google-api-python-client 2.162.0__py2.py3-none-any.whl → 2.164.0__py2.py3-none-any.whl

googleapiclient/discovery_cache/documents/networksecurity.v1beta1.json

@@ -286,6 +286,11 @@
 "pattern": "^organizations/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
+},
+"returnPartialSuccess": {
+"description": "Optional. If true, allow partial responses for multi-regional Aggregated List requests.",
+"location": "query",
+"type": "boolean"
 }
 },
 "path": "v1beta1/{+parent}/addressGroups",
@@ -1314,6 +1319,11 @@
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
+},
+"returnPartialSuccess": {
+"description": "Optional. If true, allow partial responses for multi-regional Aggregated List requests.",
+"location": "query",
+"type": "boolean"
 }
 },
 "path": "v1beta1/{+parent}/addressGroups",
@@ -2905,7 +2915,7 @@
 "interceptDeploymentGroups": {
 "methods": {
 "create": {
-"description": "Creates a new InterceptDeploymentGroup in a given project and location.",
+"description": "Creates a deployment group in a given project and location. See https://google.aip.dev/133.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeploymentGroups",
 "httpMethod": "POST",
 "id": "networksecurity.projects.locations.interceptDeploymentGroups.create",
@@ -2914,19 +2924,19 @@
 ],
 "parameters": {
 "interceptDeploymentGroupId": {
-"description": "Required. Id of the requesting object If auto-generating Id server-side, remove this field and intercept_deployment_group_id from the method_signature of Create RPC",
+"description": "Required. The ID to use for the new deployment group, which will become the final component of the deployment group's resource name.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this deployment group will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -2943,7 +2953,7 @@
 ]
 },
 "delete": {
-"description": "Deletes a single InterceptDeploymentGroup.",
+"description": "Deletes a deployment group. See https://google.aip.dev/135.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeploymentGroups/{interceptDeploymentGroupsId}",
 "httpMethod": "DELETE",
 "id": "networksecurity.projects.locations.interceptDeploymentGroups.delete",
@@ -2952,14 +2962,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The deployment group to delete.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptDeploymentGroups/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -2973,7 +2983,7 @@
 ]
 },
 "get": {
-"description": "Gets details of a single InterceptDeploymentGroup.",
+"description": "Gets a specific deployment group. See https://google.aip.dev/131.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeploymentGroups/{interceptDeploymentGroupsId}",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptDeploymentGroups.get",
@@ -2982,7 +2992,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the deployment group to retrieve. Format: projects/{project}/locations/{location}/interceptDeploymentGroups/{intercept_deployment_group}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptDeploymentGroups/[^/]+$",
 "required": true,
@@ -2998,7 +3008,7 @@
 ]
 },
 "list": {
-"description": "Lists InterceptDeploymentGroups in a given project and location.",
+"description": "Lists deployment groups in a given project and location. See https://google.aip.dev/132.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeploymentGroups",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptDeploymentGroups.list",
@@ -3007,28 +3017,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListInterceptDeploymentGroups` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInterceptDeploymentGroups` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListInterceptDeploymentGroupsRequest",
+"description": "Required. The parent, which owns this collection of deployment groups. Example: `projects/123456789/locations/global`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -3044,7 +3054,7 @@
 ]
 },
 "patch": {
-"description": "Updates a single InterceptDeploymentGroup.",
+"description": "Updates a deployment group. See https://google.aip.dev/134.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeploymentGroups/{interceptDeploymentGroupsId}",
 "httpMethod": "PATCH",
 "id": "networksecurity.projects.locations.interceptDeploymentGroups.patch",
@@ -3053,19 +3063,19 @@
 ],
 "parameters": {
 "name": {
-"description": "Immutable. Identifier. Then name of the InterceptDeploymentGroup.",
+"description": "Immutable. Identifier. The resource name of this deployment group, for example: `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See https://google.aip.dev/122 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptDeploymentGroups/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the InterceptDeploymentGroup resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the deployment group (e.g. `description`; *not* `intercept_deployment_group.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -3087,7 +3097,7 @@
 "interceptDeployments": {
 "methods": {
 "create": {
-"description": "Creates a new InterceptDeployment in a given project and location.",
+"description": "Creates a deployment in a given project and location. See https://google.aip.dev/133.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeployments",
 "httpMethod": "POST",
 "id": "networksecurity.projects.locations.interceptDeployments.create",
@@ -3096,19 +3106,19 @@
 ],
 "parameters": {
 "interceptDeploymentId": {
-"description": "Required. Id of the requesting object If auto-generating Id server-side, remove this field and intercept_deployment_id from the method_signature of Create RPC",
+"description": "Required. The ID to use for the new deployment, which will become the final component of the deployment's resource name.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this deployment will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3125,7 +3135,7 @@
 ]
 },
 "delete": {
