diff --git a/4.x/_gen/data/access_context_manager_access_policy_iam_policy.libsonnet b/4.x/_gen/data/access_context_manager_access_policy_iam_policy.libsonnet
new file mode 100644
index 0000000..23633ff
--- /dev/null
+++ b/4.x/_gen/data/access_context_manager_access_policy_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='access_context_manager_access_policy_iam_policy', url='', help='`access_context_manager_access_policy_iam_policy` represents the `google_access_context_manager_access_policy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.access_context_manager_access_policy_iam_policy.new` injects a new `data_google_access_context_manager_access_policy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.access_context_manager_access_policy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.access_context_manager_access_policy_iam_policy` using the reference:\n\n    $._ref.data_google_access_context_manager_access_policy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_access_context_manager_access_policy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    _meta={}
+  ):: tf.withData(
+    type='google_access_context_manager_access_policy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.access_context_manager_access_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `access_context_manager_access_policy_iam_policy`\nTerraform data source.\n\nUnlike [google.data.access_context_manager_access_policy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `access_context_manager_access_policy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name
+  ):: std.prune(a={
+    name: name,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_access_context_manager_access_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/apigee_environment_iam_policy.libsonnet b/4.x/_gen/data/apigee_environment_iam_policy.libsonnet
new file mode 100644
index 0000000..2aa254d
--- /dev/null
+++ b/4.x/_gen/data/apigee_environment_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='apigee_environment_iam_policy', url='', help='`apigee_environment_iam_policy` represents the `google_apigee_environment_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.apigee_environment_iam_policy.new` injects a new `data_google_apigee_environment_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.apigee_environment_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.apigee_environment_iam_policy` using the reference:\n\n    $._ref.data_google_apigee_environment_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_apigee_environment_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `env_id` (`string`): Set the `env_id` field on the resulting data source block.\n  - `org_id` (`string`): Set the `org_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    env_id,
+    org_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_apigee_environment_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(env_id=env_id, org_id=org_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.apigee_environment_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `apigee_environment_iam_policy`\nTerraform data source.\n\nUnlike [google.data.apigee_environment_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `env_id` (`string`): Set the `env_id` field on the resulting object.\n  - `org_id` (`string`): Set the `org_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `apigee_environment_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    env_id,
+    org_id
+  ):: std.prune(a={
+    env_id: env_id,
+    org_id: org_id,
+  }),
+  '#withEnvId':: d.fn(help='`google.string.withEnvId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the env_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `env_id` field.\n', args=[]),
+  withEnvId(dataSrcLabel, value): {
+    data+: {
+      google_apigee_environment_iam_policy+: {
+        [dataSrcLabel]+: {
+          env_id: value,
+        },
+      },
+    },
+  },
+  '#withOrgId':: d.fn(help='`google.string.withOrgId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the org_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `org_id` field.\n', args=[]),
+  withOrgId(dataSrcLabel, value): {
+    data+: {
+      google_apigee_environment_iam_policy+: {
+        [dataSrcLabel]+: {
+          org_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/artifact_registry_repository_iam_policy.libsonnet b/4.x/_gen/data/artifact_registry_repository_iam_policy.libsonnet
new file mode 100644
index 0000000..10060e7
--- /dev/null
+++ b/4.x/_gen/data/artifact_registry_repository_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='artifact_registry_repository_iam_policy', url='', help='`artifact_registry_repository_iam_policy` represents the `google_artifact_registry_repository_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.artifact_registry_repository_iam_policy.new` injects a new `data_google_artifact_registry_repository_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.artifact_registry_repository_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.artifact_registry_repository_iam_policy` using the reference:\n\n    $._ref.data_google_artifact_registry_repository_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_artifact_registry_repository_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    repository,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_artifact_registry_repository_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, repository=repository),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.artifact_registry_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `artifact_registry_repository_iam_policy`\nTerraform data source.\n\nUnlike [google.data.artifact_registry_repository_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `artifact_registry_repository_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    repository,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    repository: repository,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_artifact_registry_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_artifact_registry_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRepository':: d.fn(help='`google.string.withRepository` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the repository field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `repository` field.\n', args=[]),
+  withRepository(dataSrcLabel, value): {
+    data+: {
+      google_artifact_registry_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          repository: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_analytics_hub_data_exchange_iam_policy.libsonnet b/4.x/_gen/data/bigquery_analytics_hub_data_exchange_iam_policy.libsonnet
new file mode 100644
index 0000000..b40ec22
--- /dev/null
+++ b/4.x/_gen/data/bigquery_analytics_hub_data_exchange_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigquery_analytics_hub_data_exchange_iam_policy', url='', help='`bigquery_analytics_hub_data_exchange_iam_policy` represents the `google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigquery_analytics_hub_data_exchange_iam_policy.new` injects a new `data_google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigquery_analytics_hub_data_exchange_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigquery_analytics_hub_data_exchange_iam_policy` using the reference:\n\n    $._ref.data_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    data_exchange_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_analytics_hub_data_exchange_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(data_exchange_id=data_exchange_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigquery_analytics_hub_data_exchange_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_analytics_hub_data_exchange_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigquery_analytics_hub_data_exchange_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_analytics_hub_data_exchange_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    data_exchange_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    data_exchange_id: data_exchange_id,
+    location: location,
+    project: project,
+  }),
+  '#withDataExchangeId':: d.fn(help='`google.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the data_exchange_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `data_exchange_id` field.\n', args=[]),
+  withDataExchangeId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_data_exchange_iam_policy+: {
+        [dataSrcLabel]+: {
+          data_exchange_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_data_exchange_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_data_exchange_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_analytics_hub_listing_iam_policy.libsonnet b/4.x/_gen/data/bigquery_analytics_hub_listing_iam_policy.libsonnet
new file mode 100644
index 0000000..d88c8c7
--- /dev/null
+++ b/4.x/_gen/data/bigquery_analytics_hub_listing_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigquery_analytics_hub_listing_iam_policy', url='', help='`bigquery_analytics_hub_listing_iam_policy` represents the `google_bigquery_analytics_hub_listing_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigquery_analytics_hub_listing_iam_policy.new` injects a new `data_google_bigquery_analytics_hub_listing_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigquery_analytics_hub_listing_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigquery_analytics_hub_listing_iam_policy` using the reference:\n\n    $._ref.data_google_bigquery_analytics_hub_listing_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigquery_analytics_hub_listing_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.\n  - `listing_id` (`string`): Set the `listing_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    data_exchange_id,
+    listing_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_analytics_hub_listing_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      data_exchange_id=data_exchange_id,
+      listing_id=listing_id,
+      location=location,
+      project=project
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigquery_analytics_hub_listing_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_analytics_hub_listing_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigquery_analytics_hub_listing_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.\n  - `listing_id` (`string`): Set the `listing_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_analytics_hub_listing_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    data_exchange_id,
+    listing_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    data_exchange_id: data_exchange_id,
+    listing_id: listing_id,
+    location: location,
+    project: project,
+  }),
+  '#withDataExchangeId':: d.fn(help='`google.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the data_exchange_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `data_exchange_id` field.\n', args=[]),
+  withDataExchangeId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          data_exchange_id: value,
+        },
+      },
+    },
+  },
+  '#withListingId':: d.fn(help='`google.string.withListingId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the listing_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `listing_id` field.\n', args=[]),
+  withListingId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          listing_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_analytics_hub_listing_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_connection_iam_policy.libsonnet b/4.x/_gen/data/bigquery_connection_iam_policy.libsonnet
new file mode 100644
index 0000000..67f5b53
--- /dev/null
+++ b/4.x/_gen/data/bigquery_connection_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigquery_connection_iam_policy', url='', help='`bigquery_connection_iam_policy` represents the `google_bigquery_connection_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigquery_connection_iam_policy.new` injects a new `data_google_bigquery_connection_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigquery_connection_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigquery_connection_iam_policy` using the reference:\n\n    $._ref.data_google_bigquery_connection_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigquery_connection_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `connection_id` (`string`): Set the `connection_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    connection_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_connection_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(connection_id=connection_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigquery_connection_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_connection_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigquery_connection_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `connection_id` (`string`): Set the `connection_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_connection_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    connection_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    connection_id: connection_id,
+    location: location,
+    project: project,
+  }),
+  '#withConnectionId':: d.fn(help='`google.string.withConnectionId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the connection_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `connection_id` field.\n', args=[]),
+  withConnectionId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          connection_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_connection_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_datapolicy_data_policy_iam_policy.libsonnet b/4.x/_gen/data/bigquery_datapolicy_data_policy_iam_policy.libsonnet
new file mode 100644
index 0000000..48e19ab
--- /dev/null
+++ b/4.x/_gen/data/bigquery_datapolicy_data_policy_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigquery_datapolicy_data_policy_iam_policy', url='', help='`bigquery_datapolicy_data_policy_iam_policy` represents the `google_bigquery_datapolicy_data_policy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigquery_datapolicy_data_policy_iam_policy.new` injects a new `data_google_bigquery_datapolicy_data_policy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigquery_datapolicy_data_policy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigquery_datapolicy_data_policy_iam_policy` using the reference:\n\n    $._ref.data_google_bigquery_datapolicy_data_policy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigquery_datapolicy_data_policy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    data_policy_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_datapolicy_data_policy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(data_policy_id=data_policy_id, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigquery_datapolicy_data_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_datapolicy_data_policy_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigquery_datapolicy_data_policy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_datapolicy_data_policy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    data_policy_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    data_policy_id: data_policy_id,
+    location: location,
+    project: project,
+  }),
+  '#withDataPolicyId':: d.fn(help='`google.string.withDataPolicyId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the data_policy_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `data_policy_id` field.\n', args=[]),
+  withDataPolicyId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_datapolicy_data_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          data_policy_id: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_datapolicy_data_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_datapolicy_data_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_dataset_iam_policy.libsonnet b/4.x/_gen/data/bigquery_dataset_iam_policy.libsonnet
new file mode 100644
index 0000000..347b1a5
--- /dev/null
+++ b/4.x/_gen/data/bigquery_dataset_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigquery_dataset_iam_policy', url='', help='`bigquery_dataset_iam_policy` represents the `google_bigquery_dataset_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigquery_dataset_iam_policy.new` injects a new `data_google_bigquery_dataset_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigquery_dataset_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigquery_dataset_iam_policy` using the reference:\n\n    $._ref.data_google_bigquery_dataset_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigquery_dataset_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataset_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_dataset_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dataset_id=dataset_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigquery_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_dataset_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigquery_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_dataset_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataset_id,
+    project=null
+  ):: std.prune(a={
+    dataset_id: dataset_id,
+    project: project,
+  }),
+  '#withDatasetId':: d.fn(help='`google.string.withDatasetId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset_id` field.\n', args=[]),
+  withDatasetId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_dataset_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_dataset_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigquery_table_iam_policy.libsonnet b/4.x/_gen/data/bigquery_table_iam_policy.libsonnet
new file mode 100644
index 0000000..0525a46
--- /dev/null
+++ b/4.x/_gen/data/bigquery_table_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigquery_table_iam_policy', url='', help='`bigquery_table_iam_policy` represents the `google_bigquery_table_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigquery_table_iam_policy.new` injects a new `data_google_bigquery_table_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigquery_table_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigquery_table_iam_policy` using the reference:\n\n    $._ref.data_google_bigquery_table_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigquery_table_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `table_id` (`string`): Set the `table_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataset_id,
+    table_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigquery_table_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dataset_id=dataset_id, project=project, table_id=table_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigquery_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_table_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigquery_table_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `table_id` (`string`): Set the `table_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_table_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataset_id,
+    table_id,
+    project=null
+  ):: std.prune(a={
+    dataset_id: dataset_id,
+    project: project,
+    table_id: table_id,
+  }),
+  '#withDatasetId':: d.fn(help='`google.string.withDatasetId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset_id` field.\n', args=[]),
+  withDatasetId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTableId':: d.fn(help='`google.string.withTableId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the table_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `table_id` field.\n', args=[]),
+  withTableId(dataSrcLabel, value): {
+    data+: {
+      google_bigquery_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          table_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigtable_instance_iam_policy.libsonnet b/4.x/_gen/data/bigtable_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..e11f0b2
--- /dev/null
+++ b/4.x/_gen/data/bigtable_instance_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigtable_instance_iam_policy', url='', help='`bigtable_instance_iam_policy` represents the `google_bigtable_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigtable_instance_iam_policy.new` injects a new `data_google_bigtable_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigtable_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigtable_instance_iam_policy` using the reference:\n\n    $._ref.data_google_bigtable_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigtable_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigtable_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigtable_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigtable_instance_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigtable_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigtable_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    project=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+  }),
+  '#withInstance':: d.fn(help='`google.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/bigtable_table_iam_policy.libsonnet b/4.x/_gen/data/bigtable_table_iam_policy.libsonnet
new file mode 100644
index 0000000..77deb65
--- /dev/null
+++ b/4.x/_gen/data/bigtable_table_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='bigtable_table_iam_policy', url='', help='`bigtable_table_iam_policy` represents the `google_bigtable_table_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.bigtable_table_iam_policy.new` injects a new `data_google_bigtable_table_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.bigtable_table_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.bigtable_table_iam_policy` using the reference:\n\n    $._ref.data_google_bigtable_table_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_bigtable_table_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `table` (`string`): Set the `table` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    table,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_bigtable_table_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project, table=table),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.bigtable_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigtable_table_iam_policy`\nTerraform data source.\n\nUnlike [google.data.bigtable_table_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `table` (`string`): Set the `table` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigtable_table_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    table,
+    project=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+    table: table,
+  }),
+  '#withInstance':: d.fn(help='`google.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTable':: d.fn(help='`google.string.withTable` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the table field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `table` field.\n', args=[]),
+  withTable(dataSrcLabel, value): {
+    data+: {
+      google_bigtable_table_iam_policy+: {
+        [dataSrcLabel]+: {
+          table: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/billing_account_iam_policy.libsonnet b/4.x/_gen/data/billing_account_iam_policy.libsonnet
new file mode 100644
index 0000000..c8122bb
--- /dev/null
+++ b/4.x/_gen/data/billing_account_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='billing_account_iam_policy', url='', help='`billing_account_iam_policy` represents the `google_billing_account_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.billing_account_iam_policy.new` injects a new `data_google_billing_account_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.billing_account_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.billing_account_iam_policy` using the reference:\n\n    $._ref.data_google_billing_account_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_billing_account_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    billing_account_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_billing_account_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(billing_account_id=billing_account_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.billing_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `billing_account_iam_policy`\nTerraform data source.\n\nUnlike [google.data.billing_account_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `billing_account_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    billing_account_id
+  ):: std.prune(a={
+    billing_account_id: billing_account_id,
+  }),
+  '#withBillingAccountId':: d.fn(help='`google.string.withBillingAccountId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the billing_account_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `billing_account_id` field.\n', args=[]),
+  withBillingAccountId(dataSrcLabel, value): {
+    data+: {
+      google_billing_account_iam_policy+: {
+        [dataSrcLabel]+: {
+          billing_account_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/binary_authorization_attestor_iam_policy.libsonnet b/4.x/_gen/data/binary_authorization_attestor_iam_policy.libsonnet
new file mode 100644
index 0000000..b7d4ed9
--- /dev/null
+++ b/4.x/_gen/data/binary_authorization_attestor_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='binary_authorization_attestor_iam_policy', url='', help='`binary_authorization_attestor_iam_policy` represents the `google_binary_authorization_attestor_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.binary_authorization_attestor_iam_policy.new` injects a new `data_google_binary_authorization_attestor_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.binary_authorization_attestor_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.binary_authorization_attestor_iam_policy` using the reference:\n\n    $._ref.data_google_binary_authorization_attestor_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_binary_authorization_attestor_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `attestor` (`string`): Set the `attestor` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    attestor,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_binary_authorization_attestor_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(attestor=attestor, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.binary_authorization_attestor_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `binary_authorization_attestor_iam_policy`\nTerraform data source.\n\nUnlike [google.data.binary_authorization_attestor_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `attestor` (`string`): Set the `attestor` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `binary_authorization_attestor_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    attestor,
+    project=null
+  ):: std.prune(a={
+    attestor: attestor,
+    project: project,
+  }),
+  '#withAttestor':: d.fn(help='`google.string.withAttestor` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the attestor field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `attestor` field.\n', args=[]),
+  withAttestor(dataSrcLabel, value): {
+    data+: {
+      google_binary_authorization_attestor_iam_policy+: {
+        [dataSrcLabel]+: {
+          attestor: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_binary_authorization_attestor_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_run_service_iam_policy.libsonnet b/4.x/_gen/data/cloud_run_service_iam_policy.libsonnet
new file mode 100644
index 0000000..2beb01d
--- /dev/null
+++ b/4.x/_gen/data/cloud_run_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloud_run_service_iam_policy', url='', help='`cloud_run_service_iam_policy` represents the `google_cloud_run_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloud_run_service_iam_policy.new` injects a new `data_google_cloud_run_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloud_run_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloud_run_service_iam_policy` using the reference:\n\n    $._ref.data_google_cloud_run_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloud_run_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_run_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, service=service),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloud_run_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_run_service_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloud_run_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_run_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    service: service,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withService':: d.fn(help='`google.string.withService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service` field.\n', args=[]),
+  withService(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_run_v2_job_iam_policy.libsonnet b/4.x/_gen/data/cloud_run_v2_job_iam_policy.libsonnet
new file mode 100644
index 0000000..00b81d8
--- /dev/null
+++ b/4.x/_gen/data/cloud_run_v2_job_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloud_run_v2_job_iam_policy', url='', help='`cloud_run_v2_job_iam_policy` represents the `google_cloud_run_v2_job_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloud_run_v2_job_iam_policy.new` injects a new `data_google_cloud_run_v2_job_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloud_run_v2_job_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloud_run_v2_job_iam_policy` using the reference:\n\n    $._ref.data_google_cloud_run_v2_job_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloud_run_v2_job_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_run_v2_job_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloud_run_v2_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_run_v2_job_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloud_run_v2_job_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_run_v2_job_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_run_v2_service_iam_policy.libsonnet b/4.x/_gen/data/cloud_run_v2_service_iam_policy.libsonnet
new file mode 100644
index 0000000..89d1b94
--- /dev/null
+++ b/4.x/_gen/data/cloud_run_v2_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloud_run_v2_service_iam_policy', url='', help='`cloud_run_v2_service_iam_policy` represents the `google_cloud_run_v2_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloud_run_v2_service_iam_policy.new` injects a new `data_google_cloud_run_v2_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloud_run_v2_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloud_run_v2_service_iam_policy` using the reference:\n\n    $._ref.data_google_cloud_run_v2_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloud_run_v2_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_run_v2_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloud_run_v2_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_run_v2_service_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloud_run_v2_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_run_v2_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_run_v2_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloud_tasks_queue_iam_policy.libsonnet b/4.x/_gen/data/cloud_tasks_queue_iam_policy.libsonnet
new file mode 100644
index 0000000..21aa13b
--- /dev/null
+++ b/4.x/_gen/data/cloud_tasks_queue_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloud_tasks_queue_iam_policy', url='', help='`cloud_tasks_queue_iam_policy` represents the `google_cloud_tasks_queue_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloud_tasks_queue_iam_policy.new` injects a new `data_google_cloud_tasks_queue_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloud_tasks_queue_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloud_tasks_queue_iam_policy` using the reference:\n\n    $._ref.data_google_cloud_tasks_queue_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloud_tasks_queue_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloud_tasks_queue_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloud_tasks_queue_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_tasks_queue_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloud_tasks_queue_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_tasks_queue_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloud_tasks_queue_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloud_tasks_queue_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloud_tasks_queue_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudfunctions2_function_iam_policy.libsonnet b/4.x/_gen/data/cloudfunctions2_function_iam_policy.libsonnet
new file mode 100644
index 0000000..2ee3ff3
--- /dev/null
+++ b/4.x/_gen/data/cloudfunctions2_function_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloudfunctions2_function_iam_policy', url='', help='`cloudfunctions2_function_iam_policy` represents the `google_cloudfunctions2_function_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloudfunctions2_function_iam_policy.new` injects a new `data_google_cloudfunctions2_function_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloudfunctions2_function_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloudfunctions2_function_iam_policy` using the reference:\n\n    $._ref.data_google_cloudfunctions2_function_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloudfunctions2_function_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    cloud_function,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudfunctions2_function_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(cloud_function=cloud_function, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloudfunctions2_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloudfunctions2_function_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloudfunctions2_function_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloudfunctions2_function_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    cloud_function,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    cloud_function: cloud_function,
+    location: location,
+    project: project,
+  }),
+  '#withCloudFunction':: d.fn(help='`google.string.withCloudFunction` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the cloud_function field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `cloud_function` field.\n', args=[]),
+  withCloudFunction(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions2_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          cloud_function: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions2_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions2_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudfunctions_function_iam_policy.libsonnet b/4.x/_gen/data/cloudfunctions_function_iam_policy.libsonnet
new file mode 100644
index 0000000..b32ffd9
--- /dev/null
+++ b/4.x/_gen/data/cloudfunctions_function_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloudfunctions_function_iam_policy', url='', help='`cloudfunctions_function_iam_policy` represents the `google_cloudfunctions_function_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloudfunctions_function_iam_policy.new` injects a new `data_google_cloudfunctions_function_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloudfunctions_function_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloudfunctions_function_iam_policy` using the reference:\n\n    $._ref.data_google_cloudfunctions_function_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloudfunctions_function_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    cloud_function,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudfunctions_function_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(cloud_function=cloud_function, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloudfunctions_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloudfunctions_function_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloudfunctions_function_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloudfunctions_function_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    cloud_function,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    cloud_function: cloud_function,
+    project: project,
+    region: region,
+  }),
+  '#withCloudFunction':: d.fn(help='`google.string.withCloudFunction` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the cloud_function field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `cloud_function` field.\n', args=[]),
+  withCloudFunction(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          cloud_function: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_cloudfunctions_function_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/cloudiot_registry_iam_policy.libsonnet b/4.x/_gen/data/cloudiot_registry_iam_policy.libsonnet
new file mode 100644
index 0000000..de60744
--- /dev/null
+++ b/4.x/_gen/data/cloudiot_registry_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='cloudiot_registry_iam_policy', url='', help='`cloudiot_registry_iam_policy` represents the `google_cloudiot_registry_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.cloudiot_registry_iam_policy.new` injects a new `data_google_cloudiot_registry_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.cloudiot_registry_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.cloudiot_registry_iam_policy` using the reference:\n\n    $._ref.data_google_cloudiot_registry_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_cloudiot_registry_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_cloudiot_registry_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.cloudiot_registry_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloudiot_registry_iam_policy`\nTerraform data source.\n\nUnlike [google.data.cloudiot_registry_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloudiot_registry_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_cloudiot_registry_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_cloudiot_registry_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_cloudiot_registry_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_disk_iam_policy.libsonnet b/4.x/_gen/data/compute_disk_iam_policy.libsonnet
new file mode 100644
index 0000000..fcf954f
--- /dev/null
+++ b/4.x/_gen/data/compute_disk_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='compute_disk_iam_policy', url='', help='`compute_disk_iam_policy` represents the `google_compute_disk_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.compute_disk_iam_policy.new` injects a new `data_google_compute_disk_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.compute_disk_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.compute_disk_iam_policy` using the reference:\n\n    $._ref.data_google_compute_disk_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_compute_disk_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    zone=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_disk_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, zone=zone),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.compute_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_disk_iam_policy`\nTerraform data source.\n\nUnlike [google.data.compute_disk_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_disk_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    zone=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    zone: zone,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withZone':: d.fn(help='`google.string.withZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `zone` field.\n', args=[]),
+  withZone(dataSrcLabel, value): {
+    data+: {
+      google_compute_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          zone: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_image_iam_policy.libsonnet b/4.x/_gen/data/compute_image_iam_policy.libsonnet
new file mode 100644
index 0000000..a594c02
--- /dev/null
+++ b/4.x/_gen/data/compute_image_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='compute_image_iam_policy', url='', help='`compute_image_iam_policy` represents the `google_compute_image_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.compute_image_iam_policy.new` injects a new `data_google_compute_image_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.compute_image_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.compute_image_iam_policy` using the reference:\n\n    $._ref.data_google_compute_image_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_compute_image_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `image` (`string`): Set the `image` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    image,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_image_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(image=image, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.compute_image_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_image_iam_policy`\nTerraform data source.\n\nUnlike [google.data.compute_image_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `image` (`string`): Set the `image` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_image_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    image,
+    project=null
+  ):: std.prune(a={
+    image: image,
+    project: project,
+  }),
+  '#withImage':: d.fn(help='`google.string.withImage` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the image field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `image` field.\n', args=[]),
+  withImage(dataSrcLabel, value): {
+    data+: {
+      google_compute_image_iam_policy+: {
+        [dataSrcLabel]+: {
+          image: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_image_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_instance_iam_policy.libsonnet b/4.x/_gen/data/compute_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..6c72e55
--- /dev/null
+++ b/4.x/_gen/data/compute_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='compute_instance_iam_policy', url='', help='`compute_instance_iam_policy` represents the `google_compute_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.compute_instance_iam_policy.new` injects a new `data_google_compute_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.compute_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.compute_instance_iam_policy` using the reference:\n\n    $._ref.data_google_compute_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_compute_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance_name,
+    project=null,
+    zone=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance_name=instance_name, project=project, zone=zone),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.compute_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance_iam_policy`\nTerraform data source.\n\nUnlike [google.data.compute_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance_name,
+    project=null,
+    zone=null
+  ):: std.prune(a={
+    instance_name: instance_name,
+    project: project,
+    zone: zone,
+  }),
+  '#withInstanceName':: d.fn(help='`google.string.withInstanceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance_name` field.\n', args=[]),
+  withInstanceName(dataSrcLabel, value): {
+    data+: {
+      google_compute_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance_name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withZone':: d.fn(help='`google.string.withZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `zone` field.\n', args=[]),
+  withZone(dataSrcLabel, value): {
+    data+: {
+      google_compute_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          zone: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_region_disk_iam_policy.libsonnet b/4.x/_gen/data/compute_region_disk_iam_policy.libsonnet
new file mode 100644
index 0000000..74b189e
--- /dev/null
+++ b/4.x/_gen/data/compute_region_disk_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='compute_region_disk_iam_policy', url='', help='`compute_region_disk_iam_policy` represents the `google_compute_region_disk_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.compute_region_disk_iam_policy.new` injects a new `data_google_compute_region_disk_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.compute_region_disk_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.compute_region_disk_iam_policy` using the reference:\n\n    $._ref.data_google_compute_region_disk_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_compute_region_disk_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_region_disk_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.compute_region_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_region_disk_iam_policy`\nTerraform data source.\n\nUnlike [google.data.compute_region_disk_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_region_disk_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_compute_region_disk_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_snapshot_iam_policy.libsonnet b/4.x/_gen/data/compute_snapshot_iam_policy.libsonnet
new file mode 100644
index 0000000..bb8e461
--- /dev/null
+++ b/4.x/_gen/data/compute_snapshot_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='compute_snapshot_iam_policy', url='', help='`compute_snapshot_iam_policy` represents the `google_compute_snapshot_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.compute_snapshot_iam_policy.new` injects a new `data_google_compute_snapshot_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.compute_snapshot_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.compute_snapshot_iam_policy` using the reference:\n\n    $._ref.data_google_compute_snapshot_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_compute_snapshot_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_snapshot_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.compute_snapshot_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_snapshot_iam_policy`\nTerraform data source.\n\nUnlike [google.data.compute_snapshot_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_snapshot_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_compute_snapshot_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_snapshot_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/compute_subnetwork_iam_policy.libsonnet b/4.x/_gen/data/compute_subnetwork_iam_policy.libsonnet
new file mode 100644
index 0000000..c307967
--- /dev/null
+++ b/4.x/_gen/data/compute_subnetwork_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='compute_subnetwork_iam_policy', url='', help='`compute_subnetwork_iam_policy` represents the `google_compute_subnetwork_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.compute_subnetwork_iam_policy.new` injects a new `data_google_compute_subnetwork_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.compute_subnetwork_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.compute_subnetwork_iam_policy` using the reference:\n\n    $._ref.data_google_compute_subnetwork_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_compute_subnetwork_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    subnetwork,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_compute_subnetwork_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, region=region, subnetwork=subnetwork),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.compute_subnetwork_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_subnetwork_iam_policy`\nTerraform data source.\n\nUnlike [google.data.compute_subnetwork_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_subnetwork_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    subnetwork,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    project: project,
+    region: region,
+    subnetwork: subnetwork,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_compute_subnetwork_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_compute_subnetwork_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withSubnetwork':: d.fn(help='`google.string.withSubnetwork` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the subnetwork field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `subnetwork` field.\n', args=[]),
+  withSubnetwork(dataSrcLabel, value): {
+    data+: {
+      google_compute_subnetwork_iam_policy+: {
+        [dataSrcLabel]+: {
+          subnetwork: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/container_analysis_note_iam_policy.libsonnet b/4.x/_gen/data/container_analysis_note_iam_policy.libsonnet
new file mode 100644
index 0000000..8b45363
--- /dev/null
+++ b/4.x/_gen/data/container_analysis_note_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='container_analysis_note_iam_policy', url='', help='`container_analysis_note_iam_policy` represents the `google_container_analysis_note_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.container_analysis_note_iam_policy.new` injects a new `data_google_container_analysis_note_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.container_analysis_note_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.container_analysis_note_iam_policy` using the reference:\n\n    $._ref.data_google_container_analysis_note_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_container_analysis_note_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `note` (`string`): Set the `note` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    note,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_container_analysis_note_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(note=note, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_policy`\nTerraform data source.\n\nUnlike [google.data.container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `container_analysis_note_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    note,
+    project=null
+  ):: std.prune(a={
+    note: note,
+    project: project,
+  }),
+  '#withNote':: d.fn(help='`google.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the note field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(dataSrcLabel, value): {
+    data+: {
+      google_container_analysis_note_iam_policy+: {
+        [dataSrcLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_container_analysis_note_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_entry_group_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_entry_group_iam_policy.libsonnet
new file mode 100644
index 0000000..d293d61
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_entry_group_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='data_catalog_entry_group_iam_policy', url='', help='`data_catalog_entry_group_iam_policy` represents the `google_data_catalog_entry_group_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.data_catalog_entry_group_iam_policy.new` injects a new `data_google_data_catalog_entry_group_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.data_catalog_entry_group_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.data_catalog_entry_group_iam_policy` using the reference:\n\n    $._ref.data_google_data_catalog_entry_group_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_data_catalog_entry_group_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `entry_group` (`string`): Set the `entry_group` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    entry_group,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_entry_group_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(entry_group=entry_group, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.data_catalog_entry_group_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_entry_group_iam_policy`\nTerraform data source.\n\nUnlike [google.data.data_catalog_entry_group_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `entry_group` (`string`): Set the `entry_group` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_entry_group_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    entry_group,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    entry_group: entry_group,
+    project: project,
+    region: region,
+  }),
+  '#withEntryGroup':: d.fn(help='`google.string.withEntryGroup` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the entry_group field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `entry_group` field.\n', args=[]),
+  withEntryGroup(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_entry_group_iam_policy+: {
+        [dataSrcLabel]+: {
+          entry_group: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_entry_group_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_entry_group_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_policy_tag_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_policy_tag_iam_policy.libsonnet
new file mode 100644
index 0000000..277902d
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_policy_tag_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='data_catalog_policy_tag_iam_policy', url='', help='`data_catalog_policy_tag_iam_policy` represents the `google_data_catalog_policy_tag_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.data_catalog_policy_tag_iam_policy.new` injects a new `data_google_data_catalog_policy_tag_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.data_catalog_policy_tag_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.data_catalog_policy_tag_iam_policy` using the reference:\n\n    $._ref.data_google_data_catalog_policy_tag_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_data_catalog_policy_tag_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    policy_tag,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_policy_tag_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(policy_tag=policy_tag),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.data_catalog_policy_tag_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_policy_tag_iam_policy`\nTerraform data source.\n\nUnlike [google.data.data_catalog_policy_tag_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_policy_tag_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    policy_tag
+  ):: std.prune(a={
+    policy_tag: policy_tag,
+  }),
+  '#withPolicyTag':: d.fn(help='`google.string.withPolicyTag` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the policy_tag field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `policy_tag` field.\n', args=[]),
+  withPolicyTag(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_policy_tag_iam_policy+: {
+        [dataSrcLabel]+: {
+          policy_tag: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_tag_template_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_tag_template_iam_policy.libsonnet
new file mode 100644
index 0000000..d9d5207
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_tag_template_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='data_catalog_tag_template_iam_policy', url='', help='`data_catalog_tag_template_iam_policy` represents the `google_data_catalog_tag_template_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.data_catalog_tag_template_iam_policy.new` injects a new `data_google_data_catalog_tag_template_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.data_catalog_tag_template_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.data_catalog_tag_template_iam_policy` using the reference:\n\n    $._ref.data_google_data_catalog_tag_template_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_data_catalog_tag_template_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n  - `tag_template` (`string`): Set the `tag_template` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    tag_template,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_tag_template_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, region=region, tag_template=tag_template),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.data_catalog_tag_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_tag_template_iam_policy`\nTerraform data source.\n\nUnlike [google.data.data_catalog_tag_template_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `tag_template` (`string`): Set the `tag_template` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_tag_template_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    tag_template,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    project: project,
+    region: region,
+    tag_template: tag_template,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_tag_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_tag_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withTagTemplate':: d.fn(help='`google.string.withTagTemplate` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the tag_template field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `tag_template` field.\n', args=[]),
+  withTagTemplate(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_tag_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          tag_template: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_catalog_taxonomy_iam_policy.libsonnet b/4.x/_gen/data/data_catalog_taxonomy_iam_policy.libsonnet
new file mode 100644
index 0000000..35ac49b
--- /dev/null
+++ b/4.x/_gen/data/data_catalog_taxonomy_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='data_catalog_taxonomy_iam_policy', url='', help='`data_catalog_taxonomy_iam_policy` represents the `google_data_catalog_taxonomy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.data_catalog_taxonomy_iam_policy.new` injects a new `data_google_data_catalog_taxonomy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.data_catalog_taxonomy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.data_catalog_taxonomy_iam_policy` using the reference:\n\n    $._ref.data_google_data_catalog_taxonomy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_data_catalog_taxonomy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    taxonomy,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_catalog_taxonomy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, region=region, taxonomy=taxonomy),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.data_catalog_taxonomy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_taxonomy_iam_policy`\nTerraform data source.\n\nUnlike [google.data.data_catalog_taxonomy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_taxonomy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    taxonomy,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    project: project,
+    region: region,
+    taxonomy: taxonomy,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_taxonomy_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_taxonomy_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withTaxonomy':: d.fn(help='`google.string.withTaxonomy` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the taxonomy field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `taxonomy` field.\n', args=[]),
+  withTaxonomy(dataSrcLabel, value): {
+    data+: {
+      google_data_catalog_taxonomy_iam_policy+: {
+        [dataSrcLabel]+: {
+          taxonomy: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/data_fusion_instance_iam_policy.libsonnet b/4.x/_gen/data/data_fusion_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..ae53a77
--- /dev/null
+++ b/4.x/_gen/data/data_fusion_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='data_fusion_instance_iam_policy', url='', help='`data_fusion_instance_iam_policy` represents the `google_data_fusion_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.data_fusion_instance_iam_policy.new` injects a new `data_google_data_fusion_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.data_fusion_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.data_fusion_instance_iam_policy` using the reference:\n\n    $._ref.data_google_data_fusion_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_data_fusion_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_data_fusion_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.data_fusion_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_fusion_instance_iam_policy`\nTerraform data source.\n\nUnlike [google.data.data_fusion_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_fusion_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_data_fusion_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_data_fusion_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_data_fusion_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataplex_asset_iam_policy.libsonnet b/4.x/_gen/data/dataplex_asset_iam_policy.libsonnet
new file mode 100644
index 0000000..5728b43
--- /dev/null
+++ b/4.x/_gen/data/dataplex_asset_iam_policy.libsonnet
@@ -0,0 +1,90 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataplex_asset_iam_policy', url='', help='`dataplex_asset_iam_policy` represents the `google_dataplex_asset_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataplex_asset_iam_policy.new` injects a new `data_google_dataplex_asset_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataplex_asset_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataplex_asset_iam_policy` using the reference:\n\n    $._ref.data_google_dataplex_asset_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataplex_asset_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `asset` (`string`): Set the `asset` field on the resulting data source block.\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.\n  - `lake` (`string`): Set the `lake` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    asset,
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataplex_asset_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      asset=asset,
+      dataplex_zone=dataplex_zone,
+      lake=lake,
+      location=location,
+      project=project
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataplex_asset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataplex_asset_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataplex_asset_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `asset` (`string`): Set the `asset` field on the resulting object.\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.\n  - `lake` (`string`): Set the `lake` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataplex_asset_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    asset,
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    asset: asset,
+    dataplex_zone: dataplex_zone,
+    lake: lake,
+    location: location,
+    project: project,
+  }),
+  '#withAsset':: d.fn(help='`google.string.withAsset` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the asset field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `asset` field.\n', args=[]),
+  withAsset(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          asset: value,
+        },
+      },
+    },
+  },
+  '#withDataplexZone':: d.fn(help='`google.string.withDataplexZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataplex_zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataplex_zone` field.\n', args=[]),
+  withDataplexZone(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataplex_zone: value,
+        },
+      },
+    },
+  },
+  '#withLake':: d.fn(help='`google.string.withLake` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the lake field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `lake` field.\n', args=[]),
+  withLake(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          lake: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_asset_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataplex_lake_iam_policy.libsonnet b/4.x/_gen/data/dataplex_lake_iam_policy.libsonnet
new file mode 100644
index 0000000..7d3026c
--- /dev/null
+++ b/4.x/_gen/data/dataplex_lake_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataplex_lake_iam_policy', url='', help='`dataplex_lake_iam_policy` represents the `google_dataplex_lake_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataplex_lake_iam_policy.new` injects a new `data_google_dataplex_lake_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataplex_lake_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataplex_lake_iam_policy` using the reference:\n\n    $._ref.data_google_dataplex_lake_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataplex_lake_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `lake` (`string`): Set the `lake` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    lake,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataplex_lake_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(lake=lake, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataplex_lake_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataplex_lake_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataplex_lake_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `lake` (`string`): Set the `lake` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataplex_lake_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    lake,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    lake: lake,
+    location: location,
+    project: project,
+  }),
+  '#withLake':: d.fn(help='`google.string.withLake` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the lake field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `lake` field.\n', args=[]),
+  withLake(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_lake_iam_policy+: {
+        [dataSrcLabel]+: {
+          lake: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_lake_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_lake_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataplex_zone_iam_policy.libsonnet b/4.x/_gen/data/dataplex_zone_iam_policy.libsonnet
new file mode 100644
index 0000000..1531826
--- /dev/null
+++ b/4.x/_gen/data/dataplex_zone_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataplex_zone_iam_policy', url='', help='`dataplex_zone_iam_policy` represents the `google_dataplex_zone_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataplex_zone_iam_policy.new` injects a new `data_google_dataplex_zone_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataplex_zone_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataplex_zone_iam_policy` using the reference:\n\n    $._ref.data_google_dataplex_zone_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataplex_zone_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.\n  - `lake` (`string`): Set the `lake` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataplex_zone_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      dataplex_zone=dataplex_zone,
+      lake=lake,
+      location=location,
+      project=project
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataplex_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataplex_zone_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataplex_zone_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.\n  - `lake` (`string`): Set the `lake` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataplex_zone_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataplex_zone,
+    lake,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    dataplex_zone: dataplex_zone,
+    lake: lake,
+    location: location,
+    project: project,
+  }),
+  '#withDataplexZone':: d.fn(help='`google.string.withDataplexZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataplex_zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataplex_zone` field.\n', args=[]),
+  withDataplexZone(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataplex_zone: value,
+        },
+      },
+    },
+  },
+  '#withLake':: d.fn(help='`google.string.withLake` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the lake field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `lake` field.\n', args=[]),
+  withLake(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          lake: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataplex_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_autoscaling_policy_iam_policy.libsonnet b/4.x/_gen/data/dataproc_autoscaling_policy_iam_policy.libsonnet
new file mode 100644
index 0000000..5314f96
--- /dev/null
+++ b/4.x/_gen/data/dataproc_autoscaling_policy_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataproc_autoscaling_policy_iam_policy', url='', help='`dataproc_autoscaling_policy_iam_policy` represents the `google_dataproc_autoscaling_policy_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataproc_autoscaling_policy_iam_policy.new` injects a new `data_google_dataproc_autoscaling_policy_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataproc_autoscaling_policy_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataproc_autoscaling_policy_iam_policy` using the reference:\n\n    $._ref.data_google_dataproc_autoscaling_policy_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataproc_autoscaling_policy_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `policy_id` (`string`): Set the `policy_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    policy_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_autoscaling_policy_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, policy_id=policy_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataproc_autoscaling_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_autoscaling_policy_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataproc_autoscaling_policy_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `policy_id` (`string`): Set the `policy_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_autoscaling_policy_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    policy_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    policy_id: policy_id,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_autoscaling_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withPolicyId':: d.fn(help='`google.string.withPolicyId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the policy_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `policy_id` field.\n', args=[]),
+  withPolicyId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_autoscaling_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          policy_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_autoscaling_policy_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_cluster_iam_policy.libsonnet b/4.x/_gen/data/dataproc_cluster_iam_policy.libsonnet
new file mode 100644
index 0000000..b37a3e7
--- /dev/null
+++ b/4.x/_gen/data/dataproc_cluster_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataproc_cluster_iam_policy', url='', help='`dataproc_cluster_iam_policy` represents the `google_dataproc_cluster_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataproc_cluster_iam_policy.new` injects a new `data_google_dataproc_cluster_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataproc_cluster_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataproc_cluster_iam_policy` using the reference:\n\n    $._ref.data_google_dataproc_cluster_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataproc_cluster_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `cluster` (`string`): Set the `cluster` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    cluster,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_cluster_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(cluster=cluster, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataproc_cluster_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_cluster_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataproc_cluster_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `cluster` (`string`): Set the `cluster` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_cluster_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    cluster,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    cluster: cluster,
+    project: project,
+    region: region,
+  }),
+  '#withCluster':: d.fn(help='`google.string.withCluster` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the cluster field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `cluster` field.\n', args=[]),
+  withCluster(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_cluster_iam_policy+: {
+        [dataSrcLabel]+: {
+          cluster: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_cluster_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_cluster_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_job_iam_policy.libsonnet b/4.x/_gen/data/dataproc_job_iam_policy.libsonnet
new file mode 100644
index 0000000..51f3824
--- /dev/null
+++ b/4.x/_gen/data/dataproc_job_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataproc_job_iam_policy', url='', help='`dataproc_job_iam_policy` represents the `google_dataproc_job_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataproc_job_iam_policy.new` injects a new `data_google_dataproc_job_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataproc_job_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataproc_job_iam_policy` using the reference:\n\n    $._ref.data_google_dataproc_job_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataproc_job_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `job_id` (`string`): Set the `job_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    job_id,
+    project=null,
+    region=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_job_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(job_id=job_id, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataproc_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_job_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataproc_job_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `job_id` (`string`): Set the `job_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_job_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    job_id,
+    project=null,
+    region=null
+  ):: std.prune(a={
+    job_id: job_id,
+    project: project,
+    region: region,
+  }),
+  '#withJobId':: d.fn(help='`google.string.withJobId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the job_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `job_id` field.\n', args=[]),
+  withJobId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          job_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_job_iam_policy+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dataproc_metastore_service_iam_policy.libsonnet b/4.x/_gen/data/dataproc_metastore_service_iam_policy.libsonnet
new file mode 100644
index 0000000..df24bf4
--- /dev/null
+++ b/4.x/_gen/data/dataproc_metastore_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dataproc_metastore_service_iam_policy', url='', help='`dataproc_metastore_service_iam_policy` represents the `google_dataproc_metastore_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dataproc_metastore_service_iam_policy.new` injects a new `data_google_dataproc_metastore_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dataproc_metastore_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dataproc_metastore_service_iam_policy` using the reference:\n\n    $._ref.data_google_dataproc_metastore_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dataproc_metastore_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service_id` (`string`): Set the `service_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service_id,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dataproc_metastore_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, service_id=service_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dataproc_metastore_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_metastore_service_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dataproc_metastore_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service_id` (`string`): Set the `service_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_metastore_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service_id,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    service_id: service_id,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withServiceId':: d.fn(help='`google.string.withServiceId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_id` field.\n', args=[]),
+  withServiceId(dataSrcLabel, value): {
+    data+: {
+      google_dataproc_metastore_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/dns_managed_zone_iam_policy.libsonnet b/4.x/_gen/data/dns_managed_zone_iam_policy.libsonnet
new file mode 100644
index 0000000..f4a7344
--- /dev/null
+++ b/4.x/_gen/data/dns_managed_zone_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='dns_managed_zone_iam_policy', url='', help='`dns_managed_zone_iam_policy` represents the `google_dns_managed_zone_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.dns_managed_zone_iam_policy.new` injects a new `data_google_dns_managed_zone_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.dns_managed_zone_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.dns_managed_zone_iam_policy` using the reference:\n\n    $._ref.data_google_dns_managed_zone_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_dns_managed_zone_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    managed_zone,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_dns_managed_zone_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(managed_zone=managed_zone, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.dns_managed_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dns_managed_zone_iam_policy`\nTerraform data source.\n\nUnlike [google.data.dns_managed_zone_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dns_managed_zone_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    managed_zone,
+    project=null
+  ):: std.prune(a={
+    managed_zone: managed_zone,
+    project: project,
+  }),
+  '#withManagedZone':: d.fn(help='`google.string.withManagedZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the managed_zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `managed_zone` field.\n', args=[]),
+  withManagedZone(dataSrcLabel, value): {
+    data+: {
+      google_dns_managed_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          managed_zone: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_dns_managed_zone_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/endpoints_service_consumers_iam_policy.libsonnet b/4.x/_gen/data/endpoints_service_consumers_iam_policy.libsonnet
new file mode 100644
index 0000000..69eedd2
--- /dev/null
+++ b/4.x/_gen/data/endpoints_service_consumers_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='endpoints_service_consumers_iam_policy', url='', help='`endpoints_service_consumers_iam_policy` represents the `google_endpoints_service_consumers_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.endpoints_service_consumers_iam_policy.new` injects a new `data_google_endpoints_service_consumers_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.endpoints_service_consumers_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.endpoints_service_consumers_iam_policy` using the reference:\n\n    $._ref.data_google_endpoints_service_consumers_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_endpoints_service_consumers_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting data source block.\n  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    consumer_project,
+    service_name,
+    _meta={}
+  ):: tf.withData(
+    type='google_endpoints_service_consumers_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(consumer_project=consumer_project, service_name=service_name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.endpoints_service_consumers_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `endpoints_service_consumers_iam_policy`\nTerraform data source.\n\nUnlike [google.data.endpoints_service_consumers_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting object.\n  - `service_name` (`string`): Set the `service_name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `endpoints_service_consumers_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    consumer_project,
+    service_name
+  ):: std.prune(a={
+    consumer_project: consumer_project,
+    service_name: service_name,
+  }),
+  '#withConsumerProject':: d.fn(help='`google.string.withConsumerProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the consumer_project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `consumer_project` field.\n', args=[]),
+  withConsumerProject(dataSrcLabel, value): {
+    data+: {
+      google_endpoints_service_consumers_iam_policy+: {
+        [dataSrcLabel]+: {
+          consumer_project: value,
+        },
+      },
+    },
+  },
+  '#withServiceName':: d.fn(help='`google.string.withServiceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_name` field.\n', args=[]),
+  withServiceName(dataSrcLabel, value): {
+    data+: {
+      google_endpoints_service_consumers_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/endpoints_service_iam_policy.libsonnet b/4.x/_gen/data/endpoints_service_iam_policy.libsonnet
new file mode 100644
index 0000000..914d75b
--- /dev/null
+++ b/4.x/_gen/data/endpoints_service_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='endpoints_service_iam_policy', url='', help='`endpoints_service_iam_policy` represents the `google_endpoints_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.endpoints_service_iam_policy.new` injects a new `data_google_endpoints_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.endpoints_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.endpoints_service_iam_policy` using the reference:\n\n    $._ref.data_google_endpoints_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_endpoints_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service_name,
+    _meta={}
+  ):: tf.withData(
+    type='google_endpoints_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(service_name=service_name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.endpoints_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `endpoints_service_iam_policy`\nTerraform data source.\n\nUnlike [google.data.endpoints_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `service_name` (`string`): Set the `service_name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `endpoints_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service_name
+  ):: std.prune(a={
+    service_name: service_name,
+  }),
+  '#withServiceName':: d.fn(help='`google.string.withServiceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_name` field.\n', args=[]),
+  withServiceName(dataSrcLabel, value): {
+    data+: {
+      google_endpoints_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/folder_iam_policy.libsonnet b/4.x/_gen/data/folder_iam_policy.libsonnet
new file mode 100644
index 0000000..6ffaa6f
--- /dev/null
+++ b/4.x/_gen/data/folder_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='folder_iam_policy', url='', help='`folder_iam_policy` represents the `google_folder_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.folder_iam_policy.new` injects a new `data_google_folder_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.folder_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.folder_iam_policy` using the reference:\n\n    $._ref.data_google_folder_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_folder_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `folder` (`string`): Set the `folder` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    folder,
+    _meta={}
+  ):: tf.withData(
+    type='google_folder_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(folder=folder),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.folder_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `folder_iam_policy`\nTerraform data source.\n\nUnlike [google.data.folder_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `folder` (`string`): Set the `folder` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `folder_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    folder
+  ):: std.prune(a={
+    folder: folder,
+  }),
+  '#withFolder':: d.fn(help='`google.string.withFolder` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the folder field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `folder` field.\n', args=[]),
+  withFolder(dataSrcLabel, value): {
+    data+: {
+      google_folder_iam_policy+: {
+        [dataSrcLabel]+: {
+          folder: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/gke_backup_backup_plan_iam_policy.libsonnet b/4.x/_gen/data/gke_backup_backup_plan_iam_policy.libsonnet
new file mode 100644
index 0000000..e63a4eb
--- /dev/null
+++ b/4.x/_gen/data/gke_backup_backup_plan_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='gke_backup_backup_plan_iam_policy', url='', help='`gke_backup_backup_plan_iam_policy` represents the `google_gke_backup_backup_plan_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.gke_backup_backup_plan_iam_policy.new` injects a new `data_google_gke_backup_backup_plan_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.gke_backup_backup_plan_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.gke_backup_backup_plan_iam_policy` using the reference:\n\n    $._ref.data_google_gke_backup_backup_plan_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_gke_backup_backup_plan_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_gke_backup_backup_plan_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, name=name, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.gke_backup_backup_plan_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `gke_backup_backup_plan_iam_policy`\nTerraform data source.\n\nUnlike [google.data.gke_backup_backup_plan_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `name` (`string`): Set the `name` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `gke_backup_backup_plan_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    name: name,
+    project: project,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_gke_backup_backup_plan_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_gke_backup_backup_plan_iam_policy+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_gke_backup_backup_plan_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/gke_hub_membership_iam_policy.libsonnet b/4.x/_gen/data/gke_hub_membership_iam_policy.libsonnet
new file mode 100644
index 0000000..9fb5e4b
--- /dev/null
+++ b/4.x/_gen/data/gke_hub_membership_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='gke_hub_membership_iam_policy', url='', help='`gke_hub_membership_iam_policy` represents the `google_gke_hub_membership_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.gke_hub_membership_iam_policy.new` injects a new `data_google_gke_hub_membership_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.gke_hub_membership_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.gke_hub_membership_iam_policy` using the reference:\n\n    $._ref.data_google_gke_hub_membership_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_gke_hub_membership_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `membership_id` (`string`): Set the `membership_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    membership_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_gke_hub_membership_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(membership_id=membership_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.gke_hub_membership_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `gke_hub_membership_iam_policy`\nTerraform data source.\n\nUnlike [google.data.gke_hub_membership_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `membership_id` (`string`): Set the `membership_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `gke_hub_membership_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    membership_id,
+    project=null
+  ):: std.prune(a={
+    membership_id: membership_id,
+    project: project,
+  }),
+  '#withMembershipId':: d.fn(help='`google.string.withMembershipId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the membership_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `membership_id` field.\n', args=[]),
+  withMembershipId(dataSrcLabel, value): {
+    data+: {
+      google_gke_hub_membership_iam_policy+: {
+        [dataSrcLabel]+: {
+          membership_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_gke_hub_membership_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_consent_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_consent_store_iam_policy.libsonnet
new file mode 100644
index 0000000..ba60d20
--- /dev/null
+++ b/4.x/_gen/data/healthcare_consent_store_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='healthcare_consent_store_iam_policy', url='', help='`healthcare_consent_store_iam_policy` represents the `google_healthcare_consent_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.healthcare_consent_store_iam_policy.new` injects a new `data_google_healthcare_consent_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.healthcare_consent_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.healthcare_consent_store_iam_policy` using the reference:\n\n    $._ref.data_google_healthcare_consent_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_healthcare_consent_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting data source block.\n  - `dataset` (`string`): Set the `dataset` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    consent_store_id,
+    dataset,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_consent_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(consent_store_id=consent_store_id, dataset=dataset),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.healthcare_consent_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_consent_store_iam_policy`\nTerraform data source.\n\nUnlike [google.data.healthcare_consent_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting object.\n  - `dataset` (`string`): Set the `dataset` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_consent_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    consent_store_id,
+    dataset
+  ):: std.prune(a={
+    consent_store_id: consent_store_id,
+    dataset: dataset,
+  }),
+  '#withConsentStoreId':: d.fn(help='`google.string.withConsentStoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the consent_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `consent_store_id` field.\n', args=[]),
+  withConsentStoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_consent_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          consent_store_id: value,
+        },
+      },
+    },
+  },
+  '#withDataset':: d.fn(help='`google.string.withDataset` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset` field.\n', args=[]),
+  withDataset(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_consent_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_dataset_iam_policy.libsonnet b/4.x/_gen/data/healthcare_dataset_iam_policy.libsonnet
new file mode 100644
index 0000000..bded0d4
--- /dev/null
+++ b/4.x/_gen/data/healthcare_dataset_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='healthcare_dataset_iam_policy', url='', help='`healthcare_dataset_iam_policy` represents the `google_healthcare_dataset_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.healthcare_dataset_iam_policy.new` injects a new `data_google_healthcare_dataset_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.healthcare_dataset_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.healthcare_dataset_iam_policy` using the reference:\n\n    $._ref.data_google_healthcare_dataset_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_healthcare_dataset_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dataset_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_dataset_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dataset_id=dataset_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.healthcare_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_dataset_iam_policy`\nTerraform data source.\n\nUnlike [google.data.healthcare_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_dataset_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dataset_id
+  ):: std.prune(a={
+    dataset_id: dataset_id,
+  }),
+  '#withDatasetId':: d.fn(help='`google.string.withDatasetId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dataset_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dataset_id` field.\n', args=[]),
+  withDatasetId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_dataset_iam_policy+: {
+        [dataSrcLabel]+: {
+          dataset_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_dicom_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_dicom_store_iam_policy.libsonnet
new file mode 100644
index 0000000..5d39cc3
--- /dev/null
+++ b/4.x/_gen/data/healthcare_dicom_store_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='healthcare_dicom_store_iam_policy', url='', help='`healthcare_dicom_store_iam_policy` represents the `google_healthcare_dicom_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.healthcare_dicom_store_iam_policy.new` injects a new `data_google_healthcare_dicom_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.healthcare_dicom_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.healthcare_dicom_store_iam_policy` using the reference:\n\n    $._ref.data_google_healthcare_dicom_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_healthcare_dicom_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    dicom_store_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_dicom_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(dicom_store_id=dicom_store_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.healthcare_dicom_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_dicom_store_iam_policy`\nTerraform data source.\n\nUnlike [google.data.healthcare_dicom_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_dicom_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    dicom_store_id
+  ):: std.prune(a={
+    dicom_store_id: dicom_store_id,
+  }),
+  '#withDicomStoreId':: d.fn(help='`google.string.withDicomStoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the dicom_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `dicom_store_id` field.\n', args=[]),
+  withDicomStoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_dicom_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          dicom_store_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_fhir_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_fhir_store_iam_policy.libsonnet
