negative.
+If not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_backfill_tasks` field will be omitted from the resulting object.
   - `max_concurrent_cdc_tasks` (`number`): Maximum number of concurrent CDC tasks. The number should be non negative.
 If not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_cdc_tasks` field will be omitted from the resulting object.
   - `exclude_objects` (`list[obj]`): MySQL objects to exclude from the stream. When `null`, the `exclude_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_datastream_stream.source_config.mysql_source_config.exclude_objects.new](#fn-source_configsource_configexclude_objectsnew) constructor.
diff --git a/docs/4.x/google_dns_record_set.md b/docs/4.x/google_dns_record_set.md
index 6399e30..552b1be 100644
--- a/docs/4.x/google_dns_record_set.md
+++ b/docs/4.x/google_dns_record_set.md
@@ -347,7 +347,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
@@ -450,7 +450,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
@@ -502,7 +502,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
@@ -579,7 +579,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
diff --git a/docs/4.x/google_gkeonprem_vmware_cluster.md b/docs/4.x/google_gkeonprem_vmware_cluster.md
index fca6fe0..a6f8c53 100644
--- a/docs/4.x/google_gkeonprem_vmware_cluster.md
+++ b/docs/4.x/google_gkeonprem_vmware_cluster.md
@@ -1233,7 +1233,7 @@ Terraform sub block.
 
 
 **Args**:
-  - `hostname` (`string`): Hostname of the machine. VM's name will be used if this field is empty.
+  - `hostname` (`string`): Hostname of the machine. VM's name will be used if this field is empty. When `null`, the `hostname` field will be omitted from the resulting object.
   - `ip` (`string`): IP could be an IP address (like 1.2.3.4) or a CIDR (like 1.2.3.0/24).
 
 **Returns**:
diff --git a/docs/4.x/google_monitoring_alert_policy.md b/docs/4.x/google_monitoring_alert_policy.md
index c4f1b23..df93005 100644
--- a/docs/4.x/google_monitoring_alert_policy.md
+++ b/docs/4.x/google_monitoring_alert_policy.md
@@ -31,6 +31,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withUserLabels()`](#fn-withuserlabels)
 * [`obj alert_strategy`](#obj-alert_strategy)
   * [`fn new()`](#fn-alert_strategynew)
+  * [`obj alert_strategy.notification_channel_strategy`](#obj-alert_strategynotification_channel_strategy)
+    * [`fn new()`](#fn-alert_strategynotification_channel_strategynew)
   * [`obj alert_strategy.notification_rate_limit`](#obj-alert_strategynotification_rate_limit)
     * [`fn new()`](#fn-alert_strategynotification_rate_limitnew)
 * [`obj conditions`](#obj-conditions)
@@ -53,6 +55,8 @@ This package contains functions and utilities for setting up the resource using
       * [`fn new()`](#fn-conditionscondition_thresholdaggregationsnew)
     * [`obj conditions.condition_threshold.denominator_aggregations`](#obj-conditionscondition_thresholddenominator_aggregations)
       * [`fn new()`](#fn-conditionscondition_thresholddenominator_aggregationsnew)
+    * [`obj conditions.condition_threshold.forecast_options`](#obj-conditionscondition_thresholdforecast_options)
+      * [`fn new()`](#fn-conditionscondition_thresholdforecast_optionsnew)
     * [`obj conditions.condition_threshold.trigger`](#obj-conditionscondition_thresholdtrigger)
       * [`fn new()`](#fn-conditionscondition_thresholdtriggernew)
 * [`obj documentation`](#obj-documentation)
@@ -440,6 +444,8 @@ Terraform sub block.
 