-"description": "Deletes a single InterceptDeployment.",
+"description": "Deletes a deployment. See https://google.aip.dev/135.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeployments/{interceptDeploymentsId}",
 "httpMethod": "DELETE",
 "id": "networksecurity.projects.locations.interceptDeployments.delete",
@@ -3141,7 +3151,7 @@
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3155,7 +3165,7 @@
 ]
 },
 "get": {
-"description": "Gets details of a single InterceptDeployment.",
+"description": "Gets a specific deployment. See https://google.aip.dev/131.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeployments/{interceptDeploymentsId}",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptDeployments.get",
@@ -3164,7 +3174,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the deployment to retrieve. Format: projects/{project}/locations/{location}/interceptDeployments/{intercept_deployment}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptDeployments/[^/]+$",
 "required": true,
@@ -3180,7 +3190,7 @@
 ]
 },
 "list": {
-"description": "Lists InterceptDeployments in a given project and location.",
+"description": "Lists deployments in a given project and location. See https://google.aip.dev/132.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeployments",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptDeployments.list",
@@ -3189,28 +3199,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListInterceptDeployments` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInterceptDeployments` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListInterceptDeploymentsRequest",
+"description": "Required. The parent, which owns this collection of deployments. Example: `projects/123456789/locations/us-central1-a`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -3226,7 +3236,7 @@
 ]
 },
 "patch": {
-"description": "Updates a single InterceptDeployment.",
+"description": "Updates a deployment. See https://google.aip.dev/134.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptDeployments/{interceptDeploymentsId}",
 "httpMethod": "PATCH",
 "id": "networksecurity.projects.locations.interceptDeployments.patch",
@@ -3235,19 +3245,19 @@
 ],
 "parameters": {
 "name": {
-"description": "Immutable. Identifier. The name of the InterceptDeployment.",
+"description": "Immutable. Identifier. The resource name of this deployment, for example: `projects/123456789/locations/us-central1-a/interceptDeployments/my-dep`. See https://google.aip.dev/122 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptDeployments/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the InterceptDeployment resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the deployment (e.g. `description`; *not* `intercept_deployment.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -3269,7 +3279,7 @@
 "interceptEndpointGroupAssociations": {
 "methods": {
 "create": {
-"description": "Creates a new InterceptEndpointGroupAssociation in a given project and location.",
+"description": "Creates an association in a given project and location. See https://google.aip.dev/133.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroupAssociations",
 "httpMethod": "POST",
 "id": "networksecurity.projects.locations.interceptEndpointGroupAssociations.create",
@@ -3278,19 +3288,19 @@
 ],
 "parameters": {
 "interceptEndpointGroupAssociationId": {
-"description": "Optional. Id of the requesting object If auto-generating Id server-side, remove this field and intercept_endpoint_group_association_id from the method_signature of Create RPC",
+"description": "Optional. The ID to use for the new association, which will become the final component of the endpoint group's resource name. If not provided, the server will generate a unique ID.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this association will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3307,7 +3317,7 @@
 ]
 },
 "delete": {
-"description": "Deletes a single InterceptEndpointGroupAssociation.",
+"description": "Deletes an association. See https://google.aip.dev/135.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroupAssociations/{interceptEndpointGroupAssociationsId}",
 "httpMethod": "DELETE",
 "id": "networksecurity.projects.locations.interceptEndpointGroupAssociations.delete",
@@ -3316,14 +3326,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The association to delete.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptEndpointGroupAssociations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3337,7 +3347,7 @@
 ]
 },
 "get": {
-"description": "Gets details of a single InterceptEndpointGroupAssociation.",
+"description": "Gets a specific association. See https://google.aip.dev/131.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroupAssociations/{interceptEndpointGroupAssociationsId}",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptEndpointGroupAssociations.get",
@@ -3346,7 +3356,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the association to retrieve. Format: projects/{project}/locations/{location}/interceptEndpointGroupAssociations/{intercept_endpoint_group_association}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptEndpointGroupAssociations/[^/]+$",
 "required": true,
@@ -3362,7 +3372,7 @@
 ]
 },
 "list": {
-"description": "Lists InterceptEndpointGroupAssociations in a given project and location.",
+"description": "Lists associations in a given project and location. See https://google.aip.dev/132.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroupAssociations",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptEndpointGroupAssociations.list",
@@ -3371,28 +3381,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListInterceptEndpointGroups` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInterceptEndpointGroups` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListInterceptEndpointGroupAssociationsRequest",
