cloud-mu 1.9.0.pre.beta → 2.0.0.pre.alpha

data/modules/mu/kittens.rb

@@ -137,7 +137,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -238,6 +238,11 @@ class Config
 			# @return [String]
 			attr_accessor :creation_style
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::collections::dependencies>]
@@ -245,10 +250,15 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
 			# @!endgroup
 		end
 	end
@@ -448,13 +458,13 @@ class Config
 				# @return [String]
 				attr_accessor :db_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -743,7 +753,7 @@ class Config
 				# @return [Integer]
 				attr_accessor :weight
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
@@ -823,18 +833,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -938,7 +953,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -1050,7 +1065,7 @@ class Config
 			attr_accessor :storage
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -1069,7 +1084,7 @@ class Config
 			# @return [Boolean]
 			attr_accessor :scrub_mu_isms
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -1259,7 +1274,7 @@ class Config
 			# @return [Integer]
 			attr_accessor :cluster_node_count
 			
-			# Rather to create a database cluster. This only applies to aurora
+			# Create a database cluster instead of a standalone database.
 			#
 			# @return [Boolean]
 			attr_accessor :create_cluster
@@ -1276,12 +1291,22 @@ class Config
 			# @see BasketofKittens::databases::auth_vault
 			attr_accessor :auth_vault
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::databases::dependencies>]
 			# @see BasketofKittens::databases::dependencies
 			attr_accessor :dependencies
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS & CLOUDFORMATION ONLY**
 			# The database parameter group parameter to change and when to apply the change.
 			#
@@ -1498,7 +1523,7 @@ class Config
 				# @return [Integer]
 				attr_accessor :weight
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
@@ -1553,18 +1578,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -1595,7 +1625,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -1630,7 +1660,7 @@ class Config
 			attr_accessor :name
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -1667,11 +1697,21 @@ class Config
 			# @see BasketofKittens::dnszones::vpcs
 			attr_accessor :vpcs
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::dnszones::dependencies>]
 			# @see BasketofKittens::dnszones::dependencies
 			attr_accessor :dependencies
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
 			# @!endgroup
 		end
 	end
@@ -1686,18 +1726,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -1812,7 +1857,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -1891,6 +1936,11 @@ class Config
 			# @see BasketofKittens::firewall_rules::rules
 			attr_accessor :rules
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::firewall_rules::dependencies>]
@@ -1898,11 +1948,16 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **GOOGLE ONLY** - 
 			# +GOOGLE+: The project into which to deploy resources
 			#
@@ -2371,7 +2426,7 @@ class Config
 				# @return [Integer]
 				attr_accessor :weight
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
@@ -2712,18 +2767,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -2948,7 +3008,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -3010,7 +3070,7 @@ class Config
 			attr_accessor :listeners
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -3076,7 +3136,7 @@ class Config
 			# @see BasketofKittens::loadbalancers::ingress_rules
 			attr_accessor :ingress_rules
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -3157,12 +3217,22 @@ class Config
 			# @see BasketofKittens::loadbalancers::targetgroups
 			attr_accessor :targetgroups
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::loadbalancers::dependencies>]
 			# @see BasketofKittens::loadbalancers::dependencies
 			attr_accessor :dependencies
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **GOOGLE ONLY**
 			# A named network port for a Google instance group, used for health checks and forwarding targets.
 			#
@@ -3386,7 +3456,7 @@ class Config
 				# @return [Integer]
 				attr_accessor :weight
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
@@ -3500,18 +3570,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -4196,7 +4271,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -4289,7 +4364,7 @@ class Config
 			attr_accessor :name
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -4338,7 +4413,7 @@ class Config
 			# @return [Boolean]
 			attr_accessor :scrub_mu_isms
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -4355,6 +4430,18 @@ class Config
 			# @return [String]
 			attr_accessor :groomer
 			