new file mode 100644
index 0000000..884b6ed
--- /dev/null
+++ b/4.x/_gen/data/healthcare_fhir_store_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='healthcare_fhir_store_iam_policy', url='', help='`healthcare_fhir_store_iam_policy` represents the `google_healthcare_fhir_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.healthcare_fhir_store_iam_policy.new` injects a new `data_google_healthcare_fhir_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.healthcare_fhir_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.healthcare_fhir_store_iam_policy` using the reference:\n\n    $._ref.data_google_healthcare_fhir_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_healthcare_fhir_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    fhir_store_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_fhir_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(fhir_store_id=fhir_store_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.healthcare_fhir_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_fhir_store_iam_policy`\nTerraform data source.\n\nUnlike [google.data.healthcare_fhir_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_fhir_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    fhir_store_id
+  ):: std.prune(a={
+    fhir_store_id: fhir_store_id,
+  }),
+  '#withFhirStoreId':: d.fn(help='`google.string.withFhirStoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the fhir_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `fhir_store_id` field.\n', args=[]),
+  withFhirStoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_fhir_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          fhir_store_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/healthcare_hl7_v2_store_iam_policy.libsonnet b/4.x/_gen/data/healthcare_hl7_v2_store_iam_policy.libsonnet
new file mode 100644
index 0000000..4dc5cf2
--- /dev/null
+++ b/4.x/_gen/data/healthcare_hl7_v2_store_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='healthcare_hl7_v2_store_iam_policy', url='', help='`healthcare_hl7_v2_store_iam_policy` represents the `google_healthcare_hl7_v2_store_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.healthcare_hl7_v2_store_iam_policy.new` injects a new `data_google_healthcare_hl7_v2_store_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.healthcare_hl7_v2_store_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.healthcare_hl7_v2_store_iam_policy` using the reference:\n\n    $._ref.data_google_healthcare_hl7_v2_store_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_healthcare_hl7_v2_store_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    hl7_v2_store_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_healthcare_hl7_v2_store_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(hl7_v2_store_id=hl7_v2_store_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.healthcare_hl7_v2_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_hl7_v2_store_iam_policy`\nTerraform data source.\n\nUnlike [google.data.healthcare_hl7_v2_store_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_hl7_v2_store_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    hl7_v2_store_id
+  ):: std.prune(a={
+    hl7_v2_store_id: hl7_v2_store_id,
+  }),
+  '#withHl7V2StoreId':: d.fn(help='`google.string.withHl7V2StoreId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the hl7_v2_store_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `hl7_v2_store_id` field.\n', args=[]),
+  withHl7V2StoreId(dataSrcLabel, value): {
+    data+: {
+      google_healthcare_hl7_v2_store_iam_policy+: {
+        [dataSrcLabel]+: {
+          hl7_v2_store_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_app_engine_service_iam_policy.libsonnet b/4.x/_gen/data/iap_app_engine_service_iam_policy.libsonnet
new file mode 100644
index 0000000..e7a836f
--- /dev/null
+++ b/4.x/_gen/data/iap_app_engine_service_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_app_engine_service_iam_policy', url='', help='`iap_app_engine_service_iam_policy` represents the `google_iap_app_engine_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_app_engine_service_iam_policy.new` injects a new `data_google_iap_app_engine_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_app_engine_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_app_engine_service_iam_policy` using the reference:\n\n    $._ref.data_google_iap_app_engine_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_app_engine_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    app_id,
+    service,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_app_engine_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(app_id=app_id, project=project, service=service),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_app_engine_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_app_engine_service_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_app_engine_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_id` (`string`): Set the `app_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_app_engine_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    app_id,
+    service,
+    project=null
+  ):: std.prune(a={
+    app_id: app_id,
+    project: project,
+    service: service,
+  }),
+  '#withAppId':: d.fn(help='`google.string.withAppId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the app_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `app_id` field.\n', args=[]),
+  withAppId(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          app_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withService':: d.fn(help='`google.string.withService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service` field.\n', args=[]),
+  withService(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          service: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_app_engine_version_iam_policy.libsonnet b/4.x/_gen/data/iap_app_engine_version_iam_policy.libsonnet
new file mode 100644
index 0000000..078530e
--- /dev/null
+++ b/4.x/_gen/data/iap_app_engine_version_iam_policy.libsonnet
@@ -0,0 +1,76 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_app_engine_version_iam_policy', url='', help='`iap_app_engine_version_iam_policy` represents the `google_iap_app_engine_version_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_app_engine_version_iam_policy.new` injects a new `data_google_iap_app_engine_version_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_app_engine_version_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_app_engine_version_iam_policy` using the reference:\n\n    $._ref.data_google_iap_app_engine_version_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_app_engine_version_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting data source block.\n  - `version_id` (`string`): Set the `version_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    app_id,
+    service,
+    version_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_app_engine_version_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(
+      app_id=app_id,
+      project=project,
+      service=service,
+      version_id=version_id
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_app_engine_version_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_app_engine_version_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_app_engine_version_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_id` (`string`): Set the `app_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `service` (`string`): Set the `service` field on the resulting object.\n  - `version_id` (`string`): Set the `version_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_app_engine_version_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    app_id,
+    service,
+    version_id,
+    project=null
+  ):: std.prune(a={
+    app_id: app_id,
+    project: project,
+    service: service,
+    version_id: version_id,
+  }),
+  '#withAppId':: d.fn(help='`google.string.withAppId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the app_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `app_id` field.\n', args=[]),
+  withAppId(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          app_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withService':: d.fn(help='`google.string.withService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service` field.\n', args=[]),
+  withService(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          service: value,
+        },
+      },
+    },
+  },
+  '#withVersionId':: d.fn(help='`google.string.withVersionId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the version_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `version_id` field.\n', args=[]),
+  withVersionId(dataSrcLabel, value): {
+    data+: {
+      google_iap_app_engine_version_iam_policy+: {
+        [dataSrcLabel]+: {
+          version_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_tunnel_iam_policy.libsonnet b/4.x/_gen/data/iap_tunnel_iam_policy.libsonnet
new file mode 100644
index 0000000..f386af0
--- /dev/null
+++ b/4.x/_gen/data/iap_tunnel_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_tunnel_iam_policy', url='', help='`iap_tunnel_iam_policy` represents the `google_iap_tunnel_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_tunnel_iam_policy.new` injects a new `data_google_iap_tunnel_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_tunnel_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_tunnel_iam_policy` using the reference:\n\n    $._ref.data_google_iap_tunnel_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_tunnel_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_tunnel_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_tunnel_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_tunnel_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_tunnel_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_tunnel_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project=null
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_tunnel_instance_iam_policy.libsonnet b/4.x/_gen/data/iap_tunnel_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..dfbd195
--- /dev/null
+++ b/4.x/_gen/data/iap_tunnel_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_tunnel_instance_iam_policy', url='', help='`iap_tunnel_instance_iam_policy` represents the `google_iap_tunnel_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_tunnel_instance_iam_policy.new` injects a new `data_google_iap_tunnel_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_tunnel_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_tunnel_instance_iam_policy` using the reference:\n\n    $._ref.data_google_iap_tunnel_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_tunnel_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    project=null,
+    zone=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_tunnel_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project, zone=zone),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_tunnel_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_tunnel_instance_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_tunnel_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_tunnel_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    project=null,
+    zone=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+    zone: zone,
+  }),
+  '#withInstance':: d.fn(help='`google.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withZone':: d.fn(help='`google.string.withZone` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the zone field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `zone` field.\n', args=[]),
+  withZone(dataSrcLabel, value): {
+    data+: {
+      google_iap_tunnel_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          zone: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_backend_service_iam_policy.libsonnet b/4.x/_gen/data/iap_web_backend_service_iam_policy.libsonnet
new file mode 100644
index 0000000..bdd5677
--- /dev/null
+++ b/4.x/_gen/data/iap_web_backend_service_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_web_backend_service_iam_policy', url='', help='`iap_web_backend_service_iam_policy` represents the `google_iap_web_backend_service_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_web_backend_service_iam_policy.new` injects a new `data_google_iap_web_backend_service_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_web_backend_service_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_web_backend_service_iam_policy` using the reference:\n\n    $._ref.data_google_iap_web_backend_service_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_web_backend_service_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    web_backend_service,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_backend_service_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, web_backend_service=web_backend_service),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_web_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_backend_service_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_web_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_backend_service_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    web_backend_service,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    web_backend_service: web_backend_service,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withWebBackendService':: d.fn(help='`google.string.withWebBackendService` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the web_backend_service field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `web_backend_service` field.\n', args=[]),
+  withWebBackendService(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_backend_service_iam_policy+: {
+        [dataSrcLabel]+: {
+          web_backend_service: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_iam_policy.libsonnet b/4.x/_gen/data/iap_web_iam_policy.libsonnet
new file mode 100644
index 0000000..4bbafb8
--- /dev/null
+++ b/4.x/_gen/data/iap_web_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_web_iam_policy', url='', help='`iap_web_iam_policy` represents the `google_iap_web_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_web_iam_policy.new` injects a new `data_google_iap_web_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_web_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_web_iam_policy` using the reference:\n\n    $._ref.data_google_iap_web_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_web_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_web_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_web_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project=null
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_type_app_engine_iam_policy.libsonnet b/4.x/_gen/data/iap_web_type_app_engine_iam_policy.libsonnet
new file mode 100644
index 0000000..4fab9a5
--- /dev/null
+++ b/4.x/_gen/data/iap_web_type_app_engine_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_web_type_app_engine_iam_policy', url='', help='`iap_web_type_app_engine_iam_policy` represents the `google_iap_web_type_app_engine_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_web_type_app_engine_iam_policy.new` injects a new `data_google_iap_web_type_app_engine_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_web_type_app_engine_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_web_type_app_engine_iam_policy` using the reference:\n\n    $._ref.data_google_iap_web_type_app_engine_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_web_type_app_engine_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    app_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_type_app_engine_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(app_id=app_id, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_web_type_app_engine_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_type_app_engine_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_web_type_app_engine_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_id` (`string`): Set the `app_id` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_type_app_engine_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    app_id,
+    project=null
+  ):: std.prune(a={
+    app_id: app_id,
+    project: project,
+  }),
+  '#withAppId':: d.fn(help='`google.string.withAppId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the app_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `app_id` field.\n', args=[]),
+  withAppId(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_type_app_engine_iam_policy+: {
+        [dataSrcLabel]+: {
+          app_id: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_type_app_engine_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/iap_web_type_compute_iam_policy.libsonnet b/4.x/_gen/data/iap_web_type_compute_iam_policy.libsonnet
new file mode 100644
index 0000000..9ffe26f
--- /dev/null
+++ b/4.x/_gen/data/iap_web_type_compute_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='iap_web_type_compute_iam_policy', url='', help='`iap_web_type_compute_iam_policy` represents the `google_iap_web_type_compute_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.iap_web_type_compute_iam_policy.new` injects a new `data_google_iap_web_type_compute_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.iap_web_type_compute_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.iap_web_type_compute_iam_policy` using the reference:\n\n    $._ref.data_google_iap_web_type_compute_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_iap_web_type_compute_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_iap_web_type_compute_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.iap_web_type_compute_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_type_compute_iam_policy`\nTerraform data source.\n\nUnlike [google.data.iap_web_type_compute_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_type_compute_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project=null
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_iap_web_type_compute_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/kms_crypto_key_iam_policy.libsonnet b/4.x/_gen/data/kms_crypto_key_iam_policy.libsonnet
new file mode 100644
index 0000000..f3ac014
--- /dev/null
+++ b/4.x/_gen/data/kms_crypto_key_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='kms_crypto_key_iam_policy', url='', help='`kms_crypto_key_iam_policy` represents the `google_kms_crypto_key_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.kms_crypto_key_iam_policy.new` injects a new `data_google_kms_crypto_key_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.kms_crypto_key_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.kms_crypto_key_iam_policy` using the reference:\n\n    $._ref.data_google_kms_crypto_key_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_kms_crypto_key_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    crypto_key_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_kms_crypto_key_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(crypto_key_id=crypto_key_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.kms_crypto_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `kms_crypto_key_iam_policy`\nTerraform data source.\n\nUnlike [google.data.kms_crypto_key_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `kms_crypto_key_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    crypto_key_id
+  ):: std.prune(a={
+    crypto_key_id: crypto_key_id,
+  }),
+  '#withCryptoKeyId':: d.fn(help='`google.string.withCryptoKeyId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the crypto_key_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `crypto_key_id` field.\n', args=[]),
+  withCryptoKeyId(dataSrcLabel, value): {
+    data+: {
+      google_kms_crypto_key_iam_policy+: {
+        [dataSrcLabel]+: {
+          crypto_key_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/kms_key_ring_iam_policy.libsonnet b/4.x/_gen/data/kms_key_ring_iam_policy.libsonnet
new file mode 100644
index 0000000..0b06104
--- /dev/null
+++ b/4.x/_gen/data/kms_key_ring_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='kms_key_ring_iam_policy', url='', help='`kms_key_ring_iam_policy` represents the `google_kms_key_ring_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.kms_key_ring_iam_policy.new` injects a new `data_google_kms_key_ring_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.kms_key_ring_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.kms_key_ring_iam_policy` using the reference:\n\n    $._ref.data_google_kms_key_ring_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_kms_key_ring_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    key_ring_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_kms_key_ring_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(key_ring_id=key_ring_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.kms_key_ring_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `kms_key_ring_iam_policy`\nTerraform data source.\n\nUnlike [google.data.kms_key_ring_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `kms_key_ring_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    key_ring_id
+  ):: std.prune(a={
+    key_ring_id: key_ring_id,
+  }),
+  '#withKeyRingId':: d.fn(help='`google.string.withKeyRingId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the key_ring_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `key_ring_id` field.\n', args=[]),
+  withKeyRingId(dataSrcLabel, value): {
+    data+: {
+      google_kms_key_ring_iam_policy+: {
+        [dataSrcLabel]+: {
+          key_ring_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/main.libsonnet b/4.x/_gen/data/main.libsonnet
index a5c4f53..3b7fbb5 100644
--- a/4.x/_gen/data/main.libsonnet
+++ b/4.x/_gen/data/main.libsonnet
@@ -4,25 +4,45 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   access_approval_folder_service_account: (import 'access_approval_folder_service_account.libsonnet'),
   access_approval_organization_service_account: (import 'access_approval_organization_service_account.libsonnet'),
   access_approval_project_service_account: (import 'access_approval_project_service_account.libsonnet'),
+  access_context_manager_access_policy_iam_policy: (import 'access_context_manager_access_policy_iam_policy.libsonnet'),
   active_folder: (import 'active_folder.libsonnet'),
   alloydb_locations: (import 'alloydb_locations.libsonnet'),
   alloydb_supported_database_flags: (import 'alloydb_supported_database_flags.libsonnet'),
+  apigee_environment_iam_policy: (import 'apigee_environment_iam_policy.libsonnet'),
   app_engine_default_service_account: (import 'app_engine_default_service_account.libsonnet'),
   artifact_registry_repository: (import 'artifact_registry_repository.libsonnet'),
+  artifact_registry_repository_iam_policy: (import 'artifact_registry_repository_iam_policy.libsonnet'),
   beyondcorp_app_connection: (import 'beyondcorp_app_connection.libsonnet'),
   beyondcorp_app_connector: (import 'beyondcorp_app_connector.libsonnet'),
   beyondcorp_app_gateway: (import 'beyondcorp_app_gateway.libsonnet'),
+  bigquery_analytics_hub_data_exchange_iam_policy: (import 'bigquery_analytics_hub_data_exchange_iam_policy.libsonnet'),
+  bigquery_analytics_hub_listing_iam_policy: (import 'bigquery_analytics_hub_listing_iam_policy.libsonnet'),
+  bigquery_connection_iam_policy: (import 'bigquery_connection_iam_policy.libsonnet'),
+  bigquery_datapolicy_data_policy_iam_policy: (import 'bigquery_datapolicy_data_policy_iam_policy.libsonnet'),
+  bigquery_dataset_iam_policy: (import 'bigquery_dataset_iam_policy.libsonnet'),
   bigquery_default_service_account: (import 'bigquery_default_service_account.libsonnet'),
+  bigquery_table_iam_policy: (import 'bigquery_table_iam_policy.libsonnet'),
+  bigtable_instance_iam_policy: (import 'bigtable_instance_iam_policy.libsonnet'),
+  bigtable_table_iam_policy: (import 'bigtable_table_iam_policy.libsonnet'),
   billing_account: (import 'billing_account.libsonnet'),
+  billing_account_iam_policy: (import 'billing_account_iam_policy.libsonnet'),
+  binary_authorization_attestor_iam_policy: (import 'binary_authorization_attestor_iam_policy.libsonnet'),
   client_config: (import 'client_config.libsonnet'),
   client_openid_userinfo: (import 'client_openid_userinfo.libsonnet'),
   cloud_identity_group_memberships: (import 'cloud_identity_group_memberships.libsonnet'),
   cloud_identity_groups: (import 'cloud_identity_groups.libsonnet'),
   cloud_run_locations: (import 'cloud_run_locations.libsonnet'),
   cloud_run_service: (import 'cloud_run_service.libsonnet'),
+  cloud_run_service_iam_policy: (import 'cloud_run_service_iam_policy.libsonnet'),
+  cloud_run_v2_job_iam_policy: (import 'cloud_run_v2_job_iam_policy.libsonnet'),
+  cloud_run_v2_service_iam_policy: (import 'cloud_run_v2_service_iam_policy.libsonnet'),
+  cloud_tasks_queue_iam_policy: (import 'cloud_tasks_queue_iam_policy.libsonnet'),
   cloudbuild_trigger: (import 'cloudbuild_trigger.libsonnet'),
   cloudfunctions2_function: (import 'cloudfunctions2_function.libsonnet'),
+  cloudfunctions2_function_iam_policy: (import 'cloudfunctions2_function_iam_policy.libsonnet'),
   cloudfunctions_function: (import 'cloudfunctions_function.libsonnet'),
+  cloudfunctions_function_iam_policy: (import 'cloudfunctions_function_iam_policy.libsonnet'),
+  cloudiot_registry_iam_policy: (import 'cloudiot_registry_iam_policy.libsonnet'),
   composer_environment: (import 'composer_environment.libsonnet'),
   composer_image_versions: (import 'composer_image_versions.libsonnet'),
   compute_address: (import 'compute_address.libsonnet'),
@@ -31,15 +51,18 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   compute_backend_service: (import 'compute_backend_service.libsonnet'),
   compute_default_service_account: (import 'compute_default_service_account.libsonnet'),
   compute_disk: (import 'compute_disk.libsonnet'),
+  compute_disk_iam_policy: (import 'compute_disk_iam_policy.libsonnet'),
   compute_forwarding_rule: (import 'compute_forwarding_rule.libsonnet'),
   compute_global_address: (import 'compute_global_address.libsonnet'),
   compute_global_forwarding_rule: (import 'compute_global_forwarding_rule.libsonnet'),
   compute_ha_vpn_gateway: (import 'compute_ha_vpn_gateway.libsonnet'),
   compute_health_check: (import 'compute_health_check.libsonnet'),
   compute_image: (import 'compute_image.libsonnet'),
+  compute_image_iam_policy: (import 'compute_image_iam_policy.libsonnet'),
   compute_instance: (import 'compute_instance.libsonnet'),
   compute_instance_group: (import 'compute_instance_group.libsonnet'),
   compute_instance_group_manager: (import 'compute_instance_group_manager.libsonnet'),
+  compute_instance_iam_policy: (import 'compute_instance_iam_policy.libsonnet'),
   compute_instance_serial_port: (import 'compute_instance_serial_port.libsonnet'),
   compute_instance_template: (import 'compute_instance_template.libsonnet'),
   compute_lb_ip_ranges: (import 'compute_lb_ip_ranges.libsonnet'),
@@ -47,6 +70,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   compute_network_endpoint_group: (import 'compute_network_endpoint_group.libsonnet'),
   compute_network_peering: (import 'compute_network_peering.libsonnet'),
   compute_node_types: (import 'compute_node_types.libsonnet'),
+  compute_region_disk_iam_policy: (import 'compute_region_disk_iam_policy.libsonnet'),
   compute_region_instance_group: (import 'compute_region_instance_group.libsonnet'),
   compute_region_network_endpoint_group: (import 'compute_region_network_endpoint_group.libsonnet'),
   compute_region_ssl_certificate: (import 'compute_region_ssl_certificate.libsonnet'),
@@ -56,11 +80,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   compute_router_nat: (import 'compute_router_nat.libsonnet'),
   compute_router_status: (import 'compute_router_status.libsonnet'),
   compute_snapshot: (import 'compute_snapshot.libsonnet'),
+  compute_snapshot_iam_policy: (import 'compute_snapshot_iam_policy.libsonnet'),
   compute_ssl_certificate: (import 'compute_ssl_certificate.libsonnet'),
   compute_ssl_policy: (import 'compute_ssl_policy.libsonnet'),
   compute_subnetwork: (import 'compute_subnetwork.libsonnet'),
+  compute_subnetwork_iam_policy: (import 'compute_subnetwork_iam_policy.libsonnet'),
   compute_vpn_gateway: (import 'compute_vpn_gateway.libsonnet'),
   compute_zones: (import 'compute_zones.libsonnet'),
+  container_analysis_note_iam_policy: (import 'container_analysis_note_iam_policy.libsonnet'),
   container_attached_install_manifest: (import 'container_attached_install_manifest.libsonnet'),
   container_attached_versions: (import 'container_attached_versions.libsonnet'),
   container_aws_versions: (import 'container_aws_versions.libsonnet'),
@@ -69,22 +96,55 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   container_engine_versions: (import 'container_engine_versions.libsonnet'),
   container_registry_image: (import 'container_registry_image.libsonnet'),
   container_registry_repository: (import 'container_registry_repository.libsonnet'),
+  data_catalog_entry_group_iam_policy: (import 'data_catalog_entry_group_iam_policy.libsonnet'),
+  data_catalog_policy_tag_iam_policy: (import 'data_catalog_policy_tag_iam_policy.libsonnet'),
+  data_catalog_tag_template_iam_policy: (import 'data_catalog_tag_template_iam_policy.libsonnet'),
+  data_catalog_taxonomy_iam_policy: (import 'data_catalog_taxonomy_iam_policy.libsonnet'),
+  data_fusion_instance_iam_policy: (import 'data_fusion_instance_iam_policy.libsonnet'),
+  dataplex_asset_iam_policy: (import 'dataplex_asset_iam_policy.libsonnet'),
+  dataplex_lake_iam_policy: (import 'dataplex_lake_iam_policy.libsonnet'),
+  dataplex_zone_iam_policy: (import 'dataplex_zone_iam_policy.libsonnet'),
+  dataproc_autoscaling_policy_iam_policy: (import 'dataproc_autoscaling_policy_iam_policy.libsonnet'),
+  dataproc_cluster_iam_policy: (import 'dataproc_cluster_iam_policy.libsonnet'),
+  dataproc_job_iam_policy: (import 'dataproc_job_iam_policy.libsonnet'),
   dataproc_metastore_service: (import 'dataproc_metastore_service.libsonnet'),
+  dataproc_metastore_service_iam_policy: (import 'dataproc_metastore_service_iam_policy.libsonnet'),
   datastream_static_ips: (import 'datastream_static_ips.libsonnet'),
   dns_keys: (import 'dns_keys.libsonnet'),
   dns_managed_zone: (import 'dns_managed_zone.libsonnet'),
+  dns_managed_zone_iam_policy: (import 'dns_managed_zone_iam_policy.libsonnet'),
   dns_record_set: (import 'dns_record_set.libsonnet'),
+  endpoints_service_consumers_iam_policy: (import 'endpoints_service_consumers_iam_policy.libsonnet'),
+  endpoints_service_iam_policy: (import 'endpoints_service_iam_policy.libsonnet'),
   folder: (import 'folder.libsonnet'),
+  folder_iam_policy: (import 'folder_iam_policy.libsonnet'),
   folder_organization_policy: (import 'folder_organization_policy.libsonnet'),
   folders: (import 'folders.libsonnet'),
   game_services_game_server_deployment_rollout: (import 'game_services_game_server_deployment_rollout.libsonnet'),
+  gke_backup_backup_plan_iam_policy: (import 'gke_backup_backup_plan_iam_policy.libsonnet'),
+  gke_hub_membership_iam_policy: (import 'gke_hub_membership_iam_policy.libsonnet'),
+  healthcare_consent_store_iam_policy: (import 'healthcare_consent_store_iam_policy.libsonnet'),
+  healthcare_dataset_iam_policy: (import 'healthcare_dataset_iam_policy.libsonnet'),
+  healthcare_dicom_store_iam_policy: (import 'healthcare_dicom_store_iam_policy.libsonnet'),
+  healthcare_fhir_store_iam_policy: (import 'healthcare_fhir_store_iam_policy.libsonnet'),
+  healthcare_hl7_v2_store_iam_policy: (import 'healthcare_hl7_v2_store_iam_policy.libsonnet'),
   iam_policy: (import 'iam_policy.libsonnet'),
   iam_role: (import 'iam_role.libsonnet'),
   iam_testable_permissions: (import 'iam_testable_permissions.libsonnet'),
+  iap_app_engine_service_iam_policy: (import 'iap_app_engine_service_iam_policy.libsonnet'),
+  iap_app_engine_version_iam_policy: (import 'iap_app_engine_version_iam_policy.libsonnet'),
   iap_client: (import 'iap_client.libsonnet'),
+  iap_tunnel_iam_policy: (import 'iap_tunnel_iam_policy.libsonnet'),
+  iap_tunnel_instance_iam_policy: (import 'iap_tunnel_instance_iam_policy.libsonnet'),
+  iap_web_backend_service_iam_policy: (import 'iap_web_backend_service_iam_policy.libsonnet'),
+  iap_web_iam_policy: (import 'iap_web_iam_policy.libsonnet'),
+  iap_web_type_app_engine_iam_policy: (import 'iap_web_type_app_engine_iam_policy.libsonnet'),
+  iap_web_type_compute_iam_policy: (import 'iap_web_type_compute_iam_policy.libsonnet'),
   kms_crypto_key: (import 'kms_crypto_key.libsonnet'),
+  kms_crypto_key_iam_policy: (import 'kms_crypto_key_iam_policy.libsonnet'),
   kms_crypto_key_version: (import 'kms_crypto_key_version.libsonnet'),
   kms_key_ring: (import 'kms_key_ring.libsonnet'),
+  kms_key_ring_iam_policy: (import 'kms_key_ring_iam_policy.libsonnet'),
   kms_secret: (import 'kms_secret.libsonnet'),
   kms_secret_ciphertext: (import 'kms_secret_ciphertext.libsonnet'),
   logging_project_cmek_settings: (import 'logging_project_cmek_settings.libsonnet'),
@@ -96,26 +156,40 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   monitoring_notification_channel: (import 'monitoring_notification_channel.libsonnet'),
   monitoring_uptime_check_ips: (import 'monitoring_uptime_check_ips.libsonnet'),
   netblock_ip_ranges: (import 'netblock_ip_ranges.libsonnet'),
+  notebooks_instance_iam_policy: (import 'notebooks_instance_iam_policy.libsonnet'),
+  notebooks_runtime_iam_policy: (import 'notebooks_runtime_iam_policy.libsonnet'),
   organization: (import 'organization.libsonnet'),
+  organization_iam_policy: (import 'organization_iam_policy.libsonnet'),
+  privateca_ca_pool_iam_policy: (import 'privateca_ca_pool_iam_policy.libsonnet'),
   privateca_certificate_authority: (import 'privateca_certificate_authority.libsonnet'),
+  privateca_certificate_template_iam_policy: (import 'privateca_certificate_template_iam_policy.libsonnet'),
   project: (import 'project.libsonnet'),
+  project_iam_policy: (import 'project_iam_policy.libsonnet'),
   project_organization_policy: (import 'project_organization_policy.libsonnet'),
   project_service: (import 'project_service.libsonnet'),
   projects: (import 'projects.libsonnet'),
   pubsub_subscription: (import 'pubsub_subscription.libsonnet'),
+  pubsub_subscription_iam_policy: (import 'pubsub_subscription_iam_policy.libsonnet'),
   pubsub_topic: (import 'pubsub_topic.libsonnet'),
+  pubsub_topic_iam_policy: (import 'pubsub_topic_iam_policy.libsonnet'),
   redis_instance: (import 'redis_instance.libsonnet'),
+  scc_source_iam_policy: (import 'scc_source_iam_policy.libsonnet'),
   secret_manager_secret: (import 'secret_manager_secret.libsonnet'),
+  secret_manager_secret_iam_policy: (import 'secret_manager_secret_iam_policy.libsonnet'),
   secret_manager_secret_version: (import 'secret_manager_secret_version.libsonnet'),
   secret_manager_secret_version_access: (import 'secret_manager_secret_version_access.libsonnet'),
   service_account: (import 'service_account.libsonnet'),
   service_account_access_token: (import 'service_account_access_token.libsonnet'),
+  service_account_iam_policy: (import 'service_account_iam_policy.libsonnet'),
   service_account_id_token: (import 'service_account_id_token.libsonnet'),
   service_account_jwt: (import 'service_account_jwt.libsonnet'),
   service_account_key: (import 'service_account_key.libsonnet'),
   service_networking_peered_dns_domain: (import 'service_networking_peered_dns_domain.libsonnet'),
   sourcerepo_repository: (import 'sourcerepo_repository.libsonnet'),
+  sourcerepo_repository_iam_policy: (import 'sourcerepo_repository_iam_policy.libsonnet'),
+  spanner_database_iam_policy: (import 'spanner_database_iam_policy.libsonnet'),
   spanner_instance: (import 'spanner_instance.libsonnet'),
+  spanner_instance_iam_policy: (import 'spanner_instance_iam_policy.libsonnet'),
   sql_backup_run: (import 'sql_backup_run.libsonnet'),
   sql_ca_certs: (import 'sql_ca_certs.libsonnet'),
   sql_database: (import 'sql_database.libsonnet'),
@@ -124,13 +198,17 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   sql_databases: (import 'sql_databases.libsonnet'),
   sql_tiers: (import 'sql_tiers.libsonnet'),
   storage_bucket: (import 'storage_bucket.libsonnet'),
+  storage_bucket_iam_policy: (import 'storage_bucket_iam_policy.libsonnet'),
   storage_bucket_object: (import 'storage_bucket_object.libsonnet'),
   storage_bucket_object_content: (import 'storage_bucket_object_content.libsonnet'),
   storage_object_signed_url: (import 'storage_object_signed_url.libsonnet'),
   storage_project_service_account: (import 'storage_project_service_account.libsonnet'),
   storage_transfer_project_service_account: (import 'storage_transfer_project_service_account.libsonnet'),
   tags_tag_key: (import 'tags_tag_key.libsonnet'),
+  tags_tag_key_iam_policy: (import 'tags_tag_key_iam_policy.libsonnet'),
   tags_tag_value: (import 'tags_tag_value.libsonnet'),
+  tags_tag_value_iam_policy: (import 'tags_tag_value_iam_policy.libsonnet'),
   tpu_tensorflow_versions: (import 'tpu_tensorflow_versions.libsonnet'),
+  vertex_ai_index: (import 'vertex_ai_index.libsonnet'),
   vpc_access_connector: (import 'vpc_access_connector.libsonnet'),
 }
diff --git a/4.x/_gen/data/notebooks_instance_iam_policy.libsonnet b/4.x/_gen/data/notebooks_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..9675622
--- /dev/null
+++ b/4.x/_gen/data/notebooks_instance_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='notebooks_instance_iam_policy', url='', help='`notebooks_instance_iam_policy` represents the `google_notebooks_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.notebooks_instance_iam_policy.new` injects a new `data_google_notebooks_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.notebooks_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.notebooks_instance_iam_policy` using the reference:\n\n    $._ref.data_google_notebooks_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_notebooks_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance_name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_notebooks_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance_name=instance_name, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.notebooks_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `notebooks_instance_iam_policy`\nTerraform data source.\n\nUnlike [google.data.notebooks_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `notebooks_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance_name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    instance_name: instance_name,
+    location: location,
+    project: project,
+  }),
+  '#withInstanceName':: d.fn(help='`google.string.withInstanceName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance_name` field.\n', args=[]),
+  withInstanceName(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance_name: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/notebooks_runtime_iam_policy.libsonnet b/4.x/_gen/data/notebooks_runtime_iam_policy.libsonnet
new file mode 100644
index 0000000..6f20cdd
--- /dev/null
+++ b/4.x/_gen/data/notebooks_runtime_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='notebooks_runtime_iam_policy', url='', help='`notebooks_runtime_iam_policy` represents the `google_notebooks_runtime_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.notebooks_runtime_iam_policy.new` injects a new `data_google_notebooks_runtime_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.notebooks_runtime_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.notebooks_runtime_iam_policy` using the reference:\n\n    $._ref.data_google_notebooks_runtime_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_notebooks_runtime_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    runtime_name,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_notebooks_runtime_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(location=location, project=project, runtime_name=runtime_name),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.notebooks_runtime_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `notebooks_runtime_iam_policy`\nTerraform data source.\n\nUnlike [google.data.notebooks_runtime_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `notebooks_runtime_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    runtime_name,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    location: location,
+    project: project,
+    runtime_name: runtime_name,
+  }),
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_runtime_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_runtime_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRuntimeName':: d.fn(help='`google.string.withRuntimeName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the runtime_name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `runtime_name` field.\n', args=[]),
+  withRuntimeName(dataSrcLabel, value): {
+    data+: {
+      google_notebooks_runtime_iam_policy+: {
+        [dataSrcLabel]+: {
+          runtime_name: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/organization_iam_policy.libsonnet b/4.x/_gen/data/organization_iam_policy.libsonnet
new file mode 100644
index 0000000..280cab3
--- /dev/null
+++ b/4.x/_gen/data/organization_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='organization_iam_policy', url='', help='`organization_iam_policy` represents the `google_organization_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.organization_iam_policy.new` injects a new `data_google_organization_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.organization_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.organization_iam_policy` using the reference:\n\n    $._ref.data_google_organization_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_organization_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    org_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_organization_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(org_id=org_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.organization_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `organization_iam_policy`\nTerraform data source.\n\nUnlike [google.data.organization_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `organization_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    org_id
+  ):: std.prune(a={
+    org_id: org_id,
+  }),
+  '#withOrgId':: d.fn(help='`google.string.withOrgId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the org_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `org_id` field.\n', args=[]),
+  withOrgId(dataSrcLabel, value): {
+    data+: {
+      google_organization_iam_policy+: {
+        [dataSrcLabel]+: {
+          org_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/privateca_ca_pool_iam_policy.libsonnet b/4.x/_gen/data/privateca_ca_pool_iam_policy.libsonnet
new file mode 100644
index 0000000..7f666a8
--- /dev/null
+++ b/4.x/_gen/data/privateca_ca_pool_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='privateca_ca_pool_iam_policy', url='', help='`privateca_ca_pool_iam_policy` represents the `google_privateca_ca_pool_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.privateca_ca_pool_iam_policy.new` injects a new `data_google_privateca_ca_pool_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.privateca_ca_pool_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.privateca_ca_pool_iam_policy` using the reference:\n\n    $._ref.data_google_privateca_ca_pool_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_privateca_ca_pool_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    ca_pool,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_privateca_ca_pool_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(ca_pool=ca_pool, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.privateca_ca_pool_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `privateca_ca_pool_iam_policy`\nTerraform data source.\n\nUnlike [google.data.privateca_ca_pool_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `privateca_ca_pool_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    ca_pool,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    ca_pool: ca_pool,
+    location: location,
+    project: project,
+  }),
+  '#withCaPool':: d.fn(help='`google.string.withCaPool` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the ca_pool field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `ca_pool` field.\n', args=[]),
+  withCaPool(dataSrcLabel, value): {
+    data+: {
+      google_privateca_ca_pool_iam_policy+: {
+        [dataSrcLabel]+: {
+          ca_pool: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_privateca_ca_pool_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_privateca_ca_pool_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/privateca_certificate_template_iam_policy.libsonnet b/4.x/_gen/data/privateca_certificate_template_iam_policy.libsonnet
new file mode 100644
index 0000000..66fd2b8
--- /dev/null
+++ b/4.x/_gen/data/privateca_certificate_template_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='privateca_certificate_template_iam_policy', url='', help='`privateca_certificate_template_iam_policy` represents the `google_privateca_certificate_template_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.privateca_certificate_template_iam_policy.new` injects a new `data_google_privateca_certificate_template_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.privateca_certificate_template_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.privateca_certificate_template_iam_policy` using the reference:\n\n    $._ref.data_google_privateca_certificate_template_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_privateca_certificate_template_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting data source block.\n  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    certificate_template,
+    location=null,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_privateca_certificate_template_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(certificate_template=certificate_template, location=location, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.privateca_certificate_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `privateca_certificate_template_iam_policy`\nTerraform data source.\n\nUnlike [google.data.privateca_certificate_template_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting object.\n  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `privateca_certificate_template_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    certificate_template,
+    location=null,
+    project=null
+  ):: std.prune(a={
+    certificate_template: certificate_template,
+    location: location,
+    project: project,
+  }),
+  '#withCertificateTemplate':: d.fn(help='`google.string.withCertificateTemplate` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the certificate_template field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `certificate_template` field.\n', args=[]),
+  withCertificateTemplate(dataSrcLabel, value): {
+    data+: {
+      google_privateca_certificate_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          certificate_template: value,
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the location field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(dataSrcLabel, value): {
+    data+: {
+      google_privateca_certificate_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_privateca_certificate_template_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/project_iam_policy.libsonnet b/4.x/_gen/data/project_iam_policy.libsonnet
new file mode 100644
index 0000000..a22d02b
--- /dev/null
+++ b/4.x/_gen/data/project_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='project_iam_policy', url='', help='`project_iam_policy` represents the `google_project_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.project_iam_policy.new` injects a new `data_google_project_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.project_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.project_iam_policy` using the reference:\n\n    $._ref.data_google_project_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_project_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    project,
+    _meta={}
+  ):: tf.withData(
+    type='google_project_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.project_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `project_iam_policy`\nTerraform data source.\n\nUnlike [google.data.project_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `project_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    project
+  ):: std.prune(a={
+    project: project,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_project_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/pubsub_subscription_iam_policy.libsonnet b/4.x/_gen/data/pubsub_subscription_iam_policy.libsonnet
new file mode 100644
index 0000000..4ce89b7
--- /dev/null
+++ b/4.x/_gen/data/pubsub_subscription_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='pubsub_subscription_iam_policy', url='', help='`pubsub_subscription_iam_policy` represents the `google_pubsub_subscription_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.pubsub_subscription_iam_policy.new` injects a new `data_google_pubsub_subscription_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.pubsub_subscription_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.pubsub_subscription_iam_policy` using the reference:\n\n    $._ref.data_google_pubsub_subscription_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_pubsub_subscription_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `subscription` (`string`): Set the `subscription` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    subscription,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_pubsub_subscription_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, subscription=subscription),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.pubsub_subscription_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `pubsub_subscription_iam_policy`\nTerraform data source.\n\nUnlike [google.data.pubsub_subscription_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `subscription` (`string`): Set the `subscription` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `pubsub_subscription_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    subscription,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    subscription: subscription,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_subscription_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withSubscription':: d.fn(help='`google.string.withSubscription` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the subscription field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `subscription` field.\n', args=[]),
+  withSubscription(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_subscription_iam_policy+: {
+        [dataSrcLabel]+: {
+          subscription: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/pubsub_topic_iam_policy.libsonnet b/4.x/_gen/data/pubsub_topic_iam_policy.libsonnet
new file mode 100644
index 0000000..e10eee1
--- /dev/null
+++ b/4.x/_gen/data/pubsub_topic_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='pubsub_topic_iam_policy', url='', help='`pubsub_topic_iam_policy` represents the `google_pubsub_topic_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.pubsub_topic_iam_policy.new` injects a new `data_google_pubsub_topic_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.pubsub_topic_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.pubsub_topic_iam_policy` using the reference:\n\n    $._ref.data_google_pubsub_topic_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_pubsub_topic_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `topic` (`string`): Set the `topic` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    topic,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_pubsub_topic_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, topic=topic),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.pubsub_topic_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `pubsub_topic_iam_policy`\nTerraform data source.\n\nUnlike [google.data.pubsub_topic_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `topic` (`string`): Set the `topic` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `pubsub_topic_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    topic,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    topic: topic,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_topic_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTopic':: d.fn(help='`google.string.withTopic` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the topic field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `topic` field.\n', args=[]),
+  withTopic(dataSrcLabel, value): {
+    data+: {
+      google_pubsub_topic_iam_policy+: {
+        [dataSrcLabel]+: {
+          topic: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/scc_source_iam_policy.libsonnet b/4.x/_gen/data/scc_source_iam_policy.libsonnet
new file mode 100644
index 0000000..4a7a0d2
--- /dev/null
+++ b/4.x/_gen/data/scc_source_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='scc_source_iam_policy', url='', help='`scc_source_iam_policy` represents the `google_scc_source_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.scc_source_iam_policy.new` injects a new `data_google_scc_source_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.scc_source_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.scc_source_iam_policy` using the reference:\n\n    $._ref.data_google_scc_source_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_scc_source_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `organization` (`string`): Set the `organization` field on the resulting data source block.\n  - `source` (`string`): Set the `source` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    organization,
+    source,
+    _meta={}
+  ):: tf.withData(
+    type='google_scc_source_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(organization=organization, source=source),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.scc_source_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `scc_source_iam_policy`\nTerraform data source.\n\nUnlike [google.data.scc_source_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `organization` (`string`): Set the `organization` field on the resulting object.\n  - `source` (`string`): Set the `source` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `scc_source_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    organization,
+    source
+  ):: std.prune(a={
+    organization: organization,
+    source: source,
+  }),
+  '#withOrganization':: d.fn(help='`google.string.withOrganization` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the organization field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `organization` field.\n', args=[]),
+  withOrganization(dataSrcLabel, value): {
+    data+: {
+      google_scc_source_iam_policy+: {
+        [dataSrcLabel]+: {
+          organization: value,
+        },
+      },
+    },
+  },
+  '#withSource':: d.fn(help='`google.string.withSource` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the source field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `source` field.\n', args=[]),
+  withSource(dataSrcLabel, value): {
+    data+: {
+      google_scc_source_iam_policy+: {
+        [dataSrcLabel]+: {
+          source: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/secret_manager_secret_iam_policy.libsonnet b/4.x/_gen/data/secret_manager_secret_iam_policy.libsonnet
new file mode 100644
index 0000000..c5d47ba
--- /dev/null
+++ b/4.x/_gen/data/secret_manager_secret_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='secret_manager_secret_iam_policy', url='', help='`secret_manager_secret_iam_policy` represents the `google_secret_manager_secret_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.secret_manager_secret_iam_policy.new` injects a new `data_google_secret_manager_secret_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.secret_manager_secret_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.secret_manager_secret_iam_policy` using the reference:\n\n    $._ref.data_google_secret_manager_secret_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_secret_manager_secret_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `secret_id` (`string`): Set the `secret_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    secret_id,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_secret_manager_secret_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, secret_id=secret_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.secret_manager_secret_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `secret_manager_secret_iam_policy`\nTerraform data source.\n\nUnlike [google.data.secret_manager_secret_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `secret_id` (`string`): Set the `secret_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `secret_manager_secret_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    secret_id,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    secret_id: secret_id,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_secret_manager_secret_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withSecretId':: d.fn(help='`google.string.withSecretId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the secret_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `secret_id` field.\n', args=[]),
+  withSecretId(dataSrcLabel, value): {
+    data+: {
+      google_secret_manager_secret_iam_policy+: {
+        [dataSrcLabel]+: {
+          secret_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/service_account_iam_policy.libsonnet b/4.x/_gen/data/service_account_iam_policy.libsonnet
new file mode 100644
index 0000000..5917b6f
--- /dev/null
+++ b/4.x/_gen/data/service_account_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='service_account_iam_policy', url='', help='`service_account_iam_policy` represents the `google_service_account_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.service_account_iam_policy.new` injects a new `data_google_service_account_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.service_account_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.service_account_iam_policy` using the reference:\n\n    $._ref.data_google_service_account_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_service_account_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    service_account_id,
+    _meta={}
+  ):: tf.withData(
+    type='google_service_account_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(service_account_id=service_account_id),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.service_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `service_account_iam_policy`\nTerraform data source.\n\nUnlike [google.data.service_account_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `service_account_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    service_account_id
+  ):: std.prune(a={
+    service_account_id: service_account_id,
+  }),
+  '#withServiceAccountId':: d.fn(help='`google.string.withServiceAccountId` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the service_account_id field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `service_account_id` field.\n', args=[]),
+  withServiceAccountId(dataSrcLabel, value): {
+    data+: {
+      google_service_account_iam_policy+: {
+        [dataSrcLabel]+: {
+          service_account_id: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/sourcerepo_repository_iam_policy.libsonnet b/4.x/_gen/data/sourcerepo_repository_iam_policy.libsonnet
new file mode 100644
index 0000000..f5bd147
--- /dev/null
+++ b/4.x/_gen/data/sourcerepo_repository_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='sourcerepo_repository_iam_policy', url='', help='`sourcerepo_repository_iam_policy` represents the `google_sourcerepo_repository_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.sourcerepo_repository_iam_policy.new` injects a new `data_google_sourcerepo_repository_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.sourcerepo_repository_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.sourcerepo_repository_iam_policy` using the reference:\n\n    $._ref.data_google_sourcerepo_repository_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_sourcerepo_repository_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    repository,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_sourcerepo_repository_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(project=project, repository=repository),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.sourcerepo_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `sourcerepo_repository_iam_policy`\nTerraform data source.\n\nUnlike [google.data.sourcerepo_repository_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `repository` (`string`): Set the `repository` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `sourcerepo_repository_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    repository,
+    project=null
+  ):: std.prune(a={
+    project: project,
+    repository: repository,
+  }),
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_sourcerepo_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRepository':: d.fn(help='`google.string.withRepository` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the repository field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `repository` field.\n', args=[]),
+  withRepository(dataSrcLabel, value): {
+    data+: {
+      google_sourcerepo_repository_iam_policy+: {
+        [dataSrcLabel]+: {
+          repository: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/spanner_database_iam_policy.libsonnet b/4.x/_gen/data/spanner_database_iam_policy.libsonnet
new file mode 100644
index 0000000..f2b9dd6
--- /dev/null
+++ b/4.x/_gen/data/spanner_database_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='spanner_database_iam_policy', url='', help='`spanner_database_iam_policy` represents the `google_spanner_database_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.spanner_database_iam_policy.new` injects a new `data_google_spanner_database_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.spanner_database_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.spanner_database_iam_policy` using the reference:\n\n    $._ref.data_google_spanner_database_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_spanner_database_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `database` (`string`): Set the `database` field on the resulting data source block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    database,
+    instance,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_spanner_database_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(database=database, instance=instance, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.spanner_database_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `spanner_database_iam_policy`\nTerraform data source.\n\nUnlike [google.data.spanner_database_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `database` (`string`): Set the `database` field on the resulting object.\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `spanner_database_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    database,
+    instance,
+    project=null
+  ):: std.prune(a={
+    database: database,
+    instance: instance,
+    project: project,
+  }),
+  '#withDatabase':: d.fn(help='`google.string.withDatabase` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the database field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `database` field.\n', args=[]),
+  withDatabase(dataSrcLabel, value): {
+    data+: {
+      google_spanner_database_iam_policy+: {
+        [dataSrcLabel]+: {
+          database: value,
+        },
+      },
+    },
+  },
+  '#withInstance':: d.fn(help='`google.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_spanner_database_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_spanner_database_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/spanner_instance_iam_policy.libsonnet b/4.x/_gen/data/spanner_instance_iam_policy.libsonnet
new file mode 100644
index 0000000..658be16
--- /dev/null
+++ b/4.x/_gen/data/spanner_instance_iam_policy.libsonnet
@@ -0,0 +1,45 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='spanner_instance_iam_policy', url='', help='`spanner_instance_iam_policy` represents the `google_spanner_instance_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.spanner_instance_iam_policy.new` injects a new `data_google_spanner_instance_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.spanner_instance_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.spanner_instance_iam_policy` using the reference:\n\n    $._ref.data_google_spanner_instance_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_spanner_instance_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `instance` (`string`): Set the `instance` field on the resulting data source block.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    instance,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_spanner_instance_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(instance=instance, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.spanner_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `spanner_instance_iam_policy`\nTerraform data source.\n\nUnlike [google.data.spanner_instance_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `instance` (`string`): Set the `instance` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `spanner_instance_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    instance,
+    project=null
+  ):: std.prune(a={
+    instance: instance,
+    project: project,
+  }),
+  '#withInstance':: d.fn(help='`google.string.withInstance` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the instance field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `instance` field.\n', args=[]),
+  withInstance(dataSrcLabel, value): {
+    data+: {
+      google_spanner_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          instance: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_spanner_instance_iam_policy+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/storage_bucket_iam_policy.libsonnet b/4.x/_gen/data/storage_bucket_iam_policy.libsonnet
new file mode 100644
index 0000000..df10b78
--- /dev/null
+++ b/4.x/_gen/data/storage_bucket_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='storage_bucket_iam_policy', url='', help='`storage_bucket_iam_policy` represents the `google_storage_bucket_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.storage_bucket_iam_policy.new` injects a new `data_google_storage_bucket_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.storage_bucket_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.storage_bucket_iam_policy` using the reference:\n\n    $._ref.data_google_storage_bucket_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_storage_bucket_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `bucket` (`string`): Set the `bucket` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    bucket,
+    _meta={}
+  ):: tf.withData(
+    type='google_storage_bucket_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(bucket=bucket),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.storage_bucket_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `storage_bucket_iam_policy`\nTerraform data source.\n\nUnlike [google.data.storage_bucket_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `bucket` (`string`): Set the `bucket` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `storage_bucket_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    bucket
+  ):: std.prune(a={
+    bucket: bucket,
+  }),
+  '#withBucket':: d.fn(help='`google.string.withBucket` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the bucket field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `bucket` field.\n', args=[]),
+  withBucket(dataSrcLabel, value): {
+    data+: {
+      google_storage_bucket_iam_policy+: {
+        [dataSrcLabel]+: {
+          bucket: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/tags_tag_key_iam_policy.libsonnet b/4.x/_gen/data/tags_tag_key_iam_policy.libsonnet
new file mode 100644
index 0000000..b131433
--- /dev/null
+++ b/4.x/_gen/data/tags_tag_key_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='tags_tag_key_iam_policy', url='', help='`tags_tag_key_iam_policy` represents the `google_tags_tag_key_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.tags_tag_key_iam_policy.new` injects a new `data_google_tags_tag_key_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.tags_tag_key_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.tags_tag_key_iam_policy` using the reference:\n\n    $._ref.data_google_tags_tag_key_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_tags_tag_key_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `tag_key` (`string`): Set the `tag_key` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    tag_key,
+    _meta={}
+  ):: tf.withData(
+    type='google_tags_tag_key_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(tag_key=tag_key),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.tags_tag_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `tags_tag_key_iam_policy`\nTerraform data source.\n\nUnlike [google.data.tags_tag_key_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `tag_key` (`string`): Set the `tag_key` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `tags_tag_key_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    tag_key
+  ):: std.prune(a={
+    tag_key: tag_key,
+  }),
+  '#withTagKey':: d.fn(help='`google.string.withTagKey` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the tag_key field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `tag_key` field.\n', args=[]),
+  withTagKey(dataSrcLabel, value): {
+    data+: {
+      google_tags_tag_key_iam_policy+: {
+        [dataSrcLabel]+: {
+          tag_key: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/tags_tag_value_iam_policy.libsonnet b/4.x/_gen/data/tags_tag_value_iam_policy.libsonnet
new file mode 100644
index 0000000..a46e2a1
--- /dev/null
+++ b/4.x/_gen/data/tags_tag_value_iam_policy.libsonnet
@@ -0,0 +1,32 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='tags_tag_value_iam_policy', url='', help='`tags_tag_value_iam_policy` represents the `google_tags_tag_value_iam_policy` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.tags_tag_value_iam_policy.new` injects a new `data_google_tags_tag_value_iam_policy` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.tags_tag_value_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.tags_tag_value_iam_policy` using the reference:\n\n    $._ref.data_google_tags_tag_value_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_tags_tag_value_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `tag_value` (`string`): Set the `tag_value` field on the resulting data source block.\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    tag_value,
+    _meta={}
+  ):: tf.withData(
+    type='google_tags_tag_value_iam_policy',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(tag_value=tag_value),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.tags_tag_value_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `tags_tag_value_iam_policy`\nTerraform data source.\n\nUnlike [google.data.tags_tag_value_iam_policy.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `tag_value` (`string`): Set the `tag_value` field on the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `tags_tag_value_iam_policy` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    tag_value
+  ):: std.prune(a={
+    tag_value: tag_value,
+  }),
+  '#withTagValue':: d.fn(help='`google.string.withTagValue` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the tag_value field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `tag_value` field.\n', args=[]),
+  withTagValue(dataSrcLabel, value): {
+    data+: {
+      google_tags_tag_value_iam_policy+: {
+        [dataSrcLabel]+: {
+          tag_value: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/data/vertex_ai_index.libsonnet b/4.x/_gen/data/vertex_ai_index.libsonnet
new file mode 100644
index 0000000..5794ae3
--- /dev/null
+++ b/4.x/_gen/data/vertex_ai_index.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='vertex_ai_index', url='', help='`vertex_ai_index` represents the `google_vertex_ai_index` Terraform data source.\n\n\n\nThis package contains functions and utilities for setting up the data source using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.data.vertex_ai_index.new` injects a new `data_google_vertex_ai_index` Terraform `data source`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.data.vertex_ai_index.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.data.vertex_ai_index` using the reference:\n\n    $._ref.data_google_vertex_ai_index.some_id.get('id')\n\nThis is the same as directly entering `\"${ data_google_vertex_ai_index.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block.\n  - `name` (`string`): The resource name of the Index.\n  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index. eg us-central1\n\n**Returns**:\n- A mixin object that injects the new data source into the root Terraform configuration.\n", args=[]),
+  new(
+    dataSrcLabel,
+    name,
+    region,
+    project=null,
+    _meta={}
+  ):: tf.withData(
+    type='google_vertex_ai_index',
+    label=dataSrcLabel,
+    attrs=self.newAttrs(name=name, project=project, region=region),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.data.vertex_ai_index.newAttrs` constructs a new object with attributes and blocks configured for the `vertex_ai_index`\nTerraform data source.\n\nUnlike [google.data.vertex_ai_index.new](#fn-new), this function will not inject the `data source`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `name` (`string`): The resource name of the Index.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index. eg us-central1\n\n**Returns**:\n  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `vertex_ai_index` data source into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    region,
+    project=null
+  ):: std.prune(a={
+    name: name,
+    project: project,
+    region: region,
+  }),
+  '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the name field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_index+: {
+        [dataSrcLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the project field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_index+: {
+        [dataSrcLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform data source block to set or update the region field.\n\n\n\n**Args**:\n  - `dataSrcLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(dataSrcLabel, value): {
+    data+: {
+      google_vertex_ai_index+: {
+        [dataSrcLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/main.libsonnet b/4.x/_gen/main.libsonnet
index b753190..0de4166 100644
--- a/4.x/_gen/main.libsonnet
+++ b/4.x/_gen/main.libsonnet
@@ -267,6 +267,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   compute_vpn_gateway: (import 'resources/compute_vpn_gateway.libsonnet'),
   compute_vpn_tunnel: (import 'resources/compute_vpn_tunnel.libsonnet'),
   container_analysis_note: (import 'resources/container_analysis_note.libsonnet'),
+  container_analysis_note_iam_binding: (import 'resources/container_analysis_note_iam_binding.libsonnet'),
+  container_analysis_note_iam_member: (import 'resources/container_analysis_note_iam_member.libsonnet'),
+  container_analysis_note_iam_policy: (import 'resources/container_analysis_note_iam_policy.libsonnet'),
   container_analysis_occurrence: (import 'resources/container_analysis_occurrence.libsonnet'),
   container_attached_cluster: (import 'resources/container_attached_cluster.libsonnet'),
   container_aws_cluster: (import 'resources/container_aws_cluster.libsonnet'),
diff --git a/4.x/_gen/resources/bigquery_table.libsonnet b/4.x/_gen/resources/bigquery_table.libsonnet
index 285e7dc..56d7873 100644
--- a/4.x/_gen/resources/bigquery_table.libsonnet
+++ b/4.x/_gen/resources/bigquery_table.libsonnet
@@ -59,7 +59,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         source_uri_prefix: source_uri_prefix,
       }),
     },
-    '#new':: d.fn(help='\n`google.bigquery_table.external_data_configuration.new` constructs a new object with attributes and blocks configured for the `external_data_configuration`\nTerraform sub block.\n\n\n\n**Args**:\n  - `autodetect` (`bool`): Let BigQuery try to autodetect the schema and format of the table.\n  - `compression` (`string`): The compression type of the data source. Valid values are "NONE" or "GZIP". When `null`, the `compression` field will be omitted from the resulting object.\n  - `connection_id` (`string`): The connection specifying the credentials to be used to read external storage, such as Azure Blob, Cloud Storage, or S3. The connectionId can have the form "{{project}}.{{location}}.{{connection_id}}" or "projects/{{project}}/locations/{{location}}/connections/{{connection_id}}". When `null`, the `connection_id` field will be omitted from the resulting object.\n  - `ignore_unknown_values` (`bool`): Indicates if BigQuery should allow extra values that are not represented in the table schema. If true, the extra values are ignored. If false, records with extra columns are treated as bad records, and if there are too many bad records, an invalid error is returned in the job result. The default value is false. When `null`, the `ignore_unknown_values` field will be omitted from the resulting object.\n  - `max_bad_records` (`number`): The maximum number of bad records that BigQuery can ignore when reading data. When `null`, the `max_bad_records` field will be omitted from the resulting object.\n  - `reference_file_schema_uri` (`string`): When creating an external table, the user can provide a reference file with the table schema. This is enabled for the following formats: AVRO, PARQUET, ORC. When `null`, the `reference_file_schema_uri` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the external table. Schema is required for CSV and JSON formats and is disallowed for Google Cloud Bigtable, Cloud Datastore backups, and Avro formats when using external tables. When `null`, the `schema` field will be omitted from the resulting object.\n  - `source_format` (`string`): The data format. Supported values are: "CSV", "GOOGLE_SHEETS", "NEWLINE_DELIMITED_JSON", "AVRO", "PARQUET", "ORC" and "DATASTORE_BACKUP". To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".\n  - `source_uris` (`list`): A list of the fully-qualified URIs that point to your data in Google Cloud.\n  - `avro_options` (`list[obj]`): Additional options if source_format is set to "AVRO" When `null`, the `avro_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.avro_options.new](#fn-external_data_configurationavro_optionsnew) constructor.\n  - `csv_options` (`list[obj]`): Additional properties to set if source_format is set to "CSV". When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.csv_options.new](#fn-external_data_configurationcsv_optionsnew) constructor.\n  - `google_sheets_options` (`list[obj]`): Additional options if source_format is set to "GOOGLE_SHEETS". When `null`, the `google_sheets_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.google_sheets_options.new](#fn-external_data_configurationgoogle_sheets_optionsnew) constructor.\n  - `hive_partitioning_options` (`list[obj]`): When set, configures hive partitioning support. Not all storage formats support hive partitioning -- requesting hive partitioning on an unsupported format will lead to an error, as will providing an invalid specification. When `null`, the `hive_partitioning_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.hive_partitioning_options.new](#fn-external_data_configurationhive_partitioning_optionsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `external_data_configuration` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google.bigquery_table.external_data_configuration.new` constructs a new object with attributes and blocks configured for the `external_data_configuration`\nTerraform sub block.\n\n\n\n**Args**:\n  - `autodetect` (`bool`): Let BigQuery try to autodetect the schema and format of the table.\n  - `compression` (`string`): The compression type of the data source. Valid values are "NONE" or "GZIP". When `null`, the `compression` field will be omitted from the resulting object.\n  - `connection_id` (`string`): The connection specifying the credentials to be used to read external storage, such as Azure Blob, Cloud Storage, or S3. The connectionId can have the form "{{project}}.{{location}}.{{connection_id}}" or "projects/{{project}}/locations/{{location}}/connections/{{connection_id}}". When `null`, the `connection_id` field will be omitted from the resulting object.\n  - `ignore_unknown_values` (`bool`): Indicates if BigQuery should allow extra values that are not represented in the table schema. If true, the extra values are ignored. If false, records with extra columns are treated as bad records, and if there are too many bad records, an invalid error is returned in the job result. The default value is false. When `null`, the `ignore_unknown_values` field will be omitted from the resulting object.\n  - `max_bad_records` (`number`): The maximum number of bad records that BigQuery can ignore when reading data. When `null`, the `max_bad_records` field will be omitted from the resulting object.\n  - `reference_file_schema_uri` (`string`): When creating an external table, the user can provide a reference file with the table schema. This is enabled for the following formats: AVRO, PARQUET, ORC. When `null`, the `reference_file_schema_uri` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the external table. Schema is required for CSV and JSON formats and is disallowed for Google Cloud Bigtable, Cloud Datastore backups, and Avro formats when using external tables. When `null`, the `schema` field will be omitted from the resulting object.\n  - `source_format` (`string`):  Please see sourceFormat under ExternalDataConfiguration in Bigquery's public API documentation (https://cloud.google.com/bigquery/docs/reference/rest/v2/tables#externaldataconfiguration) for supported formats. To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".\n  - `source_uris` (`list`): A list of the fully-qualified URIs that point to your data in Google Cloud.\n  - `avro_options` (`list[obj]`): Additional options if source_format is set to "AVRO" When `null`, the `avro_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.avro_options.new](#fn-external_data_configurationavro_optionsnew) constructor.\n  - `csv_options` (`list[obj]`): Additional properties to set if source_format is set to "CSV". When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.csv_options.new](#fn-external_data_configurationcsv_optionsnew) constructor.\n  - `google_sheets_options` (`list[obj]`): Additional options if source_format is set to "GOOGLE_SHEETS". When `null`, the `google_sheets_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.google_sheets_options.new](#fn-external_data_configurationgoogle_sheets_optionsnew) constructor.\n  - `hive_partitioning_options` (`list[obj]`): When set, configures hive partitioning support. Not all storage formats support hive partitioning -- requesting hive partitioning on an unsupported format will lead to an error, as will providing an invalid specification. When `null`, the `hive_partitioning_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.hive_partitioning_options.new](#fn-external_data_configurationhive_partitioning_optionsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `external_data_configuration` sub block.\n', args=[]),
     new(
       autodetect,
       source_format,
diff --git a/4.x/_gen/resources/cloud_run_service.libsonnet b/4.x/_gen/resources/cloud_run_service.libsonnet
index 4835743..f66e3a5 100644
--- a/4.x/_gen/resources/cloud_run_service.libsonnet
+++ b/4.x/_gen/resources/cloud_run_service.libsonnet
@@ -214,7 +214,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
             timeout_seconds: timeout_seconds,
           }),
         },
-        '#new':: d.fn(help='\n`google.cloud_run_service.template.spec.containers.new` constructs a new object with attributes and blocks configured for the `containers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `args` (`list`): Arguments to the entrypoint.\nThe docker image's CMD is used if this is not provided. When `null`, the `args` field will be omitted from the resulting object.\n  - `command` (`list`): Entrypoint array. Not executed within a shell.\nThe docker image's ENTRYPOINT is used if this is not provided. When `null`, the `command` field will be omitted from the resulting object.\n  - `image` (`string`): Docker image name. This is most often a reference to a container located\nin the container registry, such as gcr.io/cloudrun/hello\n  - `working_dir` (`string`): Container's working directory.\nIf not specified, the container runtime's default will be used, which\nmight be configured in the container image. When `null`, the `working_dir` field will be omitted from the resulting object.\n  - `env` (`list[obj]`): List of environment variables to set in the container. When `null`, the `env` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.env.new](#fn-templatetemplatespecenvnew) constructor.\n  - `env_from` (`list[obj]`): List of sources to populate environment variables in the container.\nAll invalid keys will be reported as an event when the container is starting.\nWhen a key exists in multiple sources, the value associated with the last source will\ntake precedence. Values defined by an Env with a duplicate key will take\nprecedence. When `null`, the `env_from` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.env_from.new](#fn-templatetemplatespecenv_fromnew) constructor.\n  - `liveness_probe` (`list[obj]`): Periodic probe of container liveness. Container will be restarted if the probe fails. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.liveness_probe.new](#fn-templatetemplatespecliveness_probenew) constructor.\n  - `ports` (`list[obj]`): List of open ports in the container. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.ports.new](#fn-templatetemplatespecportsnew) constructor.\n  - `resources` (`list[obj]`): Compute Resources required by this container. Used to set values such as max memory When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.resources.new](#fn-templatetemplatespecresourcesnew) constructor.\n  - `startup_probe` (`list[obj]`): Startup probe of application within the container.\nAll other probes are disabled if a startup probe is provided, until it\nsucceeds. Container will not be added to service endpoints if the probe fails. When `null`, the `startup_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.startup_probe.new](#fn-templatetemplatespecstartup_probenew) constructor.\n  - `volume_mounts` (`list[obj]`): Volume to mount into the container's filesystem.\nOnly supports SecretVolumeSources. When `null`, the `volume_mounts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.volume_mounts.new](#fn-templatetemplatespecvolume_mountsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `containers` sub block.\n', args=[]),
+        '#new':: d.fn(help='\n`google.cloud_run_service.template.spec.containers.new` constructs a new object with attributes and blocks configured for the `containers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `args` (`list`): Arguments to the entrypoint.\nThe docker image's CMD is used if this is not provided. When `null`, the `args` field will be omitted from the resulting object.\n  - `command` (`list`): Entrypoint array. Not executed within a shell.\nThe docker image's ENTRYPOINT is used if this is not provided. When `null`, the `command` field will be omitted from the resulting object.\n  - `image` (`string`): Docker image name. This is most often a reference to a container located\nin the container registry, such as gcr.io/cloudrun/hello\n  - `name` (`string`): Name of the container When `null`, the `name` field will be omitted from the resulting object.\n  - `working_dir` (`string`): Container's working directory.\nIf not specified, the container runtime's default will be used, which\nmight be configured in the container image. When `null`, the `working_dir` field will be omitted from the resulting object.\n  - `env` (`list[obj]`): List of environment variables to set in the container. When `null`, the `env` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.env.new](#fn-templatetemplatespecenvnew) constructor.\n  - `env_from` (`list[obj]`): List of sources to populate environment variables in the container.\nAll invalid keys will be reported as an event when the container is starting.\nWhen a key exists in multiple sources, the value associated with the last source will\ntake precedence. Values defined by an Env with a duplicate key will take\nprecedence. When `null`, the `env_from` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.env_from.new](#fn-templatetemplatespecenv_fromnew) constructor.\n  - `liveness_probe` (`list[obj]`): Periodic probe of container liveness. Container will be restarted if the probe fails. When `null`, the `liveness_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.liveness_probe.new](#fn-templatetemplatespecliveness_probenew) constructor.\n  - `ports` (`list[obj]`): List of open ports in the container. When `null`, the `ports` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.ports.new](#fn-templatetemplatespecportsnew) constructor.\n  - `resources` (`list[obj]`): Compute Resources required by this container. Used to set values such as max memory When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.resources.new](#fn-templatetemplatespecresourcesnew) constructor.\n  - `startup_probe` (`list[obj]`): Startup probe of application within the container.\nAll other probes are disabled if a startup probe is provided, until it\nsucceeds. Container will not be added to service endpoints if the probe fails. When `null`, the `startup_probe` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.startup_probe.new](#fn-templatetemplatespecstartup_probenew) constructor.\n  - `volume_mounts` (`list[obj]`): Volume to mount into the container's filesystem.\nOnly supports SecretVolumeSources. When `null`, the `volume_mounts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.volume_mounts.new](#fn-templatetemplatespecvolume_mountsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `containers` sub block.\n', args=[]),
         new(
           image,
           args=null,
@@ -222,6 +222,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           env=null,
           env_from=null,
           liveness_probe=null,
+          name=null,
           ports=null,
           resources=null,
           startup_probe=null,
@@ -234,6 +235,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           env_from: env_from,
           image: image,
           liveness_probe: liveness_probe,
+          name: name,
           ports: ports,
           resources: resources,
           startup_probe: startup_probe,
@@ -333,7 +335,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           }),
         },
       },
-      '#new':: d.fn(help='\n`google.cloud_run_service.template.spec.new` constructs a new object with attributes and blocks configured for the `spec`\nTerraform sub block.\n\n\n\n**Args**:\n  - `container_concurrency` (`number`): ContainerConcurrency specifies the maximum allowed in-flight (concurrent)\nrequests per container of the Revision. Values are:\n- '0' thread-safe, the system should manage the max concurrency. This is\n    the default value.\n- '1' not-thread-safe. Single concurrency\n- '2-N' thread-safe, max concurrency of N When `null`, the `container_concurrency` field will be omitted from the resulting object.\n  - `service_account_name` (`string`): Email address of the IAM service account associated with the revision of the\nservice. The service account represents the identity of the running revision,\nand determines what permissions the revision has. If not provided, the revision\nwill use the project's default service account. When `null`, the `service_account_name` field will be omitted from the resulting object.\n  - `timeout_seconds` (`number`): TimeoutSeconds holds the max duration the instance is allowed for responding to a request. When `null`, the `timeout_seconds` field will be omitted from the resulting object.\n  - `containers` (`list[obj]`): Container defines the unit of execution for this Revision.\nIn the context of a Revision, we disallow a number of the fields of\nthis Container, including: name, ports, and volumeMounts. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.\n  - `volumes` (`list[obj]`): Volume represents a named volume in a container. When `null`, the `volumes` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.volumes.new](#fn-templatetemplatevolumesnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `spec` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google.cloud_run_service.template.spec.new` constructs a new object with attributes and blocks configured for the `spec`\nTerraform sub block.\n\n\n\n**Args**:\n  - `container_concurrency` (`number`): ContainerConcurrency specifies the maximum allowed in-flight (concurrent)\nrequests per container of the Revision. Values are:\n- '0' thread-safe, the system should manage the max concurrency. This is\n    the default value.\n- '1' not-thread-safe. Single concurrency\n- '2-N' thread-safe, max concurrency of N When `null`, the `container_concurrency` field will be omitted from the resulting object.\n  - `service_account_name` (`string`): Email address of the IAM service account associated with the revision of the\nservice. The service account represents the identity of the running revision,\nand determines what permissions the revision has. If not provided, the revision\nwill use the project's default service account. When `null`, the `service_account_name` field will be omitted from the resulting object.\n  - `timeout_seconds` (`number`): TimeoutSeconds holds the max duration the instance is allowed for responding to a request. When `null`, the `timeout_seconds` field will be omitted from the resulting object.\n  - `containers` (`list[obj]`): Containers defines the unit of execution for this Revision. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.\n  - `volumes` (`list[obj]`): Volume represents a named volume in a container. When `null`, the `volumes` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.volumes.new](#fn-templatetemplatevolumesnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `spec` sub block.\n', args=[]),