+"description": "Required. The parent, which owns this collection of associations. Example: `projects/123456789/locations/global`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -3408,7 +3418,7 @@
 ]
 },
 "patch": {
-"description": "Updates a single InterceptEndpointGroupAssociation.",
+"description": "Updates an association. See https://google.aip.dev/134.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroupAssociations/{interceptEndpointGroupAssociationsId}",
 "httpMethod": "PATCH",
 "id": "networksecurity.projects.locations.interceptEndpointGroupAssociations.patch",
@@ -3417,19 +3427,19 @@
 ],
 "parameters": {
 "name": {
-"description": "Immutable. Identifier. The name of the InterceptEndpointGroupAssociation.",
+"description": "Immutable. Identifier. The resource name of this endpoint group association, for example: `projects/123456789/locations/global/interceptEndpointGroupAssociations/my-eg-association`. See https://google.aip.dev/122 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptEndpointGroupAssociations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the InterceptEndpointGroupAssociation resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the association (e.g. `description`; *not* `intercept_endpoint_group_association.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -3451,7 +3461,7 @@
 "interceptEndpointGroups": {
 "methods": {
 "create": {
-"description": "Creates a new InterceptEndpointGroup in a given project and location.",
+"description": "Creates an endpoint group in a given project and location. See https://google.aip.dev/133.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroups",
 "httpMethod": "POST",
 "id": "networksecurity.projects.locations.interceptEndpointGroups.create",
@@ -3460,19 +3470,19 @@
 ],
 "parameters": {
 "interceptEndpointGroupId": {
-"description": "Required. Id of the requesting object If auto-generating Id server-side, remove this field and intercept_endpoint_group_id from the method_signature of Create RPC",
+"description": "Required. The ID to use for the endpoint group, which will become the final component of the endpoint group's resource name.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this endpoint group will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3489,7 +3499,7 @@
 ]
 },
 "delete": {
-"description": "Deletes a single InterceptEndpointGroup.",
+"description": "Deletes an endpoint group. See https://google.aip.dev/135.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroups/{interceptEndpointGroupsId}",
 "httpMethod": "DELETE",
 "id": "networksecurity.projects.locations.interceptEndpointGroups.delete",
@@ -3498,14 +3508,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The endpoint group to delete.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptEndpointGroups/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3519,7 +3529,7 @@
 ]
 },
 "get": {
-"description": "Gets details of a single InterceptEndpointGroup.",
+"description": "Gets a specific endpoint group. See https://google.aip.dev/131.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroups/{interceptEndpointGroupsId}",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptEndpointGroups.get",
@@ -3528,7 +3538,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the endpoint group to retrieve. Format: projects/{project}/locations/{location}/interceptEndpointGroups/{intercept_endpoint_group}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptEndpointGroups/[^/]+$",
 "required": true,
@@ -3544,7 +3554,7 @@
 ]
 },
 "list": {
-"description": "Lists InterceptEndpointGroups in a given project and location.",
+"description": "Lists endpoint groups in a given project and location. See https://google.aip.dev/132.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroups",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.interceptEndpointGroups.list",
@@ -3553,28 +3563,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListInterceptEndpointGroups` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListInterceptEndpointGroups` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListInterceptEndpointGroupsRequest",
+"description": "Required. The parent, which owns this collection of endpoint groups. Example: `projects/123456789/locations/global`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -3590,7 +3600,7 @@
 ]
 },
 "patch": {
-"description": "Updates a single InterceptEndpointGroup.",
+"description": "Updates an endpoint group. See https://google.aip.dev/134.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/interceptEndpointGroups/{interceptEndpointGroupsId}",
 "httpMethod": "PATCH",
 "id": "networksecurity.projects.locations.interceptEndpointGroups.patch",
@@ -3599,19 +3609,19 @@
 ],
 "parameters": {
 "name": {
-"description": "Immutable. Identifier. The name of the InterceptEndpointGroup.",
+"description": "Immutable. Identifier. The resource name of this endpoint group, for example: `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See https://google.aip.dev/122 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/interceptEndpointGroups/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the InterceptEndpointGroup resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the endpoint group (e.g. `description`; *not* `intercept_endpoint_group.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -3633,7 +3643,7 @@
 "mirroringDeploymentGroups": {
 "methods": {
 "create": {
-"description": "Creates a new MirroringDeploymentGroup in a given project and location.",
+"description": "Creates a deployment group in a given project and location. See https://google.aip.dev/133.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/mirroringDeploymentGroups",
 "httpMethod": "POST",
 "id": "networksecurity.projects.locations.mirroringDeploymentGroups.create",
@@ -3642,19 +3652,19 @@
 ],
 "parameters": {
 "mirroringDeploymentGroupId": {