+			# **Default: `true`** - 
+			# Whether to run a host configuration agent, e.g. Chef, when bootstrapping
+			#
+			# @return [Boolean]
+			attr_accessor :groom
+			
+			# **Default: `1800`** - 
+			# Maximum execution time for a groomer run
+			#
+			# @return [Integer]
+			attr_accessor :groomer_timeout
+			
 			# **Default: `false`** - 
 			# Remove pre-existing groomer agents from node before bootstrapping. Especially useful for image builds.
 			#
@@ -4508,12 +4595,22 @@ class Config
 			# @see BasketofKittens::servers::existing_deploys
 			attr_accessor :existing_deploys
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::servers::dependencies>]
 			# @see BasketofKittens::servers::dependencies
 			attr_accessor :dependencies
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS & CLOUDFORMATION ONLY** - 
 			# +AWS+: The Amazon EC2 AMI on which to base this instance. Will use the default appropriate for the platform, if not specified.
 			#+CLOUDFORMATION+: The Amazon EC2 AMI on which to base this instance. Will use the default appropriate for the platform, if not specified.
@@ -4969,7 +5066,7 @@ class Config
 				# @return [Integer]
 				attr_accessor :weight
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
@@ -5049,18 +5146,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -5681,7 +5783,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -6219,7 +6321,7 @@ class Config
 			attr_accessor :name
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -6294,7 +6396,7 @@ class Config
 			# @return [Array<String>]
 			attr_accessor :zones
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -6311,6 +6413,18 @@ class Config
 			# @return [String]
 			attr_accessor :groomer
 			
+			# **Default: `true`** - 
+			# Whether to run a host configuration agent, e.g. Chef, when bootstrapping
+			#
+			# @return [Boolean]
+			attr_accessor :groom
+			
+			# **Default: `1800`** - 
+			# Maximum execution time for a groomer run
+			#
+			# @return [Integer]
+			attr_accessor :groomer_timeout
+			
 			# **Default: `false`** - 
 			# Remove pre-existing groomer agents from node before bootstrapping. Especially useful for image builds.
 			#
@@ -6452,12 +6566,22 @@ class Config
 			# @see BasketofKittens::server_pools::existing_deploys
 			attr_accessor :existing_deploys
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::server_pools::dependencies>]
 			# @see BasketofKittens::server_pools::dependencies
 			attr_accessor :dependencies
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS & CLOUDFORMATION ONLY**,
 			# **Default: `true`** - 
 			# +AWS+: Generate a unique IAM profile for this Server or ServerPool.
@@ -6604,7 +6728,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -6665,18 +6789,23 @@ class Config
 					# @return [String]
 					attr_accessor :vpc_id
 					
+					# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+					#
+					# @return [String]
+					attr_accessor :credentials
+					
 					# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 					#
 					# @return [String]
 					attr_accessor :vpc_name
 					
-					# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+					# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 					#
 					# @return [String]
 					attr_accessor :region
 					
 					# **Default: `AWS`**,
-					# **Must be one of: `AWS, CloudFormation, Google`**
+					# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 					#
 					# @return [String]
 					attr_accessor :cloud
@@ -6907,7 +7036,7 @@ class Config
 			# @!group Optional parameters
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -7017,6 +7146,16 @@ class Config
 			# @see BasketofKittens::vpcs::dhcp
 			attr_accessor :dhcp
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS & CLOUDFORMATION ONLY**,
 			# **Default: `all`**,
 			# **Must be one of: `accept, reject, all`** - 
@@ -7042,7 +7181,7 @@ class Config
 			attr_accessor :enable_traffic_logging
 			