 **Args**:
   - `auto_close` (`string`): If an alert policy that was active has no data for this long, any open incidents will close. When `null`, the `auto_close` field will be omitted from the resulting object.
+  - `notification_channel_strategy` (`list[obj]`): Control over how the notification channels in 'notification_channels'
+are notified when this alert fires, on a per-channel basis. When `null`, the `notification_channel_strategy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.alert_strategy.notification_channel_strategy.new](#fn-alert_strategynotification_channel_strategynew) constructor.
   - `notification_rate_limit` (`list[obj]`): Required for alert policies with a LogMatch condition.
 This limit is not implemented for alert policies that are not log-based. When `null`, the `notification_rate_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.alert_strategy.notification_rate_limit.new](#fn-alert_strategynotification_rate_limitnew) constructor.
 
@@ -447,6 +453,33 @@ This limit is not implemented for alert policies that are not log-based. When `n
   - An attribute object that represents the `alert_strategy` sub block.
 
 
+## obj alert_strategy.notification_channel_strategy
+
+
+
+### fn alert_strategy.notification_channel_strategy.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_monitoring_alert_policy.alert_strategy.notification_channel_strategy.new` constructs a new object with attributes and blocks configured for the `notification_channel_strategy`
+Terraform sub block.
+
+
+
+**Args**:
+  - `notification_channel_names` (`list`): The notification channels that these settings apply to. Each of these
+correspond to the name field in one of the NotificationChannel objects
+referenced in the notification_channels field of this AlertPolicy. The format is
+'projects/[PROJECT_ID_OR_NUMBER]/notificationChannels/[CHANNEL_ID]' When `null`, the `notification_channel_names` field will be omitted from the resulting object.
+  - `renotify_interval` (`string`): The frequency at which to send reminder notifications for open incidents. When `null`, the `renotify_interval` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `notification_channel_strategy` sub block.
+
+
 ## obj alert_strategy.notification_rate_limit
 
 
@@ -889,6 +922,12 @@ labels.This field is similar to the one in
 the MetricService.ListTimeSeries request. It
 is advisable to use the ListTimeSeries
 method when debugging this field. When `null`, the `denominator_aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.denominator_aggregations.new](#fn-conditionsconditionsdenominator_aggregationsnew) constructor.
+  - `forecast_options` (`list[obj]`): When this field is present, the 'MetricThreshold'
+condition forecasts whether the time series is
+predicted to violate the threshold within the
+'forecastHorizon'. When this field is not set, the
+'MetricThreshold' tests the current value of the
+timeseries against the threshold. When `null`, the `forecast_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_monitoring_alert_policy.conditions.condition_threshold.forecast_options.new](#fn-conditionsconditionsforecast_optionsnew) constructor.
   - `trigger` (`list[obj]`): The number/percent of time series for which
 the comparison must hold in order for the
 condition to trigger. If unspecified, then
@@ -1092,6 +1131,34 @@ returned. Possible values: ["ALIGN_NONE", "ALIGN_DELTA", "AL
   - An attribute object that represents the `denominator_aggregations` sub block.
 
 
+## obj conditions.condition_threshold.forecast_options
+
+
+
+### fn conditions.condition_threshold.forecast_options.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_monitoring_alert_policy.conditions.condition_threshold.forecast_options.new` constructs a new object with attributes and blocks configured for the `forecast_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `forecast_horizon` (`string`): The length of time into the future to forecast
+whether a timeseries will violate the threshold.
+If the predicted value is found to violate the
+threshold, and the violation is observed in all
+forecasts made for the Configured 'duration',
+then the timeseries is considered to be failing.
+
+**Returns**:
+  - An attribute object that represents the `forecast_options` sub block.
+
+
 ## obj conditions.condition_threshold.trigger
 