-"description": "Required. Id of the requesting object If auto-generating Id server-side, remove this field and mirroring_deployment_group_id from the method_signature of Create RPC",
+"description": "Required. The ID to use for the new deployment group, which will become the final component of the deployment group's resource name.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this deployment group will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3671,7 +3681,7 @@
 ]
 },
 "delete": {
-"description": "Deletes a single MirroringDeploymentGroup.",
+"description": "Deletes a deployment group. See https://google.aip.dev/135.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/mirroringDeploymentGroups/{mirroringDeploymentGroupsId}",
 "httpMethod": "DELETE",
 "id": "networksecurity.projects.locations.mirroringDeploymentGroups.delete",
@@ -3680,14 +3690,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The deployment group to delete.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringDeploymentGroups/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3701,7 +3711,7 @@
 ]
 },
 "get": {
-"description": "Gets details of a single MirroringDeploymentGroup.",
+"description": "Gets a specific deployment group. See https://google.aip.dev/131.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/mirroringDeploymentGroups/{mirroringDeploymentGroupsId}",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.mirroringDeploymentGroups.get",
@@ -3710,7 +3720,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the deployment group to retrieve. Format: projects/{project}/locations/{location}/mirroringDeploymentGroups/{mirroring_deployment_group}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringDeploymentGroups/[^/]+$",
 "required": true,
@@ -3726,7 +3736,7 @@
 ]
 },
 "list": {
-"description": "Lists MirroringDeploymentGroups in a given project and location.",
+"description": "Lists deployment groups in a given project and location. See https://google.aip.dev/132.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/mirroringDeploymentGroups",
 "httpMethod": "GET",
 "id": "networksecurity.projects.locations.mirroringDeploymentGroups.list",
@@ -3735,28 +3745,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListMirroringDeploymentGroups` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMirroringDeploymentGroups` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListMirroringDeploymentGroupsRequest",
+"description": "Required. The parent, which owns this collection of deployment groups. Example: `projects/123456789/locations/global`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -3772,7 +3782,7 @@
 ]
 },
 "patch": {
-"description": "Updates a single MirroringDeploymentGroup.",
+"description": "Updates a deployment group. See https://google.aip.dev/134.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/mirroringDeploymentGroups/{mirroringDeploymentGroupsId}",
 "httpMethod": "PATCH",
 "id": "networksecurity.projects.locations.mirroringDeploymentGroups.patch",
@@ -3788,12 +3798,12 @@
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the MirroringDeploymentGroup resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the deployment group (e.g. `description`; *not* `mirroring_deployment_group.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -3824,19 +3834,19 @@
 ],
 "parameters": {
 "mirroringDeploymentId": {
-"description": "Required. Id of the requesting object If auto-generating Id server-side, remove this field and mirroring_deployment_id from the method_signature of Create RPC",
+"description": "Required. The ID to use for the new deployment, which will become the final component of the deployment's resource name.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this deployment will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3869,7 +3879,7 @@
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -3892,7 +3902,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the deployment to retrieve. Format: projects/{project}/locations/{location}/mirroringDeployments/{mirroring_deployment}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringDeployments/[^/]+$",
 "required": true,
@@ -3917,28 +3927,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListMirroringDeployments` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMirroringDeployments` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListMirroringDeploymentsRequest",
+"description": "Required. The parent, which owns this collection of deployments. Example: `projects/123456789/locations/us-central1-a`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -3970,12 +3980,12 @@
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the MirroringDeployment resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the deployment (e.g. `description`; *not* `mirroring_deployment.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -4006,19 +4016,19 @@
 ],
 "parameters": {
 "mirroringEndpointGroupAssociationId": {
-"description": "Optional. ID for the new association. If not provided, the server will generate a unique ID. The ID must be a valid RFC 1035 resource name. The ID must be 1-63 characters long and match the regular expression `[a-z]([-a-z0-9]*[a-z0-9])?`. The first character must be a lowercase letter, and all following characters (except for the last character) must be a dash, lowercase letter, or digit. The last character must be a",
+"description": "Optional. The ID to use for the new association, which will become the final component of the endpoint group's resource name. If not provided, the server will generate a unique ID.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Container (project and location) where the association will be created, e.g. `projects/123456789/locations/global`.",
+"description": "Required. The parent resource where this association will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -4035,7 +4045,7 @@
 ]
 },
 "delete": {
-"description": "Deletes a single association. See https://google.aip.dev/135.",