 			# **GOOGLE ONLY**,
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [Array<String>]
 			attr_accessor :regions
@@ -7354,7 +7493,7 @@ class Config
 				# @return [Integer]
 				attr_accessor :weight
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
@@ -7580,18 +7719,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -7685,7 +7829,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -7731,7 +7875,7 @@ class Config
 			attr_accessor :size
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -7744,7 +7888,7 @@ class Config
 			# @return [Boolean]
 			attr_accessor :scrub_mu_isms
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -7872,11 +8016,21 @@ class Config
 			# @return [String]
 			attr_accessor :parameter_group_family
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::cache_clusters::dependencies>]
 			# @see BasketofKittens::cache_clusters::dependencies
 			attr_accessor :dependencies
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
 			# @!endgroup
 		end
 	end
@@ -7930,7 +8084,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -8045,6 +8199,11 @@ class Config
 			# @return [String]
 			attr_accessor :notification_endpoint
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::alarms::dependencies>]
@@ -8052,15 +8211,43 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
 			# @!endgroup
 		end
 	end
 	class BasketofKittens
-		class notifications
+		class notifiers
+			# A list of people or resources which should receive notifications
+			class subscriptions
+				# @!group Required parameters
+				
+				# **REQUIRED** - 
+				# The endpoint which should be subscribed to this notifier, typically an email address or SMS-enabled phone number.
+				#
+				# @return [String]
+				attr_accessor :endpoint
+				# @!endgroup
+				# @!group Optional parameters
+				
+				# **Must be one of: `http, https, email, email-json, sms, sqs, application, lambda`**
+				# 
+				#
+				# @return [String]
+				attr_accessor :type
+				# @!endgroup
+			end
+		end
+	end
+	class BasketofKittens
+		class notifiers
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			class dependencies
 				# @!group Required parameters
@@ -8071,7 +8258,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -8095,17 +8282,42 @@ class Config
 	end
 	class BasketofKittens
 		# A stub for inline resource that generate SNS notifications in AWS. This should really be expanded.
-		class notifications
+		class notifiers
 			# @!group Optional parameters
 			
+			#
+			# @return [String]
+			attr_accessor :name
+			
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			#
+			# @return [String]
+			attr_accessor :region
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
+			# A list of people or resources which should receive notifications
+			#
+			# @return [Array<BasketofKittens::notifiers::subscriptions>]
+			# @see BasketofKittens::notifiers::subscriptions
+			attr_accessor :subscriptions
+			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
-			# @return [Array<BasketofKittens::notifications::dependencies>]
-			# @see BasketofKittens::notifications::dependencies
+			# @return [Array<BasketofKittens::notifiers::dependencies>]
+			# @see BasketofKittens::notifiers::dependencies
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -8124,7 +8336,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -8198,11 +8410,16 @@ class Config
 			# @return [String]
 			attr_accessor :name
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::logs::dependencies>]
@@ -8210,11 +8427,16 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS & CLOUDFORMATION ONLY**,
 			# **Default: `14`**,
 			# **Must be one of: `1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653`** - 
@@ -8272,7 +8494,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -8333,18 +8555,23 @@ class Config
 					# @return [String]
 					attr_accessor :vpc_id
 					
+					# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+					#
+					# @return [String]
+					attr_accessor :credentials
+					
 					# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 					#
 					# @return [String]
 					attr_accessor :vpc_name
 					
-					# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+					# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 					#
 					# @return [String]
 					attr_accessor :region
 					
 					# **Default: `AWS`**,
-					# **Must be one of: `AWS, CloudFormation, Google`**
+					# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 					#
 					# @return [String]
 					attr_accessor :cloud
@@ -8517,7 +8744,7 @@ class Config
 			# @!group Required parameters
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -8529,7 +8756,7 @@ class Config
 			# @!endgroup
 			# @!group Optional parameters
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -8565,6 +8792,16 @@ class Config
 			# @see BasketofKittens::storage_pools::mount_points
 			attr_accessor :mount_points
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY**
 			# Firewall rules to apply to our mountpoints
 			#
@@ -8639,18 +8876,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -8720,7 +8962,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -8790,7 +9032,7 @@ class Config
 			# @!group Required parameters
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
@@ -8806,13 +9048,8 @@ class Config
 			# @return [String]
 			attr_accessor :runtime
 			