 
diff --git a/docs/4.x/google_network_security_server_tls_policy.md b/docs/4.x/google_network_security_server_tls_policy.md
new file mode 100644
index 0000000..1219bc0
--- /dev/null
+++ b/docs/4.x/google_network_security_server_tls_policy.md
@@ -0,0 +1,529 @@
+---
+permalink: /google_network_security_server_tls_policy/
+---
+
+# google_network_security_server_tls_policy
+
+`google_network_security_server_tls_policy` represents the `google-beta_google_network_security_server_tls_policy` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAllowOpen()`](#fn-withallowopen)
+* [`fn withDescription()`](#fn-withdescription)
+* [`fn withLabels()`](#fn-withlabels)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withMtlsPolicy()`](#fn-withmtlspolicy)
+* [`fn withMtlsPolicyMixin()`](#fn-withmtlspolicymixin)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withServerCertificate()`](#fn-withservercertificate)
+* [`fn withServerCertificateMixin()`](#fn-withservercertificatemixin)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`obj mtls_policy`](#obj-mtls_policy)
+  * [`fn new()`](#fn-mtls_policynew)
+  * [`obj mtls_policy.client_validation_ca`](#obj-mtls_policyclient_validation_ca)
+    * [`fn new()`](#fn-mtls_policyclient_validation_canew)
+    * [`obj mtls_policy.client_validation_ca.certificate_provider_instance`](#obj-mtls_policyclient_validation_cacertificate_provider_instance)
+      * [`fn new()`](#fn-mtls_policyclient_validation_cacertificate_provider_instancenew)
+    * [`obj mtls_policy.client_validation_ca.grpc_endpoint`](#obj-mtls_policyclient_validation_cagrpc_endpoint)
+      * [`fn new()`](#fn-mtls_policyclient_validation_cagrpc_endpointnew)
+* [`obj server_certificate`](#obj-server_certificate)
+  * [`fn new()`](#fn-server_certificatenew)
+  * [`obj server_certificate.certificate_provider_instance`](#obj-server_certificatecertificate_provider_instance)
+    * [`fn new()`](#fn-server_certificatecertificate_provider_instancenew)
+  * [`obj server_certificate.grpc_endpoint`](#obj-server_certificategrpc_endpoint)
+    * [`fn new()`](#fn-server_certificategrpc_endpointnew)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.new` injects a new `google-beta_google_network_security_server_tls_policy` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_network_security_server_tls_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_network_security_server_tls_policy` using the reference:
+
+    $._ref.google-beta_google_network_security_server_tls_policy.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_network_security_server_tls_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `allow_open` (`bool`): This field applies only for Traffic Director policies. It is must be set to false for external HTTPS load balancer policies.
+Determines if server allows plaintext connections. If set to true, server allows plain text connections. By default, it is set to false. This setting is not exclusive of other encryption modes. For example, if allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.
+Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80. When `null`, the `allow_open` field will be omitted from the resulting object.
+  - `description` (`string`): A free-text description of the resource. Max length 1024 characters. When `null`, the `description` field will be omitted from the resulting object.
+  - `labels` (`obj`): Set of label tags associated with the ServerTlsPolicy resource. When `null`, the `labels` field will be omitted from the resulting object.
+  - `location` (`string`): The location of the server tls policy.
+The default value is 'global'. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Name of the ServerTlsPolicy resource.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `mtls_policy` (`list[obj]`): This field is required if the policy is used with external HTTPS load balancers. This field can be empty for Traffic Director.
+Defines a mechanism to provision peer validation certificates for peer to peer authentication (Mutual TLS - mTLS). If not specified, client certificate will not be requested. The connection is treated as TLS and not mTLS. If allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. When `null`, the `mtls_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.new](#fn-mtls_policynew) constructor.
+  - `server_certificate` (`list[obj]`): Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. When `null`, the `server_certificate` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.new](#fn-server_certificatenew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.newAttrs` constructs a new object with attributes and blocks configured for the `google_network_security_server_tls_policy`
+Terraform resource.
+
+Unlike [google-beta.google_network_security_server_tls_policy.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `allow_open` (`bool`): This field applies only for Traffic Director policies. It is must be set to false for external HTTPS load balancer policies.
+Determines if server allows plaintext connections. If set to true, server allows plain text connections. By default, it is set to false. This setting is not exclusive of other encryption modes. For example, if allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.
+Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80. When `null`, the `allow_open` field will be omitted from the resulting object.
+  - `description` (`string`): A free-text description of the resource. Max length 1024 characters. When `null`, the `description` field will be omitted from the resulting object.
+  - `labels` (`obj`): Set of label tags associated with the ServerTlsPolicy resource. When `null`, the `labels` field will be omitted from the resulting object.
+  - `location` (`string`): The location of the server tls policy.
+The default value is 'global'. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Name of the ServerTlsPolicy resource.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `mtls_policy` (`list[obj]`): This field is required if the policy is used with external HTTPS load balancers. This field can be empty for Traffic Director.
+Defines a mechanism to provision peer validation certificates for peer to peer authentication (Mutual TLS - mTLS). If not specified, client certificate will not be requested. The connection is treated as TLS and not mTLS. If allowOpen and mtlsPolicy are set, server allows both plain text and mTLS connections. When `null`, the `mtls_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.new](#fn-mtls_policynew) constructor.
+  - `server_certificate` (`list[obj]`): Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. When `null`, the `server_certificate` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.new](#fn-server_certificatenew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_network_security_server_tls_policy` resource into the root Terraform configuration.
+
+
+### fn withAllowOpen
+
+```ts
+withAllowOpen()
+```
+
+`google-beta.bool.withAllowOpen` constructs a mixin object that can be merged into the `bool`
+Terraform resource block to set or update the allow_open field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`bool`): The value to set for the `allow_open` field.
+
+
+### fn withDescription
+
+```ts
+withDescription()
+```
+
+`google-beta.string.withDescription` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the description field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `description` field.
+
+
+### fn withLabels
+
+```ts
+withLabels()
+```
+
+`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the labels field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `labels` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the location field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withMtlsPolicy
+
+```ts
+withMtlsPolicy()
+```
+
+`google-beta.list[obj].withMtlsPolicy` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the mtls_policy field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withMtlsPolicyMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `mtls_policy` field.
+
+
+### fn withMtlsPolicyMixin
+
+```ts
+withMtlsPolicyMixin()
+```
+
+`google-beta.list[obj].withMtlsPolicyMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the mtls_policy field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withMtlsPolicy](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `mtls_policy` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withServerCertificate
+
+```ts
+withServerCertificate()
+```
+
+`google-beta.list[obj].withServerCertificate` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the server_certificate field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withServerCertificateMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `server_certificate` field.
+
+
+### fn withServerCertificateMixin
+
+```ts
+withServerCertificateMixin()
+```
+
+`google-beta.list[obj].withServerCertificateMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the server_certificate field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withServerCertificate](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `server_certificate` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+## obj mtls_policy
+
+
+
+### fn mtls_policy.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.mtls_policy.new` constructs a new object with attributes and blocks configured for the `mtls_policy`
+Terraform sub block.
+
+
+
+**Args**:
+  - `client_validation_mode` (`string`): When the client presents an invalid certificate or no certificate to the load balancer, the clientValidationMode specifies how the client connection is handled.
+Required if the policy is to be used with the external HTTPS load balancing. For Traffic Director it must be empty. Possible values: ["CLIENT_VALIDATION_MODE_UNSPECIFIED", "ALLOW_INVALID_OR_MISSING_CLIENT_CERT", "REJECT_INVALID"] When `null`, the `client_validation_mode` field will be omitted from the resulting object.
+  - `client_validation_trust_config` (`string`): Reference to the TrustConfig from certificatemanager.googleapis.com namespace.
+If specified, the chain validation will be performed against certificates configured in the given TrustConfig.
+Allowed only if the policy is to be used with external HTTPS load balancers. When `null`, the `client_validation_trust_config` field will be omitted from the resulting object.
+  - `client_validation_ca` (`list[obj]`): Required if the policy is to be used with Traffic Director. For external HTTPS load balancers it must be empty.