       new(
         container_concurrency=null,
         containers=null,
diff --git a/4.x/_gen/resources/compute_disk.libsonnet b/4.x/_gen/resources/compute_disk.libsonnet
index d0a804f..7475c7c 100644
--- a/4.x/_gen/resources/compute_disk.libsonnet
+++ b/4.x/_gen/resources/compute_disk.libsonnet
@@ -16,14 +16,24 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       rsa_encrypted_key: rsa_encrypted_key,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_disk.new` injects a new `google_compute_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_disk` using the reference:\n\n    $._ref.google_compute_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image\u0026#39;s \u0026#39;self_link\u0026#39;, \u0026#39;projects/{project}/global/images/{image}\u0026#39;,\n\u0026#39;projects/{project}/global/images/family/{family}\u0026#39;, \u0026#39;global/images/{image}\u0026#39;,\n\u0026#39;global/images/family/{family}\u0026#39;, \u0026#39;family/{family}\u0026#39;, \u0026#39;{project}/{family}\u0026#39;,\n\u0026#39;{project}/{image}\u0026#39;, \u0026#39;{family}\u0026#39;, or \u0026#39;{image}\u0026#39;. If referred by family, the\nimages names must include the family name. If they don\u0026#39;t, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image \u0026#39;centos-6-v20180104\u0026#39; includes its family name \u0026#39;centos-6\u0026#39;.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the \u0026#39;image\u0026#39; or\n\u0026#39;snapshot\u0026#39; parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with \u0026#39;image\u0026#39; or \u0026#39;snapshot\u0026#39;,\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~\u0026gt;**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add \u0026#39;lifecycle.prevent_destroy\u0026#39; in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  guest_os_features:: {
+    '#new':: d.fn(help='\n`google.compute_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`\nTerraform sub block.\n\n\n\n**Args**:\n  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]\n\n**Returns**:\n  - An attribute object that represents the `guest_os_features` sub block.\n', args=[]),
+    new(
+      type
+    ):: std.prune(a={
+      type: type,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.compute_disk.new` injects a new `google_compute_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_disk` using the reference:\n\n    $._ref.google_compute_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image\u0026#39;s \u0026#39;self_link\u0026#39;, \u0026#39;projects/{project}/global/images/{image}\u0026#39;,\n\u0026#39;projects/{project}/global/images/family/{family}\u0026#39;, \u0026#39;global/images/{image}\u0026#39;,\n\u0026#39;global/images/family/{family}\u0026#39;, \u0026#39;family/{family}\u0026#39;, \u0026#39;{project}/{family}\u0026#39;,\n\u0026#39;{project}/{image}\u0026#39;, \u0026#39;{family}\u0026#39;, or \u0026#39;{image}\u0026#39;. If referred by family, the\nimages names must include the family name. If they don\u0026#39;t, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image \u0026#39;centos-6-v20180104\u0026#39; includes its family name \u0026#39;centos-6\u0026#39;.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the \u0026#39;image\u0026#39; or\n\u0026#39;snapshot\u0026#39; parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with \u0026#39;image\u0026#39; or \u0026#39;snapshot\u0026#39;,\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~\u0026gt;**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add \u0026#39;lifecycle.prevent_destroy\u0026#39; in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     image=null,
     labels=null,
+    licenses=null,
     physical_block_size_bytes=null,
     project=null,
     provisioned_iops=null,
@@ -42,8 +52,10 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     attrs=self.newAttrs(
       description=description,
       disk_encryption_key=disk_encryption_key,
+      guest_os_features=guest_os_features,
       image=image,
       labels=labels,
+      licenses=licenses,
       name=name,
       physical_block_size_bytes=physical_block_size_bytes,
       project=project,
@@ -59,13 +71,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_disk.newAttrs` constructs a new object with attributes and blocks configured for the `compute_disk`\nTerraform resource.\n\nUnlike [google.compute_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image's 'self_link', 'projects/{project}/global/images/{image}',\n'projects/{project}/global/images/family/{family}', 'global/images/{image}',\n'global/images/family/{family}', 'family/{family}', '{project}/{family}',\n'{project}/{image}', '{family}', or '{image}'. If referred by family, the\nimages names must include the family name. If they don't, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image 'centos-6-v20180104' includes its family name 'centos-6'.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the 'image' or\n'snapshot' parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with 'image' or 'snapshot',\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~>**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add 'lifecycle.prevent_destroy' in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_disk` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_disk.newAttrs` constructs a new object with attributes and blocks configured for the `compute_disk`\nTerraform resource.\n\nUnlike [google.compute_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `image` (`string`): The image from which to initialize this disk. This can be\none of: the image's 'self_link', 'projects/{project}/global/images/{image}',\n'projects/{project}/global/images/family/{family}', 'global/images/{image}',\n'global/images/family/{family}', 'family/{family}', '{project}/{family}',\n'{project}/{image}', '{family}', or '{image}'. If referred by family, the\nimages names must include the family name. If they don't, use the\n[google_compute_image data source](/docs/providers/google/d/compute_image.html).\nFor instance, the image 'centos-6-v20180104' includes its family name 'centos-6'.\nThese images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `provisioned_iops` (`number`): Indicates how many IOPS must be provisioned for the disk. When `null`, the `provisioned_iops` field will be omitted from the resulting object.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the 'image' or\n'snapshot' parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with 'image' or 'snapshot',\nthe value must not be less than the size of the image\nor the size of the snapshot.\n\n~>**NOTE** If you change the size, Terraform updates the disk size\nif upsizing is detected but recreates the disk if downsizing is requested.\nYou can add 'lifecycle.prevent_destroy' in the config to prevent destroying\nand recreating. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. If the snapshot is in another\nproject than this disk, you must supply a full URL. For example, the\nfollowing are valid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `zone` (`string`): A reference to the zone where the disk resides. When `null`, the `zone` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if\nthe source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_disk` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     image=null,
     labels=null,
+    licenses=null,
     physical_block_size_bytes=null,
     project=null,
     provisioned_iops=null,
@@ -80,8 +94,10 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   ):: std.prune(a={
     description: description,
     disk_encryption_key: disk_encryption_key,
+    guest_os_features: guest_os_features,
     image: image,
     labels: labels,
+    licenses: licenses,
     name: name,
     physical_block_size_bytes: physical_block_size_bytes,
     project: project,
@@ -161,6 +177,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withGuestOsFeatures':: d.fn(help='`google.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withGuestOsFeaturesMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeatures(resourceLabel, value): {
+    resource+: {
+      google_compute_disk+: {
+        [resourceLabel]+: {
+          guest_os_features: value,
+        },
+      },
+    },
+  },
+  '#withGuestOsFeaturesMixin':: d.fn(help='`google.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withGuestOsFeatures](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeaturesMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_disk+: {
+        [resourceLabel]+: {
+          guest_os_features+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withImage':: d.fn(help='`google.string.withImage` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the image field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `image` field.\n', args=[]),
   withImage(resourceLabel, value): {
     resource+: {
@@ -181,6 +217,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withLicenses':: d.fn(help='`google.list.withLicenses` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the licenses field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `licenses` field.\n', args=[]),
+  withLicenses(resourceLabel, value): {
+    resource+: {
+      google_compute_disk+: {
+        [resourceLabel]+: {
+          licenses: value,
+        },
+      },
+    },
+  },
   '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
   withName(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_forwarding_rule.libsonnet b/4.x/_gen/resources/compute_forwarding_rule.libsonnet
index 82a5f90..4b9aa95 100644
--- a/4.x/_gen/resources/compute_forwarding_rule.libsonnet
+++ b/4.x/_gen/resources/compute_forwarding_rule.libsonnet
@@ -2,12 +2,13 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='compute_forwarding_rule', url='', help='`compute_forwarding_rule` represents the `google_compute_forwarding_rule` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google.compute_forwarding_rule.new` injects a new `google_compute_forwarding_rule` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_forwarding_rule.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_forwarding_rule` using the reference:\n\n    $._ref.google_compute_forwarding_rule.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_forwarding_rule.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `all_ports` (`bool`): This field can only be used:\n* If \u0026#39;IPProtocol\u0026#39; is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal and external protocol forwarding.\n\n\nSet this field to true to allow packets addressed to any port or packets\nlacking destination port information (for example, UDP fragments after the\nfirst fragment) to be forwarded to the backends configured with this\nforwarding rule.\n\nThe \u0026#39;ports\u0026#39;, \u0026#39;port_range\u0026#39;, and\n\u0026#39;allPorts\u0026#39; fields are mutually exclusive. When `null`, the `all_ports` field will be omitted from the resulting object.\n  - `allow_global_access` (`bool`): This field is used along with the \u0026#39;backend_service\u0026#39; field for\ninternal load balancing or with the \u0026#39;target\u0026#39; field for internal\nTargetInstance.\n\nIf the field is set to \u0026#39;TRUE\u0026#39;, clients can access ILB from all\nregions.\n\nOtherwise only allows access from clients in the same region as the\ninternal load balancer. When `null`, the `allow_global_access` field will be omitted from the resulting object.\n  - `backend_service` (`string`): Identifies the backend service to which the forwarding rule sends traffic.\n\nRequired for Internal TCP/UDP Load Balancing and Network Load Balancing;\nmust be omitted for all other load balancer types. When `null`, the `backend_service` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `ip_address` (`string`): IP address for which this forwarding rule accepts traffic. When a client\nsends traffic to this IP address, the forwarding rule directs the traffic\nto the referenced \u0026#39;target\u0026#39; or \u0026#39;backendService\u0026#39;.\n\nWhile creating a forwarding rule, specifying an \u0026#39;IPAddress\u0026#39; is\nrequired under the following circumstances:\n\n* When the \u0026#39;target\u0026#39; is set to \u0026#39;targetGrpcProxy\u0026#39; and\n\u0026#39;validateForProxyless\u0026#39; is set to \u0026#39;true\u0026#39;, the\n\u0026#39;IPAddress\u0026#39; should be set to \u0026#39;0.0.0.0\u0026#39;.\n* When the \u0026#39;target\u0026#39; is a Private Service Connect Google APIs\nbundle, you must specify an \u0026#39;IPAddress\u0026#39;.\n\n\nOtherwise, you can optionally specify an IP address that references an\nexisting static (reserved) IP address resource. When omitted, Google Cloud\nassigns an ephemeral IP address.\n\nUse one of the following formats to specify an IP address while creating a\nforwarding rule:\n\n* IP address number, as in \u0026#39;100.1.2.3\u0026#39;\n* IPv6 address range, as in \u0026#39;2600:1234::/96\u0026#39;\n* Full resource URL, as in\n\u0026#39;https://www.googleapis.com/compute/v1/projects/project_id/regions/region/addresses/address-name\u0026#39;\n* Partial URL or by name, as in:\n  * \u0026#39;projects/project_id/regions/region/addresses/address-name\u0026#39;\n  * \u0026#39;regions/region/addresses/address-name\u0026#39;\n  * \u0026#39;global/addresses/address-name\u0026#39;\n  * \u0026#39;address-name\u0026#39;\n\n\nThe forwarding rule\u0026#39;s \u0026#39;target\u0026#39; or \u0026#39;backendService\u0026#39;,\nand in most cases, also the \u0026#39;loadBalancingScheme\u0026#39;, determine the\ntype of IP address that you can use. For detailed information, see\n[IP address\nspecifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n\nWhen reading an \u0026#39;IPAddress\u0026#39;, the API always returns the IP\naddress number. When `null`, the `ip_address` field will be omitted from the resulting object.\n  - `ip_protocol` (`string`): The IP protocol to which this rule applies.\n\nFor protocol forwarding, valid\noptions are \u0026#39;TCP\u0026#39;, \u0026#39;UDP\u0026#39;, \u0026#39;ESP\u0026#39;,\n\u0026#39;AH\u0026#39;, \u0026#39;SCTP\u0026#39;, \u0026#39;ICMP\u0026#39; and\n\u0026#39;L3_DEFAULT\u0026#39;.\n\nThe valid IP protocols are different for different load balancing products\nas described in [Load balancing\nfeatures](https://cloud.google.com/load-balancing/docs/features#protocols_from_the_load_balancer_to_the_backends). Possible values: [\u0026#34;TCP\u0026#34;, \u0026#34;UDP\u0026#34;, \u0026#34;ESP\u0026#34;, \u0026#34;AH\u0026#34;, \u0026#34;SCTP\u0026#34;, \u0026#34;ICMP\u0026#34;, \u0026#34;L3_DEFAULT\u0026#34;] When `null`, the `ip_protocol` field will be omitted from the resulting object.\n  - `is_mirroring_collector` (`bool`): Indicates whether or not this load balancer can be used as a collector for\npacket mirroring. To prevent mirroring loops, instances behind this\nload balancer will not have their traffic mirrored even if a\n\u0026#39;PacketMirroring\u0026#39; rule applies to them.\n\nThis can only be set to true for load balancers that have their\n\u0026#39;loadBalancingScheme\u0026#39; set to \u0026#39;INTERNAL\u0026#39;. When `null`, the `is_mirroring_collector` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this forwarding rule.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `load_balancing_scheme` (`string`): Specifies the forwarding rule type.\n\nFor more information about forwarding rules, refer to\n[Forwarding rule concepts](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts). Default value: \u0026#34;EXTERNAL\u0026#34; Possible values: [\u0026#34;EXTERNAL\u0026#34;, \u0026#34;EXTERNAL_MANAGED\u0026#34;, \u0026#34;INTERNAL\u0026#34;, \u0026#34;INTERNAL_MANAGED\u0026#34;] When `null`, the `load_balancing_scheme` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is created.\nThe name must be 1-63 characters long, and comply with\n[RFC1035](https://www.ietf.org/rfc/rfc1035.txt).\n\nSpecifically, the name must be 1-63 characters long and match the regular\nexpression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the first\ncharacter must be a lowercase letter, and all following characters must\nbe a dash, lowercase letter, or digit, except the last character, which\ncannot be a dash.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, the forwarding rule name must be a 1-20 characters string with\nlowercase letters and numbers and must start with a letter.\n  - `network` (`string`): This field is not used for external load balancing.\n\nFor Internal TCP/UDP Load Balancing, this field identifies the network that\nthe load balanced IP should belong to for this Forwarding Rule.\nIf the subnetwork is specified, the network of the subnetwork will be used.\nIf neither subnetwork nor this field is specified, the default network will\nbe used.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, a network must be provided. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_tier` (`string`): This signifies the networking tier used for configuring\nthis load balancer and can only take the following values:\n\u0026#39;PREMIUM\u0026#39;, \u0026#39;STANDARD\u0026#39;.\n\nFor regional ForwardingRule, the valid values are \u0026#39;PREMIUM\u0026#39; and\n\u0026#39;STANDARD\u0026#39;. For GlobalForwardingRule, the valid value is\n\u0026#39;PREMIUM\u0026#39;.\n\nIf this field is not specified, it is assumed to be \u0026#39;PREMIUM\u0026#39;.\nIf \u0026#39;IPAddress\u0026#39; is specified, this value must be equal to the\nnetworkTier of the Address. Possible values: [\u0026#34;PREMIUM\u0026#34;, \u0026#34;STANDARD\u0026#34;] When `null`, the `network_tier` field will be omitted from the resulting object.\n  - `port_range` (`string`): This field can only be used:\n\n* If \u0026#39;IPProtocol\u0026#39; is one of TCP, UDP, or SCTP.\n* By backend service-based network load balancers, target pool-based\nnetwork load balancers, internal proxy load balancers, external proxy load\nbalancers, Traffic Director, external protocol forwarding, and Classic VPN.\nSome products have restrictions on what ports can be used. See\n[port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#port_specifications)\nfor details.\n\n\nOnly packets addressed to ports in the specified range will be forwarded to\nthe backends configured with this forwarding rule.\n\nThe \u0026#39;ports\u0026#39; and \u0026#39;port_range\u0026#39; fields are mutually exclusive.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame \u0026#39;[IPAddress, IPProtocol]\u0026#39; pair, and cannot have\noverlapping \u0026#39;portRange\u0026#39;s.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same \u0026#39;[IPAddress, IPProtocol]\u0026#39;\npair, and cannot have overlapping \u0026#39;portRange\u0026#39;s. When `null`, the `port_range` field will be omitted from the resulting object.\n  - `ports` (`list`): This field can only be used:\n\n* If \u0026#39;IPProtocol\u0026#39; is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal protocol forwarding.\n\n\nYou can specify a list of up to five ports by number, separated by commas.\nThe ports can be contiguous or discontiguous. Only packets addressed to\nthese ports will be forwarded to the backends configured with this\nforwarding rule.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame \u0026#39;[IPAddress, IPProtocol]\u0026#39; pair, and cannot share any values\ndefined in \u0026#39;ports\u0026#39;.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same \u0026#39;[IPAddress, IPProtocol]\u0026#39;\npair, and cannot share any values defined in \u0026#39;ports\u0026#39;.\n\nThe \u0026#39;ports\u0026#39; and \u0026#39;port_range\u0026#39; fields are mutually exclusive. When `null`, the `ports` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the regional forwarding rule resides.\n\nThis field is not applicable to global forwarding rules. When `null`, the `region` field will be omitted from the resulting object.\n  - `service_label` (`string`): An optional prefix to the service name for this Forwarding Rule.\nIf specified, will be the first label of the fully qualified service\nname.\n\nThe label must be 1-63 characters long, and comply with RFC1035.\nSpecifically, the label must be 1-63 characters long and match the\nregular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the first\ncharacter must be a lowercase letter, and all following characters\nmust be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n\nThis field is only used for INTERNAL load balancing. When `null`, the `service_label` field will be omitted from the resulting object.\n  - `source_ip_ranges` (`list`): If not empty, this Forwarding Rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a Forwarding Rule can only have up to 64 source IP ranges, and this field can only be used with a regional Forwarding Rule whose scheme is EXTERNAL. Each sourceIpRange entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24). When `null`, the `source_ip_ranges` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): This field identifies the subnetwork that the load balanced IP should\nbelong to for this Forwarding Rule, used in internal load balancing and\nnetwork load balancing with IPv6.\n\nIf the network specified is in auto subnet mode, this field is optional.\nHowever, a subnetwork must be specified if the network is in custom subnet\nmode or when creating external forwarding rule with IPv6. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `target` (`string`): The URL of the target resource to receive the matched traffic.  For\nregional forwarding rules, this target must be in the same region as the\nforwarding rule. For global forwarding rules, this target must be a global\nload balancing resource.\n\nThe forwarded traffic must be of a type appropriate to the target object.\n*  For load balancers, see the \u0026#34;Target\u0026#34; column in [Port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n*  For Private Service Connect forwarding rules that forward traffic to Google APIs, provide the name of a supported Google API bundle:\n  *  \u0026#39;vpc-sc\u0026#39; - [ APIs that support VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/supported-products).\n  *  \u0026#39;all-apis\u0026#39; - [All supported Google APIs](https://cloud.google.com/vpc/docs/private-service-connect#supported-apis).\n\n\nFor Private Service Connect forwarding rules that forward traffic to managed services, the target must be a service attachment. When `null`, the `target` field will be omitted from the resulting object.\n  - `service_directory_registrations` (`list[obj]`): Service Directory resources to register this forwarding rule with.\n\nCurrently, only supports a single Service Directory resource. When `null`, the `service_directory_registrations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.service_directory_registrations.new](#fn-service_directory_registrationsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google.compute_forwarding_rule.new` injects a new `google_compute_forwarding_rule` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_forwarding_rule.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_forwarding_rule` using the reference:\n\n    $._ref.google_compute_forwarding_rule.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_forwarding_rule.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `all_ports` (`bool`): This field can only be used:\n* If \u0026#39;IPProtocol\u0026#39; is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal and external protocol forwarding.\n\n\nSet this field to true to allow packets addressed to any port or packets\nlacking destination port information (for example, UDP fragments after the\nfirst fragment) to be forwarded to the backends configured with this\nforwarding rule.\n\nThe \u0026#39;ports\u0026#39;, \u0026#39;port_range\u0026#39;, and\n\u0026#39;allPorts\u0026#39; fields are mutually exclusive. When `null`, the `all_ports` field will be omitted from the resulting object.\n  - `allow_global_access` (`bool`): This field is used along with the \u0026#39;backend_service\u0026#39; field for\ninternal load balancing or with the \u0026#39;target\u0026#39; field for internal\nTargetInstance.\n\nIf the field is set to \u0026#39;TRUE\u0026#39;, clients can access ILB from all\nregions.\n\nOtherwise only allows access from clients in the same region as the\ninternal load balancer. When `null`, the `allow_global_access` field will be omitted from the resulting object.\n  - `allow_psc_global_access` (`bool`): This is used in PSC consumer ForwardingRule to control whether the PSC endpoint can be accessed from another region. When `null`, the `allow_psc_global_access` field will be omitted from the resulting object.\n  - `backend_service` (`string`): Identifies the backend service to which the forwarding rule sends traffic.\n\nRequired for Internal TCP/UDP Load Balancing and Network Load Balancing;\nmust be omitted for all other load balancer types. When `null`, the `backend_service` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `ip_address` (`string`): IP address for which this forwarding rule accepts traffic. When a client\nsends traffic to this IP address, the forwarding rule directs the traffic\nto the referenced \u0026#39;target\u0026#39; or \u0026#39;backendService\u0026#39;.\n\nWhile creating a forwarding rule, specifying an \u0026#39;IPAddress\u0026#39; is\nrequired under the following circumstances:\n\n* When the \u0026#39;target\u0026#39; is set to \u0026#39;targetGrpcProxy\u0026#39; and\n\u0026#39;validateForProxyless\u0026#39; is set to \u0026#39;true\u0026#39;, the\n\u0026#39;IPAddress\u0026#39; should be set to \u0026#39;0.0.0.0\u0026#39;.\n* When the \u0026#39;target\u0026#39; is a Private Service Connect Google APIs\nbundle, you must specify an \u0026#39;IPAddress\u0026#39;.\n\n\nOtherwise, you can optionally specify an IP address that references an\nexisting static (reserved) IP address resource. When omitted, Google Cloud\nassigns an ephemeral IP address.\n\nUse one of the following formats to specify an IP address while creating a\nforwarding rule:\n\n* IP address number, as in \u0026#39;100.1.2.3\u0026#39;\n* IPv6 address range, as in \u0026#39;2600:1234::/96\u0026#39;\n* Full resource URL, as in\n\u0026#39;https://www.googleapis.com/compute/v1/projects/project_id/regions/region/addresses/address-name\u0026#39;\n* Partial URL or by name, as in:\n  * \u0026#39;projects/project_id/regions/region/addresses/address-name\u0026#39;\n  * \u0026#39;regions/region/addresses/address-name\u0026#39;\n  * \u0026#39;global/addresses/address-name\u0026#39;\n  * \u0026#39;address-name\u0026#39;\n\n\nThe forwarding rule\u0026#39;s \u0026#39;target\u0026#39; or \u0026#39;backendService\u0026#39;,\nand in most cases, also the \u0026#39;loadBalancingScheme\u0026#39;, determine the\ntype of IP address that you can use. For detailed information, see\n[IP address\nspecifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n\nWhen reading an \u0026#39;IPAddress\u0026#39;, the API always returns the IP\naddress number. When `null`, the `ip_address` field will be omitted from the resulting object.\n  - `ip_protocol` (`string`): The IP protocol to which this rule applies.\n\nFor protocol forwarding, valid\noptions are \u0026#39;TCP\u0026#39;, \u0026#39;UDP\u0026#39;, \u0026#39;ESP\u0026#39;,\n\u0026#39;AH\u0026#39;, \u0026#39;SCTP\u0026#39;, \u0026#39;ICMP\u0026#39; and\n\u0026#39;L3_DEFAULT\u0026#39;.\n\nThe valid IP protocols are different for different load balancing products\nas described in [Load balancing\nfeatures](https://cloud.google.com/load-balancing/docs/features#protocols_from_the_load_balancer_to_the_backends). Possible values: [\u0026#34;TCP\u0026#34;, \u0026#34;UDP\u0026#34;, \u0026#34;ESP\u0026#34;, \u0026#34;AH\u0026#34;, \u0026#34;SCTP\u0026#34;, \u0026#34;ICMP\u0026#34;, \u0026#34;L3_DEFAULT\u0026#34;] When `null`, the `ip_protocol` field will be omitted from the resulting object.\n  - `is_mirroring_collector` (`bool`): Indicates whether or not this load balancer can be used as a collector for\npacket mirroring. To prevent mirroring loops, instances behind this\nload balancer will not have their traffic mirrored even if a\n\u0026#39;PacketMirroring\u0026#39; rule applies to them.\n\nThis can only be set to true for load balancers that have their\n\u0026#39;loadBalancingScheme\u0026#39; set to \u0026#39;INTERNAL\u0026#39;. When `null`, the `is_mirroring_collector` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this forwarding rule.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `load_balancing_scheme` (`string`): Specifies the forwarding rule type.\n\nFor more information about forwarding rules, refer to\n[Forwarding rule concepts](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts). Default value: \u0026#34;EXTERNAL\u0026#34; Possible values: [\u0026#34;EXTERNAL\u0026#34;, \u0026#34;EXTERNAL_MANAGED\u0026#34;, \u0026#34;INTERNAL\u0026#34;, \u0026#34;INTERNAL_MANAGED\u0026#34;] When `null`, the `load_balancing_scheme` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is created.\nThe name must be 1-63 characters long, and comply with\n[RFC1035](https://www.ietf.org/rfc/rfc1035.txt).\n\nSpecifically, the name must be 1-63 characters long and match the regular\nexpression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the first\ncharacter must be a lowercase letter, and all following characters must\nbe a dash, lowercase letter, or digit, except the last character, which\ncannot be a dash.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, the forwarding rule name must be a 1-20 characters string with\nlowercase letters and numbers and must start with a letter.\n  - `network` (`string`): This field is not used for external load balancing.\n\nFor Internal TCP/UDP Load Balancing, this field identifies the network that\nthe load balanced IP should belong to for this Forwarding Rule.\nIf the subnetwork is specified, the network of the subnetwork will be used.\nIf neither subnetwork nor this field is specified, the default network will\nbe used.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, a network must be provided. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_tier` (`string`): This signifies the networking tier used for configuring\nthis load balancer and can only take the following values:\n\u0026#39;PREMIUM\u0026#39;, \u0026#39;STANDARD\u0026#39;.\n\nFor regional ForwardingRule, the valid values are \u0026#39;PREMIUM\u0026#39; and\n\u0026#39;STANDARD\u0026#39;. For GlobalForwardingRule, the valid value is\n\u0026#39;PREMIUM\u0026#39;.\n\nIf this field is not specified, it is assumed to be \u0026#39;PREMIUM\u0026#39;.\nIf \u0026#39;IPAddress\u0026#39; is specified, this value must be equal to the\nnetworkTier of the Address. Possible values: [\u0026#34;PREMIUM\u0026#34;, \u0026#34;STANDARD\u0026#34;] When `null`, the `network_tier` field will be omitted from the resulting object.\n  - `port_range` (`string`): This field can only be used:\n\n* If \u0026#39;IPProtocol\u0026#39; is one of TCP, UDP, or SCTP.\n* By backend service-based network load balancers, target pool-based\nnetwork load balancers, internal proxy load balancers, external proxy load\nbalancers, Traffic Director, external protocol forwarding, and Classic VPN.\nSome products have restrictions on what ports can be used. See\n[port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#port_specifications)\nfor details.\n\n\nOnly packets addressed to ports in the specified range will be forwarded to\nthe backends configured with this forwarding rule.\n\nThe \u0026#39;ports\u0026#39; and \u0026#39;port_range\u0026#39; fields are mutually exclusive.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame \u0026#39;[IPAddress, IPProtocol]\u0026#39; pair, and cannot have\noverlapping \u0026#39;portRange\u0026#39;s.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same \u0026#39;[IPAddress, IPProtocol]\u0026#39;\npair, and cannot have overlapping \u0026#39;portRange\u0026#39;s. When `null`, the `port_range` field will be omitted from the resulting object.\n  - `ports` (`list`): This field can only be used:\n\n* If \u0026#39;IPProtocol\u0026#39; is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal protocol forwarding.\n\n\nYou can specify a list of up to five ports by number, separated by commas.\nThe ports can be contiguous or discontiguous. Only packets addressed to\nthese ports will be forwarded to the backends configured with this\nforwarding rule.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame \u0026#39;[IPAddress, IPProtocol]\u0026#39; pair, and cannot share any values\ndefined in \u0026#39;ports\u0026#39;.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same \u0026#39;[IPAddress, IPProtocol]\u0026#39;\npair, and cannot share any values defined in \u0026#39;ports\u0026#39;.\n\nThe \u0026#39;ports\u0026#39; and \u0026#39;port_range\u0026#39; fields are mutually exclusive. When `null`, the `ports` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the regional forwarding rule resides.\n\nThis field is not applicable to global forwarding rules. When `null`, the `region` field will be omitted from the resulting object.\n  - `service_label` (`string`): An optional prefix to the service name for this Forwarding Rule.\nIf specified, will be the first label of the fully qualified service\nname.\n\nThe label must be 1-63 characters long, and comply with RFC1035.\nSpecifically, the label must be 1-63 characters long and match the\nregular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the first\ncharacter must be a lowercase letter, and all following characters\nmust be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n\nThis field is only used for INTERNAL load balancing. When `null`, the `service_label` field will be omitted from the resulting object.\n  - `source_ip_ranges` (`list`): If not empty, this Forwarding Rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a Forwarding Rule can only have up to 64 source IP ranges, and this field can only be used with a regional Forwarding Rule whose scheme is EXTERNAL. Each sourceIpRange entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24). When `null`, the `source_ip_ranges` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): This field identifies the subnetwork that the load balanced IP should\nbelong to for this Forwarding Rule, used in internal load balancing and\nnetwork load balancing with IPv6.\n\nIf the network specified is in auto subnet mode, this field is optional.\nHowever, a subnetwork must be specified if the network is in custom subnet\nmode or when creating external forwarding rule with IPv6. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `target` (`string`): The URL of the target resource to receive the matched traffic.  For\nregional forwarding rules, this target must be in the same region as the\nforwarding rule. For global forwarding rules, this target must be a global\nload balancing resource.\n\nThe forwarded traffic must be of a type appropriate to the target object.\n*  For load balancers, see the \u0026#34;Target\u0026#34; column in [Port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n*  For Private Service Connect forwarding rules that forward traffic to Google APIs, provide the name of a supported Google API bundle:\n  *  \u0026#39;vpc-sc\u0026#39; - [ APIs that support VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/supported-products).\n  *  \u0026#39;all-apis\u0026#39; - [All supported Google APIs](https://cloud.google.com/vpc/docs/private-service-connect#supported-apis).\n\n\nFor Private Service Connect forwarding rules that forward traffic to managed services, the target must be a service attachment. When `null`, the `target` field will be omitted from the resulting object.\n  - `service_directory_registrations` (`list[obj]`): Service Directory resources to register this forwarding rule with.\n\nCurrently, only supports a single Service Directory resource. When `null`, the `service_directory_registrations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.service_directory_registrations.new](#fn-service_directory_registrationsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
     all_ports=null,
     allow_global_access=null,
+    allow_psc_global_access=null,
     backend_service=null,
     description=null,
     ip_address=null,
@@ -34,6 +35,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     attrs=self.newAttrs(
       all_ports=all_ports,
       allow_global_access=allow_global_access,
+      allow_psc_global_access=allow_psc_global_access,
       backend_service=backend_service,
       description=description,
       ip_address=ip_address,
@@ -57,11 +59,12 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_forwarding_rule.newAttrs` constructs a new object with attributes and blocks configured for the `compute_forwarding_rule`\nTerraform resource.\n\nUnlike [google.compute_forwarding_rule.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `all_ports` (`bool`): This field can only be used:\n* If 'IPProtocol' is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal and external protocol forwarding.\n\n\nSet this field to true to allow packets addressed to any port or packets\nlacking destination port information (for example, UDP fragments after the\nfirst fragment) to be forwarded to the backends configured with this\nforwarding rule.\n\nThe 'ports', 'port_range', and\n'allPorts' fields are mutually exclusive. When `null`, the `all_ports` field will be omitted from the resulting object.\n  - `allow_global_access` (`bool`): This field is used along with the 'backend_service' field for\ninternal load balancing or with the 'target' field for internal\nTargetInstance.\n\nIf the field is set to 'TRUE', clients can access ILB from all\nregions.\n\nOtherwise only allows access from clients in the same region as the\ninternal load balancer. When `null`, the `allow_global_access` field will be omitted from the resulting object.\n  - `backend_service` (`string`): Identifies the backend service to which the forwarding rule sends traffic.\n\nRequired for Internal TCP/UDP Load Balancing and Network Load Balancing;\nmust be omitted for all other load balancer types. When `null`, the `backend_service` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `ip_address` (`string`): IP address for which this forwarding rule accepts traffic. When a client\nsends traffic to this IP address, the forwarding rule directs the traffic\nto the referenced 'target' or 'backendService'.\n\nWhile creating a forwarding rule, specifying an 'IPAddress' is\nrequired under the following circumstances:\n\n* When the 'target' is set to 'targetGrpcProxy' and\n'validateForProxyless' is set to 'true', the\n'IPAddress' should be set to '0.0.0.0'.\n* When the 'target' is a Private Service Connect Google APIs\nbundle, you must specify an 'IPAddress'.\n\n\nOtherwise, you can optionally specify an IP address that references an\nexisting static (reserved) IP address resource. When omitted, Google Cloud\nassigns an ephemeral IP address.\n\nUse one of the following formats to specify an IP address while creating a\nforwarding rule:\n\n* IP address number, as in '100.1.2.3'\n* IPv6 address range, as in '2600:1234::/96'\n* Full resource URL, as in\n'https://www.googleapis.com/compute/v1/projects/project_id/regions/region/addresses/address-name'\n* Partial URL or by name, as in:\n  * 'projects/project_id/regions/region/addresses/address-name'\n  * 'regions/region/addresses/address-name'\n  * 'global/addresses/address-name'\n  * 'address-name'\n\n\nThe forwarding rule's 'target' or 'backendService',\nand in most cases, also the 'loadBalancingScheme', determine the\ntype of IP address that you can use. For detailed information, see\n[IP address\nspecifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n\nWhen reading an 'IPAddress', the API always returns the IP\naddress number. When `null`, the `ip_address` field will be omitted from the resulting object.\n  - `ip_protocol` (`string`): The IP protocol to which this rule applies.\n\nFor protocol forwarding, valid\noptions are 'TCP', 'UDP', 'ESP',\n'AH', 'SCTP', 'ICMP' and\n'L3_DEFAULT'.\n\nThe valid IP protocols are different for different load balancing products\nas described in [Load balancing\nfeatures](https://cloud.google.com/load-balancing/docs/features#protocols_from_the_load_balancer_to_the_backends). Possible values: ["TCP", "UDP", "ESP", "AH", "SCTP", "ICMP", "L3_DEFAULT"] When `null`, the `ip_protocol` field will be omitted from the resulting object.\n  - `is_mirroring_collector` (`bool`): Indicates whether or not this load balancer can be used as a collector for\npacket mirroring. To prevent mirroring loops, instances behind this\nload balancer will not have their traffic mirrored even if a\n'PacketMirroring' rule applies to them.\n\nThis can only be set to true for load balancers that have their\n'loadBalancingScheme' set to 'INTERNAL'. When `null`, the `is_mirroring_collector` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this forwarding rule.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `load_balancing_scheme` (`string`): Specifies the forwarding rule type.\n\nFor more information about forwarding rules, refer to\n[Forwarding rule concepts](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts). Default value: "EXTERNAL" Possible values: ["EXTERNAL", "EXTERNAL_MANAGED", "INTERNAL", "INTERNAL_MANAGED"] When `null`, the `load_balancing_scheme` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is created.\nThe name must be 1-63 characters long, and comply with\n[RFC1035](https://www.ietf.org/rfc/rfc1035.txt).\n\nSpecifically, the name must be 1-63 characters long and match the regular\nexpression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the first\ncharacter must be a lowercase letter, and all following characters must\nbe a dash, lowercase letter, or digit, except the last character, which\ncannot be a dash.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, the forwarding rule name must be a 1-20 characters string with\nlowercase letters and numbers and must start with a letter.\n  - `network` (`string`): This field is not used for external load balancing.\n\nFor Internal TCP/UDP Load Balancing, this field identifies the network that\nthe load balanced IP should belong to for this Forwarding Rule.\nIf the subnetwork is specified, the network of the subnetwork will be used.\nIf neither subnetwork nor this field is specified, the default network will\nbe used.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, a network must be provided. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_tier` (`string`): This signifies the networking tier used for configuring\nthis load balancer and can only take the following values:\n'PREMIUM', 'STANDARD'.\n\nFor regional ForwardingRule, the valid values are 'PREMIUM' and\n'STANDARD'. For GlobalForwardingRule, the valid value is\n'PREMIUM'.\n\nIf this field is not specified, it is assumed to be 'PREMIUM'.\nIf 'IPAddress' is specified, this value must be equal to the\nnetworkTier of the Address. Possible values: ["PREMIUM", "STANDARD"] When `null`, the `network_tier` field will be omitted from the resulting object.\n  - `port_range` (`string`): This field can only be used:\n\n* If 'IPProtocol' is one of TCP, UDP, or SCTP.\n* By backend service-based network load balancers, target pool-based\nnetwork load balancers, internal proxy load balancers, external proxy load\nbalancers, Traffic Director, external protocol forwarding, and Classic VPN.\nSome products have restrictions on what ports can be used. See\n[port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#port_specifications)\nfor details.\n\n\nOnly packets addressed to ports in the specified range will be forwarded to\nthe backends configured with this forwarding rule.\n\nThe 'ports' and 'port_range' fields are mutually exclusive.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame '[IPAddress, IPProtocol]' pair, and cannot have\noverlapping 'portRange's.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same '[IPAddress, IPProtocol]'\npair, and cannot have overlapping 'portRange's. When `null`, the `port_range` field will be omitted from the resulting object.\n  - `ports` (`list`): This field can only be used:\n\n* If 'IPProtocol' is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal protocol forwarding.\n\n\nYou can specify a list of up to five ports by number, separated by commas.\nThe ports can be contiguous or discontiguous. Only packets addressed to\nthese ports will be forwarded to the backends configured with this\nforwarding rule.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame '[IPAddress, IPProtocol]' pair, and cannot share any values\ndefined in 'ports'.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same '[IPAddress, IPProtocol]'\npair, and cannot share any values defined in 'ports'.\n\nThe 'ports' and 'port_range' fields are mutually exclusive. When `null`, the `ports` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the regional forwarding rule resides.\n\nThis field is not applicable to global forwarding rules. When `null`, the `region` field will be omitted from the resulting object.\n  - `service_label` (`string`): An optional prefix to the service name for this Forwarding Rule.\nIf specified, will be the first label of the fully qualified service\nname.\n\nThe label must be 1-63 characters long, and comply with RFC1035.\nSpecifically, the label must be 1-63 characters long and match the\nregular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the first\ncharacter must be a lowercase letter, and all following characters\nmust be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n\nThis field is only used for INTERNAL load balancing. When `null`, the `service_label` field will be omitted from the resulting object.\n  - `source_ip_ranges` (`list`): If not empty, this Forwarding Rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a Forwarding Rule can only have up to 64 source IP ranges, and this field can only be used with a regional Forwarding Rule whose scheme is EXTERNAL. Each sourceIpRange entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24). When `null`, the `source_ip_ranges` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): This field identifies the subnetwork that the load balanced IP should\nbelong to for this Forwarding Rule, used in internal load balancing and\nnetwork load balancing with IPv6.\n\nIf the network specified is in auto subnet mode, this field is optional.\nHowever, a subnetwork must be specified if the network is in custom subnet\nmode or when creating external forwarding rule with IPv6. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `target` (`string`): The URL of the target resource to receive the matched traffic.  For\nregional forwarding rules, this target must be in the same region as the\nforwarding rule. For global forwarding rules, this target must be a global\nload balancing resource.\n\nThe forwarded traffic must be of a type appropriate to the target object.\n*  For load balancers, see the "Target" column in [Port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n*  For Private Service Connect forwarding rules that forward traffic to Google APIs, provide the name of a supported Google API bundle:\n  *  'vpc-sc' - [ APIs that support VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/supported-products).\n  *  'all-apis' - [All supported Google APIs](https://cloud.google.com/vpc/docs/private-service-connect#supported-apis).\n\n\nFor Private Service Connect forwarding rules that forward traffic to managed services, the target must be a service attachment. When `null`, the `target` field will be omitted from the resulting object.\n  - `service_directory_registrations` (`list[obj]`): Service Directory resources to register this forwarding rule with.\n\nCurrently, only supports a single Service Directory resource. When `null`, the `service_directory_registrations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.service_directory_registrations.new](#fn-service_directory_registrationsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_forwarding_rule` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_forwarding_rule.newAttrs` constructs a new object with attributes and blocks configured for the `compute_forwarding_rule`\nTerraform resource.\n\nUnlike [google.compute_forwarding_rule.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `all_ports` (`bool`): This field can only be used:\n* If 'IPProtocol' is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal and external protocol forwarding.\n\n\nSet this field to true to allow packets addressed to any port or packets\nlacking destination port information (for example, UDP fragments after the\nfirst fragment) to be forwarded to the backends configured with this\nforwarding rule.\n\nThe 'ports', 'port_range', and\n'allPorts' fields are mutually exclusive. When `null`, the `all_ports` field will be omitted from the resulting object.\n  - `allow_global_access` (`bool`): This field is used along with the 'backend_service' field for\ninternal load balancing or with the 'target' field for internal\nTargetInstance.\n\nIf the field is set to 'TRUE', clients can access ILB from all\nregions.\n\nOtherwise only allows access from clients in the same region as the\ninternal load balancer. When `null`, the `allow_global_access` field will be omitted from the resulting object.\n  - `allow_psc_global_access` (`bool`): This is used in PSC consumer ForwardingRule to control whether the PSC endpoint can be accessed from another region. When `null`, the `allow_psc_global_access` field will be omitted from the resulting object.\n  - `backend_service` (`string`): Identifies the backend service to which the forwarding rule sends traffic.\n\nRequired for Internal TCP/UDP Load Balancing and Network Load Balancing;\nmust be omitted for all other load balancer types. When `null`, the `backend_service` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `ip_address` (`string`): IP address for which this forwarding rule accepts traffic. When a client\nsends traffic to this IP address, the forwarding rule directs the traffic\nto the referenced 'target' or 'backendService'.\n\nWhile creating a forwarding rule, specifying an 'IPAddress' is\nrequired under the following circumstances:\n\n* When the 'target' is set to 'targetGrpcProxy' and\n'validateForProxyless' is set to 'true', the\n'IPAddress' should be set to '0.0.0.0'.\n* When the 'target' is a Private Service Connect Google APIs\nbundle, you must specify an 'IPAddress'.\n\n\nOtherwise, you can optionally specify an IP address that references an\nexisting static (reserved) IP address resource. When omitted, Google Cloud\nassigns an ephemeral IP address.\n\nUse one of the following formats to specify an IP address while creating a\nforwarding rule:\n\n* IP address number, as in '100.1.2.3'\n* IPv6 address range, as in '2600:1234::/96'\n* Full resource URL, as in\n'https://www.googleapis.com/compute/v1/projects/project_id/regions/region/addresses/address-name'\n* Partial URL or by name, as in:\n  * 'projects/project_id/regions/region/addresses/address-name'\n  * 'regions/region/addresses/address-name'\n  * 'global/addresses/address-name'\n  * 'address-name'\n\n\nThe forwarding rule's 'target' or 'backendService',\nand in most cases, also the 'loadBalancingScheme', determine the\ntype of IP address that you can use. For detailed information, see\n[IP address\nspecifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n\nWhen reading an 'IPAddress', the API always returns the IP\naddress number. When `null`, the `ip_address` field will be omitted from the resulting object.\n  - `ip_protocol` (`string`): The IP protocol to which this rule applies.\n\nFor protocol forwarding, valid\noptions are 'TCP', 'UDP', 'ESP',\n'AH', 'SCTP', 'ICMP' and\n'L3_DEFAULT'.\n\nThe valid IP protocols are different for different load balancing products\nas described in [Load balancing\nfeatures](https://cloud.google.com/load-balancing/docs/features#protocols_from_the_load_balancer_to_the_backends). Possible values: ["TCP", "UDP", "ESP", "AH", "SCTP", "ICMP", "L3_DEFAULT"] When `null`, the `ip_protocol` field will be omitted from the resulting object.\n  - `is_mirroring_collector` (`bool`): Indicates whether or not this load balancer can be used as a collector for\npacket mirroring. To prevent mirroring loops, instances behind this\nload balancer will not have their traffic mirrored even if a\n'PacketMirroring' rule applies to them.\n\nThis can only be set to true for load balancers that have their\n'loadBalancingScheme' set to 'INTERNAL'. When `null`, the `is_mirroring_collector` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this forwarding rule.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `load_balancing_scheme` (`string`): Specifies the forwarding rule type.\n\nFor more information about forwarding rules, refer to\n[Forwarding rule concepts](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts). Default value: "EXTERNAL" Possible values: ["EXTERNAL", "EXTERNAL_MANAGED", "INTERNAL", "INTERNAL_MANAGED"] When `null`, the `load_balancing_scheme` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is created.\nThe name must be 1-63 characters long, and comply with\n[RFC1035](https://www.ietf.org/rfc/rfc1035.txt).\n\nSpecifically, the name must be 1-63 characters long and match the regular\nexpression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the first\ncharacter must be a lowercase letter, and all following characters must\nbe a dash, lowercase letter, or digit, except the last character, which\ncannot be a dash.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, the forwarding rule name must be a 1-20 characters string with\nlowercase letters and numbers and must start with a letter.\n  - `network` (`string`): This field is not used for external load balancing.\n\nFor Internal TCP/UDP Load Balancing, this field identifies the network that\nthe load balanced IP should belong to for this Forwarding Rule.\nIf the subnetwork is specified, the network of the subnetwork will be used.\nIf neither subnetwork nor this field is specified, the default network will\nbe used.\n\nFor Private Service Connect forwarding rules that forward traffic to Google\nAPIs, a network must be provided. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_tier` (`string`): This signifies the networking tier used for configuring\nthis load balancer and can only take the following values:\n'PREMIUM', 'STANDARD'.\n\nFor regional ForwardingRule, the valid values are 'PREMIUM' and\n'STANDARD'. For GlobalForwardingRule, the valid value is\n'PREMIUM'.\n\nIf this field is not specified, it is assumed to be 'PREMIUM'.\nIf 'IPAddress' is specified, this value must be equal to the\nnetworkTier of the Address. Possible values: ["PREMIUM", "STANDARD"] When `null`, the `network_tier` field will be omitted from the resulting object.\n  - `port_range` (`string`): This field can only be used:\n\n* If 'IPProtocol' is one of TCP, UDP, or SCTP.\n* By backend service-based network load balancers, target pool-based\nnetwork load balancers, internal proxy load balancers, external proxy load\nbalancers, Traffic Director, external protocol forwarding, and Classic VPN.\nSome products have restrictions on what ports can be used. See\n[port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#port_specifications)\nfor details.\n\n\nOnly packets addressed to ports in the specified range will be forwarded to\nthe backends configured with this forwarding rule.\n\nThe 'ports' and 'port_range' fields are mutually exclusive.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame '[IPAddress, IPProtocol]' pair, and cannot have\noverlapping 'portRange's.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same '[IPAddress, IPProtocol]'\npair, and cannot have overlapping 'portRange's. When `null`, the `port_range` field will be omitted from the resulting object.\n  - `ports` (`list`): This field can only be used:\n\n* If 'IPProtocol' is one of TCP, UDP, or SCTP.\n* By internal TCP/UDP load balancers, backend service-based network load\nbalancers, and internal protocol forwarding.\n\n\nYou can specify a list of up to five ports by number, separated by commas.\nThe ports can be contiguous or discontiguous. Only packets addressed to\nthese ports will be forwarded to the backends configured with this\nforwarding rule.\n\nFor external forwarding rules, two or more forwarding rules cannot use the\nsame '[IPAddress, IPProtocol]' pair, and cannot share any values\ndefined in 'ports'.\n\nFor internal forwarding rules within the same VPC network, two or more\nforwarding rules cannot use the same '[IPAddress, IPProtocol]'\npair, and cannot share any values defined in 'ports'.\n\nThe 'ports' and 'port_range' fields are mutually exclusive. When `null`, the `ports` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the regional forwarding rule resides.\n\nThis field is not applicable to global forwarding rules. When `null`, the `region` field will be omitted from the resulting object.\n  - `service_label` (`string`): An optional prefix to the service name for this Forwarding Rule.\nIf specified, will be the first label of the fully qualified service\nname.\n\nThe label must be 1-63 characters long, and comply with RFC1035.\nSpecifically, the label must be 1-63 characters long and match the\nregular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the first\ncharacter must be a lowercase letter, and all following characters\nmust be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n\nThis field is only used for INTERNAL load balancing. When `null`, the `service_label` field will be omitted from the resulting object.\n  - `source_ip_ranges` (`list`): If not empty, this Forwarding Rule will only forward the traffic when the source IP address matches one of the IP addresses or CIDR ranges set here. Note that a Forwarding Rule can only have up to 64 source IP ranges, and this field can only be used with a regional Forwarding Rule whose scheme is EXTERNAL. Each sourceIpRange entry should be either an IP address (for example, 1.2.3.4) or a CIDR range (for example, 1.2.3.0/24). When `null`, the `source_ip_ranges` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): This field identifies the subnetwork that the load balanced IP should\nbelong to for this Forwarding Rule, used in internal load balancing and\nnetwork load balancing with IPv6.\n\nIf the network specified is in auto subnet mode, this field is optional.\nHowever, a subnetwork must be specified if the network is in custom subnet\nmode or when creating external forwarding rule with IPv6. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `target` (`string`): The URL of the target resource to receive the matched traffic.  For\nregional forwarding rules, this target must be in the same region as the\nforwarding rule. For global forwarding rules, this target must be a global\nload balancing resource.\n\nThe forwarded traffic must be of a type appropriate to the target object.\n*  For load balancers, see the "Target" column in [Port specifications](https://cloud.google.com/load-balancing/docs/forwarding-rule-concepts#ip_address_specifications).\n*  For Private Service Connect forwarding rules that forward traffic to Google APIs, provide the name of a supported Google API bundle:\n  *  'vpc-sc' - [ APIs that support VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/supported-products).\n  *  'all-apis' - [All supported Google APIs](https://cloud.google.com/vpc/docs/private-service-connect#supported-apis).\n\n\nFor Private Service Connect forwarding rules that forward traffic to managed services, the target must be a service attachment. When `null`, the `target` field will be omitted from the resulting object.\n  - `service_directory_registrations` (`list[obj]`): Service Directory resources to register this forwarding rule with.\n\nCurrently, only supports a single Service Directory resource. When `null`, the `service_directory_registrations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.service_directory_registrations.new](#fn-service_directory_registrationsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_forwarding_rule.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_forwarding_rule` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     all_ports=null,
     allow_global_access=null,
+    allow_psc_global_access=null,
     backend_service=null,
     description=null,
     ip_address=null,
@@ -84,6 +87,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   ):: std.prune(a={
     all_ports: all_ports,
     allow_global_access: allow_global_access,
+    allow_psc_global_access: allow_psc_global_access,
     backend_service: backend_service,
     description: description,
     ip_address: ip_address,
@@ -147,6 +151,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withAllowPscGlobalAccess':: d.fn(help='`google.bool.withAllowPscGlobalAccess` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the allow_psc_global_access field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `allow_psc_global_access` field.\n', args=[]),
+  withAllowPscGlobalAccess(resourceLabel, value): {
+    resource+: {
+      google_compute_forwarding_rule+: {
+        [resourceLabel]+: {
+          allow_psc_global_access: value,
+        },
+      },
+    },
+  },
   '#withBackendService':: d.fn(help='`google.string.withBackendService` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the backend_service field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `backend_service` field.\n', args=[]),
   withBackendService(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_image.libsonnet b/4.x/_gen/resources/compute_image.libsonnet
index c76ee91..9d2c88e 100644
--- a/4.x/_gen/resources/compute_image.libsonnet
+++ b/4.x/_gen/resources/compute_image.libsonnet
@@ -20,7 +20,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       kms_key_service_account: kms_key_service_account,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_image.new` injects a new `google_compute_image` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_image.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_image` using the reference:\n\n    $._ref.google_compute_image.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_image.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google.compute_image.new` injects a new `google_compute_image` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_image.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_image` using the reference:\n\n    $._ref.google_compute_image.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_image.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image\n(regional or multi-regional).\nReference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
@@ -36,6 +36,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     source_disk=null,
     source_image=null,
     source_snapshot=null,
+    storage_locations=null,
     timeouts=null,
     _meta={}
   ):: tf.withResource(
@@ -55,11 +56,12 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       source_disk=source_disk,
       source_image=source_image,
       source_snapshot=source_snapshot,
+      storage_locations=storage_locations,
       timeouts=timeouts
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_image.newAttrs` constructs a new object with attributes and blocks configured for the `compute_image`\nTerraform resource.\n\nUnlike [google.compute_image.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_image` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_image.newAttrs` constructs a new object with attributes and blocks configured for the `compute_image`\nTerraform resource.\n\nUnlike [google.compute_image.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `disk_size_gb` (`number`): Size of the image when restored onto a persistent disk (in GB). When `null`, the `disk_size_gb` field will be omitted from the resulting object.\n  - `family` (`string`): The name of the image family to which this image belongs. You can\ncreate disks by specifying an image family instead of a specific\nimage name. The image family always returns its latest image that is\nnot deprecated. The name of the image family must comply with\nRFC1035. When `null`, the `family` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this Image. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource; provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and\nmatch the regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means\nthe first character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the\nlast character, which cannot be a dash.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk to create this image based on.\nYou must provide either this property or the\nrawDisk.source property but not both to create an image. When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `source_image` (`string`): URL of the source image used to create this image. In order to create an image, you must provide the full or partial\nURL of one of the following:\n\n* The selfLink URL\n* This property\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_image` field will be omitted from the resulting object.\n  - `source_snapshot` (`string`): URL of the source snapshot used to create this image.\n\nIn order to create an image, you must provide the full or partial URL of one of the following:\n\n* The selfLink URL\n* This property\n* The sourceImage URL\n* The rawDisk.source URL\n* The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.\n  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image\n(regional or multi-regional).\nReference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.\n\nAfter you encrypt an image with a customer-supplied key, you must\nprovide the same key if you use the image later (e.g. to create a\ndisk from the image) When `null`, the `image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.image_encryption_key.new](#fn-image_encryption_keynew) constructor.\n  - `raw_disk` (`list[obj]`): The parameters of the raw disk image. When `null`, the `raw_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.raw_disk.new](#fn-raw_disknew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_image` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     description=null,
@@ -74,6 +76,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     source_disk=null,
     source_image=null,
     source_snapshot=null,
+    storage_locations=null,
     timeouts=null
   ):: std.prune(a={
     description: description,
@@ -89,6 +92,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     source_disk: source_disk,
     source_image: source_image,
     source_snapshot: source_snapshot,
+    storage_locations: storage_locations,
     timeouts: timeouts,
   }),
   raw_disk:: {
@@ -275,6 +279,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withStorageLocations':: d.fn(help='`google.list.withStorageLocations` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the storage_locations field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `storage_locations` field.\n', args=[]),
+  withStorageLocations(resourceLabel, value): {
+    resource+: {
+      google_compute_image+: {
+        [resourceLabel]+: {
+          storage_locations: value,
+        },
+      },
+    },
+  },
   '#withTimeouts':: d.fn(help='`google.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
   withTimeouts(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_instance.libsonnet b/4.x/_gen/resources/compute_instance.libsonnet
index 511774e..75f623f 100644
--- a/4.x/_gen/resources/compute_instance.libsonnet
+++ b/4.x/_gen/resources/compute_instance.libsonnet
@@ -130,7 +130,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       subnetwork_project: subnetwork_project,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_instance.new` injects a new `google_compute_instance` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_instance.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_instance` using the reference:\n\n    $._ref.google_compute_instance.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_instance.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either \u0026#34;RUNNING\u0026#34; or \u0026#34;TERMINATED\u0026#34;. When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `attached_disk` (`list[obj]`): List of disks attached to the instance When `null`, the `attached_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.attached_disk.new](#fn-attached_disknew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_interface.new](#fn-network_interfacenew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scheduling.new](#fn-schedulingnew) constructor.\n  - `scratch_disk` (`list[obj]`): The scratch disks attached to the instance. When `null`, the `scratch_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scratch_disk.new](#fn-scratch_disknew) constructor.\n  - `service_account` (`list[obj]`): The service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  network_performance_config:: {
+    '#new':: d.fn(help='\n`google.compute_instance.network_performance_config.new` constructs a new object with attributes and blocks configured for the `network_performance_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `total_egress_bandwidth_tier` (`string`): The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT\n\n**Returns**:\n  - An attribute object that represents the `network_performance_config` sub block.\n', args=[]),
+    new(
+      total_egress_bandwidth_tier
+    ):: std.prune(a={
+      total_egress_bandwidth_tier: total_egress_bandwidth_tier,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.compute_instance.new` injects a new `google_compute_instance` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_instance.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_instance` using the reference:\n\n    $._ref.google_compute_instance.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_instance.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either \u0026#34;RUNNING\u0026#34; or \u0026#34;TERMINATED\u0026#34;. When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `attached_disk` (`list[obj]`): List of disks attached to the instance When `null`, the `attached_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.attached_disk.new](#fn-attached_disknew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_interface.new](#fn-network_interfacenew) constructor.\n  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_performance_config.new](#fn-network_performance_confignew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scheduling.new](#fn-schedulingnew) constructor.\n  - `scratch_disk` (`list[obj]`): The scratch disks attached to the instance. When `null`, the `scratch_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scratch_disk.new](#fn-scratch_disknew) constructor.\n  - `service_account` (`list[obj]`): The service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     machine_type,
@@ -152,6 +160,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     metadata_startup_script=null,
     min_cpu_platform=null,
     network_interface=null,
+    network_performance_config=null,
     project=null,
     reservation_affinity=null,
     resource_policies=null,
@@ -186,6 +195,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       min_cpu_platform=min_cpu_platform,
       name=name,
       network_interface=network_interface,
+      network_performance_config=network_performance_config,
       project=project,
       reservation_affinity=reservation_affinity,
       resource_policies=resource_policies,
@@ -199,7 +209,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_instance.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance`\nTerraform resource.\n\nUnlike [google.compute_instance.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either "RUNNING" or "TERMINATED". When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `attached_disk` (`list[obj]`): List of disks attached to the instance When `null`, the `attached_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.attached_disk.new](#fn-attached_disknew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_interface.new](#fn-network_interfacenew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scheduling.new](#fn-schedulingnew) constructor.\n  - `scratch_disk` (`list[obj]`): The scratch disks attached to the instance. When `null`, the `scratch_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scratch_disk.new](#fn-scratch_disknew) constructor.\n  - `service_account` (`list[obj]`): The service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_instance` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_instance.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance`\nTerraform resource.\n\nUnlike [google.compute_instance.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either "RUNNING" or "TERMINATED". When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `attached_disk` (`list[obj]`): List of disks attached to the instance When `null`, the `attached_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.attached_disk.new](#fn-attached_disknew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_interface.new](#fn-network_interfacenew) constructor.\n  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_performance_config.new](#fn-network_performance_confignew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scheduling.new](#fn-schedulingnew) constructor.\n  - `scratch_disk` (`list[obj]`): The scratch disks attached to the instance. When `null`, the `scratch_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scratch_disk.new](#fn-scratch_disknew) constructor.\n  - `service_account` (`list[obj]`): The service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_instance` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     machine_type,
     name,
@@ -220,6 +230,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     metadata_startup_script=null,
     min_cpu_platform=null,
     network_interface=null,
+    network_performance_config=null,
     project=null,
     reservation_affinity=null,
     resource_policies=null,
@@ -250,6 +261,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     min_cpu_platform: min_cpu_platform,
     name: name,
     network_interface: network_interface,
+    network_performance_config: network_performance_config,
     project: project,
     reservation_affinity: reservation_affinity,
     resource_policies: resource_policies,
@@ -597,6 +609,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withNetworkPerformanceConfig':: d.fn(help='`google.list[obj].withNetworkPerformanceConfig` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_performance_config field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withNetworkPerformanceConfigMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.\n', args=[]),
+  withNetworkPerformanceConfig(resourceLabel, value): {
+    resource+: {
+      google_compute_instance+: {
+        [resourceLabel]+: {
+          network_performance_config: value,
+        },
+      },
+    },
+  },
+  '#withNetworkPerformanceConfigMixin':: d.fn(help='`google.list[obj].withNetworkPerformanceConfigMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_performance_config field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withNetworkPerformanceConfig](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.\n', args=[]),
+  withNetworkPerformanceConfigMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_instance+: {
+        [resourceLabel]+: {
+          network_performance_config+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
   withProject(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_instance_from_template.libsonnet b/4.x/_gen/resources/compute_instance_from_template.libsonnet
index 12e38dd..da57dd1 100644
--- a/4.x/_gen/resources/compute_instance_from_template.libsonnet
+++ b/4.x/_gen/resources/compute_instance_from_template.libsonnet
@@ -92,7 +92,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       subnetwork_project: subnetwork_project,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_instance_from_template.new` injects a new `google_compute_instance_from_template` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_instance_from_template.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_instance_from_template` using the reference:\n\n    $._ref.google_compute_instance_from_template.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_instance_from_template.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `attached_disk` (`list`): List of disks attached to the instance When `null`, the `attached_disk` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either \u0026#34;RUNNING\u0026#34; or \u0026#34;TERMINATED\u0026#34;. When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `scratch_disk` (`list`): The scratch disks attached to the instance. When `null`, the `scratch_disk` field will be omitted from the resulting object.\n  - `service_account` (`list`): The service account to attach to the instance. When `null`, the `service_account` field will be omitted from the resulting object.\n  - `source_instance_template` (`string`): Name or self link of an instance template to create the instance based on.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  network_performance_config:: {
+    '#new':: d.fn(help='\n`google.compute_instance_from_template.network_performance_config.new` constructs a new object with attributes and blocks configured for the `network_performance_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `total_egress_bandwidth_tier` (`string`): The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT\n\n**Returns**:\n  - An attribute object that represents the `network_performance_config` sub block.\n', args=[]),
+    new(
+      total_egress_bandwidth_tier
+    ):: std.prune(a={
+      total_egress_bandwidth_tier: total_egress_bandwidth_tier,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.compute_instance_from_template.new` injects a new `google_compute_instance_from_template` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_instance_from_template.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_instance_from_template` using the reference:\n\n    $._ref.google_compute_instance_from_template.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_instance_from_template.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `attached_disk` (`list`): List of disks attached to the instance When `null`, the `attached_disk` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either \u0026#34;RUNNING\u0026#34; or \u0026#34;TERMINATED\u0026#34;. When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `scratch_disk` (`list`): The scratch disks attached to the instance. When `null`, the `scratch_disk` field will be omitted from the resulting object.\n  - `service_account` (`list`): The service account to attach to the instance. When `null`, the `service_account` field will be omitted from the resulting object.\n  - `source_instance_template` (`string`): Name or self link of an instance template to create the instance based on.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_performance_config.new](#fn-network_performance_confignew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
@@ -115,6 +123,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     metadata_startup_script=null,
     min_cpu_platform=null,
     network_interface=null,
+    network_performance_config=null,
     project=null,
     reservation_affinity=null,
     resource_policies=null,
@@ -149,6 +158,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       min_cpu_platform=min_cpu_platform,
       name=name,
       network_interface=network_interface,
+      network_performance_config=network_performance_config,
       project=project,
       reservation_affinity=reservation_affinity,
       resource_policies=resource_policies,
@@ -163,7 +173,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_instance_from_template.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance_from_template`\nTerraform resource.\n\nUnlike [google.compute_instance_from_template.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `attached_disk` (`list`): List of disks attached to the instance When `null`, the `attached_disk` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either "RUNNING" or "TERMINATED". When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `scratch_disk` (`list`): The scratch disks attached to the instance. When `null`, the `scratch_disk` field will be omitted from the resulting object.\n  - `service_account` (`list`): The service account to attach to the instance. When `null`, the `service_account` field will be omitted from the resulting object.\n  - `source_instance_template` (`string`): Name or self link of an instance template to create the instance based on.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_instance_from_template` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_instance_from_template.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance_from_template`\nTerraform resource.\n\nUnlike [google.compute_instance_from_template.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `allow_stopping_for_update` (`bool`): If true, allows Terraform to stop the instance to update its properties. If you try to update a property that requires stopping the instance without setting this field, the update will fail. When `null`, the `allow_stopping_for_update` field will be omitted from the resulting object.\n  - `attached_disk` (`list`): List of disks attached to the instance When `null`, the `attached_disk` field will be omitted from the resulting object.\n  - `can_ip_forward` (`bool`): Whether sending and receiving of packets with non-matching source or destination IPs is allowed. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `deletion_protection` (`bool`): Whether deletion protection is enabled on this instance. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `desired_status` (`string`): Desired status of the instance. Either "RUNNING" or "TERMINATED". When `null`, the `desired_status` field will be omitted from the resulting object.\n  - `enable_display` (`bool`): Whether the instance has virtual displays enabled. When `null`, the `enable_display` field will be omitted from the resulting object.\n  - `guest_accelerator` (`list`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` field will be omitted from the resulting object.\n  - `hostname` (`string`): A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid. Valid format is a series of labels 1-63 characters long matching the regular expression [a-z]([-a-z0-9]*[a-z0-9]), concatenated with periods. The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created. When `null`, the `hostname` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs assigned to the instance. When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `metadata` (`obj`): Metadata key/value pairs made available within the instance. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): Metadata startup scripts made available within the instance. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): The minimum CPU platform specified for the VM instance. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance. One of name or self_link must be provided.\n  - `project` (`string`): The ID of the project in which the resource belongs. If self_link is provided, this value is ignored. If neither self_link nor project are provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `scratch_disk` (`list`): The scratch disks attached to the instance. When `null`, the `scratch_disk` field will be omitted from the resulting object.\n  - `service_account` (`list`): The service account to attach to the instance. When `null`, the `service_account` field will be omitted from the resulting object.\n  - `source_instance_template` (`string`): Name or self link of an instance template to create the instance based on.\n  - `tags` (`list`): The list of tags attached to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `zone` (`string`): The zone of the instance. If self_link is provided, this value is ignored. If neither self_link nor zone are provided, the provider zone is used. When `null`, the `zone` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.boot_disk.new](#fn-boot_disknew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_performance_config.new](#fn-network_performance_confignew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_instance_from_template` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     source_instance_template,
@@ -185,6 +195,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     metadata_startup_script=null,
     min_cpu_platform=null,
     network_interface=null,
+    network_performance_config=null,
     project=null,
     reservation_affinity=null,
     resource_policies=null,
@@ -215,6 +226,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     min_cpu_platform: min_cpu_platform,
     name: name,
     network_interface: network_interface,
+    network_performance_config: network_performance_config,
     project: project,
     reservation_affinity: reservation_affinity,
     resource_policies: resource_policies,
@@ -533,6 +545,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withNetworkPerformanceConfig':: d.fn(help='`google.list[obj].withNetworkPerformanceConfig` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_performance_config field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withNetworkPerformanceConfigMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.\n', args=[]),
+  withNetworkPerformanceConfig(resourceLabel, value): {
+    resource+: {
+      google_compute_instance_from_template+: {
+        [resourceLabel]+: {
+          network_performance_config: value,
+        },
+      },
+    },
+  },
+  '#withNetworkPerformanceConfigMixin':: d.fn(help='`google.list[obj].withNetworkPerformanceConfigMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_performance_config field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withNetworkPerformanceConfig](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.\n', args=[]),
+  withNetworkPerformanceConfigMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_instance_from_template+: {
+        [resourceLabel]+: {
+          network_performance_config+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
   withProject(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_instance_template.libsonnet b/4.x/_gen/resources/compute_instance_template.libsonnet
index 220f860..32a0deb 100644
--- a/4.x/_gen/resources/compute_instance_template.libsonnet
+++ b/4.x/_gen/resources/compute_instance_template.libsonnet
@@ -154,7 +154,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       subnetwork_project: subnetwork_project,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_instance_template.new` injects a new `google_compute_instance_template` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_instance_template.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_instance_template` using the reference:\n\n    $._ref.google_compute_instance_template.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_instance_template.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `can_ip_forward` (`bool`): Whether to allow sending and receiving of packets with non-matching source or destination IPs. This defaults to false. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `instance_description` (`string`): A description of the instance. When `null`, the `instance_description` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs to assign to instances created from this template, When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. To create a machine with a custom type (such as extended memory), format the value like custom-VCPUS-MEM_IN_MB like custom-6-20480 for 6 vCPU and 20GB of RAM.\n  - `metadata` (`obj`): Metadata key/value pairs to make available from within instances created from this template. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): An alternative to using the startup-script metadata key, mostly to match the compute_instance resource. This replaces the startup-script metadata key on the created instance and thus the two mechanisms are not allowed to be used simultaneously. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): Specifies a minimum CPU platform. Applicable values are the friendly names of CPU platforms, such as Intel Haswell or Intel Skylake. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance template. If you leave this blank, Terraform will auto-generate a unique name. When `null`, the `name` field will be omitted from the resulting object.\n  - `name_prefix` (`string`): Creates a unique name beginning with the specified prefix. Conflicts with name. When `null`, the `name_prefix` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. If it is not provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): An instance template is a global resource that is not bound to a zone or a region. However, you can still specify some regional resources in an instance template, which restricts the template to the region where that resource resides. For example, a custom subnetwork resource is tied to a specific region. Defaults to the region of the Provider if no value is given. When `null`, the `region` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): Tags to attach to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance. on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `disk` (`list[obj]`): Disks to attach to instances created from this template. This can be specified multiple times for multiple disks. When `null`, the `disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.disk.new](#fn-disknew) constructor.\n  - `guest_accelerator` (`list[obj]`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.guest_accelerator.new](#fn-guest_acceleratornew) constructor.\n  - `network_interface` (`list[obj]`): Networks to attach to instances created from this template. This can be specified multiple times for multiple networks. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy to use. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `service_account` (`list[obj]`): Service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): Enable Shielded VM on this instance. Shielded VM provides verifiable integrity to prevent against malware and rootkits. Defaults to disabled. Note: shielded_instance_config can only be used with boot images with shielded vm support. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  network_performance_config:: {
+    '#new':: d.fn(help='\n`google.compute_instance_template.network_performance_config.new` constructs a new object with attributes and blocks configured for the `network_performance_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `total_egress_bandwidth_tier` (`string`): The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT\n\n**Returns**:\n  - An attribute object that represents the `network_performance_config` sub block.\n', args=[]),
+    new(
+      total_egress_bandwidth_tier
+    ):: std.prune(a={