-			# **REQUIRED**
-			#
-			# @return [String]
-			attr_accessor :iam_role
-			
 			# **REQUIRED**,
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -8879,6 +9116,22 @@ class Config
 			# @return [Array<BasketofKittens::functions::environment_variable>]
 			# @see BasketofKittens::functions::environment_variable
 			attr_accessor :environment_variable
+			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
+			# **AWS ONLY** - 
+			# +AWS+: The name of an IAM role for our Lambda function to assume. Can refer to an existing IAM role, or a sibling 'role' resource in Mu. If not specified, will create a default role with the AWSLambdaBasicExecutionRole policy attached. To grant other permissions for your function, create a Mu 'role' resource and use the 'import' and 'policies' parameters to add permissions. See also: https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html
+			#
+			# @return [String]
+			attr_accessor :iam_role
 			# @!endgroup
 		end
 	end
@@ -8918,18 +9171,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -9544,7 +9802,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -9588,14 +9846,14 @@ class Config
 			attr_accessor :instance_type
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			# @!endgroup
 			# @!group Optional parameters
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -9670,6 +9928,18 @@ class Config
 			# @return [String]
 			attr_accessor :groomer
 			
+			# **Default: `true`** - 
+			# Whether to run a host configuration agent, e.g. Chef, when bootstrapping
+			#
+			# @return [Boolean]
+			attr_accessor :groom
+			
+			# **Default: `1800`** - 
+			# Maximum execution time for a groomer run
+			#
+			# @return [Integer]
+			attr_accessor :groomer_timeout
+			
 			# **Default: `false`** - 
 			# Remove pre-existing groomer agents from node before bootstrapping. Especially useful for image builds.
 			#
@@ -9804,12 +10074,22 @@ class Config
 			# @see BasketofKittens::container_clusters::existing_deploys
 			attr_accessor :existing_deploys
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::container_clusters::dependencies>]
 			# @see BasketofKittens::container_clusters::dependencies
 			attr_accessor :dependencies
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY** - 
 			# +AWS+: The Amazon EC2 AMI on which to base this cluster's container hosts. Will use the default appropriate for the platform, if not specified.
 			#
@@ -9886,18 +10166,23 @@ class Config
 				# @return [String]
 				attr_accessor :vpc_id
 				
+				# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+				#
+				# @return [String]
+				attr_accessor :credentials
+				
 				# Discover this VPC by Mu-internal name; typically the shorthand 'name' field of a VPC declared elsewhere in the deploy, or in another deploy that's being referenced with 'deploy_id'.
 				#
 				# @return [String]
 				attr_accessor :vpc_name
 				
-				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+				# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 				#
 				# @return [String]
 				attr_accessor :region
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -10023,7 +10308,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -10095,11 +10380,14 @@ class Config
 		class search_domains
 			# @!group Optional parameters
 			
+			# **Must match pattern `^[a-z][a-z0-9\-]+$`** - 
+			# +AWS+: 
+			#+AWS+: 
 			#
 			# @return [String]
 			attr_accessor :name
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -10139,6 +10427,11 @@ class Config
 			# @return [Integer]
 			attr_accessor :instance_count
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::search_domains::dependencies>]
@@ -10146,14 +10439,19 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY**,
-			# **Default: `6.3`** - 
-			# +AWS+: A supported ElasticSearch version for the region of this SearchDomain. Known versions from us-east-1: 6.3, 6.2, 6.0, 5.6, 5.5, 5.3, 5.1, 2.3, 1.5
+			# **Default: `6.4`** - 
+			# +AWS+: A supported ElasticSearch version for the region of this SearchDomain. Known versions from us-east-1: 6.4, 6.3, 6.2, 6.0, 5.6, 5.5, 5.3, 5.1, 2.3, 1.5
 			#
 			# @return [String]
 			attr_accessor :elasticsearch_version
@@ -10279,7 +10577,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -10361,7 +10659,7 @@ class Config
 			# @return [String]
 			attr_accessor :name
 			