+"description": "Deletes an association. See https://google.aip.dev/135.",
 "flatPath": "v1beta1/projects/{projectsId}/locations/{locationsId}/mirroringEndpointGroupAssociations/{mirroringEndpointGroupAssociationsId}",
 "httpMethod": "DELETE",
 "id": "networksecurity.projects.locations.mirroringEndpointGroupAssociations.delete",
@@ -4044,14 +4054,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Full resource name of the association to delete, e.g. projects/123456789/locations/global/mirroringEndpointGroupAssociations/my-eg-association.",
+"description": "Required. The association to delete.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringEndpointGroupAssociations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -4074,7 +4084,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Full resource name of the association to get, e.g. projects/123456789/locations/global/mirroringEndpointGroupAssociations/my-eg-association.",
+"description": "Required. The name of the association to retrieve. Format: projects/{project}/locations/{location}/mirroringEndpointGroupAssociations/{mirroring_endpoint_group_association}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringEndpointGroupAssociations/[^/]+$",
 "required": true,
@@ -4099,28 +4109,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. A filter expression that filters the results listed in the response. See https://google.aip.dev/160.",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return. See https://google.aip.dev/158.",
+"description": "Optional. A page token, received from a previous `ListMirroringEndpointGroups` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMirroringEndpointGroups` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent container (project and location) of the associations to list, e.g. `projects/123456789/locations/global`.",
+"description": "Required. The parent, which owns this collection of associations. Example: `projects/123456789/locations/global`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -4152,12 +4162,12 @@
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Optional. Field mask is used to specify the fields to be overwritten in the association by the update. See https://google.aip.dev/161.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the association (e.g. `description`; *not* `mirroring_endpoint_group_association.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -4188,19 +4198,19 @@
 ],
 "parameters": {
 "mirroringEndpointGroupId": {
-"description": "Required. Id of the requesting object If auto-generating Id server-side, remove this field and mirroring_endpoint_group_id from the method_signature of Create RPC",
+"description": "Required. The ID to use for the endpoint group, which will become the final component of the endpoint group's resource name.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Value for parent.",
+"description": "Required. The parent resource where this endpoint group will be created. Format: projects/{project}/locations/{location}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -4226,14 +4236,14 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The endpoint group to delete.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringEndpointGroups/[^/]+$",
 "required": true,
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 }
@@ -4256,7 +4266,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the resource",
+"description": "Required. The name of the endpoint group to retrieve. Format: projects/{project}/locations/{location}/mirroringEndpointGroups/{mirroring_endpoint_group}",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+/mirroringEndpointGroups/[^/]+$",
 "required": true,
@@ -4281,28 +4291,28 @@
 ],
 "parameters": {
 "filter": {
-"description": "Optional. Filtering results",
+"description": "Optional. Filter expression. See https://google.aip.dev/160#filtering for more details.",
 "location": "query",
 "type": "string"
 },
 "orderBy": {
-"description": "Optional. Hint for how to order the results",
+"description": "Optional. Sort expression. See https://google.aip.dev/132#ordering for more details.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default.",
+"description": "Optional. Requested page size. Server may return fewer items than requested. If unspecified, server will pick an appropriate default. See https://google.aip.dev/158 for more details.",
 "format": "int32",
 "location": "query",
 "type": "integer"
 },
 "pageToken": {
-"description": "Optional. A token identifying a page of results the server should return.",
+"description": "Optional. A page token, received from a previous `ListMirroringEndpointGroups` call. Provide this to retrieve the subsequent page. When paginating, all other parameters provided to `ListMirroringEndpointGroups` must match the call that provided the page token. See https://google.aip.dev/158 for more details.",
 "location": "query",
 "type": "string"
 },
 "parent": {
-"description": "Required. Parent value for ListMirroringEndpointGroupsRequest",
+"description": "Required. The parent, which owns this collection of endpoint groups. Example: `projects/123456789/locations/global`. See https://google.aip.dev/132 for more details.",
 "location": "path",
 "pattern": "^projects/[^/]+/locations/[^/]+$",
 "required": true,
@@ -4334,12 +4344,12 @@
 "type": "string"
 },
 "requestId": {
-"description": "Optional. An optional request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes since the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).",
+"description": "Optional. A unique identifier for this request. Must be a UUID4. This request is only idempotent if a `request_id` is provided. See https://google.aip.dev/155 for more details.",
 "location": "query",
 "type": "string"
 },
 "updateMask": {