+      total_egress_bandwidth_tier: total_egress_bandwidth_tier,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.compute_instance_template.new` injects a new `google_compute_instance_template` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_instance_template.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_instance_template` using the reference:\n\n    $._ref.google_compute_instance_template.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_instance_template.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `can_ip_forward` (`bool`): Whether to allow sending and receiving of packets with non-matching source or destination IPs. This defaults to false. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `instance_description` (`string`): A description of the instance. When `null`, the `instance_description` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs to assign to instances created from this template, When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. To create a machine with a custom type (such as extended memory), format the value like custom-VCPUS-MEM_IN_MB like custom-6-20480 for 6 vCPU and 20GB of RAM.\n  - `metadata` (`obj`): Metadata key/value pairs to make available from within instances created from this template. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): An alternative to using the startup-script metadata key, mostly to match the compute_instance resource. This replaces the startup-script metadata key on the created instance and thus the two mechanisms are not allowed to be used simultaneously. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): Specifies a minimum CPU platform. Applicable values are the friendly names of CPU platforms, such as Intel Haswell or Intel Skylake. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance template. If you leave this blank, Terraform will auto-generate a unique name. When `null`, the `name` field will be omitted from the resulting object.\n  - `name_prefix` (`string`): Creates a unique name beginning with the specified prefix. Conflicts with name. When `null`, the `name_prefix` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. If it is not provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): An instance template is a global resource that is not bound to a zone or a region. However, you can still specify some regional resources in an instance template, which restricts the template to the region where that resource resides. For example, a custom subnetwork resource is tied to a specific region. Defaults to the region of the Provider if no value is given. When `null`, the `region` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): Tags to attach to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance. on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `disk` (`list[obj]`): Disks to attach to instances created from this template. This can be specified multiple times for multiple disks. When `null`, the `disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.disk.new](#fn-disknew) constructor.\n  - `guest_accelerator` (`list[obj]`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.guest_accelerator.new](#fn-guest_acceleratornew) constructor.\n  - `network_interface` (`list[obj]`): Networks to attach to instances created from this template. This can be specified multiple times for multiple networks. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_performance_config.new](#fn-network_performance_confignew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy to use. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `service_account` (`list[obj]`): Service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): Enable Shielded VM on this instance. Shielded VM provides verifiable integrity to prevent against malware and rootkits. Defaults to disabled. Note: shielded_instance_config can only be used with boot images with shielded vm support. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     machine_type,
@@ -172,6 +180,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     name=null,
     name_prefix=null,
     network_interface=null,
+    network_performance_config=null,
     project=null,
     region=null,
     reservation_affinity=null,
@@ -201,6 +210,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       name=name,
       name_prefix=name_prefix,
       network_interface=network_interface,
+      network_performance_config=network_performance_config,
       project=project,
       region=region,
       reservation_affinity=reservation_affinity,
@@ -213,7 +223,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_instance_template.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance_template`\nTerraform resource.\n\nUnlike [google.compute_instance_template.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `can_ip_forward` (`bool`): Whether to allow sending and receiving of packets with non-matching source or destination IPs. This defaults to false. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `instance_description` (`string`): A description of the instance. When `null`, the `instance_description` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs to assign to instances created from this template, When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. To create a machine with a custom type (such as extended memory), format the value like custom-VCPUS-MEM_IN_MB like custom-6-20480 for 6 vCPU and 20GB of RAM.\n  - `metadata` (`obj`): Metadata key/value pairs to make available from within instances created from this template. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): An alternative to using the startup-script metadata key, mostly to match the compute_instance resource. This replaces the startup-script metadata key on the created instance and thus the two mechanisms are not allowed to be used simultaneously. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): Specifies a minimum CPU platform. Applicable values are the friendly names of CPU platforms, such as Intel Haswell or Intel Skylake. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance template. If you leave this blank, Terraform will auto-generate a unique name. When `null`, the `name` field will be omitted from the resulting object.\n  - `name_prefix` (`string`): Creates a unique name beginning with the specified prefix. Conflicts with name. When `null`, the `name_prefix` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. If it is not provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): An instance template is a global resource that is not bound to a zone or a region. However, you can still specify some regional resources in an instance template, which restricts the template to the region where that resource resides. For example, a custom subnetwork resource is tied to a specific region. Defaults to the region of the Provider if no value is given. When `null`, the `region` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): Tags to attach to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance. on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `disk` (`list[obj]`): Disks to attach to instances created from this template. This can be specified multiple times for multiple disks. When `null`, the `disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.disk.new](#fn-disknew) constructor.\n  - `guest_accelerator` (`list[obj]`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.guest_accelerator.new](#fn-guest_acceleratornew) constructor.\n  - `network_interface` (`list[obj]`): Networks to attach to instances created from this template. This can be specified multiple times for multiple networks. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy to use. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `service_account` (`list[obj]`): Service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): Enable Shielded VM on this instance. Shielded VM provides verifiable integrity to prevent against malware and rootkits. Defaults to disabled. Note: shielded_instance_config can only be used with boot images with shielded vm support. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_instance_template` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_instance_template.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance_template`\nTerraform resource.\n\nUnlike [google.compute_instance_template.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `can_ip_forward` (`bool`): Whether to allow sending and receiving of packets with non-matching source or destination IPs. This defaults to false. When `null`, the `can_ip_forward` field will be omitted from the resulting object.\n  - `description` (`string`): A brief description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `instance_description` (`string`): A description of the instance. When `null`, the `instance_description` field will be omitted from the resulting object.\n  - `labels` (`obj`): A set of key/value label pairs to assign to instances created from this template, When `null`, the `labels` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to create. To create a machine with a custom type (such as extended memory), format the value like custom-VCPUS-MEM_IN_MB like custom-6-20480 for 6 vCPU and 20GB of RAM.\n  - `metadata` (`obj`): Metadata key/value pairs to make available from within instances created from this template. When `null`, the `metadata` field will be omitted from the resulting object.\n  - `metadata_startup_script` (`string`): An alternative to using the startup-script metadata key, mostly to match the compute_instance resource. This replaces the startup-script metadata key on the created instance and thus the two mechanisms are not allowed to be used simultaneously. When `null`, the `metadata_startup_script` field will be omitted from the resulting object.\n  - `min_cpu_platform` (`string`): Specifies a minimum CPU platform. Applicable values are the friendly names of CPU platforms, such as Intel Haswell or Intel Skylake. When `null`, the `min_cpu_platform` field will be omitted from the resulting object.\n  - `name` (`string`): The name of the instance template. If you leave this blank, Terraform will auto-generate a unique name. When `null`, the `name` field will be omitted from the resulting object.\n  - `name_prefix` (`string`): Creates a unique name beginning with the specified prefix. Conflicts with name. When `null`, the `name_prefix` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. If it is not provided, the provider project is used. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): An instance template is a global resource that is not bound to a zone or a region. However, you can still specify some regional resources in an instance template, which restricts the template to the region where that resource resides. For example, a custom subnetwork resource is tied to a specific region. Defaults to the region of the Provider if no value is given. When `null`, the `region` field will be omitted from the resulting object.\n  - `resource_policies` (`list`): A list of self_links of resource policies to attach to the instance. Currently a max of 1 resource policy is supported. When `null`, the `resource_policies` field will be omitted from the resulting object.\n  - `tags` (`list`): Tags to attach to the instance. When `null`, the `tags` field will be omitted from the resulting object.\n  - `advanced_machine_features` (`list[obj]`): Controls for advanced machine-related behavior features. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.advanced_machine_features.new](#fn-advanced_machine_featuresnew) constructor.\n  - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance. on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.\n  - `disk` (`list[obj]`): Disks to attach to instances created from this template. This can be specified multiple times for multiple disks. When `null`, the `disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.disk.new](#fn-disknew) constructor.\n  - `guest_accelerator` (`list[obj]`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.guest_accelerator.new](#fn-guest_acceleratornew) constructor.\n  - `network_interface` (`list[obj]`): Networks to attach to instances created from this template. This can be specified multiple times for multiple networks. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_interface.new](#fn-network_interfacenew) constructor.\n  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_performance_config.new](#fn-network_performance_confignew) constructor.\n  - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.\n  - `scheduling` (`list[obj]`): The scheduling strategy to use. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.scheduling.new](#fn-schedulingnew) constructor.\n  - `service_account` (`list[obj]`): Service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.service_account.new](#fn-service_accountnew) constructor.\n  - `shielded_instance_config` (`list[obj]`): Enable Shielded VM on this instance. Shielded VM provides verifiable integrity to prevent against malware and rootkits. Defaults to disabled. Note: shielded_instance_config can only be used with boot images with shielded vm support. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_instance_template` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     machine_type,
     advanced_machine_features=null,
@@ -230,6 +240,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     name=null,
     name_prefix=null,
     network_interface=null,
+    network_performance_config=null,
     project=null,
     region=null,
     reservation_affinity=null,
@@ -255,6 +266,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     name: name,
     name_prefix: name_prefix,
     network_interface: network_interface,
+    network_performance_config: network_performance_config,
     project: project,
     region: region,
     reservation_affinity: reservation_affinity,
@@ -549,6 +561,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withNetworkPerformanceConfig':: d.fn(help='`google.list[obj].withNetworkPerformanceConfig` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_performance_config field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withNetworkPerformanceConfigMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.\n', args=[]),
+  withNetworkPerformanceConfig(resourceLabel, value): {
+    resource+: {
+      google_compute_instance_template+: {
+        [resourceLabel]+: {
+          network_performance_config: value,
+        },
+      },
+    },
+  },
+  '#withNetworkPerformanceConfigMixin':: d.fn(help='`google.list[obj].withNetworkPerformanceConfigMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the network_performance_config field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withNetworkPerformanceConfig](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.\n', args=[]),
+  withNetworkPerformanceConfigMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_instance_template+: {
+        [resourceLabel]+: {
+          network_performance_config+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
   withProject(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_region_commitment.libsonnet b/4.x/_gen/resources/compute_region_commitment.libsonnet
index 432aa3e..43fdd50 100644
--- a/4.x/_gen/resources/compute_region_commitment.libsonnet
+++ b/4.x/_gen/resources/compute_region_commitment.libsonnet
@@ -14,7 +14,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       license: license,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_region_commitment.new` injects a new `google_compute_region_commitment` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_region_commitment.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_region_commitment` using the reference:\n\n    $._ref.google_compute_region_commitment.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_region_commitment.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: [\u0026#34;LICENSE\u0026#34;, \u0026#34;MACHINE\u0026#34;] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: [\u0026#34;TWELVE_MONTH\u0026#34;, \u0026#34;THIRTY_SIX_MONTH\u0026#34;]\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nType MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized\nmachines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to\naccelerator optimized machines. Possible values: [\u0026#34;MEMORY_OPTIMIZED\u0026#34;, \u0026#34;ACCELERATOR_OPTIMIZED\u0026#34;] When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google.compute_region_commitment.new` injects a new `google_compute_region_commitment` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_region_commitment.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_region_commitment` using the reference:\n\n    $._ref.google_compute_region_commitment.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_region_commitment.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: [\u0026#34;LICENSE\u0026#34;, \u0026#34;MACHINE\u0026#34;] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: [\u0026#34;TWELVE_MONTH\u0026#34;, \u0026#34;THIRTY_SIX_MONTH\u0026#34;]\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nThe type could be one of the following value: \u0026#39;MEMORY_OPTIMIZED\u0026#39;, \u0026#39;ACCELERATOR_OPTIMIZED\u0026#39;,\n\u0026#39;GENERAL_PURPOSE_N1\u0026#39;, \u0026#39;GENERAL_PURPOSE_N2\u0026#39;, \u0026#39;GENERAL_PURPOSE_N2D\u0026#39;, \u0026#39;GENERAL_PURPOSE_E2\u0026#39;,\n\u0026#39;GENERAL_PURPOSE_T2D\u0026#39;, \u0026#39;GENERAL_PURPOSE_C3\u0026#39;, \u0026#39;COMPUTE_OPTIMIZED_C2\u0026#39;, \u0026#39;COMPUTE_OPTIMIZED_C2D\u0026#39; and\n\u0026#39;GRAPHICS_OPTIMIZED_G2\u0026#39; When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
@@ -47,7 +47,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_region_commitment.newAttrs` constructs a new object with attributes and blocks configured for the `compute_region_commitment`\nTerraform resource.\n\nUnlike [google.compute_region_commitment.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: ["LICENSE", "MACHINE"] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: ["TWELVE_MONTH", "THIRTY_SIX_MONTH"]\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nType MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized\nmachines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to\naccelerator optimized machines. Possible values: ["MEMORY_OPTIMIZED", "ACCELERATOR_OPTIMIZED"] When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_region_commitment` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_region_commitment.newAttrs` constructs a new object with attributes and blocks configured for the `compute_region_commitment`\nTerraform resource.\n\nUnlike [google.compute_region_commitment.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `auto_renew` (`bool`): Specifies whether to enable automatic renewal for the commitment.\nThe default value is false if not specified.\nIf the field is set to true, the commitment will be automatically renewed for either\none or three years according to the terms of the existing commitment. When `null`, the `auto_renew` field will be omitted from the resulting object.\n  - `category` (`string`): The category of the commitment. Category MACHINE specifies commitments composed of\nmachine resources such as VCPU or MEMORY, listed in resources. Category LICENSE\nspecifies commitments composed of software licenses, listed in licenseResources.\nNote that only MACHINE commitments should have a Type specified. Possible values: ["LICENSE", "MACHINE"] When `null`, the `category` field will be omitted from the resulting object.\n  - `description` (`string`): An optional description of this resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. The name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `plan` (`string`): The plan for this commitment, which determines duration and discount rate.\nThe currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3 years). Possible values: ["TWELVE_MONTH", "THIRTY_SIX_MONTH"]\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.\n  - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.\nThe type could be one of the following value: 'MEMORY_OPTIMIZED', 'ACCELERATOR_OPTIMIZED',\n'GENERAL_PURPOSE_N1', 'GENERAL_PURPOSE_N2', 'GENERAL_PURPOSE_N2D', 'GENERAL_PURPOSE_E2',\n'GENERAL_PURPOSE_T2D', 'GENERAL_PURPOSE_C3', 'COMPUTE_OPTIMIZED_C2', 'COMPUTE_OPTIMIZED_C2D' and\n'GRAPHICS_OPTIMIZED_G2' When `null`, the `type` field will be omitted from the resulting object.\n  - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.\n  - `resources` (`list[obj]`): A list of commitment amounts for particular resources.\nNote that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.resources.new](#fn-resourcesnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_region_commitment` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     plan,
diff --git a/4.x/_gen/resources/compute_region_disk.libsonnet b/4.x/_gen/resources/compute_region_disk.libsonnet
index 11ff6ff..de5a210 100644
--- a/4.x/_gen/resources/compute_region_disk.libsonnet
+++ b/4.x/_gen/resources/compute_region_disk.libsonnet
@@ -12,14 +12,24 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       raw_key: raw_key,
     }),
   },
-  '#new':: d.fn(help="\n`google.compute_region_disk.new` injects a new `google_compute_region_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_region_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_region_disk` using the reference:\n\n    $._ref.google_compute_region_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_region_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  guest_os_features:: {
+    '#new':: d.fn(help='\n`google.compute_region_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`\nTerraform sub block.\n\n\n\n**Args**:\n  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]\n\n**Returns**:\n  - An attribute object that represents the `guest_os_features` sub block.\n', args=[]),
+    new(
+      type
+    ):: std.prune(a={
+      type: type,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.compute_region_disk.new` injects a new `google_compute_region_disk` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.compute_region_disk.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.compute_region_disk` using the reference:\n\n    $._ref.google_compute_region_disk.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_compute_region_disk.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key-\u0026gt;value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression \u0026#39;[a-z]([-a-z0-9]*[a-z0-9])?\u0026#39; which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller\u0026#39;s project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* \u0026#39;https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;projects/project/global/snapshots/snapshot\u0026#39;\n* \u0026#39;global/snapshots/snapshot\u0026#39;\n* \u0026#39;snapshot\u0026#39; When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     name,
     replica_zones,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     labels=null,
+    licenses=null,
     physical_block_size_bytes=null,
     project=null,
     region=null,
@@ -36,7 +46,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     attrs=self.newAttrs(
       description=description,
       disk_encryption_key=disk_encryption_key,
+      guest_os_features=guest_os_features,
       labels=labels,
+      licenses=licenses,
       name=name,
       physical_block_size_bytes=physical_block_size_bytes,
       project=project,
@@ -51,13 +63,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google.compute_region_disk.newAttrs` constructs a new object with attributes and blocks configured for the `compute_region_disk`\nTerraform resource.\n\nUnlike [google.compute_region_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_region_disk` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google.compute_region_disk.newAttrs` constructs a new object with attributes and blocks configured for the `compute_region_disk`\nTerraform resource.\n\nUnlike [google.compute_region_disk.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): An optional description of this resource. Provide this property when\nyou create the resource. When `null`, the `description` field will be omitted from the resulting object.\n  - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.\n  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.\n  - `name` (`string`): Name of the resource. Provided by the client when the resource is\ncreated. The name must be 1-63 characters long, and comply with\nRFC1035. Specifically, the name must be 1-63 characters long and match\nthe regular expression '[a-z]([-a-z0-9]*[a-z0-9])?' which means the\nfirst character must be a lowercase letter, and all following\ncharacters must be a dash, lowercase letter, or digit, except the last\ncharacter, which cannot be a dash.\n  - `physical_block_size_bytes` (`number`): Physical block size of the persistent disk, in bytes. If not present\nin a request, a default value is used. Currently supported sizes\nare 4096 and 16384, other sizes may be added in the future.\nIf an unsupported value is requested, the error message will list\nthe supported values for the caller's project. When `null`, the `physical_block_size_bytes` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region where the disk resides. When `null`, the `region` field will be omitted from the resulting object.\n  - `replica_zones` (`list`): URLs of the zones where the disk should be replicated to.\n  - `size` (`number`): Size of the persistent disk, specified in GB. You can specify this\nfield when creating a persistent disk using the sourceImage or\nsourceSnapshot parameter, or specify it alone to create an empty\npersistent disk.\n\nIf you specify this field along with sourceImage or sourceSnapshot,\nthe value of sizeGb must not be less than the size of the sourceImage\nor the size of the snapshot. When `null`, the `size` field will be omitted from the resulting object.\n  - `snapshot` (`string`): The source snapshot used to create this disk. You can provide this as\na partial or full URL to the resource. For example, the following are\nvalid values:\n\n* 'https://www.googleapis.com/compute/v1/projects/project/global/snapshots/snapshot'\n* 'projects/project/global/snapshots/snapshot'\n* 'global/snapshots/snapshot'\n* 'snapshot' When `null`, the `snapshot` field will be omitted from the resulting object.\n  - `source_disk` (`string`): The source disk used to create this disk. You can provide this as a partial or full URL to the resource.\nFor example, the following are valid values:\n\n* https://www.googleapis.com/compute/v1/projects/{project}/zones/{zone}/disks/{disk}\n* https://www.googleapis.com/compute/v1/projects/{project}/regions/{region}/disks/{disk}\n* projects/{project}/zones/{zone}/disks/{disk}\n* projects/{project}/regions/{region}/disks/{disk}\n* zones/{zone}/disks/{disk}\n* regions/{region}/disks/{disk} When `null`, the `source_disk` field will be omitted from the resulting object.\n  - `type` (`string`): URL of the disk type resource describing which disk type to use to\ncreate the disk. Provide this when creating the disk. When `null`, the `type` field will be omitted from the resulting object.\n  - `disk_encryption_key` (`list[obj]`): Encrypts the disk using a customer-supplied encryption key.\n\nAfter you encrypt a disk with a customer-supplied key, you must\nprovide the same key if you use the disk later (e.g. to create a disk\nsnapshot or an image, or to attach the disk to a virtual machine).\n\nCustomer-supplied encryption keys do not protect access to metadata of\nthe disk.\n\nIf you do not provide an encryption key when creating the disk, then\nthe disk will be encrypted using an automatically generated key and\nyou do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.\n  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.\nApplicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.\n  - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required\nif the source snapshot is protected by a customer-supplied encryption\nkey. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `compute_region_disk` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     name,
     replica_zones,
     description=null,
     disk_encryption_key=null,
+    guest_os_features=null,
     labels=null,
+    licenses=null,
     physical_block_size_bytes=null,
     project=null,
     region=null,
@@ -70,7 +84,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   ):: std.prune(a={
     description: description,
     disk_encryption_key: disk_encryption_key,
+    guest_os_features: guest_os_features,
     labels: labels,
+    licenses: licenses,
     name: name,
     physical_block_size_bytes: physical_block_size_bytes,
     project: project,
@@ -133,6 +149,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withGuestOsFeatures':: d.fn(help='`google.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withGuestOsFeaturesMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeatures(resourceLabel, value): {
+    resource+: {
+      google_compute_region_disk+: {
+        [resourceLabel]+: {
+          guest_os_features: value,
+        },
+      },
+    },
+  },
+  '#withGuestOsFeaturesMixin':: d.fn(help='`google.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the guest_os_features field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withGuestOsFeatures](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.\n', args=[]),
+  withGuestOsFeaturesMixin(resourceLabel, value): {
+    resource+: {
+      google_compute_region_disk+: {
+        [resourceLabel]+: {
+          guest_os_features+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withLabels':: d.fn(help='`google.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
   withLabels(resourceLabel, value): {
     resource+: {
@@ -143,6 +179,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withLicenses':: d.fn(help='`google.list.withLicenses` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the licenses field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `licenses` field.\n', args=[]),
+  withLicenses(resourceLabel, value): {
+    resource+: {
+      google_compute_region_disk+: {
+        [resourceLabel]+: {
+          licenses: value,
+        },
+      },
+    },
+  },
   '#withName':: d.fn(help='`google.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
   withName(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/container_analysis_note_iam_binding.libsonnet b/4.x/_gen/resources/container_analysis_note_iam_binding.libsonnet
new file mode 100644
index 0000000..f2ba4ac
--- /dev/null
+++ b/4.x/_gen/resources/container_analysis_note_iam_binding.libsonnet
@@ -0,0 +1,112 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='container_analysis_note_iam_binding', url='', help='`container_analysis_note_iam_binding` represents the `google_container_analysis_note_iam_binding` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  condition:: {
+    '#new':: d.fn(help='\n`google.container_analysis_note_iam_binding.condition.new` constructs a new object with attributes and blocks configured for the `condition`\nTerraform sub block.\n\n\n\n**Args**:\n  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.\n  - `expression` (`string`): Set the `expression` field on the resulting object.\n  - `title` (`string`): Set the `title` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `condition` sub block.\n', args=[]),
+    new(
+      expression,
+      title,
+      description=null
+    ):: std.prune(a={
+      description: description,
+      expression: expression,
+      title: title,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.container_analysis_note_iam_binding.new` injects a new `google_container_analysis_note_iam_binding` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.container_analysis_note_iam_binding.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.container_analysis_note_iam_binding` using the reference:\n\n    $._ref.google_container_analysis_note_iam_binding.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_container_analysis_note_iam_binding.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `members` (`list`): Set the `members` field on the resulting resource block.\n  - `note` (`string`): Set the `note` field on the resulting resource block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting resource block.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    members,
+    note,
+    role,
+    condition=null,
+    project=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_container_analysis_note_iam_binding',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      condition=condition,
+      members=members,
+      note=note,
+      project=project,
+      role=role
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.container_analysis_note_iam_binding.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_binding`\nTerraform resource.\n\nUnlike [google.container_analysis_note_iam_binding.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `members` (`list`): Set the `members` field on the resulting object.\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting object.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_analysis_note_iam_binding` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    members,
+    note,
+    role,
+    condition=null,
+    project=null
+  ):: std.prune(a={
+    condition: condition,
+    members: members,
+    note: note,
+    project: project,
+    role: role,
+  }),
+  '#withCondition':: d.fn(help='`google.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withConditionMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withCondition(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          condition: value,
+        },
+      },
+    },
+  },
+  '#withConditionMixin':: d.fn(help='`google.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withCondition](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withConditionMixin(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          condition+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withMembers':: d.fn(help='`google.list.withMembers` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the members field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `members` field.\n', args=[]),
+  withMembers(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          members: value,
+        },
+      },
+    },
+  },
+  '#withNote':: d.fn(help='`google.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the note field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRole':: d.fn(help='`google.string.withRole` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the role field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `role` field.\n', args=[]),
+  withRole(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_binding+: {
+        [resourceLabel]+: {
+          role: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/container_analysis_note_iam_member.libsonnet b/4.x/_gen/resources/container_analysis_note_iam_member.libsonnet
new file mode 100644
index 0000000..4a6726e
--- /dev/null
+++ b/4.x/_gen/resources/container_analysis_note_iam_member.libsonnet
@@ -0,0 +1,112 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='container_analysis_note_iam_member', url='', help='`container_analysis_note_iam_member` represents the `google_container_analysis_note_iam_member` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  condition:: {
+    '#new':: d.fn(help='\n`google.container_analysis_note_iam_member.condition.new` constructs a new object with attributes and blocks configured for the `condition`\nTerraform sub block.\n\n\n\n**Args**:\n  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.\n  - `expression` (`string`): Set the `expression` field on the resulting object.\n  - `title` (`string`): Set the `title` field on the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `condition` sub block.\n', args=[]),
+    new(
+      expression,
+      title,
+      description=null
+    ):: std.prune(a={
+      description: description,
+      expression: expression,
+      title: title,
+    }),
+  },
+  '#new':: d.fn(help="\n`google.container_analysis_note_iam_member.new` injects a new `google_container_analysis_note_iam_member` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.container_analysis_note_iam_member.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.container_analysis_note_iam_member` using the reference:\n\n    $._ref.google_container_analysis_note_iam_member.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_container_analysis_note_iam_member.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `member` (`string`): Set the `member` field on the resulting resource block.\n  - `note` (`string`): Set the `note` field on the resulting resource block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting resource block.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    member,
+    note,
+    role,
+    condition=null,
+    project=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_container_analysis_note_iam_member',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      condition=condition,
+      member=member,
+      note=note,
+      project=project,
+      role=role
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.container_analysis_note_iam_member.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_member`\nTerraform resource.\n\nUnlike [google.container_analysis_note_iam_member.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `member` (`string`): Set the `member` field on the resulting object.\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `role` (`string`): Set the `role` field on the resulting object.\n  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_analysis_note_iam_member` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    member,
+    note,
+    role,
+    condition=null,
+    project=null
+  ):: std.prune(a={
+    condition: condition,
+    member: member,
+    note: note,
+    project: project,
+    role: role,
+  }),
+  '#withCondition':: d.fn(help='`google.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google.list[obj].withConditionMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withCondition(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          condition: value,
+        },
+      },
+    },
+  },
+  '#withConditionMixin':: d.fn(help='`google.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the condition field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google.list[obj].withCondition](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `condition` field.\n', args=[]),
+  withConditionMixin(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          condition+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withMember':: d.fn(help='`google.string.withMember` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the member field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `member` field.\n', args=[]),
+  withMember(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          member: value,
+        },
+      },
+    },
+  },
+  '#withNote':: d.fn(help='`google.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the note field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRole':: d.fn(help='`google.string.withRole` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the role field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `role` field.\n', args=[]),
+  withRole(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_member+: {
+        [resourceLabel]+: {
+          role: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/container_analysis_note_iam_policy.libsonnet b/4.x/_gen/resources/container_analysis_note_iam_policy.libsonnet
new file mode 100644
index 0000000..7e9f3c7
--- /dev/null
+++ b/4.x/_gen/resources/container_analysis_note_iam_policy.libsonnet
@@ -0,0 +1,58 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='container_analysis_note_iam_policy', url='', help='`container_analysis_note_iam_policy` represents the `google_container_analysis_note_iam_policy` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google.container_analysis_note_iam_policy.new` injects a new `google_container_analysis_note_iam_policy` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google.container_analysis_note_iam_policy.new('some_id')\n\nYou can get the reference to the `id` field of the created `google.container_analysis_note_iam_policy` using the reference:\n\n    $._ref.google_container_analysis_note_iam_policy.some_id.get('id')\n\nThis is the same as directly entering `\"${ google_container_analysis_note_iam_policy.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `note` (`string`): Set the `note` field on the resulting resource block.\n  - `policy_data` (`string`): Set the `policy_data` field on the resulting resource block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    note,
+    policy_data,
+    project=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_container_analysis_note_iam_policy',
+    label=resourceLabel,
+    attrs=self.newAttrs(note=note, policy_data=policy_data, project=project),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google.container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_policy`\nTerraform resource.\n\nUnlike [google.container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `note` (`string`): Set the `note` field on the resulting object.\n  - `policy_data` (`string`): Set the `policy_data` field on the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_analysis_note_iam_policy` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    note,
+    policy_data,
+    project=null
+  ):: std.prune(a={
+    note: note,
+    policy_data: policy_data,
+    project: project,
+  }),
+  '#withNote':: d.fn(help='`google.string.withNote` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the note field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `note` field.\n', args=[]),
+  withNote(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_policy+: {
+        [resourceLabel]+: {
+          note: value,
+        },
+      },
+    },
+  },
+  '#withPolicyData':: d.fn(help='`google.string.withPolicyData` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the policy_data field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `policy_data` field.\n', args=[]),
+  withPolicyData(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_policy+: {
+        [resourceLabel]+: {
+          policy_data: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_container_analysis_note_iam_policy+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet b/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet
index 723da44..f1afba6 100644
--- a/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet
+++ b/4.x/_gen/resources/data_loss_prevention_job_trigger.libsonnet
@@ -459,6 +459,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     }),
     storage_config:: {
       big_query_options:: {
+        excluded_fields:: {
+          '#new':: d.fn(help='\n`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new` constructs a new object with attributes and blocks configured for the `excluded_fields`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Name describing the field excluded from scanning.\n\n**Returns**:\n  - An attribute object that represents the `excluded_fields` sub block.\n', args=[]),
+          new(
+            name
+          ):: std.prune(a={
+            name: name,
+          }),
+        },
         identifying_fields:: {
           '#new':: d.fn(help='\n`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new` constructs a new object with attributes and blocks configured for the `identifying_fields`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Name of a BigQuery field to be returned with the findings.\n\n**Returns**:\n  - An attribute object that represents the `identifying_fields` sub block.\n', args=[]),
           new(
@@ -467,15 +475,27 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
             name: name,
           }),
         },
-        '#new':: d.fn(help='\n`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.new` constructs a new object with attributes and blocks configured for the `big_query_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `rows_limit` (`number`): Max number of rows to scan. If the table has more rows than this value, the rest of the rows are omitted.\nIf not set, or if set to 0, all rows will be scanned. Only one of rowsLimit and rowsLimitPercent can be\nspecified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit` field will be omitted from the resulting object.\n  - `rows_limit_percent` (`number`): Max percentage of rows to scan. The rest are omitted. The number of rows scanned is rounded down.\nMust be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0. Only one of\nrowsLimit and rowsLimitPercent can be specified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit_percent` field will be omitted from the resulting object.\n  - `sample_method` (`string`): How to sample rows if not all rows are scanned. Meaningful only when used in conjunction with either\nrowsLimit or rowsLimitPercent. If not specified, rows are scanned in the order BigQuery reads them. Default value: "TOP" Possible values: ["TOP", "RANDOM_START"] When `null`, the `sample_method` field will be omitted from the resulting object.\n  - `identifying_fields` (`list[obj]`): Specifies the BigQuery fields that will be returned with findings.\nIf not specified, no identifying fields will be returned for findings. When `null`, the `identifying_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new](#fn-inspect_jobinspect_jobstorage_configidentifying_fieldsnew) constructor.\n  - `table_reference` (`list[obj]`): Set of files to scan. When `null`, the `table_reference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.table_reference.new](#fn-inspect_jobinspect_jobstorage_configtable_referencenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `big_query_options` sub block.\n', args=[]),
+        included_fields:: {
+          '#new':: d.fn(help='\n`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new` constructs a new object with attributes and blocks configured for the `included_fields`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Name describing the field to which scanning is limited.\n\n**Returns**:\n  - An attribute object that represents the `included_fields` sub block.\n', args=[]),
+          new(
+            name
+          ):: std.prune(a={
+            name: name,
+          }),
+        },
+        '#new':: d.fn(help='\n`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.new` constructs a new object with attributes and blocks configured for the `big_query_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `rows_limit` (`number`): Max number of rows to scan. If the table has more rows than this value, the rest of the rows are omitted.\nIf not set, or if set to 0, all rows will be scanned. Only one of rowsLimit and rowsLimitPercent can be\nspecified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit` field will be omitted from the resulting object.\n  - `rows_limit_percent` (`number`): Max percentage of rows to scan. The rest are omitted. The number of rows scanned is rounded down.\nMust be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults to 0. Only one of\nrowsLimit and rowsLimitPercent can be specified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit_percent` field will be omitted from the resulting object.\n  - `sample_method` (`string`): How to sample rows if not all rows are scanned. Meaningful only when used in conjunction with either\nrowsLimit or rowsLimitPercent. If not specified, rows are scanned in the order BigQuery reads them. Default value: "TOP" Possible values: ["TOP", "RANDOM_START"] When `null`, the `sample_method` field will be omitted from the resulting object.\n  - `excluded_fields` (`list[obj]`): References to fields excluded from scanning.\nThis allows you to skip inspection of entire columns which you know have no findings. When `null`, the `excluded_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new](#fn-inspect_jobinspect_jobstorage_configexcluded_fieldsnew) constructor.\n  - `identifying_fields` (`list[obj]`): Specifies the BigQuery fields that will be returned with findings.\nIf not specified, no identifying fields will be returned for findings. When `null`, the `identifying_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new](#fn-inspect_jobinspect_jobstorage_configidentifying_fieldsnew) constructor.\n  - `included_fields` (`list[obj]`): Limit scanning only to these fields. When `null`, the `included_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new](#fn-inspect_jobinspect_jobstorage_configincluded_fieldsnew) constructor.\n  - `table_reference` (`list[obj]`): Set of files to scan. When `null`, the `table_reference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.table_reference.new](#fn-inspect_jobinspect_jobstorage_configtable_referencenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `big_query_options` sub block.\n', args=[]),
         new(
+          excluded_fields=null,
           identifying_fields=null,
+          included_fields=null,
           rows_limit=null,
           rows_limit_percent=null,
           sample_method=null,
           table_reference=null
         ):: std.prune(a={
+          excluded_fields: excluded_fields,
           identifying_fields: identifying_fields,
+          included_fields: included_fields,
           rows_limit: rows_limit,
           rows_limit_percent: rows_limit_percent,
           sample_method: sample_method,
diff --git a/4.x/_gen/resources/datastream_stream.libsonnet b/4.x/_gen/resources/datastream_stream.libsonnet
index ff13b81..8b5f1a6 100644
--- a/4.x/_gen/resources/datastream_stream.libsonnet
+++ b/4.x/_gen/resources/datastream_stream.libsonnet
@@ -389,14 +389,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           mysql_databases: mysql_databases,
         }),
       },
-      '#new':: d.fn(help='\n`google.datastream_stream.source_config.mysql_source_config.new` constructs a new object with attributes and blocks configured for the `mysql_source_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `max_concurrent_cdc_tasks` (`number`): Maximum number of concurrent CDC tasks. The number should be non negative.\nIf not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_cdc_tasks` field will be omitted from the resulting object.\n  - `exclude_objects` (`list[obj]`): MySQL objects to exclude from the stream. When `null`, the `exclude_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.datastream_stream.source_config.mysql_source_config.exclude_objects.new](#fn-source_configsource_configexclude_objectsnew) constructor.\n  - `include_objects` (`list[obj]`): MySQL objects to retrieve from the source. When `null`, the `include_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.datastream_stream.source_config.mysql_source_config.include_objects.new](#fn-source_configsource_configinclude_objectsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `mysql_source_config` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google.datastream_stream.source_config.mysql_source_config.new` constructs a new object with attributes and blocks configured for the `mysql_source_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `max_concurrent_backfill_tasks` (`number`): Maximum number of concurrent backfill tasks. The number should be non negative.\nIf not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_backfill_tasks` field will be omitted from the resulting object.\n  - `max_concurrent_cdc_tasks` (`number`): Maximum number of concurrent CDC tasks. The number should be non negative.\nIf not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_cdc_tasks` field will be omitted from the resulting object.\n  - `exclude_objects` (`list[obj]`): MySQL objects to exclude from the stream. When `null`, the `exclude_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.datastream_stream.source_config.mysql_source_config.exclude_objects.new](#fn-source_configsource_configexclude_objectsnew) constructor.\n  - `include_objects` (`list[obj]`): MySQL objects to retrieve from the source. When `null`, the `include_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.datastream_stream.source_config.mysql_source_config.include_objects.new](#fn-source_configsource_configinclude_objectsnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `mysql_source_config` sub block.\n', args=[]),
       new(
         exclude_objects=null,
         include_objects=null,
+        max_concurrent_backfill_tasks=null,
         max_concurrent_cdc_tasks=null
       ):: std.prune(a={
         exclude_objects: exclude_objects,
         include_objects: include_objects,
+        max_concurrent_backfill_tasks: max_concurrent_backfill_tasks,
         max_concurrent_cdc_tasks: max_concurrent_cdc_tasks,
       }),
     },
diff --git a/4.x/_gen/resources/dns_record_set.libsonnet b/4.x/_gen/resources/dns_record_set.libsonnet
index 4f59f17..710bb27 100644
--- a/4.x/_gen/resources/dns_record_set.libsonnet
+++ b/4.x/_gen/resources/dns_record_set.libsonnet
@@ -49,7 +49,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     geo:: {
       health_checked_targets:: {
         internal_load_balancers:: {
-          '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
           new(
             ip_address,
             ip_protocol,
@@ -102,7 +102,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       backup_geo:: {
         health_checked_targets:: {
           internal_load_balancers:: {
-            '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.primary_backup.backup_geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+            '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.primary_backup.backup_geo.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
             new(
               ip_address,
               ip_protocol,
@@ -153,7 +153,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       }),
       primary:: {
         internal_load_balancers:: {
-          '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.primary_backup.primary.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.primary_backup.primary.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
           new(
             ip_address,
             ip_protocol,
@@ -183,7 +183,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     wrr:: {
       health_checked_targets:: {
         internal_load_balancers:: {
-          '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.wrr.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
+          '#new':: d.fn(help='\n`google.dns_record_set.routing_policy.wrr.health_checked_targets.internal_load_balancers.new` constructs a new object with attributes and blocks configured for the `internal_load_balancers`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ip_address` (`string`): The frontend IP address of the load balancer.\n  - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]\n  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]\n  - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.\n  - `port` (`string`): The configured port of the load balancer.\n  - `project` (`string`): The ID of the project in which the load balancer belongs.\n  - `region` (`string`): The region of the load balancer. Only needed for regional load balancers. When `null`, the `region` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `internal_load_balancers` sub block.\n', args=[]),
           new(
             ip_address,
             ip_protocol,
diff --git a/4.x/_gen/resources/monitoring_alert_policy.libsonnet b/4.x/_gen/resources/monitoring_alert_policy.libsonnet
index cbdb0ca..e65558a 100644
--- a/4.x/_gen/resources/monitoring_alert_policy.libsonnet
+++ b/4.x/_gen/resources/monitoring_alert_policy.libsonnet
@@ -3,14 +3,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='monitoring_alert_policy', url='', help='`monitoring_alert_policy` represents the `google_monitoring_alert_policy` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
   alert_strategy:: {
-    '#new':: d.fn(help='\n`google.monitoring_alert_policy.alert_strategy.new` constructs a new object with attributes and blocks configured for the `alert_strategy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `auto_close` (`string`): If an alert policy that was active has no data for this long, any open incidents will close. When `null`, the `auto_close` field will be omitted from the resulting object.\n  - `notification_rate_limit` (`list[obj]`): Required for alert policies with a LogMatch condition.\nThis limit is not implemented for alert policies that are not log-based. When `null`, the `notification_rate_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.alert_strategy.notification_rate_limit.new](#fn-alert_strategynotification_rate_limitnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `alert_strategy` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google.monitoring_alert_policy.alert_strategy.new` constructs a new object with attributes and blocks configured for the `alert_strategy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `auto_close` (`string`): If an alert policy that was active has no data for this long, any open incidents will close. When `null`, the `auto_close` field will be omitted from the resulting object.\n  - `notification_channel_strategy` (`list[obj]`): Control over how the notification channels in 'notification_channels'\nare notified when this alert fires, on a per-channel basis. When `null`, the `notification_channel_strategy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.alert_strategy.notification_channel_strategy.new](#fn-alert_strategynotification_channel_strategynew) constructor.\n  - `notification_rate_limit` (`list[obj]`): Required for alert policies with a LogMatch condition.\nThis limit is not implemented for alert policies that are not log-based. When `null`, the `notification_rate_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.alert_strategy.notification_rate_limit.new](#fn-alert_strategynotification_rate_limitnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `alert_strategy` sub block.\n', args=[]),
     new(
       auto_close=null,
+      notification_channel_strategy=null,
       notification_rate_limit=null
     ):: std.prune(a={
       auto_close: auto_close,
+      notification_channel_strategy: notification_channel_strategy,
       notification_rate_limit: notification_rate_limit,
     }),
+    notification_channel_strategy:: {
+      '#new':: d.fn(help='\n`google.monitoring_alert_policy.alert_strategy.notification_channel_strategy.new` constructs a new object with attributes and blocks configured for the `notification_channel_strategy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `notification_channel_names` (`list`): The notification channels that these settings apply to. Each of these\ncorrespond to the name field in one of the NotificationChannel objects\nreferenced in the notification_channels field of this AlertPolicy. The format is\n'projects/[PROJECT_ID_OR_NUMBER]/notificationChannels/[CHANNEL_ID]' When `null`, the `notification_channel_names` field will be omitted from the resulting object.\n  - `renotify_interval` (`string`): The frequency at which to send reminder notifications for open incidents. When `null`, the `renotify_interval` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `notification_channel_strategy` sub block.\n', args=[]),
+      new(
+        notification_channel_names=null,
+        renotify_interval=null
+      ):: std.prune(a={
+        notification_channel_names: notification_channel_names,
+        renotify_interval: renotify_interval,
+      }),
+    },
     notification_rate_limit:: {
       '#new':: d.fn(help='\n`google.monitoring_alert_policy.alert_strategy.notification_rate_limit.new` constructs a new object with attributes and blocks configured for the `notification_rate_limit`\nTerraform sub block.\n\n\n\n**Args**:\n  - `period` (`string`): Not more than one notification per period. When `null`, the `period` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `notification_rate_limit` sub block.\n', args=[]),
       new(
@@ -122,7 +134,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           per_series_aligner: per_series_aligner,
         }),
       },
-      '#new':: d.fn(help='\n`google.monitoring_alert_policy.conditions.condition_threshold.new` constructs a new object with attributes and blocks configured for the `condition_threshold`\nTerraform sub block.\n\n\n\n**Args**:\n  - `comparison` (`string`): The comparison to apply between the time\nseries (indicated by filter and aggregation)\nand the threshold (indicated by\nthreshold_value). The comparison is applied\non each time series, with the time series on\nthe left-hand side and the threshold on the\nright-hand side. Only COMPARISON_LT and\nCOMPARISON_GT are supported currently. Possible values: ["COMPARISON_GT", "COMPARISON_GE", "COMPARISON_LT", "COMPARISON_LE", "COMPARISON_EQ", "COMPARISON_NE"]\n  - `denominator_filter` (`string`): A filter that identifies a time series that\nshould be used as the denominator of a ratio\nthat will be compared with the threshold. If\na denominator_filter is specified, the time\nseries specified by the filter field will be\nused as the numerator.The filter is similar\nto the one that is specified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `denominator_filter` field will be omitted from the resulting object.\n  - `duration` (`string`): The amount of time that a time series must\nviolate the threshold to be considered\nfailing. Currently, only values that are a\nmultiple of a minute--e.g., 0, 60, 120, or\n300 seconds--are supported. If an invalid\nvalue is given, an error will be returned.\nWhen choosing a duration, it is useful to\nkeep in mind the frequency of the underlying\ntime series data (which may also be affected\nby any alignments specified in the\naggregations field); a good duration is long\nenough so that a single outlier does not\ngenerate spurious alerts, but short enough\nthat unhealthy states are detected and\nalerted on quickly.\n  - `evaluation_missing_data` (`string`): A condition control that determines how\nmetric-threshold conditions are evaluated when\ndata stops arriving. Possible values: ["EVALUATION_MISSING_DATA_INACTIVE", "EVALUATION_MISSING_DATA_ACTIVE", "EVALUATION_MISSING_DATA_NO_OP"] When `null`, the `evaluation_missing_data` field will be omitted from the resulting object.\n  - `filter` (`string`): A filter that identifies which time series\nshould be compared with the threshold.The\nfilter is similar to the one that is\nspecified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `filter` field will be omitted from the resulting object.\n  - `threshold_value` (`number`): A value against which to compare the time\nseries. When `null`, the `threshold_value` field will be omitted from the resulting object.\n  - `aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series as well as how to\ncombine the retrieved time series together\n(such as when aggregating multiple streams\non each resource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).\nMultiple aggregations are applied in the\norder specified.This field is similar to the\none in the MetricService.ListTimeSeries\nrequest. It is advisable to use the\nListTimeSeries method when debugging this\nfield. When `null`, the `aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.aggregations.new](#fn-conditionsconditionsaggregationsnew) constructor.\n  - `denominator_aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series selected by\ndenominatorFilter as well as how to combine\nthe retrieved time series together (such as\nwhen aggregating multiple streams on each\nresource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).When\ncomputing ratios, the aggregations and\ndenominator_aggregations fields must use the\nsame alignment period and produce time\nseries that have the same periodicity and\nlabels.This field is similar to the one in\nthe MetricService.ListTimeSeries request. It\nis advisable to use the ListTimeSeries\nmethod when debugging this field. When `null`, the `denominator_aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.denominator_aggregations.new](#fn-conditionsconditionsdenominator_aggregationsnew) constructor.\n  - `trigger` (`list[obj]`): The number/percent of time series for which\nthe comparison must hold in order for the\ncondition to trigger. If unspecified, then\nthe condition will trigger if the comparison\nis true for any of the time series that have\nbeen identified by filter and aggregations,\nor by the ratio, if denominator_filter and\ndenominator_aggregations are specified. When `null`, the `trigger` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.trigger.new](#fn-conditionsconditionstriggernew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `condition_threshold` sub block.\n', args=[]),
+      forecast_options:: {
+        '#new':: d.fn(help='\n`google.monitoring_alert_policy.conditions.condition_threshold.forecast_options.new` constructs a new object with attributes and blocks configured for the `forecast_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `forecast_horizon` (`string`): The length of time into the future to forecast\nwhether a timeseries will violate the threshold.\nIf the predicted value is found to violate the\nthreshold, and the violation is observed in all\nforecasts made for the Configured 'duration',\nthen the timeseries is considered to be failing.\n\n**Returns**:\n  - An attribute object that represents the `forecast_options` sub block.\n', args=[]),
+        new(
+          forecast_horizon
+        ):: std.prune(a={
+          forecast_horizon: forecast_horizon,
+        }),
+      },
+      '#new':: d.fn(help='\n`google.monitoring_alert_policy.conditions.condition_threshold.new` constructs a new object with attributes and blocks configured for the `condition_threshold`\nTerraform sub block.\n\n\n\n**Args**:\n  - `comparison` (`string`): The comparison to apply between the time\nseries (indicated by filter and aggregation)\nand the threshold (indicated by\nthreshold_value). The comparison is applied\non each time series, with the time series on\nthe left-hand side and the threshold on the\nright-hand side. Only COMPARISON_LT and\nCOMPARISON_GT are supported currently. Possible values: ["COMPARISON_GT", "COMPARISON_GE", "COMPARISON_LT", "COMPARISON_LE", "COMPARISON_EQ", "COMPARISON_NE"]\n  - `denominator_filter` (`string`): A filter that identifies a time series that\nshould be used as the denominator of a ratio\nthat will be compared with the threshold. If\na denominator_filter is specified, the time\nseries specified by the filter field will be\nused as the numerator.The filter is similar\nto the one that is specified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `denominator_filter` field will be omitted from the resulting object.\n  - `duration` (`string`): The amount of time that a time series must\nviolate the threshold to be considered\nfailing. Currently, only values that are a\nmultiple of a minute--e.g., 0, 60, 120, or\n300 seconds--are supported. If an invalid\nvalue is given, an error will be returned.\nWhen choosing a duration, it is useful to\nkeep in mind the frequency of the underlying\ntime series data (which may also be affected\nby any alignments specified in the\naggregations field); a good duration is long\nenough so that a single outlier does not\ngenerate spurious alerts, but short enough\nthat unhealthy states are detected and\nalerted on quickly.\n  - `evaluation_missing_data` (`string`): A condition control that determines how\nmetric-threshold conditions are evaluated when\ndata stops arriving. Possible values: ["EVALUATION_MISSING_DATA_INACTIVE", "EVALUATION_MISSING_DATA_ACTIVE", "EVALUATION_MISSING_DATA_NO_OP"] When `null`, the `evaluation_missing_data` field will be omitted from the resulting object.\n  - `filter` (`string`): A filter that identifies which time series\nshould be compared with the threshold.The\nfilter is similar to the one that is\nspecified in the\nMetricService.ListTimeSeries request (that\ncall is useful to verify the time series\nthat will be retrieved / processed) and must\nspecify the metric type and optionally may\ncontain restrictions on resource type,\nresource labels, and metric labels. This\nfield may not exceed 2048 Unicode characters\nin length. When `null`, the `filter` field will be omitted from the resulting object.\n  - `threshold_value` (`number`): A value against which to compare the time\nseries. When `null`, the `threshold_value` field will be omitted from the resulting object.\n  - `aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series as well as how to\ncombine the retrieved time series together\n(such as when aggregating multiple streams\non each resource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).\nMultiple aggregations are applied in the\norder specified.This field is similar to the\none in the MetricService.ListTimeSeries\nrequest. It is advisable to use the\nListTimeSeries method when debugging this\nfield. When `null`, the `aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.aggregations.new](#fn-conditionsconditionsaggregationsnew) constructor.\n  - `denominator_aggregations` (`list[obj]`): Specifies the alignment of data points in\nindividual time series selected by\ndenominatorFilter as well as how to combine\nthe retrieved time series together (such as\nwhen aggregating multiple streams on each\nresource to a single stream for each\nresource or when aggregating streams across\nall members of a group of resources).When\ncomputing ratios, the aggregations and\ndenominator_aggregations fields must use the\nsame alignment period and produce time\nseries that have the same periodicity and\nlabels.This field is similar to the one in\nthe MetricService.ListTimeSeries request. It\nis advisable to use the ListTimeSeries\nmethod when debugging this field. When `null`, the `denominator_aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.denominator_aggregations.new](#fn-conditionsconditionsdenominator_aggregationsnew) constructor.\n  - `forecast_options` (`list[obj]`): When this field is present, the 'MetricThreshold'\ncondition forecasts whether the time series is\npredicted to violate the threshold within the\n'forecastHorizon'. When this field is not set, the\n'MetricThreshold' tests the current value of the\ntimeseries against the threshold. When `null`, the `forecast_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.forecast_options.new](#fn-conditionsconditionsforecast_optionsnew) constructor.\n  - `trigger` (`list[obj]`): The number/percent of time series for which\nthe comparison must hold in order for the\ncondition to trigger. If unspecified, then\nthe condition will trigger if the comparison\nis true for any of the time series that have\nbeen identified by filter and aggregations,\nor by the ratio, if denominator_filter and\ndenominator_aggregations are specified. When `null`, the `trigger` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.trigger.new](#fn-conditionsconditionstriggernew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `condition_threshold` sub block.\n', args=[]),
       new(
         comparison,
         duration,
@@ -131,6 +151,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         denominator_filter=null,
         evaluation_missing_data=null,
         filter=null,
+        forecast_options=null,
         threshold_value=null,
         trigger=null
       ):: std.prune(a={
@@ -141,6 +162,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         duration: duration,
         evaluation_missing_data: evaluation_missing_data,
         filter: filter,
+        forecast_options: forecast_options,
         threshold_value: threshold_value,
         trigger: trigger,
       }),
diff --git a/4.x/_gen/resources/privateca_ca_pool.libsonnet b/4.x/_gen/resources/privateca_ca_pool.libsonnet
index 90ca5ce..dc4713e 100644
--- a/4.x/_gen/resources/privateca_ca_pool.libsonnet
+++ b/4.x/_gen/resources/privateca_ca_pool.libsonnet
@@ -276,11 +276,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     timeouts: timeouts,
   }),
   publishing_options:: {
-    '#new':: d.fn(help='\n`google.privateca_ca_pool.publishing_options.new` constructs a new object with attributes and blocks configured for the `publishing_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `publish_ca_cert` (`bool`): When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"\nX.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding\nX.509 extension will not be written in issued certificates.\n  - `publish_crl` (`bool`): When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension\nin all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not\nbe written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are\nalso rebuilt shortly after a certificate is revoked.\n\n**Returns**:\n  - An attribute object that represents the `publishing_options` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google.privateca_ca_pool.publishing_options.new` constructs a new object with attributes and blocks configured for the `publishing_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `encoding_format` (`string`): Specifies the encoding format of each CertificateAuthority's CA\ncertificate and CRLs. If this is omitted, CA certificates and CRLs\nwill be published in PEM. Possible values: ["PEM", "DER"] When `null`, the `encoding_format` field will be omitted from the resulting object.\n  - `publish_ca_cert` (`bool`): When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"\nX.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding\nX.509 extension will not be written in issued certificates.\n  - `publish_crl` (`bool`): When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension\nin all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not\nbe written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are\nalso rebuilt shortly after a certificate is revoked.\n\n**Returns**:\n  - An attribute object that represents the `publishing_options` sub block.\n', args=[]),
     new(
       publish_ca_cert,
-      publish_crl
+      publish_crl,
+      encoding_format=null
     ):: std.prune(a={
+      encoding_format: encoding_format,
       publish_ca_cert: publish_ca_cert,
       publish_crl: publish_crl,
     }),
diff --git a/4.x/_gen/resources/sql_database_instance.libsonnet b/4.x/_gen/resources/sql_database_instance.libsonnet
index 52d9e4c..47839fa 100644
--- a/4.x/_gen/resources/sql_database_instance.libsonnet
+++ b/4.x/_gen/resources/sql_database_instance.libsonnet
@@ -140,6 +140,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         domain: domain,
       }),
     },
+    advanced_machine_features:: {
+      '#new':: d.fn(help='\n`google.sql_database_instance.settings.advanced_machine_features.new` constructs a new object with attributes and blocks configured for the `advanced_machine_features`\nTerraform sub block.\n\n\n\n**Args**:\n  - `threads_per_core` (`number`): The number of threads per physical core. Can be 1 or 2. When `null`, the `threads_per_core` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `advanced_machine_features` sub block.\n', args=[]),
+      new(
+        threads_per_core=null
+      ):: std.prune(a={
+        threads_per_core: threads_per_core,
+      }),
+    },
     backup_configuration:: {
       backup_retention_settings:: {
         '#new':: d.fn(help='\n`google.sql_database_instance.settings.backup_configuration.backup_retention_settings.new` constructs a new object with attributes and blocks configured for the `backup_retention_settings`\nTerraform sub block.\n\n\n\n**Args**:\n  - `retained_backups` (`number`): Number of backups to retain.\n  - `retention_unit` (`string`): The unit that 'retainedBackups' represents. Defaults to COUNT When `null`, the `retention_unit` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `backup_retention_settings` sub block.\n', args=[]),
@@ -262,11 +270,12 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         update_track: update_track,
       }),
     },
-    '#new':: d.fn(help='\n`google.sql_database_instance.settings.new` constructs a new object with attributes and blocks configured for the `settings`\nTerraform sub block.\n\n\n\n**Args**:\n  - `activation_policy` (`string`): This specifies when the instance should be active. Can be either ALWAYS, NEVER or ON_DEMAND. When `null`, the `activation_policy` field will be omitted from the resulting object.\n  - `availability_type` (`string`): The availability type of the Cloud SQL instance, high availability\n(REGIONAL) or single zone (ZONAL). For all instances, ensure that\nsettings.backup_configuration.enabled is set to true.\nFor MySQL instances, ensure that settings.backup_configuration.binary_log_enabled is set to true.\nFor Postgres instances, ensure that settings.backup_configuration.point_in_time_recovery_enabled\nis set to true. Defaults to ZONAL. When `null`, the `availability_type` field will be omitted from the resulting object.\n  - `collation` (`string`): The name of server instance collation. When `null`, the `collation` field will be omitted from the resulting object.\n  - `connector_enforcement` (`string`): Specifies if connections must use Cloud SQL connectors. When `null`, the `connector_enforcement` field will be omitted from the resulting object.\n  - `deletion_protection_enabled` (`bool`): Configuration to protect against accidental instance deletion. When `null`, the `deletion_protection_enabled` field will be omitted from the resulting object.\n  - `disk_autoresize` (`bool`): Enables auto-resizing of the storage size. Defaults to true. When `null`, the `disk_autoresize` field will be omitted from the resulting object.\n  - `disk_autoresize_limit` (`number`): The maximum size, in GB, to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. When `null`, the `disk_autoresize_limit` field will be omitted from the resulting object.\n  - `disk_size` (`number`): The size of data disk, in GB. Size of a running instance cannot be reduced but can be increased. The minimum value is 10GB. When `null`, the `disk_size` field will be omitted from the resulting object.\n  - `disk_type` (`string`): The type of data disk: PD_SSD or PD_HDD. Defaults to PD_SSD. When `null`, the `disk_type` field will be omitted from the resulting object.\n  - `pricing_plan` (`string`): Pricing plan for this instance, can only be PER_USE. When `null`, the `pricing_plan` field will be omitted from the resulting object.\n  - `tier` (`string`): The machine type to use. See tiers for more details and supported versions. Postgres supports only shared-core machine types, and custom machine types such as db-custom-2-13312. See the Custom Machine Type Documentation to learn about specifying custom machine types.\n  - `time_zone` (`string`): The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. When `null`, the `time_zone` field will be omitted from the resulting object.\n  - `user_labels` (`obj`): A set of key/value user label pairs to assign to the instance. When `null`, the `user_labels` field will be omitted from the resulting object.\n  - `active_directory_config` (`list[obj]`): Set the `active_directory_config` field on the resulting object. When `null`, the `active_directory_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.active_directory_config.new](#fn-settingsactive_directory_confignew) constructor.\n  - `backup_configuration` (`list[obj]`): Set the `backup_configuration` field on the resulting object. When `null`, the `backup_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.backup_configuration.new](#fn-settingsbackup_configurationnew) constructor.\n  - `database_flags` (`list[obj]`): Set the `database_flags` field on the resulting object. When `null`, the `database_flags` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.database_flags.new](#fn-settingsdatabase_flagsnew) constructor.\n  - `deny_maintenance_period` (`list[obj]`): Set the `deny_maintenance_period` field on the resulting object. When `null`, the `deny_maintenance_period` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.deny_maintenance_period.new](#fn-settingsdeny_maintenance_periodnew) constructor.\n  - `insights_config` (`list[obj]`): Configuration of Query Insights. When `null`, the `insights_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.insights_config.new](#fn-settingsinsights_confignew) constructor.\n  - `ip_configuration` (`list[obj]`): Set the `ip_configuration` field on the resulting object. When `null`, the `ip_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.ip_configuration.new](#fn-settingsip_configurationnew) constructor.\n  - `location_preference` (`list[obj]`): Set the `location_preference` field on the resulting object. When `null`, the `location_preference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.location_preference.new](#fn-settingslocation_preferencenew) constructor.\n  - `maintenance_window` (`list[obj]`): Declares a one-hour maintenance window when an Instance can automatically restart to apply updates. The maintenance window is specified in UTC time. When `null`, the `maintenance_window` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.maintenance_window.new](#fn-settingsmaintenance_windownew) constructor.\n  - `password_validation_policy` (`list[obj]`): Set the `password_validation_policy` field on the resulting object. When `null`, the `password_validation_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.password_validation_policy.new](#fn-settingspassword_validation_policynew) constructor.\n  - `sql_server_audit_config` (`list[obj]`): Set the `sql_server_audit_config` field on the resulting object. When `null`, the `sql_server_audit_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.sql_server_audit_config.new](#fn-settingssql_server_audit_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `settings` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google.sql_database_instance.settings.new` constructs a new object with attributes and blocks configured for the `settings`\nTerraform sub block.\n\n\n\n**Args**:\n  - `activation_policy` (`string`): This specifies when the instance should be active. Can be either ALWAYS, NEVER or ON_DEMAND. When `null`, the `activation_policy` field will be omitted from the resulting object.\n  - `availability_type` (`string`): The availability type of the Cloud SQL instance, high availability\n(REGIONAL) or single zone (ZONAL). For all instances, ensure that\nsettings.backup_configuration.enabled is set to true.\nFor MySQL instances, ensure that settings.backup_configuration.binary_log_enabled is set to true.\nFor Postgres instances, ensure that settings.backup_configuration.point_in_time_recovery_enabled\nis set to true. Defaults to ZONAL. When `null`, the `availability_type` field will be omitted from the resulting object.\n  - `collation` (`string`): The name of server instance collation. When `null`, the `collation` field will be omitted from the resulting object.\n  - `connector_enforcement` (`string`): Specifies if connections must use Cloud SQL connectors. When `null`, the `connector_enforcement` field will be omitted from the resulting object.\n  - `deletion_protection_enabled` (`bool`): Configuration to protect against accidental instance deletion. When `null`, the `deletion_protection_enabled` field will be omitted from the resulting object.\n  - `disk_autoresize` (`bool`): Enables auto-resizing of the storage size. Defaults to true. When `null`, the `disk_autoresize` field will be omitted from the resulting object.\n  - `disk_autoresize_limit` (`number`): The maximum size, in GB, to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. When `null`, the `disk_autoresize_limit` field will be omitted from the resulting object.\n  - `disk_size` (`number`): The size of data disk, in GB. Size of a running instance cannot be reduced but can be increased. The minimum value is 10GB. When `null`, the `disk_size` field will be omitted from the resulting object.\n  - `disk_type` (`string`): The type of data disk: PD_SSD or PD_HDD. Defaults to PD_SSD. When `null`, the `disk_type` field will be omitted from the resulting object.\n  - `pricing_plan` (`string`): Pricing plan for this instance, can only be PER_USE. When `null`, the `pricing_plan` field will be omitted from the resulting object.\n  - `tier` (`string`): The machine type to use. See tiers for more details and supported versions. Postgres supports only shared-core machine types, and custom machine types such as db-custom-2-13312. See the Custom Machine Type Documentation to learn about specifying custom machine types.\n  - `time_zone` (`string`): The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. When `null`, the `time_zone` field will be omitted from the resulting object.\n  - `user_labels` (`obj`): A set of key/value user label pairs to assign to the instance. When `null`, the `user_labels` field will be omitted from the resulting object.\n  - `active_directory_config` (`list[obj]`): Set the `active_directory_config` field on the resulting object. When `null`, the `active_directory_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.active_directory_config.new](#fn-settingsactive_directory_confignew) constructor.\n  - `advanced_machine_features` (`list[obj]`): Set the `advanced_machine_features` field on the resulting object. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.advanced_machine_features.new](#fn-settingsadvanced_machine_featuresnew) constructor.\n  - `backup_configuration` (`list[obj]`): Set the `backup_configuration` field on the resulting object. When `null`, the `backup_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.backup_configuration.new](#fn-settingsbackup_configurationnew) constructor.\n  - `database_flags` (`list[obj]`): Set the `database_flags` field on the resulting object. When `null`, the `database_flags` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.database_flags.new](#fn-settingsdatabase_flagsnew) constructor.\n  - `deny_maintenance_period` (`list[obj]`): Set the `deny_maintenance_period` field on the resulting object. When `null`, the `deny_maintenance_period` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.deny_maintenance_period.new](#fn-settingsdeny_maintenance_periodnew) constructor.\n  - `insights_config` (`list[obj]`): Configuration of Query Insights. When `null`, the `insights_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.insights_config.new](#fn-settingsinsights_confignew) constructor.\n  - `ip_configuration` (`list[obj]`): Set the `ip_configuration` field on the resulting object. When `null`, the `ip_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.ip_configuration.new](#fn-settingsip_configurationnew) constructor.\n  - `location_preference` (`list[obj]`): Set the `location_preference` field on the resulting object. When `null`, the `location_preference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.location_preference.new](#fn-settingslocation_preferencenew) constructor.\n  - `maintenance_window` (`list[obj]`): Declares a one-hour maintenance window when an Instance can automatically restart to apply updates. The maintenance window is specified in UTC time. When `null`, the `maintenance_window` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.maintenance_window.new](#fn-settingsmaintenance_windownew) constructor.\n  - `password_validation_policy` (`list[obj]`): Set the `password_validation_policy` field on the resulting object. When `null`, the `password_validation_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.password_validation_policy.new](#fn-settingspassword_validation_policynew) constructor.\n  - `sql_server_audit_config` (`list[obj]`): Set the `sql_server_audit_config` field on the resulting object. When `null`, the `sql_server_audit_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.sql_server_audit_config.new](#fn-settingssql_server_audit_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `settings` sub block.\n', args=[]),
     new(
       tier,
       activation_policy=null,
       active_directory_config=null,
+      advanced_machine_features=null,
       availability_type=null,
       backup_configuration=null,
       collation=null,
@@ -290,6 +299,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       activation_policy: activation_policy,
       active_directory_config: active_directory_config,
+      advanced_machine_features: advanced_machine_features,
       availability_type: availability_type,
       backup_configuration: backup_configuration,
       collation: collation,
diff --git a/4.x/_gen/resources/storage_transfer_job.libsonnet b/4.x/_gen/resources/storage_transfer_job.libsonnet
index 1e1d996..a80d860 100644
--- a/4.x/_gen/resources/storage_transfer_job.libsonnet
+++ b/4.x/_gen/resources/storage_transfer_job.libsonnet
@@ -117,14 +117,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
           secret_access_key: secret_access_key,
         }),
       },
-      '#new':: d.fn(help='\n`google.storage_transfer_job.transfer_spec.aws_s3_data_source.new` constructs a new object with attributes and blocks configured for the `aws_s3_data_source`\nTerraform sub block.\n\n\n\n**Args**:\n  - `bucket_name` (`string`): S3 Bucket name.\n  - `role_arn` (`string`): The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project. When `null`, the `role_arn` field will be omitted from the resulting object.\n  - `aws_access_key` (`list[obj]`): AWS credentials block. When `null`, the `aws_access_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.storage_transfer_job.transfer_spec.aws_s3_data_source.aws_access_key.new](#fn-transfer_spectransfer_specaws_access_keynew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `aws_s3_data_source` sub block.\n', args=[]),
+      '#new':: d.fn(help='\n`google.storage_transfer_job.transfer_spec.aws_s3_data_source.new` constructs a new object with attributes and blocks configured for the `aws_s3_data_source`\nTerraform sub block.\n\n\n\n**Args**:\n  - `bucket_name` (`string`): S3 Bucket name.\n  - `path` (`string`): S3 Bucket path in bucket to transfer. When `null`, the `path` field will be omitted from the resulting object.\n  - `role_arn` (`string`): The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project. When `null`, the `role_arn` field will be omitted from the resulting object.\n  - `aws_access_key` (`list[obj]`): AWS credentials block. When `null`, the `aws_access_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.storage_transfer_job.transfer_spec.aws_s3_data_source.aws_access_key.new](#fn-transfer_spectransfer_specaws_access_keynew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `aws_s3_data_source` sub block.\n', args=[]),
       new(
         bucket_name,
         aws_access_key=null,
+        path=null,
         role_arn=null
       ):: std.prune(a={
         aws_access_key: aws_access_key,
         bucket_name: bucket_name,
+        path: path,
         role_arn: role_arn,
       }),
     },
diff --git a/docs/4.x/README.md b/docs/4.x/README.md
index e6a47b3..33b7351 100644
--- a/docs/4.x/README.md
+++ b/docs/4.x/README.md
@@ -276,6 +276,9 @@ project.
 * [compute_vpn_gateway](compute_vpn_gateway.md)
 * [compute_vpn_tunnel](compute_vpn_tunnel.md)
 * [container_analysis_note](container_analysis_note.md)
+* [container_analysis_note_iam_binding](container_analysis_note_iam_binding.md)
+* [container_analysis_note_iam_member](container_analysis_note_iam_member.md)
+* [container_analysis_note_iam_policy](container_analysis_note_iam_policy.md)
 * [container_analysis_occurrence](container_analysis_occurrence.md)
 * [container_attached_cluster](container_attached_cluster.md)
 * [container_aws_cluster](container_aws_cluster.md)
diff --git a/docs/4.x/bigquery_table.md b/docs/4.x/bigquery_table.md
index c7b8650..1499bd5 100644
--- a/docs/4.x/bigquery_table.md
+++ b/docs/4.x/bigquery_table.md
@@ -578,7 +578,7 @@ Terraform sub block.
   - `max_bad_records` (`number`): The maximum number of bad records that BigQuery can ignore when reading data. When `null`, the `max_bad_records` field will be omitted from the resulting object.
   - `reference_file_schema_uri` (`string`): When creating an external table, the user can provide a reference file with the table schema. This is enabled for the following formats: AVRO, PARQUET, ORC. When `null`, the `reference_file_schema_uri` field will be omitted from the resulting object.
   - `schema` (`string`): A JSON schema for the external table. Schema is required for CSV and JSON formats and is disallowed for Google Cloud Bigtable, Cloud Datastore backups, and Avro formats when using external tables. When `null`, the `schema` field will be omitted from the resulting object.
-  - `source_format` (`string`): The data format. Supported values are: "CSV", "GOOGLE_SHEETS", "NEWLINE_DELIMITED_JSON", "AVRO", "PARQUET", "ORC" and "DATASTORE_BACKUP". To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".
+  - `source_format` (`string`):  Please see sourceFormat under ExternalDataConfiguration in Bigquery's public API documentation (https://cloud.google.com/bigquery/docs/reference/rest/v2/tables#externaldataconfiguration) for supported formats. To use "GOOGLE_SHEETS" the scopes must include "googleapis.com/auth/drive.readonly".
   - `source_uris` (`list`): A list of the fully-qualified URIs that point to your data in Google Cloud.
   - `avro_options` (`list[obj]`): Additional options if source_format is set to "AVRO" When `null`, the `avro_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.avro_options.new](#fn-external_data_configurationavro_optionsnew) constructor.
   - `csv_options` (`list[obj]`): Additional properties to set if source_format is set to "CSV". When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.bigquery_table.external_data_configuration.csv_options.new](#fn-external_data_configurationcsv_optionsnew) constructor.
diff --git a/docs/4.x/cloud_run_service.md b/docs/4.x/cloud_run_service.md
index a08ebcf..f45fe18 100644
--- a/docs/4.x/cloud_run_service.md
+++ b/docs/4.x/cloud_run_service.md
@@ -584,9 +584,7 @@ service. The service account represents the identity of the running revision,
 and determines what permissions the revision has. If not provided, the revision
 will use the project's default service account. When `null`, the `service_account_name` field will be omitted from the resulting object.
   - `timeout_seconds` (`number`): TimeoutSeconds holds the max duration the instance is allowed for responding to a request. When `null`, the `timeout_seconds` field will be omitted from the resulting object.
-  - `containers` (`list[obj]`): Container defines the unit of execution for this Revision.
-In the context of a Revision, we disallow a number of the fields of
-this Container, including: name, ports, and volumeMounts. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.
+  - `containers` (`list[obj]`): Containers defines the unit of execution for this Revision. When `null`, the `containers` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.containers.new](#fn-templatetemplatecontainersnew) constructor.
   - `volumes` (`list[obj]`): Volume represents a named volume in a container. When `null`, the `volumes` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.cloud_run_service.template.spec.volumes.new](#fn-templatetemplatevolumesnew) constructor.
 