+Defines the mechanism to obtain the Certificate Authority certificate to validate the client certificate. When `null`, the `client_validation_ca` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.new](#fn-mtls_policyclient_validation_canew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `mtls_policy` sub block.
+
+
+## obj mtls_policy.client_validation_ca
+
+
+
+### fn mtls_policy.client_validation_ca.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.new` constructs a new object with attributes and blocks configured for the `client_validation_ca`
+Terraform sub block.
+
+
+
+**Args**:
+  - `certificate_provider_instance` (`list[obj]`): Optional if policy is to be used with Traffic Director. For external HTTPS load balancer must be empty.
+Defines a mechanism to provision server identity (public and private keys). Cannot be combined with allowOpen as a permissive mode that allows both plain text and TLS is not supported. When `null`, the `certificate_provider_instance` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.certificate_provider_instance.new](#fn-mtls_policymtls_policycertificate_provider_instancenew) constructor.
+  - `grpc_endpoint` (`list[obj]`): gRPC specific configuration to access the gRPC server to obtain the cert and private key. When `null`, the `grpc_endpoint` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.grpc_endpoint.new](#fn-mtls_policymtls_policygrpc_endpointnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `client_validation_ca` sub block.
+
+
+## obj mtls_policy.client_validation_ca.certificate_provider_instance
+
+
+
+### fn mtls_policy.client_validation_ca.certificate_provider_instance.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.certificate_provider_instance.new` constructs a new object with attributes and blocks configured for the `certificate_provider_instance`
+Terraform sub block.
+
+
+
+**Args**:
+  - `plugin_instance` (`string`): Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
+
+**Returns**:
+  - An attribute object that represents the `certificate_provider_instance` sub block.
+
+
+## obj mtls_policy.client_validation_ca.grpc_endpoint
+
+
+
+### fn mtls_policy.client_validation_ca.grpc_endpoint.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.mtls_policy.client_validation_ca.grpc_endpoint.new` constructs a new object with attributes and blocks configured for the `grpc_endpoint`
+Terraform sub block.
+
+
+
+**Args**:
+  - `target_uri` (`string`): The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
+
+**Returns**:
+  - An attribute object that represents the `grpc_endpoint` sub block.
+
+
+## obj server_certificate
+
+
+
+### fn server_certificate.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.server_certificate.new` constructs a new object with attributes and blocks configured for the `server_certificate`
+Terraform sub block.
+
+
+
+**Args**:
+  - `certificate_provider_instance` (`list[obj]`): Optional if policy is to be used with Traffic Director. For external HTTPS load balancer must be empty.
+Defines a mechanism to provision server identity (public and private keys). Cannot be combined with allowOpen as a permissive mode that allows both plain text and TLS is not supported. When `null`, the `certificate_provider_instance` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.certificate_provider_instance.new](#fn-server_certificatecertificate_provider_instancenew) constructor.
+  - `grpc_endpoint` (`list[obj]`): gRPC specific configuration to access the gRPC server to obtain the cert and private key. When `null`, the `grpc_endpoint` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_network_security_server_tls_policy.server_certificate.grpc_endpoint.new](#fn-server_certificategrpc_endpointnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `server_certificate` sub block.
+
+
+## obj server_certificate.certificate_provider_instance
+
+
+
+### fn server_certificate.certificate_provider_instance.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.server_certificate.certificate_provider_instance.new` constructs a new object with attributes and blocks configured for the `certificate_provider_instance`
+Terraform sub block.
+
+
+
+**Args**:
+  - `plugin_instance` (`string`): Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance.
+
+**Returns**:
+  - An attribute object that represents the `certificate_provider_instance` sub block.
+
+
+## obj server_certificate.grpc_endpoint
+
+
+
+### fn server_certificate.grpc_endpoint.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.server_certificate.grpc_endpoint.new` constructs a new object with attributes and blocks configured for the `grpc_endpoint`
+Terraform sub block.
+
+
+
+**Args**:
+  - `target_uri` (`string`): The target URI of the gRPC endpoint. Only UDS path is supported, and should start with "unix:".
+
+**Returns**:
+  - An attribute object that represents the `grpc_endpoint` sub block.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_network_security_server_tls_policy.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_privateca_ca_pool.md b/docs/4.x/google_privateca_ca_pool.md
index 5412c73..7454b27 100644
--- a/docs/4.x/google_privateca_ca_pool.md
+++ b/docs/4.x/google_privateca_ca_pool.md
@@ -831,6 +831,9 @@ Terraform sub block.
 