-			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+			# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 			#
 			# @return [String]
 			attr_accessor :region
@@ -10378,6 +10676,11 @@ class Config
 			# @return [Boolean]
 			attr_accessor :optional_tags
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::msg_queues::dependencies>]
@@ -10385,11 +10688,16 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY**,
 			# **Default: `256`** - 
 			# +AWS+: Maximum size of messages in this queue, in kB. Must be between 1 and 256.
@@ -10456,7 +10764,7 @@ class Config
 		end
 	end
 	class BasketofKittens
-		class projects
+		class habitats
 			# Deploy into or connect with resources in a specific account/project
 			class folder
 				# @!group Optional parameters
@@ -10472,7 +10780,7 @@ class Config
 				attr_accessor :name
 				
 				# **Default: `AWS`**,
-				# **Must be one of: `AWS, CloudFormation, Google`**
+				# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 				#
 				# @return [String]
 				attr_accessor :cloud
@@ -10486,7 +10794,7 @@ class Config
 		end
 	end
 	class BasketofKittens
-		class projects
+		class habitats
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			class dependencies
 				# @!group Required parameters
@@ -10497,7 +10805,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -10520,8 +10828,8 @@ class Config
 		end
 	end
 	class BasketofKittens
-		# Set up a cloud account (AWS account, Google Cloud project, etc)
-		class projects
+		# Generate a cloud habitat (AWS account, Google Cloud project, Azure Directory, etc)
+		class habitats
 			# @!group Optional parameters
 			
 			#
@@ -10530,21 +10838,37 @@ class Config
 			
 			# Deploy into or connect with resources in a specific account/project
 			#
-			# @return [BasketofKittens::projects::folder]
-			# @see BasketofKittens::projects::folder
+			# @return [BasketofKittens::habitats::folder]
+			# @see BasketofKittens::habitats::folder
 			attr_accessor :folder
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
-			# @return [Array<BasketofKittens::projects::dependencies>]
-			# @see BasketofKittens::projects::dependencies
+			# @return [Array<BasketofKittens::habitats::dependencies>]
+			# @see BasketofKittens::habitats::dependencies
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
+			# **AWS ONLY** - 
+			# +AWS+: AWS accounts require a unique contact email address. If not provided, Mu will generate an alias to the global mu_admin_email using the +foo SMTP mechanism.
+			#
+			# @return [String]
+			attr_accessor :email
 			# @!endgroup
 		end
 	end
@@ -10560,7 +10884,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -10591,6 +10915,11 @@ class Config
 			# @return [String]
 			attr_accessor :name
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::folders::dependencies>]
@@ -10598,10 +10927,15 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
+			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
 			# @!endgroup
 		end
 	end
@@ -10617,7 +10951,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -10713,6 +11047,11 @@ class Config
 			# @return [Array<String>]
 			attr_accessor :groups
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::users::dependencies>]
@@ -10720,11 +11059,16 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY**,
 			# **Must match pattern `^\/(?:[^\/]+(?:\/[^\/]+)*\/$)?`** - 
 			# +AWS+: AWS IAM users can be namespaced with a path (ex: +/organization/unit/user+). If not specified, and if we do not see a matching existing user under +/+ with +use_if_exists+ set, we will prepend the deploy identifier to the path of users we create. Ex: +/IAMTESTS-DEV-2018112910-GR/myuser+.
@@ -10795,7 +11139,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -10855,6 +11199,11 @@ class Config
 			# @return [Boolean]
 			attr_accessor :use_if_exists
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::groups::dependencies>]
@@ -10862,11 +11211,16 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY** - 
 			# +AWS+: Instead of creating/updating a group with
 			# the exact name specified in the 'name' field, generate a unique-per-deploy Mu-
@@ -10918,7 +11272,7 @@ class Config
 					# @!endgroup
 					# @!group Optional parameters
 					