 **Returns**:
@@ -616,6 +614,7 @@ The docker image's CMD is used if this is not provided. When `null`, the `ar
 The docker image's ENTRYPOINT is used if this is not provided. When `null`, the `command` field will be omitted from the resulting object.
   - `image` (`string`): Docker image name. This is most often a reference to a container located
 in the container registry, such as gcr.io/cloudrun/hello
+  - `name` (`string`): Name of the container When `null`, the `name` field will be omitted from the resulting object.
   - `working_dir` (`string`): Container's working directory.
 If not specified, the container runtime's default will be used, which
 might be configured in the container image. When `null`, the `working_dir` field will be omitted from the resulting object.
diff --git a/docs/4.x/compute_disk.md b/docs/4.x/compute_disk.md
index ad2d82c..4b6824d 100644
--- a/docs/4.x/compute_disk.md
+++ b/docs/4.x/compute_disk.md
@@ -18,8 +18,11 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withDescription()`](#fn-withdescription)
 * [`fn withDiskEncryptionKey()`](#fn-withdiskencryptionkey)
 * [`fn withDiskEncryptionKeyMixin()`](#fn-withdiskencryptionkeymixin)
+* [`fn withGuestOsFeatures()`](#fn-withguestosfeatures)
+* [`fn withGuestOsFeaturesMixin()`](#fn-withguestosfeaturesmixin)
 * [`fn withImage()`](#fn-withimage)
 * [`fn withLabels()`](#fn-withlabels)
+* [`fn withLicenses()`](#fn-withlicenses)
 * [`fn withName()`](#fn-withname)
 * [`fn withPhysicalBlockSizeBytes()`](#fn-withphysicalblocksizebytes)
 * [`fn withProject()`](#fn-withproject)
@@ -37,6 +40,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withZone()`](#fn-withzone)
 * [`obj disk_encryption_key`](#obj-disk_encryption_key)
   * [`fn new()`](#fn-disk_encryption_keynew)
+* [`obj guest_os_features`](#obj-guest_os_features)
+  * [`fn new()`](#fn-guest_os_featuresnew)
 * [`obj source_image_encryption_key`](#obj-source_image_encryption_key)
   * [`fn new()`](#fn-source_image_encryption_keynew)
 * [`obj source_snapshot_encryption_key`](#obj-source_snapshot_encryption_key)
@@ -85,6 +90,7 @@ images names must include the family name. If they don't, use the
 For instance, the image 'centos-6-v20180104' includes its family name 'centos-6'.
 These images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
 RFC1035. Specifically, the name must be 1-63 characters long and match
@@ -145,6 +151,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if
 the source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
@@ -186,6 +194,7 @@ images names must include the family name. If they don't, use the
 For instance, the image 'centos-6-v20180104' includes its family name 'centos-6'.
 These images can be referred by family name here. When `null`, the `image` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
 RFC1035. Specifically, the name must be 1-63 characters long and match
@@ -246,6 +255,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_image_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source image. Required if
 the source image is protected by a customer-supplied encryption key. When `null`, the `source_image_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_disk.source_image_encryption_key.new](#fn-source_image_encryption_keynew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
@@ -310,6 +321,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `disk_encryption_key` field.
 