 
 **Args**:
+  - `encoding_format` (`string`): Specifies the encoding format of each CertificateAuthority's CA
+certificate and CRLs. If this is omitted, CA certificates and CRLs
+will be published in PEM. Possible values: ["PEM", "DER"] When `null`, the `encoding_format` field will be omitted from the resulting object.
   - `publish_ca_cert` (`bool`): When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"
 X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding
 X.509 extension will not be written in issued certificates.
diff --git a/docs/4.x/google_sql_database_instance.md b/docs/4.x/google_sql_database_instance.md
index 3e9f814..2821a29 100644
--- a/docs/4.x/google_sql_database_instance.md
+++ b/docs/4.x/google_sql_database_instance.md
@@ -45,6 +45,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-settingsnew)
   * [`obj settings.active_directory_config`](#obj-settingsactive_directory_config)
     * [`fn new()`](#fn-settingsactive_directory_confignew)
+  * [`obj settings.advanced_machine_features`](#obj-settingsadvanced_machine_features)
+    * [`fn new()`](#fn-settingsadvanced_machine_featuresnew)
   * [`obj settings.backup_configuration`](#obj-settingsbackup_configuration)
     * [`fn new()`](#fn-settingsbackup_configurationnew)
     * [`obj settings.backup_configuration.backup_retention_settings`](#obj-settingsbackup_configurationbackup_retention_settings)
@@ -621,6 +623,7 @@ is set to true. Defaults to ZONAL. When `null`, the `availability_type` field wi
   - `time_zone` (`string`): The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. When `null`, the `time_zone` field will be omitted from the resulting object.
   - `user_labels` (`obj`): A set of key/value user label pairs to assign to the instance. When `null`, the `user_labels` field will be omitted from the resulting object.
   - `active_directory_config` (`list[obj]`): Set the `active_directory_config` field on the resulting object. When `null`, the `active_directory_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.active_directory_config.new](#fn-settingsactive_directory_confignew) constructor.
+  - `advanced_machine_features` (`list[obj]`): Set the `advanced_machine_features` field on the resulting object. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.advanced_machine_features.new](#fn-settingsadvanced_machine_featuresnew) constructor.
   - `backup_configuration` (`list[obj]`): Set the `backup_configuration` field on the resulting object. When `null`, the `backup_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.backup_configuration.new](#fn-settingsbackup_configurationnew) constructor.
   - `database_flags` (`list[obj]`): Set the `database_flags` field on the resulting object. When `null`, the `database_flags` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.database_flags.new](#fn-settingsdatabase_flagsnew) constructor.
   - `deny_maintenance_period` (`list[obj]`): Set the `deny_maintenance_period` field on the resulting object. When `null`, the `deny_maintenance_period` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_sql_database_instance.settings.deny_maintenance_period.new](#fn-settingsdeny_maintenance_periodnew) constructor.
@@ -658,6 +661,29 @@ Terraform sub block.
   - An attribute object that represents the `active_directory_config` sub block.
 