-					# **Must be one of: `alarm, cache_cluster, collection, container_cluster, database, dnszone, firewall_rule, folder, function, group, loadbalancer, log, msg_queue, notification, project, role, search_domain, server, server_pool, storage_pool, user, vpc`** - 
+					# **Must be one of: `alarm, cache_cluster, collection, container_cluster, database, dnszone, firewall_rule, folder, function, group, habitat, loadbalancer, log, msg_queue, notifier, role, search_domain, server, server_pool, storage_pool, user, vpc`** - 
 					# A Mu resource type, used when referencing a sibling Mu resource in this stack with +identifier+.
 					#
 					# @return [String]
@@ -10976,7 +11330,7 @@ class Config
 				attr_accessor :name
 				
 				# **REQUIRED**,
-				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notification, log, storage_pool, function, container_cluster, search_domain, msg_queue, project, folder, user, group, role`**
+				# **Must be one of: `collection, database, dnszone, firewall_rule, loadbalancer, server, server_pool, vpc, cache_cluster, alarm, notifier, log, storage_pool, function, container_cluster, search_domain, msg_queue, habitat, folder, user, group, role`**
 				#
 				# @return [String]
 				attr_accessor :type
@@ -11027,7 +11381,7 @@ class Config
 				
 				# **REQUIRED**,
 				# **AWS ONLY**,
-				# **Must be one of: `service, aws, federated, alarm, cache_cluster, collection, container_cluster, database, dnszone, firewall_rule, folder, function, group, loadbalancer, log, msg_queue, notification, role, search_domain, server, server_pool, storage_pool, user, vpc`** - 
+				# **Must be one of: `service, aws, federated, alarm, cache_cluster, collection, container_cluster, database, dnszone, firewall_rule, folder, function, group, habitat, loadbalancer, log, msg_queue, notifier, role, search_domain, server, server_pool, storage_pool, user, vpc`** - 
 				# Type of entity which will be permitted to assume this role. See +entity_id+ for details.
 				#
 				# @return [String]
@@ -11039,7 +11393,7 @@ class Config
 				#
 				#**service**: The name of a service which is allowed to assume this role, such as +ec2.amazonaws.com+. See also https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-service.html#roles-creatingrole-service-api. For an unofficial list of service names, see https://gist.github.com/shortjared/4c1e3fe52bdfa47522cfe5b41e5d6f22
 				#
-				#**alarm, cache_cluster, collection, container_cluster, database, dnszone, firewall_rule, folder, function, group, loadbalancer, log, msg_queue, notification, role, search_domain, server, server_pool, storage_pool, user, vpc**: A resource of one of these Mu types, declared elsewhere in this stack with a name specified in +entity_id+, for which Mu will attempt to resolve the appropriate *aws* or *service* identifier.
+				#**alarm, cache_cluster, collection, container_cluster, database, dnszone, firewall_rule, folder, function, group, habitat, loadbalancer, log, msg_queue, notifier, role, search_domain, server, server_pool, storage_pool, user, vpc**: A resource of one of these Mu types, declared elsewhere in this stack with a name specified in +entity_id+, for which Mu will attempt to resolve the appropriate *aws* or *service* identifier.
 				#
 				#**aws**: An ARN which should be permitted to assume this role, often another role like +arn:aws:iam::AWS-account-ID:role/role-name+ or a specific user session such as +arn:aws:sts::AWS-account-ID:assumed-role/role-name/role-session-name+. See also https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#Principal_specifying
 				#
@@ -11048,6 +11402,16 @@ class Config
 				# @return [String]
 				attr_accessor :entity_id
 				# @!endgroup
+				# @!group Optional parameters
+				
+				# **AWS ONLY**,
+				# **Default: `basic`**,
+				# **Must be one of: `basic, saml, web`** - 
+				# https://docs.aws.amazon.com/STS/latest/APIReference/API_Operations.html
+				#
+				# @return [String]
+				attr_accessor :assume_method
+				# @!endgroup
 			end
 		end
 	end
@@ -11063,7 +11427,7 @@ class Config
 		class roles
 			# @!group Optional parameters
 			