 
+### fn withGuestOsFeatures
+
+```ts
+withGuestOsFeatures()
+```
+
+`google.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withGuestOsFeaturesMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
+### fn withGuestOsFeaturesMixin
+
+```ts
+withGuestOsFeaturesMixin()
+```
+
+`google.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withGuestOsFeatures](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
 ### fn withImage
 
 ```ts
@@ -342,6 +390,22 @@ Terraform resource block to set or update the labels field.
   - `value` (`obj`): The value to set for the `labels` field.
 
 
+### fn withLicenses
+
+```ts
+withLicenses()
+```
+
+`google.list.withLicenses` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the licenses field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `licenses` field.
+
+
 ### fn withName
 
 ```ts
@@ -630,6 +694,29 @@ this resource. You can provide either the rawKey or the rsaEncryptedKey. When `n
   - An attribute object that represents the `disk_encryption_key` sub block.
 
 
+## obj guest_os_features
+
+
+
+### fn guest_os_features.new
+
+```ts
+new()
+```
+
+
+`google.compute_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`
+Terraform sub block.
+
+
+
+**Args**:
+  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]
+
+**Returns**:
+  - An attribute object that represents the `guest_os_features` sub block.
+
+
 ## obj source_image_encryption_key
 
 
diff --git a/docs/4.x/compute_forwarding_rule.md b/docs/4.x/compute_forwarding_rule.md
index 570373c..a352f08 100644
--- a/docs/4.x/compute_forwarding_rule.md
+++ b/docs/4.x/compute_forwarding_rule.md
@@ -17,6 +17,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn newAttrs()`](#fn-newattrs)
 * [`fn withAllPorts()`](#fn-withallports)
 * [`fn withAllowGlobalAccess()`](#fn-withallowglobalaccess)
+* [`fn withAllowPscGlobalAccess()`](#fn-withallowpscglobalaccess)
 * [`fn withBackendService()`](#fn-withbackendservice)
 * [`fn withDescription()`](#fn-withdescription)
 * [`fn withIpAddress()`](#fn-withipaddress)
@@ -95,6 +96,7 @@ regions.
 
 Otherwise only allows access from clients in the same region as the
 internal load balancer. When `null`, the `allow_global_access` field will be omitted from the resulting object.
+  - `allow_psc_global_access` (`bool`): This is used in PSC consumer ForwardingRule to control whether the PSC endpoint can be accessed from another region. When `null`, the `allow_psc_global_access` field will be omitted from the resulting object.
   - `backend_service` (`string`): Identifies the backend service to which the forwarding rule sends traffic.
 
 Required for Internal TCP/UDP Load Balancing and Network Load Balancing;
@@ -327,6 +329,7 @@ regions.
 
 Otherwise only allows access from clients in the same region as the
 internal load balancer. When `null`, the `allow_global_access` field will be omitted from the resulting object.
+  - `allow_psc_global_access` (`bool`): This is used in PSC consumer ForwardingRule to control whether the PSC endpoint can be accessed from another region. When `null`, the `allow_psc_global_access` field will be omitted from the resulting object.
   - `backend_service` (`string`): Identifies the backend service to which the forwarding rule sends traffic.
 
 Required for Internal TCP/UDP Load Balancing and Network Load Balancing;
@@ -551,6 +554,22 @@ Terraform resource block to set or update the allow_global_access field.
   - `value` (`bool`): The value to set for the `allow_global_access` field.
 
 
+### fn withAllowPscGlobalAccess
+
+```ts
+withAllowPscGlobalAccess()
+```
+
+`google.bool.withAllowPscGlobalAccess` constructs a mixin object that can be merged into the `bool`
+Terraform resource block to set or update the allow_psc_global_access field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`bool`): The value to set for the `allow_psc_global_access` field.
+
+
 ### fn withBackendService
 
 ```ts
diff --git a/docs/4.x/compute_image.md b/docs/4.x/compute_image.md
index 6fbac08..ea01ee0 100644
--- a/docs/4.x/compute_image.md
+++ b/docs/4.x/compute_image.md
@@ -31,6 +31,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withSourceDisk()`](#fn-withsourcedisk)
 * [`fn withSourceImage()`](#fn-withsourceimage)
 * [`fn withSourceSnapshot()`](#fn-withsourcesnapshot)
+* [`fn withStorageLocations()`](#fn-withstoragelocations)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
 * [`obj guest_os_features`](#obj-guest_os_features)
@@ -108,6 +109,9 @@ In order to create an image, you must provide the full or partial URL of one of
 * The sourceImage URL
 * The rawDisk.source URL
 * The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.
+  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image
+(regional or multi-regional).
+Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.
   - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
 Applicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.
@@ -177,6 +181,9 @@ In order to create an image, you must provide the full or partial URL of one of
 * The sourceImage URL
 * The rawDisk.source URL
 * The sourceDisk URL When `null`, the `source_snapshot` field will be omitted from the resulting object.
+  - `storage_locations` (`list`): Cloud Storage bucket storage location of the image
+(regional or multi-regional).
+Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images When `null`, the `storage_locations` field will be omitted from the resulting object.
   - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
 Applicable only for bootable images. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_image.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `image_encryption_key` (`list[obj]`): Encrypts the image using a customer-supplied encryption key.
@@ -462,6 +469,22 @@ Terraform resource block to set or update the source_snapshot field.
   - `value` (`string`): The value to set for the `source_snapshot` field.
 
 
+### fn withStorageLocations
+
+```ts
+withStorageLocations()
+```
+
+`google.list.withStorageLocations` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the storage_locations field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `storage_locations` field.
+
+
 ### fn withTimeouts
 
 ```ts
diff --git a/docs/4.x/compute_instance.md b/docs/4.x/compute_instance.md
index cef92c2..a303ff4 100644
--- a/docs/4.x/compute_instance.md
+++ b/docs/4.x/compute_instance.md
@@ -39,6 +39,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withName()`](#fn-withname)
 * [`fn withNetworkInterface()`](#fn-withnetworkinterface)
 * [`fn withNetworkInterfaceMixin()`](#fn-withnetworkinterfacemixin)
+* [`fn withNetworkPerformanceConfig()`](#fn-withnetworkperformanceconfig)
+* [`fn withNetworkPerformanceConfigMixin()`](#fn-withnetworkperformanceconfigmixin)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withReservationAffinity()`](#fn-withreservationaffinity)
 * [`fn withReservationAffinityMixin()`](#fn-withreservationaffinitymixin)
@@ -73,6 +75,8 @@ This package contains functions and utilities for setting up the resource using
     * [`fn new()`](#fn-network_interfacealias_ip_rangenew)
   * [`obj network_interface.ipv6_access_config`](#obj-network_interfaceipv6_access_config)
     * [`fn new()`](#fn-network_interfaceipv6_access_confignew)
+* [`obj network_performance_config`](#obj-network_performance_config)
+  * [`fn new()`](#fn-network_performance_confignew)
 * [`obj reservation_affinity`](#obj-reservation_affinity)
   * [`fn new()`](#fn-reservation_affinitynew)
   * [`obj reservation_affinity.specific_reservation`](#obj-reservation_affinityspecific_reservation)
@@ -142,6 +146,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.boot_disk.new](#fn-boot_disknew) constructor.
   - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.
   - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_interface.new](#fn-network_interfacenew) constructor.
+  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_performance_config.new](#fn-network_performance_confignew) constructor.
   - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.reservation_affinity.new](#fn-reservation_affinitynew) constructor.
   - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scheduling.new](#fn-schedulingnew) constructor.
   - `scratch_disk` (`list[obj]`): The scratch disks attached to the instance. When `null`, the `scratch_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scratch_disk.new](#fn-scratch_disknew) constructor.
@@ -194,6 +199,7 @@ injecting into a complete block.
   - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.boot_disk.new](#fn-boot_disknew) constructor.
   - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.
   - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_interface.new](#fn-network_interfacenew) constructor.
+  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.network_performance_config.new](#fn-network_performance_confignew) constructor.
   - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.reservation_affinity.new](#fn-reservation_affinitynew) constructor.
   - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scheduling.new](#fn-schedulingnew) constructor.
   - `scratch_disk` (`list[obj]`): The scratch disks attached to the instance. When `null`, the `scratch_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance.scratch_disk.new](#fn-scratch_disknew) constructor.
@@ -614,6 +620,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `network_interface` field.
 
 
+### fn withNetworkPerformanceConfig
+
+```ts
+withNetworkPerformanceConfig()
+```
+
+`google.list[obj].withNetworkPerformanceConfig` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_performance_config field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withNetworkPerformanceConfigMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.
+
+
+### fn withNetworkPerformanceConfigMixin
+
+```ts
+withNetworkPerformanceConfigMixin()
+```
+
+`google.list[obj].withNetworkPerformanceConfigMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_performance_config field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withNetworkPerformanceConfig](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.
+
+
 ### fn withProject
 
 ```ts
@@ -1134,6 +1177,29 @@ Terraform sub block.
   - An attribute object that represents the `ipv6_access_config` sub block.
 
 
+## obj network_performance_config
+
+
+
+### fn network_performance_config.new
+
+```ts
+new()
+```
+
+
+`google.compute_instance.network_performance_config.new` constructs a new object with attributes and blocks configured for the `network_performance_config`
+Terraform sub block.
+
+
+
+**Args**:
+  - `total_egress_bandwidth_tier` (`string`): The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT
+
+**Returns**:
+  - An attribute object that represents the `network_performance_config` sub block.
+
+
 ## obj reservation_affinity
 
 
diff --git a/docs/4.x/compute_instance_from_template.md b/docs/4.x/compute_instance_from_template.md
index e3eabc0..4c15cd8 100644
--- a/docs/4.x/compute_instance_from_template.md
+++ b/docs/4.x/compute_instance_from_template.md
@@ -38,6 +38,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withName()`](#fn-withname)
 * [`fn withNetworkInterface()`](#fn-withnetworkinterface)
 * [`fn withNetworkInterfaceMixin()`](#fn-withnetworkinterfacemixin)
+* [`fn withNetworkPerformanceConfig()`](#fn-withnetworkperformanceconfig)
+* [`fn withNetworkPerformanceConfigMixin()`](#fn-withnetworkperformanceconfigmixin)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withReservationAffinity()`](#fn-withreservationaffinity)
 * [`fn withReservationAffinityMixin()`](#fn-withreservationaffinitymixin)
@@ -65,6 +67,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-network_interfacenew)
   * [`obj network_interface.ipv6_access_config`](#obj-network_interfaceipv6_access_config)
     * [`fn new()`](#fn-network_interfaceipv6_access_confignew)
+* [`obj network_performance_config`](#obj-network_performance_config)
+  * [`fn new()`](#fn-network_performance_confignew)
 * [`obj reservation_affinity`](#obj-reservation_affinity)
   * [`fn new()`](#fn-reservation_affinitynew)
   * [`obj reservation_affinity.specific_reservation`](#obj-reservation_affinityspecific_reservation)
@@ -133,6 +137,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.boot_disk.new](#fn-boot_disknew) constructor.
   - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.
   - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_interface.new](#fn-network_interfacenew) constructor.
+  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_performance_config.new](#fn-network_performance_confignew) constructor.
   - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.
   - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.scheduling.new](#fn-schedulingnew) constructor.
   - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.
@@ -186,6 +191,7 @@ injecting into a complete block.
   - `boot_disk` (`list[obj]`): The boot disk for the instance. When `null`, the `boot_disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.boot_disk.new](#fn-boot_disknew) constructor.
   - `confidential_instance_config` (`list[obj]`): The Confidential VM config being used by the instance.  on_host_maintenance has to be set to TERMINATE or this will fail to create. When `null`, the `confidential_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.confidential_instance_config.new](#fn-confidential_instance_confignew) constructor.
   - `network_interface` (`list[obj]`): The networks attached to the instance. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_interface.new](#fn-network_interfacenew) constructor.
+  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.network_performance_config.new](#fn-network_performance_confignew) constructor.
   - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.
   - `scheduling` (`list[obj]`): The scheduling strategy being used by the instance. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.scheduling.new](#fn-schedulingnew) constructor.
   - `shielded_instance_config` (`list[obj]`): The shielded vm config being used by the instance. When `null`, the `shielded_instance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_from_template.shielded_instance_config.new](#fn-shielded_instance_confignew) constructor.
@@ -583,6 +589,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `network_interface` field.
 
 
+### fn withNetworkPerformanceConfig
+
+```ts
+withNetworkPerformanceConfig()
+```
+
+`google.list[obj].withNetworkPerformanceConfig` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_performance_config field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withNetworkPerformanceConfigMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.
+
+
+### fn withNetworkPerformanceConfigMixin
+
+```ts
+withNetworkPerformanceConfigMixin()
+```
+
+`google.list[obj].withNetworkPerformanceConfigMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_performance_config field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withNetworkPerformanceConfig](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.
+
+
 ### fn withProject
 
 ```ts
@@ -1001,6 +1044,29 @@ Terraform sub block.
   - An attribute object that represents the `ipv6_access_config` sub block.
 
 
+## obj network_performance_config
+
+
+
+### fn network_performance_config.new
+
+```ts
+new()
+```
+
+
+`google.compute_instance_from_template.network_performance_config.new` constructs a new object with attributes and blocks configured for the `network_performance_config`
+Terraform sub block.
+
+
+
+**Args**:
+  - `total_egress_bandwidth_tier` (`string`): The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT
+
+**Returns**:
+  - An attribute object that represents the `network_performance_config` sub block.
+
+
 ## obj reservation_affinity
 
 
diff --git a/docs/4.x/compute_instance_template.md b/docs/4.x/compute_instance_template.md
index b67ddf3..cd8f9f7 100644
--- a/docs/4.x/compute_instance_template.md
+++ b/docs/4.x/compute_instance_template.md
@@ -35,6 +35,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withNamePrefix()`](#fn-withnameprefix)
 * [`fn withNetworkInterface()`](#fn-withnetworkinterface)
 * [`fn withNetworkInterfaceMixin()`](#fn-withnetworkinterfacemixin)
+* [`fn withNetworkPerformanceConfig()`](#fn-withnetworkperformanceconfig)
+* [`fn withNetworkPerformanceConfigMixin()`](#fn-withnetworkperformanceconfigmixin)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withRegion()`](#fn-withregion)
 * [`fn withReservationAffinity()`](#fn-withreservationaffinity)
@@ -71,6 +73,8 @@ This package contains functions and utilities for setting up the resource using
     * [`fn new()`](#fn-network_interfacealias_ip_rangenew)
   * [`obj network_interface.ipv6_access_config`](#obj-network_interfaceipv6_access_config)
     * [`fn new()`](#fn-network_interfaceipv6_access_confignew)
+* [`obj network_performance_config`](#obj-network_performance_config)
+  * [`fn new()`](#fn-network_performance_confignew)
 * [`obj reservation_affinity`](#obj-reservation_affinity)
   * [`fn new()`](#fn-reservation_affinitynew)
   * [`obj reservation_affinity.specific_reservation`](#obj-reservation_affinityspecific_reservation)
@@ -134,6 +138,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `disk` (`list[obj]`): Disks to attach to instances created from this template. This can be specified multiple times for multiple disks. When `null`, the `disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.disk.new](#fn-disknew) constructor.
   - `guest_accelerator` (`list[obj]`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.guest_accelerator.new](#fn-guest_acceleratornew) constructor.
   - `network_interface` (`list[obj]`): Networks to attach to instances created from this template. This can be specified multiple times for multiple networks. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_interface.new](#fn-network_interfacenew) constructor.
+  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_performance_config.new](#fn-network_performance_confignew) constructor.
   - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.
   - `scheduling` (`list[obj]`): The scheduling strategy to use. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.scheduling.new](#fn-schedulingnew) constructor.
   - `service_account` (`list[obj]`): Service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.service_account.new](#fn-service_accountnew) constructor.
@@ -181,6 +186,7 @@ injecting into a complete block.
   - `disk` (`list[obj]`): Disks to attach to instances created from this template. This can be specified multiple times for multiple disks. When `null`, the `disk` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.disk.new](#fn-disknew) constructor.
   - `guest_accelerator` (`list[obj]`): List of the type and count of accelerator cards attached to the instance. When `null`, the `guest_accelerator` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.guest_accelerator.new](#fn-guest_acceleratornew) constructor.
   - `network_interface` (`list[obj]`): Networks to attach to instances created from this template. This can be specified multiple times for multiple networks. When `null`, the `network_interface` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_interface.new](#fn-network_interfacenew) constructor.
+  - `network_performance_config` (`list[obj]`): Configures network performance settings for the instance. If not specified, the instance will be created with its default network performance configuration. When `null`, the `network_performance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.network_performance_config.new](#fn-network_performance_confignew) constructor.
   - `reservation_affinity` (`list[obj]`): Specifies the reservations that this instance can consume from. When `null`, the `reservation_affinity` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.reservation_affinity.new](#fn-reservation_affinitynew) constructor.
   - `scheduling` (`list[obj]`): The scheduling strategy to use. When `null`, the `scheduling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.scheduling.new](#fn-schedulingnew) constructor.
   - `service_account` (`list[obj]`): Service account to attach to the instance. When `null`, the `service_account` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_instance_template.service_account.new](#fn-service_accountnew) constructor.
@@ -536,6 +542,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `network_interface` field.
 
 
+### fn withNetworkPerformanceConfig
+
+```ts
+withNetworkPerformanceConfig()
+```
+
+`google.list[obj].withNetworkPerformanceConfig` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_performance_config field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withNetworkPerformanceConfigMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.
+
+
+### fn withNetworkPerformanceConfigMixin
+
+```ts
+withNetworkPerformanceConfigMixin()
+```
+
+`google.list[obj].withNetworkPerformanceConfigMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the network_performance_config field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withNetworkPerformanceConfig](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `network_performance_config` field.
+
+
 ### fn withProject
 
 ```ts
@@ -1085,6 +1128,29 @@ Terraform sub block.
   - An attribute object that represents the `ipv6_access_config` sub block.
 
 
+## obj network_performance_config
+
+
+
+### fn network_performance_config.new
+
+```ts
+new()
+```
+
+
+`google.compute_instance_template.network_performance_config.new` constructs a new object with attributes and blocks configured for the `network_performance_config`
+Terraform sub block.
+
+
+
+**Args**:
+  - `total_egress_bandwidth_tier` (`string`): The egress bandwidth tier to enable. Possible values:TIER_1, DEFAULT
+
+**Returns**:
+  - An attribute object that represents the `network_performance_config` sub block.
+
+
 ## obj reservation_affinity
 
 
diff --git a/docs/4.x/compute_region_commitment.md b/docs/4.x/compute_region_commitment.md
index 6245cb4..6ea062c 100644
--- a/docs/4.x/compute_region_commitment.md
+++ b/docs/4.x/compute_region_commitment.md
@@ -84,9 +84,10 @@ The currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.
   - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.
-Type MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized
-machines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to
-accelerator optimized machines. Possible values: ["MEMORY_OPTIMIZED", "ACCELERATOR_OPTIMIZED"] When `null`, the `type` field will be omitted from the resulting object.
+The type could be one of the following value: 'MEMORY_OPTIMIZED', 'ACCELERATOR_OPTIMIZED',
+'GENERAL_PURPOSE_N1', 'GENERAL_PURPOSE_N2', 'GENERAL_PURPOSE_N2D', 'GENERAL_PURPOSE_E2',
+'GENERAL_PURPOSE_T2D', 'GENERAL_PURPOSE_C3', 'COMPUTE_OPTIMIZED_C2', 'COMPUTE_OPTIMIZED_C2D' and
+'GRAPHICS_OPTIMIZED_G2' When `null`, the `type` field will be omitted from the resulting object.
   - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.
   - `resources` (`list[obj]`): A list of commitment amounts for particular resources.
 Note that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.resources.new](#fn-resourcesnew) constructor.
@@ -133,9 +134,10 @@ The currently supported plans are TWELVE_MONTH (1 year), and THIRTY_SIX_MONTH (3
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `region` (`string`): URL of the region where this commitment may be used. When `null`, the `region` field will be omitted from the resulting object.
   - `type` (`string`): The type of commitment, which affects the discount rate and the eligible resources.
-Type MEMORY_OPTIMIZED specifies a commitment that will only apply to memory optimized
-machines. Type ACCELERATOR_OPTIMIZED specifies a commitment that will only apply to
-accelerator optimized machines. Possible values: ["MEMORY_OPTIMIZED", "ACCELERATOR_OPTIMIZED"] When `null`, the `type` field will be omitted from the resulting object.
+The type could be one of the following value: 'MEMORY_OPTIMIZED', 'ACCELERATOR_OPTIMIZED',
+'GENERAL_PURPOSE_N1', 'GENERAL_PURPOSE_N2', 'GENERAL_PURPOSE_N2D', 'GENERAL_PURPOSE_E2',
+'GENERAL_PURPOSE_T2D', 'GENERAL_PURPOSE_C3', 'COMPUTE_OPTIMIZED_C2', 'COMPUTE_OPTIMIZED_C2D' and
+'GRAPHICS_OPTIMIZED_G2' When `null`, the `type` field will be omitted from the resulting object.
   - `license_resource` (`list[obj]`): The license specification required as part of a license commitment. When `null`, the `license_resource` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.license_resource.new](#fn-license_resourcenew) constructor.
   - `resources` (`list[obj]`): A list of commitment amounts for particular resources.
 Note that VCPU and MEMORY resource commitments must occur together. When `null`, the `resources` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_commitment.resources.new](#fn-resourcesnew) constructor.
diff --git a/docs/4.x/compute_region_disk.md b/docs/4.x/compute_region_disk.md
index f299b45..948f36f 100644
--- a/docs/4.x/compute_region_disk.md
+++ b/docs/4.x/compute_region_disk.md
@@ -18,7 +18,10 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withDescription()`](#fn-withdescription)
 * [`fn withDiskEncryptionKey()`](#fn-withdiskencryptionkey)
 * [`fn withDiskEncryptionKeyMixin()`](#fn-withdiskencryptionkeymixin)
+* [`fn withGuestOsFeatures()`](#fn-withguestosfeatures)
+* [`fn withGuestOsFeaturesMixin()`](#fn-withguestosfeaturesmixin)
 * [`fn withLabels()`](#fn-withlabels)
+* [`fn withLicenses()`](#fn-withlicenses)
 * [`fn withName()`](#fn-withname)
 * [`fn withPhysicalBlockSizeBytes()`](#fn-withphysicalblocksizebytes)
 * [`fn withProject()`](#fn-withproject)
@@ -34,6 +37,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withType()`](#fn-withtype)
 * [`obj disk_encryption_key`](#obj-disk_encryption_key)
   * [`fn new()`](#fn-disk_encryption_keynew)
+* [`obj guest_os_features`](#obj-guest_os_features)
+  * [`fn new()`](#fn-guest_os_featuresnew)
 * [`obj source_snapshot_encryption_key`](#obj-source_snapshot_encryption_key)
   * [`fn new()`](#fn-source_snapshot_encryption_keynew)
 * [`obj timeouts`](#obj-timeouts)
@@ -71,6 +76,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `description` (`string`): An optional description of this resource. Provide this property when
 you create the resource. When `null`, the `description` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
 RFC1035. Specifically, the name must be 1-63 characters long and match
@@ -125,6 +131,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
 if the source snapshot is protected by a customer-supplied encryption
 key. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.
@@ -155,6 +163,7 @@ injecting into a complete block.
   - `description` (`string`): An optional description of this resource. Provide this property when
 you create the resource. When `null`, the `description` field will be omitted from the resulting object.
   - `labels` (`obj`): Labels to apply to this disk.  A list of key->value pairs. When `null`, the `labels` field will be omitted from the resulting object.
+  - `licenses` (`list`): Any applicable license URI. When `null`, the `licenses` field will be omitted from the resulting object.
   - `name` (`string`): Name of the resource. Provided by the client when the resource is
 created. The name must be 1-63 characters long, and comply with
 RFC1035. Specifically, the name must be 1-63 characters long and match
@@ -209,6 +218,8 @@ the disk.
 If you do not provide an encryption key when creating the disk, then
 the disk will be encrypted using an automatically generated key and
 you do not need to provide a key to use the disk later. When `null`, the `disk_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.disk_encryption_key.new](#fn-disk_encryption_keynew) constructor.
+  - `guest_os_features` (`list[obj]`): A list of features to enable on the guest operating system.
+Applicable only for bootable disks. When `null`, the `guest_os_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.guest_os_features.new](#fn-guest_os_featuresnew) constructor.
   - `source_snapshot_encryption_key` (`list[obj]`): The customer-supplied encryption key of the source snapshot. Required
 if the source snapshot is protected by a customer-supplied encryption
 key. When `null`, the `source_snapshot_encryption_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.compute_region_disk.source_snapshot_encryption_key.new](#fn-source_snapshot_encryption_keynew) constructor.
@@ -271,6 +282,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `disk_encryption_key` field.
 
 
+### fn withGuestOsFeatures
+
+```ts
+withGuestOsFeatures()
+```
+
+`google.list[obj].withGuestOsFeatures` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withGuestOsFeaturesMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
+### fn withGuestOsFeaturesMixin
+
+```ts
+withGuestOsFeaturesMixin()
+```
+
+`google.list[obj].withGuestOsFeaturesMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the guest_os_features field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withGuestOsFeatures](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `guest_os_features` field.
+
+
 ### fn withLabels
 
 ```ts
@@ -287,6 +335,22 @@ Terraform resource block to set or update the labels field.
   - `value` (`obj`): The value to set for the `labels` field.
 