-"description": "Required. Field mask is used to specify the fields to be overwritten in the MirroringEndpointGroup resource by the update. The fields specified in the update_mask are relative to the resource, not the full request. A field will be overwritten if it is in the mask. If the user does not provide a mask then all fields will be overwritten.",
+"description": "Optional. The list of fields to update. Fields are specified relative to the endpoint group (e.g. `description`; *not* `mirroring_endpoint_group.description`). See https://google.aip.dev/161 for more details.",
 "format": "google-fieldmask",
 "location": "query",
 "type": "string"
@@ -5049,7 +5059,7 @@
 }
 }
 },
-"revision": "20250211",
+"revision": "20250217",
 "rootUrl": "https://networksecurity.googleapis.com/",
 "schemas": {
 "AddAddressGroupItemsRequest": {
@@ -5366,7 +5376,7 @@
 "id": "AuthzPolicyAuthzRuleFromRequestSource",
 "properties": {
 "principals": {
-"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless mutual TLS is enabled for the Forwarding rule or Gateway. Each identity is a string whose value is matched against the URI SAN, or DNS SAN or the subject field in the client's certificate. The match can be exact, prefix, suffix or a substring match. One of exact, prefix, suffix or contains must be specified. Limited to 5 principals.",
+"description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless mutual TLS is enabled for the forwarding rule or Gateway. For Application Load Balancers, each identity is a string whose value is matched against the URI SAN, or DNS SAN, or SPIFFE ID, or the subject field in the client's certificate. For Cloud Service Mesh, each identity is a string whose value is matched against the URI SAN, or DNS SAN, or the subject field in the client's certificate. The match can be exact, prefix, suffix, or a substring match. One of exact, prefix, suffix, or contains must be specified. Limited to 5 principals.",
 "items": {
 "$ref": "AuthzPolicyAuthzRuleStringMatch"
 },
@@ -6270,11 +6280,11 @@
 "type": "object"
 },
 "InterceptDeployment": {
-"description": "Message describing InterceptDeployment object NEXT ID: 10",
+"description": "A deployment represents a zonal intercept backend ready to accept GENEVE-encapsulated traffic, e.g. a zonal instance group fronted by an internal passthrough load balancer. Deployments are always part of a global deployment group which represents a global intercept service.",
 "id": "InterceptDeployment",
 "properties": {
 "createTime": {
-"description": "Output only. [Output only] Create time stamp",
+"description": "Output only. The timestamp when the resource was created. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6284,31 +6294,31 @@
 "type": "string"
 },
 "forwardingRule": {
-"description": "Required. Immutable. The regional load balancer which the intercepted traffic should be forwarded to. Format is: projects/{project}/regions/{region}/forwardingRules/{forwardingRule}",
+"description": "Required. Immutable. The regional forwarding rule that fronts the intercept collectors, for example: `projects/123456789/regions/us-central1/forwardingRules/my-rule`. See https://google.aip.dev/124.",
 "type": "string"
 },
 "interceptDeploymentGroup": {
-"description": "Required. Immutable. The Intercept Deployment Group that this resource is part of. Format is: `projects/{project}/locations/global/interceptDeploymentGroups/{interceptDeploymentGroup}`",
+"description": "Required. Immutable. The deployment group that this deployment is a part of, for example: `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See https://google.aip.dev/124.",
 "type": "string"
 },
 "labels": {
 "additionalProperties": {
 "type": "string"
 },
-"description": "Optional. Labels as key value pairs",
+"description": "Optional. Labels are key/value pairs that help to organize and filter resources.",
 "type": "object"
 },
 "name": {
-"description": "Immutable. Identifier. The name of the InterceptDeployment.",
+"description": "Immutable. Identifier. The resource name of this deployment, for example: `projects/123456789/locations/us-central1-a/interceptDeployments/my-dep`. See https://google.aip.dev/122 for more details.",
 "type": "string"
 },
 "reconciling": {
-"description": "Output only. Whether reconciling is in progress, recommended per https://google.aip.dev/128.",
+"description": "Output only. The current state of the resource does not match the user's intended state, and the system is working to reconcile them. This part of the normal operation (e.g. linking a new association to the parent group). See https://google.aip.dev/128.",
 "readOnly": true,
 "type": "boolean"
 },
 "state": {
-"description": "Output only. Current state of the deployment.",
+"description": "Output only. The current state of the deployment. See https://google.aip.dev/216.",
 "enum": [
 "STATE_UNSPECIFIED",
 "ACTIVE",
@@ -6318,18 +6328,18 @@
 "DELETE_FAILED"
 ],
 "enumDescriptions": [
-"Not set.",
-"Ready.",
-"Being created.",
-"Being deleted.",
-"The underlying data plane is out of sync with the deployment. The deployment is not expected to be usable. This state can result in undefined behavior.",
-"An attempt to delete the deployment has failed. This is a terminal state and the deployment is not expected to be usable as some of its resources have been deleted. The only permitted operation is to retry deleting the deployment."
+"State not set (this is not a valid state).",
+"The deployment is ready and in sync with the parent group.",
+"The deployment is being created.",
+"The deployment is being deleted.",
+"The deployment is out of sync with the parent group. In most cases, this is a result of a transient issue within the system (e.g. a delayed data-path config) and the system is expected to recover automatically. See the parent deployment group's state for more details.",
+"An attempt to delete the deployment has failed. This is a terminal state and the deployment is not expected to recover. The only permitted operation is to retry deleting the deployment."