-			# **Must match pattern `^[a-zA-Z0-9]+$`** - 
+			# **Must match pattern `^[a-zA-Z0-9_\-]+$`** - 
 			# The name of a cloud provider role to create
 			#
 			# @return [String]
@@ -11080,6 +11444,11 @@ class Config
 			# @see BasketofKittens::roles::policies
 			attr_accessor :policies
 			
+			# Internal use.
+			#
+			# @return [String]
+			attr_accessor :virtual_name
+			
 			# Declare other objects which this resource requires. This resource will wait until the others are available to create itself.
 			#
 			# @return [Array<BasketofKittens::roles::dependencies>]
@@ -11087,11 +11456,16 @@ class Config
 			attr_accessor :dependencies
 			
 			# **Default: `AWS`**,
-			# **Must be one of: `AWS, CloudFormation, Google`**
+			# **Must be one of: `AWS, CloudFormation, Google, Azure`**
 			#
 			# @return [String]
 			attr_accessor :cloud
 			
+			# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+			#
+			# @return [String]
+			attr_accessor :credentials
+			
 			# **AWS ONLY**
 			# Tags to apply to this resource. Will apply at the cloud provider level and in Chef, where applicable.
 			#
@@ -11153,17 +11527,21 @@ class Config
 		# @return [Boolean]
 		attr_accessor :scrub_mu_isms
 		
-		# **Default: `linear-theater-184819`** - 
 		# GOOGLE: The project into which to deploy resources
 		#
 		# @return [String]
 		attr_accessor :project
 		
-		# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
+		# **Must be one of: `us-east-1, ap-northeast-1, ap-northeast-2, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3, sa-east-1, us-east-2, us-west-1, us-west-2, asia-east1, asia-east2, asia-northeast1, asia-south1, asia-southeast1, australia-southeast1, europe-north1, europe-west1, europe-west2, europe-west3, europe-west4, northamerica-northeast1, southamerica-east1, us-central1, us-east1, us-east4, us-west1, us-west2`**
 		#
 		# @return [String]
 		attr_accessor :region
 		
+		# Specify a non-default set of credentials to use when authenticating to cloud provider APIs, as listed in `mu.yaml` under each provider's subsection. If 
+		#
+		# @return [String]
+		attr_accessor :credentials
+		
 		# **Default: `false`** - 
 		# For resources which span regions, restrict to regions inside the United States
 		#
@@ -11244,9 +11622,9 @@ class Config
 		
 		# A stub for inline resource that generate SNS notifications in AWS. This should really be expanded.
 		#
-		# @return [Array<BasketofKittens::notifications>]
-		# @see BasketofKittens::notifications
-		attr_accessor :notifications
+		# @return [Array<BasketofKittens::notifiers>]
+		# @see BasketofKittens::notifiers
+		attr_accessor :notifiers
 		
 		# Log events using a cloud provider's log service.
 		#
@@ -11284,11 +11662,11 @@ class Config
 		# @see BasketofKittens::msg_queues
 		attr_accessor :msg_queues
 		
-		# Set up a cloud account (AWS account, Google Cloud project, etc)
+		# Generate a cloud habitat (AWS account, Google Cloud project, Azure Directory, etc)
 		#
-		# @return [Array<BasketofKittens::projects>]
-		# @see BasketofKittens::projects
-		attr_accessor :projects
+		# @return [Array<BasketofKittens::habitats>]
+		# @see BasketofKittens::habitats
+		attr_accessor :habitats
 		
 		# Set up a cloud provider folder/OU for containing other account-level resources
 		#