 
+### fn withLicenses
+
+```ts
+withLicenses()
+```
+
+`google.list.withLicenses` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the licenses field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `licenses` field.
+
+
 ### fn withName
 
 ```ts
@@ -529,6 +593,29 @@ RFC 4648 base64 to either encrypt or decrypt this resource. When `null`, the `ra
   - An attribute object that represents the `disk_encryption_key` sub block.
 
 
+## obj guest_os_features
+
+
+
+### fn guest_os_features.new
+
+```ts
+new()
+```
+
+
+`google.compute_region_disk.guest_os_features.new` constructs a new object with attributes and blocks configured for the `guest_os_features`
+Terraform sub block.
+
+
+
+**Args**:
+  - `type` (`string`): The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options. Possible values: ["MULTI_IP_SUBNET", "SECURE_BOOT", "SEV_CAPABLE", "UEFI_COMPATIBLE", "VIRTIO_SCSI_MULTIQUEUE", "WINDOWS", "GVNIC", "SEV_LIVE_MIGRATABLE", "SEV_SNP_CAPABLE", "SUSPEND_RESUME_COMPATIBLE", "TDX_CAPABLE"]
+
+**Returns**:
+  - An attribute object that represents the `guest_os_features` sub block.
+
+
 ## obj source_snapshot_encryption_key
 
 
diff --git a/docs/4.x/container_analysis_note_iam_binding.md b/docs/4.x/container_analysis_note_iam_binding.md
new file mode 100644
index 0000000..cee3427
--- /dev/null
+++ b/docs/4.x/container_analysis_note_iam_binding.md
@@ -0,0 +1,217 @@
+---
+permalink: /container_analysis_note_iam_binding/
+---
+
+# container_analysis_note_iam_binding
+
+`container_analysis_note_iam_binding` represents the `google_container_analysis_note_iam_binding` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCondition()`](#fn-withcondition)
+* [`fn withConditionMixin()`](#fn-withconditionmixin)
+* [`fn withMembers()`](#fn-withmembers)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRole()`](#fn-withrole)
+* [`obj condition`](#obj-condition)
+  * [`fn new()`](#fn-conditionnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.container_analysis_note_iam_binding.new` injects a new `google_container_analysis_note_iam_binding` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.container_analysis_note_iam_binding.new('some_id')
+
+You can get the reference to the `id` field of the created `google.container_analysis_note_iam_binding` using the reference:
+
+    $._ref.google_container_analysis_note_iam_binding.some_id.get('id')
+
+This is the same as directly entering `"${ google_container_analysis_note_iam_binding.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `members` (`list`): Set the `members` field on the resulting resource block.
+  - `note` (`string`): Set the `note` field on the resulting resource block.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting resource block.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.container_analysis_note_iam_binding.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_binding`
+Terraform resource.
+
+Unlike [google.container_analysis_note_iam_binding.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `members` (`list`): Set the `members` field on the resulting object.
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting object.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_binding.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_analysis_note_iam_binding` resource into the root Terraform configuration.
+
+
+### fn withCondition
+
+```ts
+withCondition()
+```
+
+`google.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withConditionMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withConditionMixin
+
+```ts
+withConditionMixin()
+```
+
+`google.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withCondition](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withMembers
+
+```ts
+withMembers()
+```
+
+`google.list.withMembers` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the members field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `members` field.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the note field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRole
+
+```ts
+withRole()
+```
+
+`google.string.withRole` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the role field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `role` field.
+
+
+## obj condition
+
+
+
+### fn condition.new
+
+```ts
+new()
+```
+
+
+`google.container_analysis_note_iam_binding.condition.new` constructs a new object with attributes and blocks configured for the `condition`
+Terraform sub block.
+
+
+
+**Args**:
+  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.
+  - `expression` (`string`): Set the `expression` field on the resulting object.
+  - `title` (`string`): Set the `title` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `condition` sub block.
diff --git a/docs/4.x/container_analysis_note_iam_member.md b/docs/4.x/container_analysis_note_iam_member.md
new file mode 100644
index 0000000..9821ba5
--- /dev/null
+++ b/docs/4.x/container_analysis_note_iam_member.md
@@ -0,0 +1,217 @@
+---
+permalink: /container_analysis_note_iam_member/
+---
+
+# container_analysis_note_iam_member
+
+`container_analysis_note_iam_member` represents the `google_container_analysis_note_iam_member` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCondition()`](#fn-withcondition)
+* [`fn withConditionMixin()`](#fn-withconditionmixin)
+* [`fn withMember()`](#fn-withmember)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRole()`](#fn-withrole)
+* [`obj condition`](#obj-condition)
+  * [`fn new()`](#fn-conditionnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.container_analysis_note_iam_member.new` injects a new `google_container_analysis_note_iam_member` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.container_analysis_note_iam_member.new('some_id')
+
+You can get the reference to the `id` field of the created `google.container_analysis_note_iam_member` using the reference:
+
+    $._ref.google_container_analysis_note_iam_member.some_id.get('id')
+
+This is the same as directly entering `"${ google_container_analysis_note_iam_member.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `member` (`string`): Set the `member` field on the resulting resource block.
+  - `note` (`string`): Set the `note` field on the resulting resource block.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting resource block.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting resource block. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.container_analysis_note_iam_member.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_member`
+Terraform resource.
+
+Unlike [google.container_analysis_note_iam_member.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `member` (`string`): Set the `member` field on the resulting object.
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `role` (`string`): Set the `role` field on the resulting object.
+  - `condition` (`list[obj]`): Set the `condition` field on the resulting object. When `null`, the `condition` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.container_analysis_note_iam_member.condition.new](#fn-conditionnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_analysis_note_iam_member` resource into the root Terraform configuration.
+
+
+### fn withCondition
+
+```ts
+withCondition()
+```
+
+`google.list[obj].withCondition` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google.list[obj].withConditionMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withConditionMixin
+
+```ts
+withConditionMixin()
+```
+
+`google.list[obj].withConditionMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the condition field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google.list[obj].withCondition](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `condition` field.
+
+
+### fn withMember
+
+```ts
+withMember()
+```
+
+`google.string.withMember` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the member field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `member` field.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the note field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRole
+
+```ts
+withRole()
+```
+
+`google.string.withRole` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the role field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `role` field.
+
+
+## obj condition
+
+
+
+### fn condition.new
+
+```ts
+new()
+```
+
+
+`google.container_analysis_note_iam_member.condition.new` constructs a new object with attributes and blocks configured for the `condition`
+Terraform sub block.
+
+
+
+**Args**:
+  - `description` (`string`): Set the `description` field on the resulting object. When `null`, the `description` field will be omitted from the resulting object.
+  - `expression` (`string`): Set the `expression` field on the resulting object.
+  - `title` (`string`): Set the `title` field on the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `condition` sub block.
diff --git a/docs/4.x/container_analysis_note_iam_policy.md b/docs/4.x/container_analysis_note_iam_policy.md
new file mode 100644
index 0000000..443ff83
--- /dev/null
+++ b/docs/4.x/container_analysis_note_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /container_analysis_note_iam_policy/
+---
+
+# container_analysis_note_iam_policy
+
+`container_analysis_note_iam_policy` represents the `google_container_analysis_note_iam_policy` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withPolicyData()`](#fn-withpolicydata)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.container_analysis_note_iam_policy.new` injects a new `google_container_analysis_note_iam_policy` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.container_analysis_note_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.container_analysis_note_iam_policy` using the reference:
+
+    $._ref.google_container_analysis_note_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ google_container_analysis_note_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `note` (`string`): Set the `note` field on the resulting resource block.
+  - `policy_data` (`string`): Set the `policy_data` field on the resulting resource block.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_policy`
+Terraform resource.
+
+Unlike [google.container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `policy_data` (`string`): Set the `policy_data` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `container_analysis_note_iam_policy` resource into the root Terraform configuration.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the note field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withPolicyData
+
+```ts
+withPolicyData()
+```
+
+`google.string.withPolicyData` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the policy_data field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `policy_data` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/access_context_manager_access_policy_iam_policy.md b/docs/4.x/data/access_context_manager_access_policy_iam_policy.md
new file mode 100644
index 0000000..b7f8c84
--- /dev/null
+++ b/docs/4.x/data/access_context_manager_access_policy_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/access_context_manager_access_policy_iam_policy/
+---
+
+# data.access_context_manager_access_policy_iam_policy
+
+`access_context_manager_access_policy_iam_policy` represents the `google_access_context_manager_access_policy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.access_context_manager_access_policy_iam_policy.new` injects a new `data_google_access_context_manager_access_policy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.access_context_manager_access_policy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.access_context_manager_access_policy_iam_policy` using the reference:
+
+    $._ref.data_google_access_context_manager_access_policy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_access_context_manager_access_policy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.access_context_manager_access_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `access_context_manager_access_policy_iam_policy`
+Terraform data source.
+
+Unlike [google.data.access_context_manager_access_policy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `access_context_manager_access_policy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
diff --git a/docs/4.x/data/apigee_environment_iam_policy.md b/docs/4.x/data/apigee_environment_iam_policy.md
new file mode 100644
index 0000000..7e0eb07
--- /dev/null
+++ b/docs/4.x/data/apigee_environment_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/apigee_environment_iam_policy/
+---
+
+# data.apigee_environment_iam_policy
+
+`apigee_environment_iam_policy` represents the `google_apigee_environment_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withEnvId()`](#fn-withenvid)
+* [`fn withOrgId()`](#fn-withorgid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.apigee_environment_iam_policy.new` injects a new `data_google_apigee_environment_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.apigee_environment_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.apigee_environment_iam_policy` using the reference:
+
+    $._ref.data_google_apigee_environment_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_apigee_environment_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `env_id` (`string`): Set the `env_id` field on the resulting data source block.
+  - `org_id` (`string`): Set the `org_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.apigee_environment_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `apigee_environment_iam_policy`
+Terraform data source.
+
+Unlike [google.data.apigee_environment_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `env_id` (`string`): Set the `env_id` field on the resulting object.
+  - `org_id` (`string`): Set the `org_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `apigee_environment_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withEnvId
+
+```ts
+withEnvId()
+```
+
+`google.string.withEnvId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the env_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `env_id` field.
+
+
+### fn withOrgId
+
+```ts
+withOrgId()
+```
+
+`google.string.withOrgId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the org_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `org_id` field.
diff --git a/docs/4.x/data/artifact_registry_repository_iam_policy.md b/docs/4.x/data/artifact_registry_repository_iam_policy.md
new file mode 100644
index 0000000..239b8a7
--- /dev/null
+++ b/docs/4.x/data/artifact_registry_repository_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/artifact_registry_repository_iam_policy/
+---
+
+# data.artifact_registry_repository_iam_policy
+
+`artifact_registry_repository_iam_policy` represents the `google_artifact_registry_repository_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRepository()`](#fn-withrepository)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.artifact_registry_repository_iam_policy.new` injects a new `data_google_artifact_registry_repository_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.artifact_registry_repository_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.artifact_registry_repository_iam_policy` using the reference:
+
+    $._ref.data_google_artifact_registry_repository_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_artifact_registry_repository_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.artifact_registry_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `artifact_registry_repository_iam_policy`
+Terraform data source.
+
+Unlike [google.data.artifact_registry_repository_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `artifact_registry_repository_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRepository
+
+```ts
+withRepository()
+```
+
+`google.string.withRepository` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the repository field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `repository` field.
diff --git a/docs/4.x/data/bigquery_analytics_hub_data_exchange_iam_policy.md b/docs/4.x/data/bigquery_analytics_hub_data_exchange_iam_policy.md
new file mode 100644
index 0000000..28cbc8a
--- /dev/null
+++ b/docs/4.x/data/bigquery_analytics_hub_data_exchange_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/bigquery_analytics_hub_data_exchange_iam_policy/
+---
+
+# data.bigquery_analytics_hub_data_exchange_iam_policy
+
+`bigquery_analytics_hub_data_exchange_iam_policy` represents the `google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataExchangeId()`](#fn-withdataexchangeid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigquery_analytics_hub_data_exchange_iam_policy.new` injects a new `data_google_bigquery_analytics_hub_data_exchange_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigquery_analytics_hub_data_exchange_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigquery_analytics_hub_data_exchange_iam_policy` using the reference:
+
+    $._ref.data_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigquery_analytics_hub_data_exchange_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigquery_analytics_hub_data_exchange_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_analytics_hub_data_exchange_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigquery_analytics_hub_data_exchange_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_analytics_hub_data_exchange_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataExchangeId
+
+```ts
+withDataExchangeId()
+```
+
+`google.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the data_exchange_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `data_exchange_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/bigquery_analytics_hub_listing_iam_policy.md b/docs/4.x/data/bigquery_analytics_hub_listing_iam_policy.md
new file mode 100644
index 0000000..1941df8
--- /dev/null
+++ b/docs/4.x/data/bigquery_analytics_hub_listing_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/bigquery_analytics_hub_listing_iam_policy/
+---
+
+# data.bigquery_analytics_hub_listing_iam_policy
+
+`bigquery_analytics_hub_listing_iam_policy` represents the `google_bigquery_analytics_hub_listing_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataExchangeId()`](#fn-withdataexchangeid)
+* [`fn withListingId()`](#fn-withlistingid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigquery_analytics_hub_listing_iam_policy.new` injects a new `data_google_bigquery_analytics_hub_listing_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigquery_analytics_hub_listing_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigquery_analytics_hub_listing_iam_policy` using the reference:
+
+    $._ref.data_google_bigquery_analytics_hub_listing_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigquery_analytics_hub_listing_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting data source block.
+  - `listing_id` (`string`): Set the `listing_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigquery_analytics_hub_listing_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_analytics_hub_listing_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigquery_analytics_hub_listing_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `data_exchange_id` (`string`): Set the `data_exchange_id` field on the resulting object.
+  - `listing_id` (`string`): Set the `listing_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_analytics_hub_listing_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataExchangeId
+
+```ts
+withDataExchangeId()
+```
+
+`google.string.withDataExchangeId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the data_exchange_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `data_exchange_id` field.
+
+
+### fn withListingId
+
+```ts
+withListingId()
+```
+
+`google.string.withListingId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the listing_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `listing_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/bigquery_connection_iam_policy.md b/docs/4.x/data/bigquery_connection_iam_policy.md
new file mode 100644
index 0000000..4674141
--- /dev/null
+++ b/docs/4.x/data/bigquery_connection_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/bigquery_connection_iam_policy/
+---
+
+# data.bigquery_connection_iam_policy
+
+`bigquery_connection_iam_policy` represents the `google_bigquery_connection_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConnectionId()`](#fn-withconnectionid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigquery_connection_iam_policy.new` injects a new `data_google_bigquery_connection_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigquery_connection_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigquery_connection_iam_policy` using the reference:
+
+    $._ref.data_google_bigquery_connection_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigquery_connection_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `connection_id` (`string`): Set the `connection_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigquery_connection_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_connection_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigquery_connection_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `connection_id` (`string`): Set the `connection_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_connection_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConnectionId
+
+```ts
+withConnectionId()
+```
+
+`google.string.withConnectionId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the connection_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `connection_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/bigquery_datapolicy_data_policy_iam_policy.md b/docs/4.x/data/bigquery_datapolicy_data_policy_iam_policy.md
new file mode 100644
index 0000000..cdc0704
--- /dev/null
+++ b/docs/4.x/data/bigquery_datapolicy_data_policy_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/bigquery_datapolicy_data_policy_iam_policy/
+---
+
+# data.bigquery_datapolicy_data_policy_iam_policy
+
+`bigquery_datapolicy_data_policy_iam_policy` represents the `google_bigquery_datapolicy_data_policy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataPolicyId()`](#fn-withdatapolicyid)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigquery_datapolicy_data_policy_iam_policy.new` injects a new `data_google_bigquery_datapolicy_data_policy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigquery_datapolicy_data_policy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigquery_datapolicy_data_policy_iam_policy` using the reference:
+
+    $._ref.data_google_bigquery_datapolicy_data_policy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigquery_datapolicy_data_policy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigquery_datapolicy_data_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_datapolicy_data_policy_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigquery_datapolicy_data_policy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `data_policy_id` (`string`): Set the `data_policy_id` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_datapolicy_data_policy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataPolicyId
+
+```ts
+withDataPolicyId()
+```
+
+`google.string.withDataPolicyId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the data_policy_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `data_policy_id` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/bigquery_dataset_iam_policy.md b/docs/4.x/data/bigquery_dataset_iam_policy.md
new file mode 100644
index 0000000..22aea0d
--- /dev/null
+++ b/docs/4.x/data/bigquery_dataset_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/bigquery_dataset_iam_policy/
+---
+
+# data.bigquery_dataset_iam_policy
+
+`bigquery_dataset_iam_policy` represents the `google_bigquery_dataset_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatasetId()`](#fn-withdatasetid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigquery_dataset_iam_policy.new` injects a new `data_google_bigquery_dataset_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigquery_dataset_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigquery_dataset_iam_policy` using the reference:
+
+    $._ref.data_google_bigquery_dataset_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigquery_dataset_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigquery_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_dataset_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigquery_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_dataset_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatasetId
+
+```ts
+withDatasetId()
+```
+
+`google.string.withDatasetId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/bigquery_table_iam_policy.md b/docs/4.x/data/bigquery_table_iam_policy.md
new file mode 100644
index 0000000..b395174
--- /dev/null
+++ b/docs/4.x/data/bigquery_table_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/bigquery_table_iam_policy/
+---
+
+# data.bigquery_table_iam_policy
+
+`bigquery_table_iam_policy` represents the `google_bigquery_table_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatasetId()`](#fn-withdatasetid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTableId()`](#fn-withtableid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigquery_table_iam_policy.new` injects a new `data_google_bigquery_table_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigquery_table_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigquery_table_iam_policy` using the reference:
+
+    $._ref.data_google_bigquery_table_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigquery_table_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `table_id` (`string`): Set the `table_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigquery_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigquery_table_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigquery_table_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `table_id` (`string`): Set the `table_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigquery_table_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatasetId
+
+```ts
+withDatasetId()
+```
+
+`google.string.withDatasetId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTableId
+
+```ts
+withTableId()
+```
+
+`google.string.withTableId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the table_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `table_id` field.
diff --git a/docs/4.x/data/bigtable_instance_iam_policy.md b/docs/4.x/data/bigtable_instance_iam_policy.md
new file mode 100644
index 0000000..f538c2d
--- /dev/null
+++ b/docs/4.x/data/bigtable_instance_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/bigtable_instance_iam_policy/
+---
+
+# data.bigtable_instance_iam_policy
+
+`bigtable_instance_iam_policy` represents the `google_bigtable_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigtable_instance_iam_policy.new` injects a new `data_google_bigtable_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigtable_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigtable_instance_iam_policy` using the reference:
+
+    $._ref.data_google_bigtable_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigtable_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigtable_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigtable_instance_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigtable_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigtable_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/bigtable_table_iam_policy.md b/docs/4.x/data/bigtable_table_iam_policy.md
new file mode 100644
index 0000000..e55c854
--- /dev/null
+++ b/docs/4.x/data/bigtable_table_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/bigtable_table_iam_policy/
+---
+
+# data.bigtable_table_iam_policy
+
+`bigtable_table_iam_policy` represents the `google_bigtable_table_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTable()`](#fn-withtable)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.bigtable_table_iam_policy.new` injects a new `data_google_bigtable_table_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.bigtable_table_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.bigtable_table_iam_policy` using the reference:
+
+    $._ref.data_google_bigtable_table_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_bigtable_table_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `table` (`string`): Set the `table` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.bigtable_table_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `bigtable_table_iam_policy`
+Terraform data source.
+
+Unlike [google.data.bigtable_table_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `table` (`string`): Set the `table` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `bigtable_table_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTable
+
+```ts
+withTable()
+```
+
+`google.string.withTable` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the table field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `table` field.
diff --git a/docs/4.x/data/billing_account_iam_policy.md b/docs/4.x/data/billing_account_iam_policy.md
new file mode 100644
index 0000000..55cc4c7
--- /dev/null
+++ b/docs/4.x/data/billing_account_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/billing_account_iam_policy/
+---
+
+# data.billing_account_iam_policy
+
+`billing_account_iam_policy` represents the `google_billing_account_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withBillingAccountId()`](#fn-withbillingaccountid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.billing_account_iam_policy.new` injects a new `data_google_billing_account_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.billing_account_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.billing_account_iam_policy` using the reference:
+
+    $._ref.data_google_billing_account_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_billing_account_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.billing_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `billing_account_iam_policy`
+Terraform data source.
+
+Unlike [google.data.billing_account_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `billing_account_id` (`string`): Set the `billing_account_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `billing_account_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withBillingAccountId
+
+```ts
+withBillingAccountId()
+```
+
+`google.string.withBillingAccountId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the billing_account_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `billing_account_id` field.
diff --git a/docs/4.x/data/binary_authorization_attestor_iam_policy.md b/docs/4.x/data/binary_authorization_attestor_iam_policy.md
new file mode 100644
index 0000000..1abd638
--- /dev/null
+++ b/docs/4.x/data/binary_authorization_attestor_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/binary_authorization_attestor_iam_policy/
+---
+
+# data.binary_authorization_attestor_iam_policy
+
+`binary_authorization_attestor_iam_policy` represents the `google_binary_authorization_attestor_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAttestor()`](#fn-withattestor)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.binary_authorization_attestor_iam_policy.new` injects a new `data_google_binary_authorization_attestor_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.binary_authorization_attestor_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.binary_authorization_attestor_iam_policy` using the reference:
+
+    $._ref.data_google_binary_authorization_attestor_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_binary_authorization_attestor_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `attestor` (`string`): Set the `attestor` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.binary_authorization_attestor_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `binary_authorization_attestor_iam_policy`
+Terraform data source.
+
+Unlike [google.data.binary_authorization_attestor_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `attestor` (`string`): Set the `attestor` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `binary_authorization_attestor_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAttestor
+
+```ts
+withAttestor()
+```
+
+`google.string.withAttestor` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the attestor field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `attestor` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/cloud_run_service_iam_policy.md b/docs/4.x/data/cloud_run_service_iam_policy.md
new file mode 100644
index 0000000..8d1e6cf
--- /dev/null
+++ b/docs/4.x/data/cloud_run_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloud_run_service_iam_policy/
+---
+
+# data.cloud_run_service_iam_policy
+
+`cloud_run_service_iam_policy` represents the `google_cloud_run_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withService()`](#fn-withservice)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloud_run_service_iam_policy.new` injects a new `data_google_cloud_run_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloud_run_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloud_run_service_iam_policy` using the reference:
+
+    $._ref.data_google_cloud_run_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloud_run_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloud_run_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_run_service_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloud_run_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_run_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withService
+
+```ts
+withService()
+```
+
+`google.string.withService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service` field.
diff --git a/docs/4.x/data/cloud_run_v2_job_iam_policy.md b/docs/4.x/data/cloud_run_v2_job_iam_policy.md
new file mode 100644
index 0000000..998a856
--- /dev/null
+++ b/docs/4.x/data/cloud_run_v2_job_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloud_run_v2_job_iam_policy/
+---
+
+# data.cloud_run_v2_job_iam_policy
+
+`cloud_run_v2_job_iam_policy` represents the `google_cloud_run_v2_job_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloud_run_v2_job_iam_policy.new` injects a new `data_google_cloud_run_v2_job_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloud_run_v2_job_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloud_run_v2_job_iam_policy` using the reference:
+
+    $._ref.data_google_cloud_run_v2_job_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloud_run_v2_job_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloud_run_v2_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_run_v2_job_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloud_run_v2_job_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_run_v2_job_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/cloud_run_v2_service_iam_policy.md b/docs/4.x/data/cloud_run_v2_service_iam_policy.md
new file mode 100644
index 0000000..2d1516d
--- /dev/null
+++ b/docs/4.x/data/cloud_run_v2_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloud_run_v2_service_iam_policy/
+---
+
+# data.cloud_run_v2_service_iam_policy
+
+`cloud_run_v2_service_iam_policy` represents the `google_cloud_run_v2_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloud_run_v2_service_iam_policy.new` injects a new `data_google_cloud_run_v2_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloud_run_v2_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloud_run_v2_service_iam_policy` using the reference:
+
+    $._ref.data_google_cloud_run_v2_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloud_run_v2_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloud_run_v2_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_run_v2_service_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloud_run_v2_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_run_v2_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/cloud_tasks_queue_iam_policy.md b/docs/4.x/data/cloud_tasks_queue_iam_policy.md
new file mode 100644
index 0000000..4a1cdbb
--- /dev/null
+++ b/docs/4.x/data/cloud_tasks_queue_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloud_tasks_queue_iam_policy/
+---
+
+# data.cloud_tasks_queue_iam_policy
+
+`cloud_tasks_queue_iam_policy` represents the `google_cloud_tasks_queue_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloud_tasks_queue_iam_policy.new` injects a new `data_google_cloud_tasks_queue_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloud_tasks_queue_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloud_tasks_queue_iam_policy` using the reference:
+
+    $._ref.data_google_cloud_tasks_queue_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloud_tasks_queue_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloud_tasks_queue_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloud_tasks_queue_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloud_tasks_queue_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloud_tasks_queue_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/cloudfunctions2_function_iam_policy.md b/docs/4.x/data/cloudfunctions2_function_iam_policy.md
new file mode 100644
index 0000000..db3e13a
--- /dev/null
+++ b/docs/4.x/data/cloudfunctions2_function_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloudfunctions2_function_iam_policy/
+---
+
+# data.cloudfunctions2_function_iam_policy
+
+`cloudfunctions2_function_iam_policy` represents the `google_cloudfunctions2_function_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCloudFunction()`](#fn-withcloudfunction)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloudfunctions2_function_iam_policy.new` injects a new `data_google_cloudfunctions2_function_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloudfunctions2_function_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloudfunctions2_function_iam_policy` using the reference:
+
+    $._ref.data_google_cloudfunctions2_function_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloudfunctions2_function_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloudfunctions2_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloudfunctions2_function_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloudfunctions2_function_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloudfunctions2_function_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCloudFunction
+
+```ts
+withCloudFunction()
+```
+
+`google.string.withCloudFunction` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the cloud_function field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `cloud_function` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/cloudfunctions_function_iam_policy.md b/docs/4.x/data/cloudfunctions_function_iam_policy.md
new file mode 100644
index 0000000..6cbe4e0
--- /dev/null
+++ b/docs/4.x/data/cloudfunctions_function_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloudfunctions_function_iam_policy/
+---
+
+# data.cloudfunctions_function_iam_policy
+
+`cloudfunctions_function_iam_policy` represents the `google_cloudfunctions_function_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCloudFunction()`](#fn-withcloudfunction)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloudfunctions_function_iam_policy.new` injects a new `data_google_cloudfunctions_function_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloudfunctions_function_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloudfunctions_function_iam_policy` using the reference:
+
+    $._ref.data_google_cloudfunctions_function_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloudfunctions_function_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloudfunctions_function_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloudfunctions_function_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloudfunctions_function_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `cloud_function` (`string`): Set the `cloud_function` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloudfunctions_function_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCloudFunction
+
+```ts
+withCloudFunction()
+```
+
+`google.string.withCloudFunction` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the cloud_function field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `cloud_function` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/cloudiot_registry_iam_policy.md b/docs/4.x/data/cloudiot_registry_iam_policy.md
new file mode 100644
index 0000000..0968c51
--- /dev/null
+++ b/docs/4.x/data/cloudiot_registry_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/cloudiot_registry_iam_policy/
+---
+
+# data.cloudiot_registry_iam_policy
+
+`cloudiot_registry_iam_policy` represents the `google_cloudiot_registry_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.cloudiot_registry_iam_policy.new` injects a new `data_google_cloudiot_registry_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.cloudiot_registry_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.cloudiot_registry_iam_policy` using the reference:
+
+    $._ref.data_google_cloudiot_registry_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_cloudiot_registry_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.cloudiot_registry_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `cloudiot_registry_iam_policy`
+Terraform data source.
+
+Unlike [google.data.cloudiot_registry_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `cloudiot_registry_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/compute_disk_iam_policy.md b/docs/4.x/data/compute_disk_iam_policy.md
new file mode 100644
index 0000000..10de263
--- /dev/null
+++ b/docs/4.x/data/compute_disk_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/compute_disk_iam_policy/
+---
+
+# data.compute_disk_iam_policy
+
+`compute_disk_iam_policy` represents the `google_compute_disk_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withZone()`](#fn-withzone)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.compute_disk_iam_policy.new` injects a new `data_google_compute_disk_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.compute_disk_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.compute_disk_iam_policy` using the reference:
+
+    $._ref.data_google_compute_disk_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_compute_disk_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.compute_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_disk_iam_policy`
+Terraform data source.
+
+Unlike [google.data.compute_disk_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_disk_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withZone
+
+```ts
+withZone()
+```
+
+`google.string.withZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `zone` field.
diff --git a/docs/4.x/data/compute_image_iam_policy.md b/docs/4.x/data/compute_image_iam_policy.md
new file mode 100644
index 0000000..f5f0925
--- /dev/null
+++ b/docs/4.x/data/compute_image_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/compute_image_iam_policy/
+---
+
+# data.compute_image_iam_policy
+
+`compute_image_iam_policy` represents the `google_compute_image_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withImage()`](#fn-withimage)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.compute_image_iam_policy.new` injects a new `data_google_compute_image_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.compute_image_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.compute_image_iam_policy` using the reference:
+
+    $._ref.data_google_compute_image_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_compute_image_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `image` (`string`): Set the `image` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.compute_image_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_image_iam_policy`
+Terraform data source.
+
+Unlike [google.data.compute_image_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `image` (`string`): Set the `image` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_image_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withImage
+
+```ts
+withImage()
+```
+
+`google.string.withImage` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the image field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `image` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/compute_instance_iam_policy.md b/docs/4.x/data/compute_instance_iam_policy.md
new file mode 100644
index 0000000..c72f23c
--- /dev/null
+++ b/docs/4.x/data/compute_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/compute_instance_iam_policy/
+---
+
+# data.compute_instance_iam_policy
+
+`compute_instance_iam_policy` represents the `google_compute_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstanceName()`](#fn-withinstancename)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withZone()`](#fn-withzone)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.compute_instance_iam_policy.new` injects a new `data_google_compute_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.compute_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.compute_instance_iam_policy` using the reference:
+
+    $._ref.data_google_compute_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_compute_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.compute_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_instance_iam_policy`
+Terraform data source.
+
+Unlike [google.data.compute_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstanceName
+
+```ts
+withInstanceName()
+```
+
+`google.string.withInstanceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance_name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withZone
+
+```ts
+withZone()
+```
+
+`google.string.withZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `zone` field.
diff --git a/docs/4.x/data/compute_region_disk_iam_policy.md b/docs/4.x/data/compute_region_disk_iam_policy.md
new file mode 100644
index 0000000..9f85b34
--- /dev/null
+++ b/docs/4.x/data/compute_region_disk_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/compute_region_disk_iam_policy/
+---
+
+# data.compute_region_disk_iam_policy
+
+`compute_region_disk_iam_policy` represents the `google_compute_region_disk_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.compute_region_disk_iam_policy.new` injects a new `data_google_compute_region_disk_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.compute_region_disk_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.compute_region_disk_iam_policy` using the reference:
+
+    $._ref.data_google_compute_region_disk_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_compute_region_disk_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.compute_region_disk_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_region_disk_iam_policy`
+Terraform data source.
+
+Unlike [google.data.compute_region_disk_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_region_disk_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/compute_snapshot_iam_policy.md b/docs/4.x/data/compute_snapshot_iam_policy.md
new file mode 100644
index 0000000..00510f5
--- /dev/null
+++ b/docs/4.x/data/compute_snapshot_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/compute_snapshot_iam_policy/
+---
+
+# data.compute_snapshot_iam_policy
+
+`compute_snapshot_iam_policy` represents the `google_compute_snapshot_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.compute_snapshot_iam_policy.new` injects a new `data_google_compute_snapshot_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.compute_snapshot_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.compute_snapshot_iam_policy` using the reference:
+
+    $._ref.data_google_compute_snapshot_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_compute_snapshot_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.compute_snapshot_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_snapshot_iam_policy`
+Terraform data source.
+
+Unlike [google.data.compute_snapshot_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_snapshot_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/compute_subnetwork_iam_policy.md b/docs/4.x/data/compute_subnetwork_iam_policy.md
new file mode 100644
index 0000000..971efe2
--- /dev/null
+++ b/docs/4.x/data/compute_subnetwork_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/compute_subnetwork_iam_policy/
+---
+
+# data.compute_subnetwork_iam_policy
+
+`compute_subnetwork_iam_policy` represents the `google_compute_subnetwork_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withSubnetwork()`](#fn-withsubnetwork)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.compute_subnetwork_iam_policy.new` injects a new `data_google_compute_subnetwork_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.compute_subnetwork_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.compute_subnetwork_iam_policy` using the reference:
+
+    $._ref.data_google_compute_subnetwork_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_compute_subnetwork_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.compute_subnetwork_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `compute_subnetwork_iam_policy`
+Terraform data source.
+
+Unlike [google.data.compute_subnetwork_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): Set the `subnetwork` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `compute_subnetwork_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withSubnetwork
+
+```ts
+withSubnetwork()
+```
+
+`google.string.withSubnetwork` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the subnetwork field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `subnetwork` field.
diff --git a/docs/4.x/data/container_analysis_note_iam_policy.md b/docs/4.x/data/container_analysis_note_iam_policy.md
new file mode 100644
index 0000000..16b2684
--- /dev/null
+++ b/docs/4.x/data/container_analysis_note_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/container_analysis_note_iam_policy/
+---
+
+# data.container_analysis_note_iam_policy
+
+`container_analysis_note_iam_policy` represents the `google_container_analysis_note_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withNote()`](#fn-withnote)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.container_analysis_note_iam_policy.new` injects a new `data_google_container_analysis_note_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.container_analysis_note_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.container_analysis_note_iam_policy` using the reference:
+
+    $._ref.data_google_container_analysis_note_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_container_analysis_note_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `note` (`string`): Set the `note` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.container_analysis_note_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `container_analysis_note_iam_policy`
+Terraform data source.
+
+Unlike [google.data.container_analysis_note_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `note` (`string`): Set the `note` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `container_analysis_note_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withNote
+
+```ts
+withNote()
+```
+
+`google.string.withNote` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the note field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `note` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/data_catalog_entry_group_iam_policy.md b/docs/4.x/data/data_catalog_entry_group_iam_policy.md
new file mode 100644
index 0000000..a484d9e
--- /dev/null
+++ b/docs/4.x/data/data_catalog_entry_group_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/data_catalog_entry_group_iam_policy/
+---
+
+# data.data_catalog_entry_group_iam_policy
+
+`data_catalog_entry_group_iam_policy` represents the `google_data_catalog_entry_group_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withEntryGroup()`](#fn-withentrygroup)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.data_catalog_entry_group_iam_policy.new` injects a new `data_google_data_catalog_entry_group_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.data_catalog_entry_group_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.data_catalog_entry_group_iam_policy` using the reference:
+
+    $._ref.data_google_data_catalog_entry_group_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_data_catalog_entry_group_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `entry_group` (`string`): Set the `entry_group` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.data_catalog_entry_group_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_entry_group_iam_policy`
+Terraform data source.
+
+Unlike [google.data.data_catalog_entry_group_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `entry_group` (`string`): Set the `entry_group` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_entry_group_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withEntryGroup
+
+```ts
+withEntryGroup()
+```
+
+`google.string.withEntryGroup` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the entry_group field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `entry_group` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/data_catalog_policy_tag_iam_policy.md b/docs/4.x/data/data_catalog_policy_tag_iam_policy.md
new file mode 100644
index 0000000..03af638
--- /dev/null
+++ b/docs/4.x/data/data_catalog_policy_tag_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/data_catalog_policy_tag_iam_policy/
+---
+
+# data.data_catalog_policy_tag_iam_policy
+
+`data_catalog_policy_tag_iam_policy` represents the `google_data_catalog_policy_tag_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withPolicyTag()`](#fn-withpolicytag)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.data_catalog_policy_tag_iam_policy.new` injects a new `data_google_data_catalog_policy_tag_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.data_catalog_policy_tag_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.data_catalog_policy_tag_iam_policy` using the reference:
+
+    $._ref.data_google_data_catalog_policy_tag_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_data_catalog_policy_tag_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.data_catalog_policy_tag_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_policy_tag_iam_policy`
+Terraform data source.
+
+Unlike [google.data.data_catalog_policy_tag_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `policy_tag` (`string`): Set the `policy_tag` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_policy_tag_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withPolicyTag
+
+```ts
+withPolicyTag()
+```
+
+`google.string.withPolicyTag` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the policy_tag field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `policy_tag` field.
diff --git a/docs/4.x/data/data_catalog_tag_template_iam_policy.md b/docs/4.x/data/data_catalog_tag_template_iam_policy.md
new file mode 100644
index 0000000..76eb57c
--- /dev/null
+++ b/docs/4.x/data/data_catalog_tag_template_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/data_catalog_tag_template_iam_policy/
+---
+
+# data.data_catalog_tag_template_iam_policy
+
+`data_catalog_tag_template_iam_policy` represents the `google_data_catalog_tag_template_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withTagTemplate()`](#fn-withtagtemplate)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.data_catalog_tag_template_iam_policy.new` injects a new `data_google_data_catalog_tag_template_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.data_catalog_tag_template_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.data_catalog_tag_template_iam_policy` using the reference:
+
+    $._ref.data_google_data_catalog_tag_template_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_data_catalog_tag_template_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+  - `tag_template` (`string`): Set the `tag_template` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.data_catalog_tag_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_tag_template_iam_policy`
+Terraform data source.
+
+Unlike [google.data.data_catalog_tag_template_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+  - `tag_template` (`string`): Set the `tag_template` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_tag_template_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withTagTemplate
+
+```ts
+withTagTemplate()
+```
+
+`google.string.withTagTemplate` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the tag_template field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `tag_template` field.
diff --git a/docs/4.x/data/data_catalog_taxonomy_iam_policy.md b/docs/4.x/data/data_catalog_taxonomy_iam_policy.md
new file mode 100644
index 0000000..1576d44
--- /dev/null
+++ b/docs/4.x/data/data_catalog_taxonomy_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/data_catalog_taxonomy_iam_policy/
+---
+
+# data.data_catalog_taxonomy_iam_policy
+
+`data_catalog_taxonomy_iam_policy` represents the `google_data_catalog_taxonomy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withTaxonomy()`](#fn-withtaxonomy)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.data_catalog_taxonomy_iam_policy.new` injects a new `data_google_data_catalog_taxonomy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.data_catalog_taxonomy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.data_catalog_taxonomy_iam_policy` using the reference:
+
+    $._ref.data_google_data_catalog_taxonomy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_data_catalog_taxonomy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.data_catalog_taxonomy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_catalog_taxonomy_iam_policy`
+Terraform data source.
+
+Unlike [google.data.data_catalog_taxonomy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+  - `taxonomy` (`string`): Set the `taxonomy` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_catalog_taxonomy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withTaxonomy
+
+```ts
+withTaxonomy()
+```
+
+`google.string.withTaxonomy` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the taxonomy field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `taxonomy` field.
diff --git a/docs/4.x/data/data_fusion_instance_iam_policy.md b/docs/4.x/data/data_fusion_instance_iam_policy.md
new file mode 100644
index 0000000..6b1d562
--- /dev/null
+++ b/docs/4.x/data/data_fusion_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/data_fusion_instance_iam_policy/
+---
+
+# data.data_fusion_instance_iam_policy
+
+`data_fusion_instance_iam_policy` represents the `google_data_fusion_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.data_fusion_instance_iam_policy.new` injects a new `data_google_data_fusion_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.data_fusion_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.data_fusion_instance_iam_policy` using the reference:
+
+    $._ref.data_google_data_fusion_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_data_fusion_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.data_fusion_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `data_fusion_instance_iam_policy`
+Terraform data source.
+
+Unlike [google.data.data_fusion_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `data_fusion_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/dataplex_asset_iam_policy.md b/docs/4.x/data/dataplex_asset_iam_policy.md
new file mode 100644
index 0000000..3cc73fa
--- /dev/null
+++ b/docs/4.x/data/dataplex_asset_iam_policy.md
@@ -0,0 +1,168 @@
+---
+permalink: /data/dataplex_asset_iam_policy/
+---
+
+# data.dataplex_asset_iam_policy
+
+`dataplex_asset_iam_policy` represents the `google_dataplex_asset_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAsset()`](#fn-withasset)
+* [`fn withDataplexZone()`](#fn-withdataplexzone)
+* [`fn withLake()`](#fn-withlake)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataplex_asset_iam_policy.new` injects a new `data_google_dataplex_asset_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataplex_asset_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataplex_asset_iam_policy` using the reference:
+
+    $._ref.data_google_dataplex_asset_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataplex_asset_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `asset` (`string`): Set the `asset` field on the resulting data source block.
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.
+  - `lake` (`string`): Set the `lake` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataplex_asset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataplex_asset_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataplex_asset_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `asset` (`string`): Set the `asset` field on the resulting object.
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.
+  - `lake` (`string`): Set the `lake` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataplex_asset_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAsset
+
+```ts
+withAsset()
+```
+
+`google.string.withAsset` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the asset field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `asset` field.
+
+
+### fn withDataplexZone
+
+```ts
+withDataplexZone()
+```
+
+`google.string.withDataplexZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataplex_zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataplex_zone` field.
+
+
+### fn withLake
+
+```ts
+withLake()
+```
+
+`google.string.withLake` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the lake field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `lake` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/dataplex_lake_iam_policy.md b/docs/4.x/data/dataplex_lake_iam_policy.md
new file mode 100644
index 0000000..f22c10c
--- /dev/null
+++ b/docs/4.x/data/dataplex_lake_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/dataplex_lake_iam_policy/
+---
+
+# data.dataplex_lake_iam_policy
+
+`dataplex_lake_iam_policy` represents the `google_dataplex_lake_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLake()`](#fn-withlake)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataplex_lake_iam_policy.new` injects a new `data_google_dataplex_lake_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataplex_lake_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataplex_lake_iam_policy` using the reference:
+
+    $._ref.data_google_dataplex_lake_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataplex_lake_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `lake` (`string`): Set the `lake` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataplex_lake_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataplex_lake_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataplex_lake_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `lake` (`string`): Set the `lake` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataplex_lake_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLake
+
+```ts
+withLake()
+```
+
+`google.string.withLake` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the lake field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `lake` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/dataplex_zone_iam_policy.md b/docs/4.x/data/dataplex_zone_iam_policy.md
new file mode 100644
index 0000000..ab096ec
--- /dev/null
+++ b/docs/4.x/data/dataplex_zone_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/dataplex_zone_iam_policy/
+---
+
+# data.dataplex_zone_iam_policy
+
+`dataplex_zone_iam_policy` represents the `google_dataplex_zone_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDataplexZone()`](#fn-withdataplexzone)
+* [`fn withLake()`](#fn-withlake)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataplex_zone_iam_policy.new` injects a new `data_google_dataplex_zone_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataplex_zone_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataplex_zone_iam_policy` using the reference:
+
+    $._ref.data_google_dataplex_zone_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataplex_zone_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting data source block.
+  - `lake` (`string`): Set the `lake` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataplex_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataplex_zone_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataplex_zone_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataplex_zone` (`string`): Set the `dataplex_zone` field on the resulting object.
+  - `lake` (`string`): Set the `lake` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataplex_zone_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDataplexZone
+
+```ts
+withDataplexZone()
+```
+
+`google.string.withDataplexZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataplex_zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataplex_zone` field.
+
+
+### fn withLake
+
+```ts
+withLake()
+```
+
+`google.string.withLake` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the lake field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `lake` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/dataproc_autoscaling_policy_iam_policy.md b/docs/4.x/data/dataproc_autoscaling_policy_iam_policy.md
new file mode 100644
index 0000000..4159fbe
--- /dev/null
+++ b/docs/4.x/data/dataproc_autoscaling_policy_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/dataproc_autoscaling_policy_iam_policy/
+---
+
+# data.dataproc_autoscaling_policy_iam_policy
+
+`dataproc_autoscaling_policy_iam_policy` represents the `google_dataproc_autoscaling_policy_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withPolicyId()`](#fn-withpolicyid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataproc_autoscaling_policy_iam_policy.new` injects a new `data_google_dataproc_autoscaling_policy_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataproc_autoscaling_policy_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataproc_autoscaling_policy_iam_policy` using the reference:
+
+    $._ref.data_google_dataproc_autoscaling_policy_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataproc_autoscaling_policy_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `policy_id` (`string`): Set the `policy_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataproc_autoscaling_policy_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_autoscaling_policy_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataproc_autoscaling_policy_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `policy_id` (`string`): Set the `policy_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_autoscaling_policy_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withPolicyId
+
+```ts
+withPolicyId()
+```
+
+`google.string.withPolicyId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the policy_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `policy_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/dataproc_cluster_iam_policy.md b/docs/4.x/data/dataproc_cluster_iam_policy.md
new file mode 100644
index 0000000..18276f9
--- /dev/null
+++ b/docs/4.x/data/dataproc_cluster_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/dataproc_cluster_iam_policy/
+---
+
+# data.dataproc_cluster_iam_policy
+
+`dataproc_cluster_iam_policy` represents the `google_dataproc_cluster_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCluster()`](#fn-withcluster)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataproc_cluster_iam_policy.new` injects a new `data_google_dataproc_cluster_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataproc_cluster_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataproc_cluster_iam_policy` using the reference:
+
+    $._ref.data_google_dataproc_cluster_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataproc_cluster_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `cluster` (`string`): Set the `cluster` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataproc_cluster_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_cluster_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataproc_cluster_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `cluster` (`string`): Set the `cluster` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_cluster_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCluster
+
+```ts
+withCluster()
+```
+
+`google.string.withCluster` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the cluster field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `cluster` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/dataproc_job_iam_policy.md b/docs/4.x/data/dataproc_job_iam_policy.md
new file mode 100644
index 0000000..d38dd04
--- /dev/null
+++ b/docs/4.x/data/dataproc_job_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/dataproc_job_iam_policy/
+---
+
+# data.dataproc_job_iam_policy
+
+`dataproc_job_iam_policy` represents the `google_dataproc_job_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withJobId()`](#fn-withjobid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataproc_job_iam_policy.new` injects a new `data_google_dataproc_job_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataproc_job_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataproc_job_iam_policy` using the reference:
+
+    $._ref.data_google_dataproc_job_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataproc_job_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `job_id` (`string`): Set the `job_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting data source block. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataproc_job_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_job_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataproc_job_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `job_id` (`string`): Set the `job_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_job_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withJobId
+
+```ts
+withJobId()
+```
+
+`google.string.withJobId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the job_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `job_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data/dataproc_metastore_service_iam_policy.md b/docs/4.x/data/dataproc_metastore_service_iam_policy.md
new file mode 100644
index 0000000..2e5b209
--- /dev/null
+++ b/docs/4.x/data/dataproc_metastore_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/dataproc_metastore_service_iam_policy/
+---
+
+# data.dataproc_metastore_service_iam_policy
+
+`dataproc_metastore_service_iam_policy` represents the `google_dataproc_metastore_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withServiceId()`](#fn-withserviceid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dataproc_metastore_service_iam_policy.new` injects a new `data_google_dataproc_metastore_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dataproc_metastore_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dataproc_metastore_service_iam_policy` using the reference:
+
+    $._ref.data_google_dataproc_metastore_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dataproc_metastore_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service_id` (`string`): Set the `service_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dataproc_metastore_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dataproc_metastore_service_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dataproc_metastore_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service_id` (`string`): Set the `service_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dataproc_metastore_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withServiceId
+
+```ts
+withServiceId()
+```
+
+`google.string.withServiceId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_id` field.
diff --git a/docs/4.x/data/dns_managed_zone_iam_policy.md b/docs/4.x/data/dns_managed_zone_iam_policy.md
new file mode 100644
index 0000000..4f6e54a
--- /dev/null
+++ b/docs/4.x/data/dns_managed_zone_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/dns_managed_zone_iam_policy/
+---
+
+# data.dns_managed_zone_iam_policy
+
+`dns_managed_zone_iam_policy` represents the `google_dns_managed_zone_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withManagedZone()`](#fn-withmanagedzone)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.dns_managed_zone_iam_policy.new` injects a new `data_google_dns_managed_zone_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.dns_managed_zone_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.dns_managed_zone_iam_policy` using the reference:
+
+    $._ref.data_google_dns_managed_zone_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_dns_managed_zone_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.dns_managed_zone_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `dns_managed_zone_iam_policy`
+Terraform data source.
+
+Unlike [google.data.dns_managed_zone_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `managed_zone` (`string`): Set the `managed_zone` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `dns_managed_zone_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withManagedZone
+
+```ts
+withManagedZone()
+```
+
+`google.string.withManagedZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the managed_zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `managed_zone` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/endpoints_service_consumers_iam_policy.md b/docs/4.x/data/endpoints_service_consumers_iam_policy.md
new file mode 100644
index 0000000..1acdba1
--- /dev/null
+++ b/docs/4.x/data/endpoints_service_consumers_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/endpoints_service_consumers_iam_policy/
+---
+
+# data.endpoints_service_consumers_iam_policy
+
+`endpoints_service_consumers_iam_policy` represents the `google_endpoints_service_consumers_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConsumerProject()`](#fn-withconsumerproject)
+* [`fn withServiceName()`](#fn-withservicename)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.endpoints_service_consumers_iam_policy.new` injects a new `data_google_endpoints_service_consumers_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.endpoints_service_consumers_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.endpoints_service_consumers_iam_policy` using the reference:
+
+    $._ref.data_google_endpoints_service_consumers_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_endpoints_service_consumers_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting data source block.
+  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.endpoints_service_consumers_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `endpoints_service_consumers_iam_policy`
+Terraform data source.
+
+Unlike [google.data.endpoints_service_consumers_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `consumer_project` (`string`): Set the `consumer_project` field on the resulting object.
+  - `service_name` (`string`): Set the `service_name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `endpoints_service_consumers_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConsumerProject
+
+```ts
+withConsumerProject()
+```
+
+`google.string.withConsumerProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the consumer_project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `consumer_project` field.
+
+
+### fn withServiceName
+
+```ts
+withServiceName()
+```
+
+`google.string.withServiceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_name` field.
diff --git a/docs/4.x/data/endpoints_service_iam_policy.md b/docs/4.x/data/endpoints_service_iam_policy.md
new file mode 100644
index 0000000..e29b185
--- /dev/null
+++ b/docs/4.x/data/endpoints_service_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/endpoints_service_iam_policy/
+---
+
+# data.endpoints_service_iam_policy
+
+`endpoints_service_iam_policy` represents the `google_endpoints_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withServiceName()`](#fn-withservicename)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.endpoints_service_iam_policy.new` injects a new `data_google_endpoints_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.endpoints_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.endpoints_service_iam_policy` using the reference:
+
+    $._ref.data_google_endpoints_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_endpoints_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `service_name` (`string`): Set the `service_name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.endpoints_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `endpoints_service_iam_policy`
+Terraform data source.
+
+Unlike [google.data.endpoints_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `service_name` (`string`): Set the `service_name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `endpoints_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withServiceName
+
+```ts
+withServiceName()
+```
+
+`google.string.withServiceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_name` field.
diff --git a/docs/4.x/data/folder_iam_policy.md b/docs/4.x/data/folder_iam_policy.md
new file mode 100644
index 0000000..bd7e0e8
--- /dev/null
+++ b/docs/4.x/data/folder_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/folder_iam_policy/
+---
+
+# data.folder_iam_policy
+
+`folder_iam_policy` represents the `google_folder_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withFolder()`](#fn-withfolder)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.folder_iam_policy.new` injects a new `data_google_folder_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.folder_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.folder_iam_policy` using the reference:
+
+    $._ref.data_google_folder_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_folder_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `folder` (`string`): Set the `folder` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.folder_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `folder_iam_policy`
+Terraform data source.
+
+Unlike [google.data.folder_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `folder` (`string`): Set the `folder` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `folder_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withFolder
+
+```ts
+withFolder()
+```
+
+`google.string.withFolder` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the folder field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `folder` field.
diff --git a/docs/4.x/data/gke_backup_backup_plan_iam_policy.md b/docs/4.x/data/gke_backup_backup_plan_iam_policy.md
new file mode 100644
index 0000000..bb64337
--- /dev/null
+++ b/docs/4.x/data/gke_backup_backup_plan_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/gke_backup_backup_plan_iam_policy/
+---
+
+# data.gke_backup_backup_plan_iam_policy
+
+`gke_backup_backup_plan_iam_policy` represents the `google_gke_backup_backup_plan_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.gke_backup_backup_plan_iam_policy.new` injects a new `data_google_gke_backup_backup_plan_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.gke_backup_backup_plan_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.gke_backup_backup_plan_iam_policy` using the reference:
+
+    $._ref.data_google_gke_backup_backup_plan_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_gke_backup_backup_plan_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.gke_backup_backup_plan_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `gke_backup_backup_plan_iam_policy`
+Terraform data source.
+
+Unlike [google.data.gke_backup_backup_plan_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `name` (`string`): Set the `name` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `gke_backup_backup_plan_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/gke_hub_membership_iam_policy.md b/docs/4.x/data/gke_hub_membership_iam_policy.md
new file mode 100644
index 0000000..9a0c2d0
--- /dev/null
+++ b/docs/4.x/data/gke_hub_membership_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/gke_hub_membership_iam_policy/
+---
+
+# data.gke_hub_membership_iam_policy
+
+`gke_hub_membership_iam_policy` represents the `google_gke_hub_membership_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withMembershipId()`](#fn-withmembershipid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.gke_hub_membership_iam_policy.new` injects a new `data_google_gke_hub_membership_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.gke_hub_membership_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.gke_hub_membership_iam_policy` using the reference:
+
+    $._ref.data_google_gke_hub_membership_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_gke_hub_membership_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `membership_id` (`string`): Set the `membership_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.gke_hub_membership_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `gke_hub_membership_iam_policy`
+Terraform data source.
+
+Unlike [google.data.gke_hub_membership_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `membership_id` (`string`): Set the `membership_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `gke_hub_membership_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withMembershipId
+
+```ts
+withMembershipId()
+```
+
+`google.string.withMembershipId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the membership_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `membership_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/healthcare_consent_store_iam_policy.md b/docs/4.x/data/healthcare_consent_store_iam_policy.md
new file mode 100644
index 0000000..ec341e3
--- /dev/null
+++ b/docs/4.x/data/healthcare_consent_store_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/healthcare_consent_store_iam_policy/
+---
+
+# data.healthcare_consent_store_iam_policy
+
+`healthcare_consent_store_iam_policy` represents the `google_healthcare_consent_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withConsentStoreId()`](#fn-withconsentstoreid)
+* [`fn withDataset()`](#fn-withdataset)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.healthcare_consent_store_iam_policy.new` injects a new `data_google_healthcare_consent_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.healthcare_consent_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.healthcare_consent_store_iam_policy` using the reference:
+
+    $._ref.data_google_healthcare_consent_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_healthcare_consent_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting data source block.
+  - `dataset` (`string`): Set the `dataset` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.healthcare_consent_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_consent_store_iam_policy`
+Terraform data source.
+
+Unlike [google.data.healthcare_consent_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `consent_store_id` (`string`): Set the `consent_store_id` field on the resulting object.