 ],
 "readOnly": true,
 "type": "string"
 },
 "updateTime": {
-"description": "Output only. [Output only] Update time stamp",
+"description": "Output only. The timestamp when the resource was most recently updated. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6338,11 +6348,11 @@
 "type": "object"
 },
 "InterceptDeploymentGroup": {
-"description": "Message describing InterceptDeploymentGroup object",
+"description": "A deployment group aggregates many zonal intercept backends (deployments) into a single global intercept service. Consumers can connect this service using an endpoint group.",
 "id": "InterceptDeploymentGroup",
 "properties": {
 "connectedEndpointGroups": {
-"description": "Output only. The list of Intercept Endpoint Groups that are connected to this resource.",
+"description": "Output only. The list of endpoint groups that are connected to this resource.",
 "items": {
 "$ref": "InterceptDeploymentGroupConnectedEndpointGroup"
 },
@@ -6350,7 +6360,7 @@
 "type": "array"
 },
 "createTime": {
-"description": "Output only. [Output only] Create time stamp",
+"description": "Output only. The timestamp when the resource was created. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6363,24 +6373,32 @@
 "additionalProperties": {
 "type": "string"
 },
-"description": "Optional. Labels as key value pairs",
+"description": "Optional. Labels are key/value pairs that help to organize and filter resources.",
 "type": "object"
 },
 "name": {
-"description": "Immutable. Identifier. Then name of the InterceptDeploymentGroup.",
+"description": "Immutable. Identifier. The resource name of this deployment group, for example: `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See https://google.aip.dev/122 for more details.",
 "type": "string"
 },
+"nestedDeployments": {
+"description": "Output only. The list of Intercept Deployments that belong to this group.",
+"items": {
+"$ref": "InterceptDeploymentGroupDeployment"
+},
+"readOnly": true,
+"type": "array"
+},
 "network": {
-"description": "Required. Immutable. The network that is being used for the deployment. Format is: projects/{project}/global/networks/{network}.",
+"description": "Required. Immutable. The network that will be used for all child deployments, for example: `projects/{project}/global/networks/{network}`. See https://google.aip.dev/124.",
 "type": "string"
 },
 "reconciling": {
-"description": "Output only. Whether reconciling is in progress, recommended per https://google.aip.dev/128.",
+"description": "Output only. The current state of the resource does not match the user's intended state, and the system is working to reconcile them. This is part of the normal operation (e.g. adding a new deployment to the group) See https://google.aip.dev/128.",
 "readOnly": true,
 "type": "boolean"
 },
 "state": {
-"description": "Output only. Current state of the deployment group.",
+"description": "Output only. The current state of the deployment group. See https://google.aip.dev/216.",
 "enum": [
 "STATE_UNSPECIFIED",
 "ACTIVE",
@@ -6388,16 +6406,16 @@
 "DELETING"
 ],
 "enumDescriptions": [
-"Not set.",
-"Ready.",
-"Being created.",
-"Being deleted."
+"State not set (this is not a valid state).",
+"The deployment group is ready.",
+"The deployment group is being created.",
+"The deployment group is being deleted."
 ],
 "readOnly": true,
 "type": "string"
 },
 "updateTime": {
-"description": "Output only. [Output only] Update time stamp",
+"description": "Output only. The timestamp when the resource was most recently updated. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6410,7 +6428,40 @@
 "id": "InterceptDeploymentGroupConnectedEndpointGroup",
 "properties": {
 "name": {
-"description": "Output only. A connected intercept endpoint group.",
+"description": "Output only. The connected endpoint group's resource name, for example: `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See https://google.aip.dev/124.",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
+"InterceptDeploymentGroupDeployment": {
+"description": "A deployment belonging to this deployment group.",
+"id": "InterceptDeploymentGroupDeployment",
+"properties": {
+"name": {
+"description": "Output only. The name of the Intercept Deployment, in the format: `projects/{project}/locations/{location}/interceptDeployments/{intercept_deployment}`.",
+"readOnly": true,
+"type": "string"
+},
+"state": {
+"description": "Output only. Most recent known state of the deployment.",
+"enum": [
+"STATE_UNSPECIFIED",
+"ACTIVE",
+"CREATING",
+"DELETING",
+"OUT_OF_SYNC",
+"DELETE_FAILED"
+],
+"enumDescriptions": [
+"State not set (this is not a valid state).",
+"The deployment is ready and in sync with the parent group.",
+"The deployment is being created.",
+"The deployment is being deleted.",
+"The deployment is out of sync with the parent group. In most cases, this is a result of a transient issue within the system (e.g. a delayed data-path config) and the system is expected to recover automatically. See the parent deployment group's state for more details.",
+"An attempt to delete the deployment has failed. This is a terminal state and the deployment is not expected to recover. The only permitted operation is to retry deleting the deployment."