 
+## obj settings.advanced_machine_features
+
+
+
+### fn settings.advanced_machine_features.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_sql_database_instance.settings.advanced_machine_features.new` constructs a new object with attributes and blocks configured for the `advanced_machine_features`
+Terraform sub block.
+
+
+
+**Args**:
+  - `threads_per_core` (`number`): The number of threads per physical core. Can be 1 or 2. When `null`, the `threads_per_core` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `advanced_machine_features` sub block.
+
+
 ## obj settings.backup_configuration
 
 
diff --git a/docs/4.x/google_storage_transfer_job.md b/docs/4.x/google_storage_transfer_job.md
index 501a480..4b96c9b 100644
--- a/docs/4.x/google_storage_transfer_job.md
+++ b/docs/4.x/google_storage_transfer_job.md
@@ -465,6 +465,7 @@ Terraform sub block.
 
 **Args**:
   - `bucket_name` (`string`): S3 Bucket name.
+  - `path` (`string`): S3 Bucket path in bucket to transfer. When `null`, the `path` field will be omitted from the resulting object.
   - `role_arn` (`string`): The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project. When `null`, the `role_arn` field will be omitted from the resulting object.
   - `aws_access_key` (`list[obj]`): AWS credentials block. When `null`, the `aws_access_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_transfer_job.transfer_spec.aws_s3_data_source.aws_access_key.new](#fn-transfer_spectransfer_specaws_access_keynew) constructor.
 
diff --git a/docs/4.x/google_workstations_workstation_config.md b/docs/4.x/google_workstations_workstation_config.md
index a173cb7..442770a 100644
--- a/docs/4.x/google_workstations_workstation_config.md
+++ b/docs/4.x/google_workstations_workstation_config.md
@@ -23,11 +23,13 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withEncryptionKeyMixin()`](#fn-withencryptionkeymixin)
 * [`fn withHost()`](#fn-withhost)
 * [`fn withHostMixin()`](#fn-withhostmixin)
+* [`fn withIdleTimeout()`](#fn-withidletimeout)
 * [`fn withLabels()`](#fn-withlabels)
 * [`fn withLocation()`](#fn-withlocation)
 * [`fn withPersistentDirectories()`](#fn-withpersistentdirectories)
 * [`fn withPersistentDirectoriesMixin()`](#fn-withpersistentdirectoriesmixin)
 * [`fn withProject()`](#fn-withproject)
+* [`fn withRunningTimeout()`](#fn-withrunningtimeout)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
 * [`fn withWorkstationClusterId()`](#fn-withworkstationclusterid)
@@ -82,9 +84,13 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `resourceLabel` (`string`): The name label of the block.
   - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.
   - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.
+  - `idle_timeout` (`string`): How long to wait before automatically stopping an instance that hasn't recently received any user traffic. A value of 0 indicates that this instance should never time out from idleness. Defaults to 20 minutes.
+A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s". When `null`, the `idle_timeout` field will be omitted from the resulting object.
   - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.
   - `location` (`string`): The location where the workstation cluster config should reside.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `running_timeout` (`string`): How long to wait before automatically stopping a workstation after it was started. A value of 0 indicates that workstations using this configuration should never time out from running duration. Must be greater than 0 and less than 24 hours if 'encryption_key' is set. Defaults to 12 hours.
+A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s". When `null`, the `running_timeout` field will be omitted from the resulting object.
   - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.
   - `workstation_config_id` (`string`): The ID to be assigned to the workstation cluster config.
   - `container` (`list[obj]`): Container that will be run for each workstation using this configuration when that workstation is started. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.container.new](#fn-containernew) constructor.
@@ -121,9 +127,13 @@ injecting into a complete block.
 **Args**:
   - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.
   - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.
+  - `idle_timeout` (`string`): How long to wait before automatically stopping an instance that hasn't recently received any user traffic. A value of 0 indicates that this instance should never time out from idleness. Defaults to 20 minutes.
+A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s". When `null`, the `idle_timeout` field will be omitted from the resulting object.
   - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.
   - `location` (`string`): The location where the workstation cluster config should reside.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `running_timeout` (`string`): How long to wait before automatically stopping a workstation after it was started. A value of 0 indicates that workstations using this configuration should never time out from running duration. Must be greater than 0 and less than 24 hours if 'encryption_key' is set. Defaults to 12 hours.
+A duration in seconds with up to nine fractional digits, ending with 's'. Example: "3.5s". When `null`, the `running_timeout` field will be omitted from the resulting object.
   - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.
   - `workstation_config_id` (`string`): The ID to be assigned to the workstation cluster config.
   - `container` (`list[obj]`): Container that will be run for each workstation using this configuration when that workstation is started. When `null`, the `container` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.container.new](#fn-containernew) constructor.
@@ -283,6 +293,22 @@ function.
   - `value` (`list[obj]`): The value to set for the `host` field.
 