+  - `dataset` (`string`): Set the `dataset` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_consent_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withConsentStoreId
+
+```ts
+withConsentStoreId()
+```
+
+`google.string.withConsentStoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the consent_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `consent_store_id` field.
+
+
+### fn withDataset
+
+```ts
+withDataset()
+```
+
+`google.string.withDataset` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset` field.
diff --git a/docs/4.x/data/healthcare_dataset_iam_policy.md b/docs/4.x/data/healthcare_dataset_iam_policy.md
new file mode 100644
index 0000000..3e8ff5b
--- /dev/null
+++ b/docs/4.x/data/healthcare_dataset_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/healthcare_dataset_iam_policy/
+---
+
+# data.healthcare_dataset_iam_policy
+
+`healthcare_dataset_iam_policy` represents the `google_healthcare_dataset_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatasetId()`](#fn-withdatasetid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.healthcare_dataset_iam_policy.new` injects a new `data_google_healthcare_dataset_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.healthcare_dataset_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.healthcare_dataset_iam_policy` using the reference:
+
+    $._ref.data_google_healthcare_dataset_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_healthcare_dataset_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.healthcare_dataset_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_dataset_iam_policy`
+Terraform data source.
+
+Unlike [google.data.healthcare_dataset_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dataset_id` (`string`): Set the `dataset_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_dataset_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatasetId
+
+```ts
+withDatasetId()
+```
+
+`google.string.withDatasetId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dataset_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dataset_id` field.
diff --git a/docs/4.x/data/healthcare_dicom_store_iam_policy.md b/docs/4.x/data/healthcare_dicom_store_iam_policy.md
new file mode 100644
index 0000000..86436ad
--- /dev/null
+++ b/docs/4.x/data/healthcare_dicom_store_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/healthcare_dicom_store_iam_policy/
+---
+
+# data.healthcare_dicom_store_iam_policy
+
+`healthcare_dicom_store_iam_policy` represents the `google_healthcare_dicom_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDicomStoreId()`](#fn-withdicomstoreid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.healthcare_dicom_store_iam_policy.new` injects a new `data_google_healthcare_dicom_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.healthcare_dicom_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.healthcare_dicom_store_iam_policy` using the reference:
+
+    $._ref.data_google_healthcare_dicom_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_healthcare_dicom_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.healthcare_dicom_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_dicom_store_iam_policy`
+Terraform data source.
+
+Unlike [google.data.healthcare_dicom_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `dicom_store_id` (`string`): Set the `dicom_store_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_dicom_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDicomStoreId
+
+```ts
+withDicomStoreId()
+```
+
+`google.string.withDicomStoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the dicom_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `dicom_store_id` field.
diff --git a/docs/4.x/data/healthcare_fhir_store_iam_policy.md b/docs/4.x/data/healthcare_fhir_store_iam_policy.md
new file mode 100644
index 0000000..0f66d49
--- /dev/null
+++ b/docs/4.x/data/healthcare_fhir_store_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/healthcare_fhir_store_iam_policy/
+---
+
+# data.healthcare_fhir_store_iam_policy
+
+`healthcare_fhir_store_iam_policy` represents the `google_healthcare_fhir_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withFhirStoreId()`](#fn-withfhirstoreid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.healthcare_fhir_store_iam_policy.new` injects a new `data_google_healthcare_fhir_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.healthcare_fhir_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.healthcare_fhir_store_iam_policy` using the reference:
+
+    $._ref.data_google_healthcare_fhir_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_healthcare_fhir_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.healthcare_fhir_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_fhir_store_iam_policy`
+Terraform data source.
+
+Unlike [google.data.healthcare_fhir_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `fhir_store_id` (`string`): Set the `fhir_store_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_fhir_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withFhirStoreId
+
+```ts
+withFhirStoreId()
+```
+
+`google.string.withFhirStoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the fhir_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `fhir_store_id` field.
diff --git a/docs/4.x/data/healthcare_hl7_v2_store_iam_policy.md b/docs/4.x/data/healthcare_hl7_v2_store_iam_policy.md
new file mode 100644
index 0000000..c32ca18
--- /dev/null
+++ b/docs/4.x/data/healthcare_hl7_v2_store_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/healthcare_hl7_v2_store_iam_policy/
+---
+
+# data.healthcare_hl7_v2_store_iam_policy
+
+`healthcare_hl7_v2_store_iam_policy` represents the `google_healthcare_hl7_v2_store_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withHl7V2StoreId()`](#fn-withhl7v2storeid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.healthcare_hl7_v2_store_iam_policy.new` injects a new `data_google_healthcare_hl7_v2_store_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.healthcare_hl7_v2_store_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.healthcare_hl7_v2_store_iam_policy` using the reference:
+
+    $._ref.data_google_healthcare_hl7_v2_store_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_healthcare_hl7_v2_store_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.healthcare_hl7_v2_store_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `healthcare_hl7_v2_store_iam_policy`
+Terraform data source.
+
+Unlike [google.data.healthcare_hl7_v2_store_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `hl7_v2_store_id` (`string`): Set the `hl7_v2_store_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `healthcare_hl7_v2_store_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withHl7V2StoreId
+
+```ts
+withHl7V2StoreId()
+```
+
+`google.string.withHl7V2StoreId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the hl7_v2_store_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `hl7_v2_store_id` field.
diff --git a/docs/4.x/data/iap_app_engine_service_iam_policy.md b/docs/4.x/data/iap_app_engine_service_iam_policy.md
new file mode 100644
index 0000000..642c928
--- /dev/null
+++ b/docs/4.x/data/iap_app_engine_service_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/iap_app_engine_service_iam_policy/
+---
+
+# data.iap_app_engine_service_iam_policy
+
+`iap_app_engine_service_iam_policy` represents the `google_iap_app_engine_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAppId()`](#fn-withappid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withService()`](#fn-withservice)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_app_engine_service_iam_policy.new` injects a new `data_google_iap_app_engine_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_app_engine_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_app_engine_service_iam_policy` using the reference:
+
+    $._ref.data_google_iap_app_engine_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_app_engine_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_app_engine_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_app_engine_service_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_app_engine_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `app_id` (`string`): Set the `app_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_app_engine_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAppId
+
+```ts
+withAppId()
+```
+
+`google.string.withAppId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the app_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `app_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withService
+
+```ts
+withService()
+```
+
+`google.string.withService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service` field.
diff --git a/docs/4.x/data/iap_app_engine_version_iam_policy.md b/docs/4.x/data/iap_app_engine_version_iam_policy.md
new file mode 100644
index 0000000..6290d53
--- /dev/null
+++ b/docs/4.x/data/iap_app_engine_version_iam_policy.md
@@ -0,0 +1,149 @@
+---
+permalink: /data/iap_app_engine_version_iam_policy/
+---
+
+# data.iap_app_engine_version_iam_policy
+
+`iap_app_engine_version_iam_policy` represents the `google_iap_app_engine_version_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAppId()`](#fn-withappid)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withService()`](#fn-withservice)
+* [`fn withVersionId()`](#fn-withversionid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_app_engine_version_iam_policy.new` injects a new `data_google_iap_app_engine_version_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_app_engine_version_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_app_engine_version_iam_policy` using the reference:
+
+    $._ref.data_google_iap_app_engine_version_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_app_engine_version_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting data source block.
+  - `version_id` (`string`): Set the `version_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_app_engine_version_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_app_engine_version_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_app_engine_version_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `app_id` (`string`): Set the `app_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `service` (`string`): Set the `service` field on the resulting object.
+  - `version_id` (`string`): Set the `version_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_app_engine_version_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAppId
+
+```ts
+withAppId()
+```
+
+`google.string.withAppId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the app_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `app_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withService
+
+```ts
+withService()
+```
+
+`google.string.withService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service` field.
+
+
+### fn withVersionId
+
+```ts
+withVersionId()
+```
+
+`google.string.withVersionId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the version_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `version_id` field.
diff --git a/docs/4.x/data/iap_tunnel_iam_policy.md b/docs/4.x/data/iap_tunnel_iam_policy.md
new file mode 100644
index 0000000..dd9d34b
--- /dev/null
+++ b/docs/4.x/data/iap_tunnel_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/iap_tunnel_iam_policy/
+---
+
+# data.iap_tunnel_iam_policy
+
+`iap_tunnel_iam_policy` represents the `google_iap_tunnel_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_tunnel_iam_policy.new` injects a new `data_google_iap_tunnel_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_tunnel_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_tunnel_iam_policy` using the reference:
+
+    $._ref.data_google_iap_tunnel_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_tunnel_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_tunnel_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_tunnel_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_tunnel_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_tunnel_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/iap_tunnel_instance_iam_policy.md b/docs/4.x/data/iap_tunnel_instance_iam_policy.md
new file mode 100644
index 0000000..dd6f56c
--- /dev/null
+++ b/docs/4.x/data/iap_tunnel_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/iap_tunnel_instance_iam_policy/
+---
+
+# data.iap_tunnel_instance_iam_policy
+
+`iap_tunnel_instance_iam_policy` represents the `google_iap_tunnel_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withZone()`](#fn-withzone)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_tunnel_instance_iam_policy.new` injects a new `data_google_iap_tunnel_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_tunnel_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_tunnel_instance_iam_policy` using the reference:
+
+    $._ref.data_google_iap_tunnel_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_tunnel_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting data source block. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_tunnel_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_tunnel_instance_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_tunnel_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_tunnel_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withZone
+
+```ts
+withZone()
+```
+
+`google.string.withZone` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the zone field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `zone` field.
diff --git a/docs/4.x/data/iap_web_backend_service_iam_policy.md b/docs/4.x/data/iap_web_backend_service_iam_policy.md
new file mode 100644
index 0000000..e7df33f
--- /dev/null
+++ b/docs/4.x/data/iap_web_backend_service_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/iap_web_backend_service_iam_policy/
+---
+
+# data.iap_web_backend_service_iam_policy
+
+`iap_web_backend_service_iam_policy` represents the `google_iap_web_backend_service_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withWebBackendService()`](#fn-withwebbackendservice)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_web_backend_service_iam_policy.new` injects a new `data_google_iap_web_backend_service_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_web_backend_service_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_web_backend_service_iam_policy` using the reference:
+
+    $._ref.data_google_iap_web_backend_service_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_web_backend_service_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_web_backend_service_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_backend_service_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_web_backend_service_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `web_backend_service` (`string`): Set the `web_backend_service` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_backend_service_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withWebBackendService
+
+```ts
+withWebBackendService()
+```
+
+`google.string.withWebBackendService` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the web_backend_service field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `web_backend_service` field.
diff --git a/docs/4.x/data/iap_web_iam_policy.md b/docs/4.x/data/iap_web_iam_policy.md
new file mode 100644
index 0000000..b139902
--- /dev/null
+++ b/docs/4.x/data/iap_web_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/iap_web_iam_policy/
+---
+
+# data.iap_web_iam_policy
+
+`iap_web_iam_policy` represents the `google_iap_web_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_web_iam_policy.new` injects a new `data_google_iap_web_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_web_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_web_iam_policy` using the reference:
+
+    $._ref.data_google_iap_web_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_web_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_web_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_web_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/iap_web_type_app_engine_iam_policy.md b/docs/4.x/data/iap_web_type_app_engine_iam_policy.md
new file mode 100644
index 0000000..7d66c19
--- /dev/null
+++ b/docs/4.x/data/iap_web_type_app_engine_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/iap_web_type_app_engine_iam_policy/
+---
+
+# data.iap_web_type_app_engine_iam_policy
+
+`iap_web_type_app_engine_iam_policy` represents the `google_iap_web_type_app_engine_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withAppId()`](#fn-withappid)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_web_type_app_engine_iam_policy.new` injects a new `data_google_iap_web_type_app_engine_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_web_type_app_engine_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_web_type_app_engine_iam_policy` using the reference:
+
+    $._ref.data_google_iap_web_type_app_engine_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_web_type_app_engine_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `app_id` (`string`): Set the `app_id` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_web_type_app_engine_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_type_app_engine_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_web_type_app_engine_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `app_id` (`string`): Set the `app_id` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_type_app_engine_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withAppId
+
+```ts
+withAppId()
+```
+
+`google.string.withAppId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the app_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `app_id` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/iap_web_type_compute_iam_policy.md b/docs/4.x/data/iap_web_type_compute_iam_policy.md
new file mode 100644
index 0000000..5d67015
--- /dev/null
+++ b/docs/4.x/data/iap_web_type_compute_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/iap_web_type_compute_iam_policy/
+---
+
+# data.iap_web_type_compute_iam_policy
+
+`iap_web_type_compute_iam_policy` represents the `google_iap_web_type_compute_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.iap_web_type_compute_iam_policy.new` injects a new `data_google_iap_web_type_compute_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.iap_web_type_compute_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.iap_web_type_compute_iam_policy` using the reference:
+
+    $._ref.data_google_iap_web_type_compute_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_iap_web_type_compute_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.iap_web_type_compute_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `iap_web_type_compute_iam_policy`
+Terraform data source.
+
+Unlike [google.data.iap_web_type_compute_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `iap_web_type_compute_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/index.md b/docs/4.x/data/index.md
index 5a583f6..e62bef6 100644
--- a/docs/4.x/data/index.md
+++ b/docs/4.x/data/index.md
@@ -9,25 +9,45 @@ permalink: /data/
 * [access_approval_folder_service_account](access_approval_folder_service_account.md)
 * [access_approval_organization_service_account](access_approval_organization_service_account.md)
 * [access_approval_project_service_account](access_approval_project_service_account.md)
+* [access_context_manager_access_policy_iam_policy](access_context_manager_access_policy_iam_policy.md)
 * [active_folder](active_folder.md)
 * [alloydb_locations](alloydb_locations.md)
 * [alloydb_supported_database_flags](alloydb_supported_database_flags.md)
+* [apigee_environment_iam_policy](apigee_environment_iam_policy.md)
 * [app_engine_default_service_account](app_engine_default_service_account.md)
 * [artifact_registry_repository](artifact_registry_repository.md)
+* [artifact_registry_repository_iam_policy](artifact_registry_repository_iam_policy.md)
 * [beyondcorp_app_connection](beyondcorp_app_connection.md)
 * [beyondcorp_app_connector](beyondcorp_app_connector.md)
 * [beyondcorp_app_gateway](beyondcorp_app_gateway.md)
+* [bigquery_analytics_hub_data_exchange_iam_policy](bigquery_analytics_hub_data_exchange_iam_policy.md)
+* [bigquery_analytics_hub_listing_iam_policy](bigquery_analytics_hub_listing_iam_policy.md)
+* [bigquery_connection_iam_policy](bigquery_connection_iam_policy.md)
+* [bigquery_datapolicy_data_policy_iam_policy](bigquery_datapolicy_data_policy_iam_policy.md)
+* [bigquery_dataset_iam_policy](bigquery_dataset_iam_policy.md)
 * [bigquery_default_service_account](bigquery_default_service_account.md)
+* [bigquery_table_iam_policy](bigquery_table_iam_policy.md)
+* [bigtable_instance_iam_policy](bigtable_instance_iam_policy.md)
+* [bigtable_table_iam_policy](bigtable_table_iam_policy.md)
 * [billing_account](billing_account.md)
+* [billing_account_iam_policy](billing_account_iam_policy.md)
+* [binary_authorization_attestor_iam_policy](binary_authorization_attestor_iam_policy.md)
 * [client_config](client_config.md)
 * [client_openid_userinfo](client_openid_userinfo.md)
 * [cloud_identity_group_memberships](cloud_identity_group_memberships.md)
 * [cloud_identity_groups](cloud_identity_groups.md)
 * [cloud_run_locations](cloud_run_locations.md)
 * [cloud_run_service](cloud_run_service.md)
+* [cloud_run_service_iam_policy](cloud_run_service_iam_policy.md)
+* [cloud_run_v2_job_iam_policy](cloud_run_v2_job_iam_policy.md)
+* [cloud_run_v2_service_iam_policy](cloud_run_v2_service_iam_policy.md)
+* [cloud_tasks_queue_iam_policy](cloud_tasks_queue_iam_policy.md)
 * [cloudbuild_trigger](cloudbuild_trigger.md)
 * [cloudfunctions2_function](cloudfunctions2_function.md)
+* [cloudfunctions2_function_iam_policy](cloudfunctions2_function_iam_policy.md)
 * [cloudfunctions_function](cloudfunctions_function.md)
+* [cloudfunctions_function_iam_policy](cloudfunctions_function_iam_policy.md)
+* [cloudiot_registry_iam_policy](cloudiot_registry_iam_policy.md)
 * [composer_environment](composer_environment.md)
 * [composer_image_versions](composer_image_versions.md)
 * [compute_address](compute_address.md)
@@ -36,15 +56,18 @@ permalink: /data/
 * [compute_backend_service](compute_backend_service.md)
 * [compute_default_service_account](compute_default_service_account.md)
 * [compute_disk](compute_disk.md)
+* [compute_disk_iam_policy](compute_disk_iam_policy.md)
 * [compute_forwarding_rule](compute_forwarding_rule.md)
 * [compute_global_address](compute_global_address.md)
 * [compute_global_forwarding_rule](compute_global_forwarding_rule.md)
 * [compute_ha_vpn_gateway](compute_ha_vpn_gateway.md)
 * [compute_health_check](compute_health_check.md)
 * [compute_image](compute_image.md)
+* [compute_image_iam_policy](compute_image_iam_policy.md)
 * [compute_instance](compute_instance.md)
 * [compute_instance_group](compute_instance_group.md)
 * [compute_instance_group_manager](compute_instance_group_manager.md)
+* [compute_instance_iam_policy](compute_instance_iam_policy.md)
 * [compute_instance_serial_port](compute_instance_serial_port.md)
 * [compute_instance_template](compute_instance_template.md)
 * [compute_lb_ip_ranges](compute_lb_ip_ranges.md)
@@ -52,6 +75,7 @@ permalink: /data/
 * [compute_network_endpoint_group](compute_network_endpoint_group.md)
 * [compute_network_peering](compute_network_peering.md)
 * [compute_node_types](compute_node_types.md)
+* [compute_region_disk_iam_policy](compute_region_disk_iam_policy.md)
 * [compute_region_instance_group](compute_region_instance_group.md)
 * [compute_region_network_endpoint_group](compute_region_network_endpoint_group.md)
 * [compute_region_ssl_certificate](compute_region_ssl_certificate.md)
@@ -61,11 +85,14 @@ permalink: /data/
 * [compute_router_nat](compute_router_nat.md)
 * [compute_router_status](compute_router_status.md)
 * [compute_snapshot](compute_snapshot.md)
+* [compute_snapshot_iam_policy](compute_snapshot_iam_policy.md)
 * [compute_ssl_certificate](compute_ssl_certificate.md)
 * [compute_ssl_policy](compute_ssl_policy.md)
 * [compute_subnetwork](compute_subnetwork.md)
+* [compute_subnetwork_iam_policy](compute_subnetwork_iam_policy.md)
 * [compute_vpn_gateway](compute_vpn_gateway.md)
 * [compute_zones](compute_zones.md)
+* [container_analysis_note_iam_policy](container_analysis_note_iam_policy.md)
 * [container_attached_install_manifest](container_attached_install_manifest.md)
 * [container_attached_versions](container_attached_versions.md)
 * [container_aws_versions](container_aws_versions.md)
@@ -74,22 +101,55 @@ permalink: /data/
 * [container_engine_versions](container_engine_versions.md)
 * [container_registry_image](container_registry_image.md)
 * [container_registry_repository](container_registry_repository.md)
+* [data_catalog_entry_group_iam_policy](data_catalog_entry_group_iam_policy.md)
+* [data_catalog_policy_tag_iam_policy](data_catalog_policy_tag_iam_policy.md)
+* [data_catalog_tag_template_iam_policy](data_catalog_tag_template_iam_policy.md)
+* [data_catalog_taxonomy_iam_policy](data_catalog_taxonomy_iam_policy.md)
+* [data_fusion_instance_iam_policy](data_fusion_instance_iam_policy.md)
+* [dataplex_asset_iam_policy](dataplex_asset_iam_policy.md)
+* [dataplex_lake_iam_policy](dataplex_lake_iam_policy.md)
+* [dataplex_zone_iam_policy](dataplex_zone_iam_policy.md)
+* [dataproc_autoscaling_policy_iam_policy](dataproc_autoscaling_policy_iam_policy.md)
+* [dataproc_cluster_iam_policy](dataproc_cluster_iam_policy.md)
+* [dataproc_job_iam_policy](dataproc_job_iam_policy.md)
 * [dataproc_metastore_service](dataproc_metastore_service.md)
+* [dataproc_metastore_service_iam_policy](dataproc_metastore_service_iam_policy.md)
 * [datastream_static_ips](datastream_static_ips.md)
 * [dns_keys](dns_keys.md)
 * [dns_managed_zone](dns_managed_zone.md)
+* [dns_managed_zone_iam_policy](dns_managed_zone_iam_policy.md)
 * [dns_record_set](dns_record_set.md)
+* [endpoints_service_consumers_iam_policy](endpoints_service_consumers_iam_policy.md)
+* [endpoints_service_iam_policy](endpoints_service_iam_policy.md)
 * [folder](folder.md)
+* [folder_iam_policy](folder_iam_policy.md)
 * [folder_organization_policy](folder_organization_policy.md)
 * [folders](folders.md)
 * [game_services_game_server_deployment_rollout](game_services_game_server_deployment_rollout.md)
+* [gke_backup_backup_plan_iam_policy](gke_backup_backup_plan_iam_policy.md)
+* [gke_hub_membership_iam_policy](gke_hub_membership_iam_policy.md)
+* [healthcare_consent_store_iam_policy](healthcare_consent_store_iam_policy.md)
+* [healthcare_dataset_iam_policy](healthcare_dataset_iam_policy.md)
+* [healthcare_dicom_store_iam_policy](healthcare_dicom_store_iam_policy.md)
+* [healthcare_fhir_store_iam_policy](healthcare_fhir_store_iam_policy.md)
+* [healthcare_hl7_v2_store_iam_policy](healthcare_hl7_v2_store_iam_policy.md)
 * [iam_policy](iam_policy.md)
 * [iam_role](iam_role.md)
 * [iam_testable_permissions](iam_testable_permissions.md)
+* [iap_app_engine_service_iam_policy](iap_app_engine_service_iam_policy.md)
+* [iap_app_engine_version_iam_policy](iap_app_engine_version_iam_policy.md)
 * [iap_client](iap_client.md)
+* [iap_tunnel_iam_policy](iap_tunnel_iam_policy.md)
+* [iap_tunnel_instance_iam_policy](iap_tunnel_instance_iam_policy.md)
+* [iap_web_backend_service_iam_policy](iap_web_backend_service_iam_policy.md)
+* [iap_web_iam_policy](iap_web_iam_policy.md)
+* [iap_web_type_app_engine_iam_policy](iap_web_type_app_engine_iam_policy.md)
+* [iap_web_type_compute_iam_policy](iap_web_type_compute_iam_policy.md)
 * [kms_crypto_key](kms_crypto_key.md)
+* [kms_crypto_key_iam_policy](kms_crypto_key_iam_policy.md)
 * [kms_crypto_key_version](kms_crypto_key_version.md)
 * [kms_key_ring](kms_key_ring.md)
+* [kms_key_ring_iam_policy](kms_key_ring_iam_policy.md)
 * [kms_secret](kms_secret.md)
 * [kms_secret_ciphertext](kms_secret_ciphertext.md)
 * [logging_project_cmek_settings](logging_project_cmek_settings.md)
@@ -101,26 +161,40 @@ permalink: /data/
 * [monitoring_notification_channel](monitoring_notification_channel.md)
 * [monitoring_uptime_check_ips](monitoring_uptime_check_ips.md)
 * [netblock_ip_ranges](netblock_ip_ranges.md)
+* [notebooks_instance_iam_policy](notebooks_instance_iam_policy.md)
+* [notebooks_runtime_iam_policy](notebooks_runtime_iam_policy.md)
 * [organization](organization.md)
+* [organization_iam_policy](organization_iam_policy.md)
+* [privateca_ca_pool_iam_policy](privateca_ca_pool_iam_policy.md)
 * [privateca_certificate_authority](privateca_certificate_authority.md)
+* [privateca_certificate_template_iam_policy](privateca_certificate_template_iam_policy.md)
 * [project](project.md)
+* [project_iam_policy](project_iam_policy.md)
 * [project_organization_policy](project_organization_policy.md)
 * [project_service](project_service.md)
 * [projects](projects.md)
 * [pubsub_subscription](pubsub_subscription.md)
+* [pubsub_subscription_iam_policy](pubsub_subscription_iam_policy.md)
 * [pubsub_topic](pubsub_topic.md)
+* [pubsub_topic_iam_policy](pubsub_topic_iam_policy.md)
 * [redis_instance](redis_instance.md)
+* [scc_source_iam_policy](scc_source_iam_policy.md)
 * [secret_manager_secret](secret_manager_secret.md)
+* [secret_manager_secret_iam_policy](secret_manager_secret_iam_policy.md)
 * [secret_manager_secret_version](secret_manager_secret_version.md)
 * [secret_manager_secret_version_access](secret_manager_secret_version_access.md)
 * [service_account](service_account.md)
 * [service_account_access_token](service_account_access_token.md)
+* [service_account_iam_policy](service_account_iam_policy.md)
 * [service_account_id_token](service_account_id_token.md)
 * [service_account_jwt](service_account_jwt.md)
 * [service_account_key](service_account_key.md)
 * [service_networking_peered_dns_domain](service_networking_peered_dns_domain.md)
 * [sourcerepo_repository](sourcerepo_repository.md)
+* [sourcerepo_repository_iam_policy](sourcerepo_repository_iam_policy.md)
+* [spanner_database_iam_policy](spanner_database_iam_policy.md)
 * [spanner_instance](spanner_instance.md)
+* [spanner_instance_iam_policy](spanner_instance_iam_policy.md)
 * [sql_backup_run](sql_backup_run.md)
 * [sql_ca_certs](sql_ca_certs.md)
 * [sql_database](sql_database.md)
@@ -129,12 +203,16 @@ permalink: /data/
 * [sql_databases](sql_databases.md)
 * [sql_tiers](sql_tiers.md)
 * [storage_bucket](storage_bucket.md)
+* [storage_bucket_iam_policy](storage_bucket_iam_policy.md)
 * [storage_bucket_object](storage_bucket_object.md)
 * [storage_bucket_object_content](storage_bucket_object_content.md)
 * [storage_object_signed_url](storage_object_signed_url.md)
 * [storage_project_service_account](storage_project_service_account.md)
 * [storage_transfer_project_service_account](storage_transfer_project_service_account.md)
 * [tags_tag_key](tags_tag_key.md)
+* [tags_tag_key_iam_policy](tags_tag_key_iam_policy.md)
 * [tags_tag_value](tags_tag_value.md)
+* [tags_tag_value_iam_policy](tags_tag_value_iam_policy.md)
 * [tpu_tensorflow_versions](tpu_tensorflow_versions.md)
+* [vertex_ai_index](vertex_ai_index.md)
 * [vpc_access_connector](vpc_access_connector.md)
\ No newline at end of file
diff --git a/docs/4.x/data/kms_crypto_key_iam_policy.md b/docs/4.x/data/kms_crypto_key_iam_policy.md
new file mode 100644
index 0000000..2300aca
--- /dev/null
+++ b/docs/4.x/data/kms_crypto_key_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/kms_crypto_key_iam_policy/
+---
+
+# data.kms_crypto_key_iam_policy
+
+`kms_crypto_key_iam_policy` represents the `google_kms_crypto_key_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCryptoKeyId()`](#fn-withcryptokeyid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.kms_crypto_key_iam_policy.new` injects a new `data_google_kms_crypto_key_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.kms_crypto_key_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.kms_crypto_key_iam_policy` using the reference:
+
+    $._ref.data_google_kms_crypto_key_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_kms_crypto_key_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.kms_crypto_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `kms_crypto_key_iam_policy`
+Terraform data source.
+
+Unlike [google.data.kms_crypto_key_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `crypto_key_id` (`string`): Set the `crypto_key_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `kms_crypto_key_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCryptoKeyId
+
+```ts
+withCryptoKeyId()
+```
+
+`google.string.withCryptoKeyId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the crypto_key_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `crypto_key_id` field.
diff --git a/docs/4.x/data/kms_key_ring_iam_policy.md b/docs/4.x/data/kms_key_ring_iam_policy.md
new file mode 100644
index 0000000..e64dc03
--- /dev/null
+++ b/docs/4.x/data/kms_key_ring_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/kms_key_ring_iam_policy/
+---
+
+# data.kms_key_ring_iam_policy
+
+`kms_key_ring_iam_policy` represents the `google_kms_key_ring_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withKeyRingId()`](#fn-withkeyringid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.kms_key_ring_iam_policy.new` injects a new `data_google_kms_key_ring_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.kms_key_ring_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.kms_key_ring_iam_policy` using the reference:
+
+    $._ref.data_google_kms_key_ring_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_kms_key_ring_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.kms_key_ring_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `kms_key_ring_iam_policy`
+Terraform data source.
+
+Unlike [google.data.kms_key_ring_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `key_ring_id` (`string`): Set the `key_ring_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `kms_key_ring_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withKeyRingId
+
+```ts
+withKeyRingId()
+```
+
+`google.string.withKeyRingId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the key_ring_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `key_ring_id` field.
diff --git a/docs/4.x/data/notebooks_instance_iam_policy.md b/docs/4.x/data/notebooks_instance_iam_policy.md
new file mode 100644
index 0000000..a216e63
--- /dev/null
+++ b/docs/4.x/data/notebooks_instance_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/notebooks_instance_iam_policy/
+---
+
+# data.notebooks_instance_iam_policy
+
+`notebooks_instance_iam_policy` represents the `google_notebooks_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstanceName()`](#fn-withinstancename)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.notebooks_instance_iam_policy.new` injects a new `data_google_notebooks_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.notebooks_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.notebooks_instance_iam_policy` using the reference:
+
+    $._ref.data_google_notebooks_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_notebooks_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.notebooks_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `notebooks_instance_iam_policy`
+Terraform data source.
+
+Unlike [google.data.notebooks_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance_name` (`string`): Set the `instance_name` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `notebooks_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstanceName
+
+```ts
+withInstanceName()
+```
+
+`google.string.withInstanceName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance_name` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/notebooks_runtime_iam_policy.md b/docs/4.x/data/notebooks_runtime_iam_policy.md
new file mode 100644
index 0000000..fb0d70b
--- /dev/null
+++ b/docs/4.x/data/notebooks_runtime_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/notebooks_runtime_iam_policy/
+---
+
+# data.notebooks_runtime_iam_policy
+
+`notebooks_runtime_iam_policy` represents the `google_notebooks_runtime_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRuntimeName()`](#fn-withruntimename)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.notebooks_runtime_iam_policy.new` injects a new `data_google_notebooks_runtime_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.notebooks_runtime_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.notebooks_runtime_iam_policy` using the reference:
+
+    $._ref.data_google_notebooks_runtime_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_notebooks_runtime_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.notebooks_runtime_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `notebooks_runtime_iam_policy`
+Terraform data source.
+
+Unlike [google.data.notebooks_runtime_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `runtime_name` (`string`): Set the `runtime_name` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `notebooks_runtime_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRuntimeName
+
+```ts
+withRuntimeName()
+```
+
+`google.string.withRuntimeName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the runtime_name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `runtime_name` field.
diff --git a/docs/4.x/data/organization_iam_policy.md b/docs/4.x/data/organization_iam_policy.md
new file mode 100644
index 0000000..57be111
--- /dev/null
+++ b/docs/4.x/data/organization_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/organization_iam_policy/
+---
+
+# data.organization_iam_policy
+
+`organization_iam_policy` represents the `google_organization_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withOrgId()`](#fn-withorgid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.organization_iam_policy.new` injects a new `data_google_organization_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.organization_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.organization_iam_policy` using the reference:
+
+    $._ref.data_google_organization_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_organization_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.organization_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `organization_iam_policy`
+Terraform data source.
+
+Unlike [google.data.organization_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `org_id` (`string`): The numeric ID of the organization in which you want to manage the audit logging config.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `organization_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withOrgId
+
+```ts
+withOrgId()
+```
+
+`google.string.withOrgId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the org_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `org_id` field.
diff --git a/docs/4.x/data/privateca_ca_pool_iam_policy.md b/docs/4.x/data/privateca_ca_pool_iam_policy.md
new file mode 100644
index 0000000..64a7ae1
--- /dev/null
+++ b/docs/4.x/data/privateca_ca_pool_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/privateca_ca_pool_iam_policy/
+---
+
+# data.privateca_ca_pool_iam_policy
+
+`privateca_ca_pool_iam_policy` represents the `google_privateca_ca_pool_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCaPool()`](#fn-withcapool)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.privateca_ca_pool_iam_policy.new` injects a new `data_google_privateca_ca_pool_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.privateca_ca_pool_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.privateca_ca_pool_iam_policy` using the reference:
+
+    $._ref.data_google_privateca_ca_pool_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_privateca_ca_pool_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.privateca_ca_pool_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `privateca_ca_pool_iam_policy`
+Terraform data source.
+
+Unlike [google.data.privateca_ca_pool_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `ca_pool` (`string`): Set the `ca_pool` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `privateca_ca_pool_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCaPool
+
+```ts
+withCaPool()
+```
+
+`google.string.withCaPool` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the ca_pool field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `ca_pool` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/privateca_certificate_template_iam_policy.md b/docs/4.x/data/privateca_certificate_template_iam_policy.md
new file mode 100644
index 0000000..2eb1652
--- /dev/null
+++ b/docs/4.x/data/privateca_certificate_template_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/privateca_certificate_template_iam_policy/
+---
+
+# data.privateca_certificate_template_iam_policy
+
+`privateca_certificate_template_iam_policy` represents the `google_privateca_certificate_template_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCertificateTemplate()`](#fn-withcertificatetemplate)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.privateca_certificate_template_iam_policy.new` injects a new `data_google_privateca_certificate_template_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.privateca_certificate_template_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.privateca_certificate_template_iam_policy` using the reference:
+
+    $._ref.data_google_privateca_certificate_template_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_privateca_certificate_template_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting data source block.
+  - `location` (`string`): Set the `location` field on the resulting data source block. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.privateca_certificate_template_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `privateca_certificate_template_iam_policy`
+Terraform data source.
+
+Unlike [google.data.privateca_certificate_template_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `certificate_template` (`string`): Set the `certificate_template` field on the resulting object.
+  - `location` (`string`): Set the `location` field on the resulting object. When `null`, the `location` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `privateca_certificate_template_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withCertificateTemplate
+
+```ts
+withCertificateTemplate()
+```
+
+`google.string.withCertificateTemplate` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the certificate_template field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `certificate_template` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the location field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/project_iam_policy.md b/docs/4.x/data/project_iam_policy.md
new file mode 100644
index 0000000..4ea40b2
--- /dev/null
+++ b/docs/4.x/data/project_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/project_iam_policy/
+---
+
+# data.project_iam_policy
+
+`project_iam_policy` represents the `google_project_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.project_iam_policy.new` injects a new `data_google_project_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.project_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.project_iam_policy` using the reference:
+
+    $._ref.data_google_project_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_project_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.project_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `project_iam_policy`
+Terraform data source.
+
+Unlike [google.data.project_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `project_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/pubsub_subscription_iam_policy.md b/docs/4.x/data/pubsub_subscription_iam_policy.md
new file mode 100644
index 0000000..197aaaf
--- /dev/null
+++ b/docs/4.x/data/pubsub_subscription_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/pubsub_subscription_iam_policy/
+---
+
+# data.pubsub_subscription_iam_policy
+
+`pubsub_subscription_iam_policy` represents the `google_pubsub_subscription_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withSubscription()`](#fn-withsubscription)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.pubsub_subscription_iam_policy.new` injects a new `data_google_pubsub_subscription_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.pubsub_subscription_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.pubsub_subscription_iam_policy` using the reference:
+
+    $._ref.data_google_pubsub_subscription_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_pubsub_subscription_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `subscription` (`string`): Set the `subscription` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.pubsub_subscription_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `pubsub_subscription_iam_policy`
+Terraform data source.
+
+Unlike [google.data.pubsub_subscription_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `subscription` (`string`): Set the `subscription` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `pubsub_subscription_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withSubscription
+
+```ts
+withSubscription()
+```
+
+`google.string.withSubscription` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the subscription field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `subscription` field.
diff --git a/docs/4.x/data/pubsub_topic_iam_policy.md b/docs/4.x/data/pubsub_topic_iam_policy.md
new file mode 100644
index 0000000..d1c71ff
--- /dev/null
+++ b/docs/4.x/data/pubsub_topic_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/pubsub_topic_iam_policy/
+---
+
+# data.pubsub_topic_iam_policy
+
+`pubsub_topic_iam_policy` represents the `google_pubsub_topic_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTopic()`](#fn-withtopic)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.pubsub_topic_iam_policy.new` injects a new `data_google_pubsub_topic_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.pubsub_topic_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.pubsub_topic_iam_policy` using the reference:
+
+    $._ref.data_google_pubsub_topic_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_pubsub_topic_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `topic` (`string`): Set the `topic` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.pubsub_topic_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `pubsub_topic_iam_policy`
+Terraform data source.
+
+Unlike [google.data.pubsub_topic_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `topic` (`string`): Set the `topic` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `pubsub_topic_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTopic
+
+```ts
+withTopic()
+```
+
+`google.string.withTopic` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the topic field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `topic` field.
diff --git a/docs/4.x/data/scc_source_iam_policy.md b/docs/4.x/data/scc_source_iam_policy.md
new file mode 100644
index 0000000..d722586
--- /dev/null
+++ b/docs/4.x/data/scc_source_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/scc_source_iam_policy/
+---
+
+# data.scc_source_iam_policy
+
+`scc_source_iam_policy` represents the `google_scc_source_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withOrganization()`](#fn-withorganization)
+* [`fn withSource()`](#fn-withsource)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.scc_source_iam_policy.new` injects a new `data_google_scc_source_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.scc_source_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.scc_source_iam_policy` using the reference:
+
+    $._ref.data_google_scc_source_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_scc_source_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `organization` (`string`): Set the `organization` field on the resulting data source block.
+  - `source` (`string`): Set the `source` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.scc_source_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `scc_source_iam_policy`
+Terraform data source.
+
+Unlike [google.data.scc_source_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `organization` (`string`): Set the `organization` field on the resulting object.
+  - `source` (`string`): Set the `source` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `scc_source_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withOrganization
+
+```ts
+withOrganization()
+```
+
+`google.string.withOrganization` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the organization field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `organization` field.
+
+
+### fn withSource
+
+```ts
+withSource()
+```
+
+`google.string.withSource` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the source field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `source` field.
diff --git a/docs/4.x/data/secret_manager_secret_iam_policy.md b/docs/4.x/data/secret_manager_secret_iam_policy.md
new file mode 100644
index 0000000..cb167bf
--- /dev/null
+++ b/docs/4.x/data/secret_manager_secret_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/secret_manager_secret_iam_policy/
+---
+
+# data.secret_manager_secret_iam_policy
+
+`secret_manager_secret_iam_policy` represents the `google_secret_manager_secret_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withSecretId()`](#fn-withsecretid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.secret_manager_secret_iam_policy.new` injects a new `data_google_secret_manager_secret_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.secret_manager_secret_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.secret_manager_secret_iam_policy` using the reference:
+
+    $._ref.data_google_secret_manager_secret_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_secret_manager_secret_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `secret_id` (`string`): Set the `secret_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.secret_manager_secret_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `secret_manager_secret_iam_policy`
+Terraform data source.
+
+Unlike [google.data.secret_manager_secret_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `secret_id` (`string`): Set the `secret_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `secret_manager_secret_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withSecretId
+
+```ts
+withSecretId()
+```
+
+`google.string.withSecretId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the secret_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `secret_id` field.
diff --git a/docs/4.x/data/service_account_iam_policy.md b/docs/4.x/data/service_account_iam_policy.md
new file mode 100644
index 0000000..d9e48c7
--- /dev/null
+++ b/docs/4.x/data/service_account_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/service_account_iam_policy/
+---
+
+# data.service_account_iam_policy
+
+`service_account_iam_policy` represents the `google_service_account_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withServiceAccountId()`](#fn-withserviceaccountid)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.service_account_iam_policy.new` injects a new `data_google_service_account_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.service_account_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.service_account_iam_policy` using the reference:
+
+    $._ref.data_google_service_account_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_service_account_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.service_account_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `service_account_iam_policy`
+Terraform data source.
+
+Unlike [google.data.service_account_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `service_account_id` (`string`): Set the `service_account_id` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `service_account_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withServiceAccountId
+
+```ts
+withServiceAccountId()
+```
+
+`google.string.withServiceAccountId` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the service_account_id field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `service_account_id` field.
diff --git a/docs/4.x/data/sourcerepo_repository_iam_policy.md b/docs/4.x/data/sourcerepo_repository_iam_policy.md
new file mode 100644
index 0000000..b9f51cb
--- /dev/null
+++ b/docs/4.x/data/sourcerepo_repository_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/sourcerepo_repository_iam_policy/
+---
+
+# data.sourcerepo_repository_iam_policy
+
+`sourcerepo_repository_iam_policy` represents the `google_sourcerepo_repository_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRepository()`](#fn-withrepository)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.sourcerepo_repository_iam_policy.new` injects a new `data_google_sourcerepo_repository_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.sourcerepo_repository_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.sourcerepo_repository_iam_policy` using the reference:
+
+    $._ref.data_google_sourcerepo_repository_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_sourcerepo_repository_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.sourcerepo_repository_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `sourcerepo_repository_iam_policy`
+Terraform data source.
+
+Unlike [google.data.sourcerepo_repository_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `repository` (`string`): Set the `repository` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `sourcerepo_repository_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRepository
+
+```ts
+withRepository()
+```
+
+`google.string.withRepository` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the repository field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `repository` field.
diff --git a/docs/4.x/data/spanner_database_iam_policy.md b/docs/4.x/data/spanner_database_iam_policy.md
new file mode 100644
index 0000000..49b64bf
--- /dev/null
+++ b/docs/4.x/data/spanner_database_iam_policy.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/spanner_database_iam_policy/
+---
+
+# data.spanner_database_iam_policy
+
+`spanner_database_iam_policy` represents the `google_spanner_database_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatabase()`](#fn-withdatabase)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.spanner_database_iam_policy.new` injects a new `data_google_spanner_database_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.spanner_database_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.spanner_database_iam_policy` using the reference:
+
+    $._ref.data_google_spanner_database_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_spanner_database_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `database` (`string`): Set the `database` field on the resulting data source block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.spanner_database_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `spanner_database_iam_policy`
+Terraform data source.
+
+Unlike [google.data.spanner_database_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `database` (`string`): Set the `database` field on the resulting object.
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `spanner_database_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withDatabase
+
+```ts
+withDatabase()
+```
+
+`google.string.withDatabase` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the database field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `database` field.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/spanner_instance_iam_policy.md b/docs/4.x/data/spanner_instance_iam_policy.md
new file mode 100644
index 0000000..ebce621
--- /dev/null
+++ b/docs/4.x/data/spanner_instance_iam_policy.md
@@ -0,0 +1,111 @@
+---
+permalink: /data/spanner_instance_iam_policy/
+---
+
+# data.spanner_instance_iam_policy
+
+`spanner_instance_iam_policy` represents the `google_spanner_instance_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withInstance()`](#fn-withinstance)
+* [`fn withProject()`](#fn-withproject)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.spanner_instance_iam_policy.new` injects a new `data_google_spanner_instance_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.spanner_instance_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.spanner_instance_iam_policy` using the reference:
+
+    $._ref.data_google_spanner_instance_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_spanner_instance_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `instance` (`string`): Set the `instance` field on the resulting data source block.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.spanner_instance_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `spanner_instance_iam_policy`
+Terraform data source.
+
+Unlike [google.data.spanner_instance_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `instance` (`string`): Set the `instance` field on the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `spanner_instance_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withInstance
+
+```ts
+withInstance()
+```
+
+`google.string.withInstance` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the instance field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `instance` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
diff --git a/docs/4.x/data/storage_bucket_iam_policy.md b/docs/4.x/data/storage_bucket_iam_policy.md
new file mode 100644
index 0000000..b1395d8
--- /dev/null
+++ b/docs/4.x/data/storage_bucket_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/storage_bucket_iam_policy/
+---
+
+# data.storage_bucket_iam_policy
+
+`storage_bucket_iam_policy` represents the `google_storage_bucket_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withBucket()`](#fn-withbucket)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.storage_bucket_iam_policy.new` injects a new `data_google_storage_bucket_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.storage_bucket_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.storage_bucket_iam_policy` using the reference:
+
+    $._ref.data_google_storage_bucket_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_storage_bucket_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `bucket` (`string`): Set the `bucket` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.storage_bucket_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `storage_bucket_iam_policy`
+Terraform data source.
+
+Unlike [google.data.storage_bucket_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `bucket` (`string`): Set the `bucket` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `storage_bucket_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withBucket
+
+```ts
+withBucket()
+```
+
+`google.string.withBucket` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the bucket field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `bucket` field.
diff --git a/docs/4.x/data/tags_tag_key_iam_policy.md b/docs/4.x/data/tags_tag_key_iam_policy.md
new file mode 100644
index 0000000..1dbaffe
--- /dev/null
+++ b/docs/4.x/data/tags_tag_key_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/tags_tag_key_iam_policy/
+---
+
+# data.tags_tag_key_iam_policy
+
+`tags_tag_key_iam_policy` represents the `google_tags_tag_key_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withTagKey()`](#fn-withtagkey)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.tags_tag_key_iam_policy.new` injects a new `data_google_tags_tag_key_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.tags_tag_key_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.tags_tag_key_iam_policy` using the reference:
+
+    $._ref.data_google_tags_tag_key_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_tags_tag_key_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `tag_key` (`string`): Set the `tag_key` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.tags_tag_key_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `tags_tag_key_iam_policy`
+Terraform data source.
+
+Unlike [google.data.tags_tag_key_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `tag_key` (`string`): Set the `tag_key` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `tags_tag_key_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withTagKey
+
+```ts
+withTagKey()
+```
+
+`google.string.withTagKey` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the tag_key field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `tag_key` field.
diff --git a/docs/4.x/data/tags_tag_value_iam_policy.md b/docs/4.x/data/tags_tag_value_iam_policy.md
new file mode 100644
index 0000000..328f4e0
--- /dev/null
+++ b/docs/4.x/data/tags_tag_value_iam_policy.md
@@ -0,0 +1,92 @@
+---
+permalink: /data/tags_tag_value_iam_policy/
+---
+
+# data.tags_tag_value_iam_policy
+
+`tags_tag_value_iam_policy` represents the `google_tags_tag_value_iam_policy` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withTagValue()`](#fn-withtagvalue)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.tags_tag_value_iam_policy.new` injects a new `data_google_tags_tag_value_iam_policy` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.tags_tag_value_iam_policy.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.tags_tag_value_iam_policy` using the reference:
+
+    $._ref.data_google_tags_tag_value_iam_policy.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_tags_tag_value_iam_policy.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `tag_value` (`string`): Set the `tag_value` field on the resulting data source block.
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.tags_tag_value_iam_policy.newAttrs` constructs a new object with attributes and blocks configured for the `tags_tag_value_iam_policy`
+Terraform data source.
+
+Unlike [google.data.tags_tag_value_iam_policy.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `tag_value` (`string`): Set the `tag_value` field on the resulting object.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `tags_tag_value_iam_policy` data source into the root Terraform configuration.
+
+
+### fn withTagValue
+
+```ts
+withTagValue()
+```
+
+`google.string.withTagValue` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the tag_value field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `tag_value` field.
diff --git a/docs/4.x/data/vertex_ai_index.md b/docs/4.x/data/vertex_ai_index.md
new file mode 100644
index 0000000..e9fba2f
--- /dev/null
+++ b/docs/4.x/data/vertex_ai_index.md
@@ -0,0 +1,130 @@
+---
+permalink: /data/vertex_ai_index/
+---
+
+# data.vertex_ai_index
+
+`vertex_ai_index` represents the `google_vertex_ai_index` Terraform data source.
+
+
+
+This package contains functions and utilities for setting up the data source using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withName()`](#fn-withname)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google.data.vertex_ai_index.new` injects a new `data_google_vertex_ai_index` Terraform `data source`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google.data.vertex_ai_index.new('some_id')
+
+You can get the reference to the `id` field of the created `google.data.vertex_ai_index` using the reference:
+
+    $._ref.data_google_vertex_ai_index.some_id.get('id')
+
+This is the same as directly entering `"${ data_google_vertex_ai_index.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block.
+  - `name` (`string`): The resource name of the Index.
+  - `project` (`string`): Set the `project` field on the resulting data source block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): The region of the index. eg us-central1
+
+**Returns**:
+- A mixin object that injects the new data source into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google.data.vertex_ai_index.newAttrs` constructs a new object with attributes and blocks configured for the `vertex_ai_index`
+Terraform data source.
+
+Unlike [google.data.vertex_ai_index.new](#fn-new), this function will not inject the `data source`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `name` (`string`): The resource name of the Index.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): The region of the index. eg us-central1
+
+**Returns**:
+  - An attribute object that can be used with [tf.withData](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withdata) to construct a new `vertex_ai_index` data source into the root Terraform configuration.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the name field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the project field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform data source block to set or update the region field.
+
+
+
+**Args**:
+  - `dataSrcLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
diff --git a/docs/4.x/data_loss_prevention_job_trigger.md b/docs/4.x/data_loss_prevention_job_trigger.md
index df21b57..c9fec09 100644
--- a/docs/4.x/data_loss_prevention_job_trigger.md
+++ b/docs/4.x/data_loss_prevention_job_trigger.md
@@ -117,8 +117,12 @@ This package contains functions and utilities for setting up the resource using
     * [`fn new()`](#fn-inspect_jobstorage_confignew)
     * [`obj inspect_job.storage_config.big_query_options`](#obj-inspect_jobstorage_configbig_query_options)
       * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsnew)
+      * [`obj inspect_job.storage_config.big_query_options.excluded_fields`](#obj-inspect_jobstorage_configbig_query_optionsexcluded_fields)
+        * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsexcluded_fieldsnew)
       * [`obj inspect_job.storage_config.big_query_options.identifying_fields`](#obj-inspect_jobstorage_configbig_query_optionsidentifying_fields)
         * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsidentifying_fieldsnew)
+      * [`obj inspect_job.storage_config.big_query_options.included_fields`](#obj-inspect_jobstorage_configbig_query_optionsincluded_fields)
+        * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionsincluded_fieldsnew)
       * [`obj inspect_job.storage_config.big_query_options.table_reference`](#obj-inspect_jobstorage_configbig_query_optionstable_reference)
         * [`fn new()`](#fn-inspect_jobstorage_configbig_query_optionstable_referencenew)
     * [`obj inspect_job.storage_config.cloud_storage_options`](#obj-inspect_jobstorage_configcloud_storage_options)
@@ -1565,14 +1569,40 @@ Must be between 0 and 100, inclusively. Both 0 and 100 means no limit. Defaults
 rowsLimit and rowsLimitPercent can be specified. Cannot be used in conjunction with TimespanConfig. When `null`, the `rows_limit_percent` field will be omitted from the resulting object.
   - `sample_method` (`string`): How to sample rows if not all rows are scanned. Meaningful only when used in conjunction with either
 rowsLimit or rowsLimitPercent. If not specified, rows are scanned in the order BigQuery reads them. Default value: "TOP" Possible values: ["TOP", "RANDOM_START"] When `null`, the `sample_method` field will be omitted from the resulting object.
+  - `excluded_fields` (`list[obj]`): References to fields excluded from scanning.
+This allows you to skip inspection of entire columns which you know have no findings. When `null`, the `excluded_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new](#fn-inspect_jobinspect_jobstorage_configexcluded_fieldsnew) constructor.
   - `identifying_fields` (`list[obj]`): Specifies the BigQuery fields that will be returned with findings.
 If not specified, no identifying fields will be returned for findings. When `null`, the `identifying_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.identifying_fields.new](#fn-inspect_jobinspect_jobstorage_configidentifying_fieldsnew) constructor.
+  - `included_fields` (`list[obj]`): Limit scanning only to these fields. When `null`, the `included_fields` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new](#fn-inspect_jobinspect_jobstorage_configincluded_fieldsnew) constructor.
   - `table_reference` (`list[obj]`): Set of files to scan. When `null`, the `table_reference` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.table_reference.new](#fn-inspect_jobinspect_jobstorage_configtable_referencenew) constructor.
 
 **Returns**:
   - An attribute object that represents the `big_query_options` sub block.
 
 
+## obj inspect_job.storage_config.big_query_options.excluded_fields
+
+
+
+### fn inspect_job.storage_config.big_query_options.excluded_fields.new
+
+```ts
+new()
+```
+
+
+`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.excluded_fields.new` constructs a new object with attributes and blocks configured for the `excluded_fields`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): Name describing the field excluded from scanning.
+
+**Returns**:
+  - An attribute object that represents the `excluded_fields` sub block.
+
+
 ## obj inspect_job.storage_config.big_query_options.identifying_fields
 
 
@@ -1596,6 +1626,29 @@ Terraform sub block.
   - An attribute object that represents the `identifying_fields` sub block.
 
 
+## obj inspect_job.storage_config.big_query_options.included_fields
+
+
+
+### fn inspect_job.storage_config.big_query_options.included_fields.new
+
+```ts
+new()
+```
+
+
+`google.data_loss_prevention_job_trigger.inspect_job.storage_config.big_query_options.included_fields.new` constructs a new object with attributes and blocks configured for the `included_fields`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): Name describing the field to which scanning is limited.
+
+**Returns**:
+  - An attribute object that represents the `included_fields` sub block.
+
+
 ## obj inspect_job.storage_config.big_query_options.table_reference
 
 
diff --git a/docs/4.x/datastream_stream.md b/docs/4.x/datastream_stream.md
index 271daa6..9704cf2 100644
--- a/docs/4.x/datastream_stream.md
+++ b/docs/4.x/datastream_stream.md
@@ -1103,6 +1103,8 @@ Terraform sub block.
 
 
 **Args**:
+  - `max_concurrent_backfill_tasks` (`number`): Maximum number of concurrent backfill tasks. The number should be non negative.
+If not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_backfill_tasks` field will be omitted from the resulting object.
   - `max_concurrent_cdc_tasks` (`number`): Maximum number of concurrent CDC tasks. The number should be non negative.
 If not set (or set to 0), the system's default value will be used. When `null`, the `max_concurrent_cdc_tasks` field will be omitted from the resulting object.
   - `exclude_objects` (`list[obj]`): MySQL objects to exclude from the stream. When `null`, the `exclude_objects` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.datastream_stream.source_config.mysql_source_config.exclude_objects.new](#fn-source_configsource_configexclude_objectsnew) constructor.
diff --git a/docs/4.x/dns_record_set.md b/docs/4.x/dns_record_set.md
index 4faca4d..6ff6456 100644
--- a/docs/4.x/dns_record_set.md
+++ b/docs/4.x/dns_record_set.md
@@ -347,7 +347,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
@@ -450,7 +450,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
@@ -502,7 +502,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
@@ -579,7 +579,7 @@ Terraform sub block.
 **Args**:
   - `ip_address` (`string`): The frontend IP address of the load balancer.
   - `ip_protocol` (`string`): The configured IP protocol of the load balancer. This value is case-sensitive. Possible values: ["tcp", "udp"]
-  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb"]
+  - `load_balancer_type` (`string`): The type of load balancer. This value is case-sensitive. Possible values: ["regionalL4ilb", "regionalL7ilb]
   - `network_url` (`string`): The fully qualified url of the network in which the load balancer belongs. This should be formatted like `https://www.googleapis.com/compute/v1/projects/{project}/global/networks/{network}`.
   - `port` (`string`): The configured port of the load balancer.
   - `project` (`string`): The ID of the project in which the load balancer belongs.
diff --git a/docs/4.x/monitoring_alert_policy.md b/docs/4.x/monitoring_alert_policy.md
index 405f8a0..3e16eed 100644
--- a/docs/4.x/monitoring_alert_policy.md
+++ b/docs/4.x/monitoring_alert_policy.md
@@ -31,6 +31,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withUserLabels()`](#fn-withuserlabels)
 * [`obj alert_strategy`](#obj-alert_strategy)
   * [`fn new()`](#fn-alert_strategynew)
+  * [`obj alert_strategy.notification_channel_strategy`](#obj-alert_strategynotification_channel_strategy)
+    * [`fn new()`](#fn-alert_strategynotification_channel_strategynew)
   * [`obj alert_strategy.notification_rate_limit`](#obj-alert_strategynotification_rate_limit)
     * [`fn new()`](#fn-alert_strategynotification_rate_limitnew)
 * [`obj conditions`](#obj-conditions)
@@ -53,6 +55,8 @@ This package contains functions and utilities for setting up the resource using
       * [`fn new()`](#fn-conditionscondition_thresholdaggregationsnew)
     * [`obj conditions.condition_threshold.denominator_aggregations`](#obj-conditionscondition_thresholddenominator_aggregations)
       * [`fn new()`](#fn-conditionscondition_thresholddenominator_aggregationsnew)
+    * [`obj conditions.condition_threshold.forecast_options`](#obj-conditionscondition_thresholdforecast_options)
+      * [`fn new()`](#fn-conditionscondition_thresholdforecast_optionsnew)
     * [`obj conditions.condition_threshold.trigger`](#obj-conditionscondition_thresholdtrigger)
       * [`fn new()`](#fn-conditionscondition_thresholdtriggernew)
 * [`obj documentation`](#obj-documentation)
@@ -440,6 +444,8 @@ Terraform sub block.
 
 **Args**:
   - `auto_close` (`string`): If an alert policy that was active has no data for this long, any open incidents will close. When `null`, the `auto_close` field will be omitted from the resulting object.
+  - `notification_channel_strategy` (`list[obj]`): Control over how the notification channels in 'notification_channels'
+are notified when this alert fires, on a per-channel basis. When `null`, the `notification_channel_strategy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.alert_strategy.notification_channel_strategy.new](#fn-alert_strategynotification_channel_strategynew) constructor.
   - `notification_rate_limit` (`list[obj]`): Required for alert policies with a LogMatch condition.
 This limit is not implemented for alert policies that are not log-based. When `null`, the `notification_rate_limit` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.alert_strategy.notification_rate_limit.new](#fn-alert_strategynotification_rate_limitnew) constructor.
 
@@ -447,6 +453,33 @@ This limit is not implemented for alert policies that are not log-based. When `n
   - An attribute object that represents the `alert_strategy` sub block.
 
 
+## obj alert_strategy.notification_channel_strategy
+
+
+
+### fn alert_strategy.notification_channel_strategy.new
+
+```ts
+new()
+```
+
+
+`google.monitoring_alert_policy.alert_strategy.notification_channel_strategy.new` constructs a new object with attributes and blocks configured for the `notification_channel_strategy`
+Terraform sub block.
+
+
+
+**Args**:
+  - `notification_channel_names` (`list`): The notification channels that these settings apply to. Each of these
+correspond to the name field in one of the NotificationChannel objects
+referenced in the notification_channels field of this AlertPolicy. The format is
+'projects/[PROJECT_ID_OR_NUMBER]/notificationChannels/[CHANNEL_ID]' When `null`, the `notification_channel_names` field will be omitted from the resulting object.
+  - `renotify_interval` (`string`): The frequency at which to send reminder notifications for open incidents. When `null`, the `renotify_interval` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `notification_channel_strategy` sub block.
+
+
 ## obj alert_strategy.notification_rate_limit
 
 
@@ -889,6 +922,12 @@ labels.This field is similar to the one in
 the MetricService.ListTimeSeries request. It
 is advisable to use the ListTimeSeries
 method when debugging this field. When `null`, the `denominator_aggregations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.denominator_aggregations.new](#fn-conditionsconditionsdenominator_aggregationsnew) constructor.
+  - `forecast_options` (`list[obj]`): When this field is present, the 'MetricThreshold'
+condition forecasts whether the time series is
+predicted to violate the threshold within the
+'forecastHorizon'. When this field is not set, the
+'MetricThreshold' tests the current value of the
+timeseries against the threshold. When `null`, the `forecast_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.monitoring_alert_policy.conditions.condition_threshold.forecast_options.new](#fn-conditionsconditionsforecast_optionsnew) constructor.
   - `trigger` (`list[obj]`): The number/percent of time series for which
 the comparison must hold in order for the
 condition to trigger. If unspecified, then
@@ -1092,6 +1131,34 @@ returned. Possible values: ["ALIGN_NONE", "ALIGN_DELTA", "AL
   - An attribute object that represents the `denominator_aggregations` sub block.
 
 
+## obj conditions.condition_threshold.forecast_options
+
+
+
+### fn conditions.condition_threshold.forecast_options.new
+
+```ts
+new()
+```
+
+
+`google.monitoring_alert_policy.conditions.condition_threshold.forecast_options.new` constructs a new object with attributes and blocks configured for the `forecast_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `forecast_horizon` (`string`): The length of time into the future to forecast
+whether a timeseries will violate the threshold.
+If the predicted value is found to violate the
+threshold, and the violation is observed in all
+forecasts made for the Configured 'duration',
+then the timeseries is considered to be failing.
+
+**Returns**:
+  - An attribute object that represents the `forecast_options` sub block.
+
+
 ## obj conditions.condition_threshold.trigger
 
 
diff --git a/docs/4.x/privateca_ca_pool.md b/docs/4.x/privateca_ca_pool.md
index ba5260a..ce3c1f8 100644
--- a/docs/4.x/privateca_ca_pool.md
+++ b/docs/4.x/privateca_ca_pool.md
@@ -831,6 +831,9 @@ Terraform sub block.
 
 
 **Args**:
+  - `encoding_format` (`string`): Specifies the encoding format of each CertificateAuthority's CA
+certificate and CRLs. If this is omitted, CA certificates and CRLs
+will be published in PEM. Possible values: ["PEM", "DER"] When `null`, the `encoding_format` field will be omitted from the resulting object.
   - `publish_ca_cert` (`bool`): When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"
 X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding
 X.509 extension will not be written in issued certificates.
diff --git a/docs/4.x/sql_database_instance.md b/docs/4.x/sql_database_instance.md
index 7eaa375..6d5146a 100644
--- a/docs/4.x/sql_database_instance.md
+++ b/docs/4.x/sql_database_instance.md
@@ -45,6 +45,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-settingsnew)
   * [`obj settings.active_directory_config`](#obj-settingsactive_directory_config)
     * [`fn new()`](#fn-settingsactive_directory_confignew)
+  * [`obj settings.advanced_machine_features`](#obj-settingsadvanced_machine_features)
+    * [`fn new()`](#fn-settingsadvanced_machine_featuresnew)
   * [`obj settings.backup_configuration`](#obj-settingsbackup_configuration)
     * [`fn new()`](#fn-settingsbackup_configurationnew)
     * [`obj settings.backup_configuration.backup_retention_settings`](#obj-settingsbackup_configurationbackup_retention_settings)
@@ -621,6 +623,7 @@ is set to true. Defaults to ZONAL. When `null`, the `availability_type` field wi
   - `time_zone` (`string`): The time_zone to be used by the database engine (supported only for SQL Server), in SQL Server timezone format. When `null`, the `time_zone` field will be omitted from the resulting object.
   - `user_labels` (`obj`): A set of key/value user label pairs to assign to the instance. When `null`, the `user_labels` field will be omitted from the resulting object.
   - `active_directory_config` (`list[obj]`): Set the `active_directory_config` field on the resulting object. When `null`, the `active_directory_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.active_directory_config.new](#fn-settingsactive_directory_confignew) constructor.
+  - `advanced_machine_features` (`list[obj]`): Set the `advanced_machine_features` field on the resulting object. When `null`, the `advanced_machine_features` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.advanced_machine_features.new](#fn-settingsadvanced_machine_featuresnew) constructor.
   - `backup_configuration` (`list[obj]`): Set the `backup_configuration` field on the resulting object. When `null`, the `backup_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.backup_configuration.new](#fn-settingsbackup_configurationnew) constructor.
   - `database_flags` (`list[obj]`): Set the `database_flags` field on the resulting object. When `null`, the `database_flags` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.database_flags.new](#fn-settingsdatabase_flagsnew) constructor.
   - `deny_maintenance_period` (`list[obj]`): Set the `deny_maintenance_period` field on the resulting object. When `null`, the `deny_maintenance_period` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.sql_database_instance.settings.deny_maintenance_period.new](#fn-settingsdeny_maintenance_periodnew) constructor.
@@ -658,6 +661,29 @@ Terraform sub block.
   - An attribute object that represents the `active_directory_config` sub block.
 
 
+## obj settings.advanced_machine_features
+
+
+
+### fn settings.advanced_machine_features.new
+
+```ts
+new()
+```
+
+
+`google.sql_database_instance.settings.advanced_machine_features.new` constructs a new object with attributes and blocks configured for the `advanced_machine_features`
+Terraform sub block.
+
+
+
+**Args**:
+  - `threads_per_core` (`number`): The number of threads per physical core. Can be 1 or 2. When `null`, the `threads_per_core` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `advanced_machine_features` sub block.
+
+
 ## obj settings.backup_configuration
 
 
diff --git a/docs/4.x/storage_transfer_job.md b/docs/4.x/storage_transfer_job.md
index 178325a..26346e9 100644
--- a/docs/4.x/storage_transfer_job.md
+++ b/docs/4.x/storage_transfer_job.md
@@ -465,6 +465,7 @@ Terraform sub block.
 
 **Args**:
   - `bucket_name` (`string`): S3 Bucket name.
+  - `path` (`string`): S3 Bucket path in bucket to transfer. When `null`, the `path` field will be omitted from the resulting object.
   - `role_arn` (`string`): The Amazon Resource Name (ARN) of the role to support temporary credentials via 'AssumeRoleWithWebIdentity'. For more information about ARNs, see [IAM ARNs](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns). When a role ARN is provided, Transfer Service fetches temporary credentials for the session using a 'AssumeRoleWithWebIdentity' call for the provided role using the [GoogleServiceAccount][] for this project. When `null`, the `role_arn` field will be omitted from the resulting object.
   - `aws_access_key` (`list[obj]`): AWS credentials block. When `null`, the `aws_access_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google.storage_transfer_job.transfer_spec.aws_s3_data_source.aws_access_key.new](#fn-transfer_spectransfer_specaws_access_keynew) constructor.