 
+### fn withIdleTimeout
+
+```ts
+withIdleTimeout()
+```
+
+`google-beta.string.withIdleTimeout` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the idle_timeout field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `idle_timeout` field.
+
+
 ### fn withLabels
 
 ```ts
@@ -368,6 +394,22 @@ Terraform resource block to set or update the project field.
   - `value` (`string`): The value to set for the `project` field.
 
 
+### fn withRunningTimeout
+
+```ts
+withRunningTimeout()
+```
+
+`google-beta.string.withRunningTimeout` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the running_timeout field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `running_timeout` field.
+
+
 ### fn withTimeouts
 
 ```ts
@@ -608,7 +650,7 @@ Terraform sub block.
 
 **Args**:
   - `mount_path` (`string`): Location of this directory in the running workstation. When `null`, the `mount_path` field will be omitted from the resulting object.
-  - `gce_pd` (`list[obj]`): PersistentDirectory backed by a Compute Engine regional persistent disk. When `null`, the `gce_pd` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.gce_pd.new](#fn-persistent_directoriesgce_pdnew) constructor.
+  - `gce_pd` (`list[obj]`): A directory to persist across workstation sessions, backed by a Compute Engine regional persistent disk. Can only be updated if not empty during creation. When `null`, the `gce_pd` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation_config.persistent_directories.gce_pd.new](#fn-persistent_directoriesgce_pdnew) constructor.
 
 **Returns**:
   - An attribute object that represents the `persistent_directories` sub block.
@@ -631,10 +673,12 @@ Terraform sub block.
 
 
 **Args**:
-  - `disk_type` (`string`): Type of the disk to use. When `null`, the `disk_type` field will be omitted from the resulting object.
-  - `fs_type` (`string`): Type of file system that the disk should be formatted with. The workstation image must support this file system type. Must be empty if sourceSnapshot is set. When `null`, the `fs_type` field will be omitted from the resulting object.
-  - `reclaim_policy` (`string`): What should happen to the disk after the workstation is deleted. Defaults to DELETE. Possible values: ["DELETE", "RETAIN"] When `null`, the `reclaim_policy` field will be omitted from the resulting object.
-  - `size_gb` (`number`): Size of the disk in GB. Must be empty if sourceSnapshot is set. When `null`, the `size_gb` field will be omitted from the resulting object.
+  - `disk_type` (`string`): The type of the persistent disk for the home directory. Defaults to 'pd-standard'. When `null`, the `disk_type` field will be omitted from the resulting object.
+  - `fs_type` (`string`): Type of file system that the disk should be formatted with. The workstation image must support this file system type. Must be empty if 'sourceSnapshot' is set. Defaults to 'ext4'. When `null`, the `fs_type` field will be omitted from the resulting object.
+  - `reclaim_policy` (`string`): Whether the persistent disk should be deleted when the workstation is deleted. Valid values are 'DELETE' and 'RETAIN'. Defaults to 'DELETE'. Possible values: ["DELETE", "RETAIN"] When `null`, the `reclaim_policy` field will be omitted from the resulting object.
+  - `size_gb` (`number`): The GB capacity of a persistent home directory for each workstation created with this configuration. Must be empty if 'sourceSnapshot' is set.
+Valid values are '10', '50', '100', '200', '500', or '1000'. Defaults to '200'. If less than '200' GB, the 'diskType' must be 'pd-balanced' or 'pd-ssd'. When `null`, the `size_gb` field will be omitted from the resulting object.
+  - `source_snapshot` (`string`): Name of the snapshot to use as the source for the disk. This can be the snapshot's 'self_link', 'id', or a string in the format of 'projects/{project}/global/snapshots/{snapshot}'. If set, 'sizeGb' and 'fsType' must be empty. Can only be updated if it has an existing value. When `null`, the `source_snapshot` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `gce_pd` sub block.