+],
 "readOnly": true,
 "type": "string"
 }
@@ -6418,11 +6469,11 @@
 "type": "object"
 },
 "InterceptEndpointGroup": {
-"description": "Message describing InterceptEndpointGroup object.",
+"description": "An endpoint group is a consumer frontend for a deployment group (backend). In order to configure intercept for a network, consumers must create: - An association between their network and the endpoint group. - A security profile that points to the endpoint group. - A firewall rule that references the security profile (group).",
 "id": "InterceptEndpointGroup",
 "properties": {
 "associations": {
-"description": "Output only. List of Intercept Endpoint Group Associations that are associated to this endpoint group.",
+"description": "Output only. List of associations to this endpoint group.",
 "items": {
 "$ref": "InterceptEndpointGroupAssociationDetails"
 },
@@ -6430,7 +6481,7 @@
 "type": "array"
 },
 "createTime": {
-"description": "Output only. [Output only] Create time stamp",
+"description": "Output only. The timestamp when the resource was created. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6440,27 +6491,27 @@
 "type": "string"
 },
 "interceptDeploymentGroup": {
-"description": "Required. Immutable. The Intercept Deployment Group that this resource is connected to. Format is: `projects/{project}/locations/global/interceptDeploymentGroups/{interceptDeploymentGroup}`",
+"description": "Immutable. The deployment group that this endpoint group is connected to, for example: `projects/123456789/locations/global/interceptDeploymentGroups/my-dg`. See https://google.aip.dev/124.",
 "type": "string"
 },
 "labels": {
 "additionalProperties": {
 "type": "string"
 },
-"description": "Optional. Labels as key value pairs",
+"description": "Optional. Labels are key/value pairs that help to organize and filter resources.",
 "type": "object"
 },
 "name": {
-"description": "Immutable. Identifier. The name of the InterceptEndpointGroup.",
+"description": "Immutable. Identifier. The resource name of this endpoint group, for example: `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See https://google.aip.dev/122 for more details.",
 "type": "string"
 },
 "reconciling": {
-"description": "Output only. Whether reconciling is in progress, recommended per https://google.aip.dev/128.",
+"description": "Output only. The current state of the resource does not match the user's intended state, and the system is working to reconcile them. This is part of the normal operation (e.g. adding a new association to the group). See https://google.aip.dev/128.",
 "readOnly": true,
 "type": "boolean"
 },
 "state": {
-"description": "Output only. Current state of the endpoint group.",
+"description": "Output only. The current state of the endpoint group. See https://google.aip.dev/216.",
 "enum": [
 "STATE_UNSPECIFIED",
 "ACTIVE",
@@ -6471,19 +6522,19 @@
 "DELETE_FAILED"
 ],
 "enumDescriptions": [
-"Not set.",
-"Ready.",
-"The deployment group has been deleted and intercept is disabled.",
-"Being created.",
-"Being deleted.",
-"The underlying data plane is out of sync with the endpoint group. Some associations might not be usable.",
-"An attempt to delete the endpoint group has failed. This is a terminal state and the endpoint group is not expected to be usable as some of its resources have been deleted. The only permitted operation is to retry deleting the endpoint group."
+"State not set (this is not a valid state).",
+"The endpoint group is ready and in sync with the target deployment group.",
+"The deployment group backing this endpoint group has been force-deleted. This endpoint group cannot be used and interception is effectively disabled.",
+"The endpoint group is being created.",
+"The endpoint group is being deleted.",
+"The endpoint group is out of sync with the backing deployment group. In most cases, this is a result of a transient issue within the system (e.g. an inaccessible location) and the system is expected to recover automatically. See the associations field for details per network and location.",
+"An attempt to delete the endpoint group has failed. This is a terminal state and the endpoint group is not expected to recover. The only permitted operation is to retry deleting the endpoint group."
 ],
 "readOnly": true,
 "type": "string"
 },
 "updateTime": {
-"description": "Output only. [Output only] Update time stamp",
+"description": "Output only. The timestamp when the resource was most recently updated. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6492,28 +6543,28 @@
 "type": "object"
 },
 "InterceptEndpointGroupAssociation": {
-"description": "Message describing InterceptEndpointGroupAssociation object",
+"description": "An endpoint group association represents a link between a network and an endpoint group in the organization. Creating an association creates the networking infrastructure linking the network to the endpoint group, but does not enable intercept by itself. To enable intercept, the user must also create a network firewall policy containing intercept rules and associate it with the network.",
 "id": "InterceptEndpointGroupAssociation",
 "properties": {
 "createTime": {
-"description": "Output only. [Output only] Create time stamp",
+"description": "Output only. The timestamp when the resource was created. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
 },
 "interceptEndpointGroup": {
-"description": "Required. Immutable. The Intercept Endpoint Group that this resource is connected to. Format is: `projects/{project}/locations/global/interceptEndpointGroups/{interceptEndpointGroup}`",
+"description": "Immutable. The endpoint group that this association is connected to, for example: `projects/123456789/locations/global/interceptEndpointGroups/my-eg`. See https://google.aip.dev/124.",
 "type": "string"
 },
 "labels": {
 "additionalProperties": {
 "type": "string"
 },
-"description": "Optional. Labels as key value pairs",
+"description": "Optional. Labels are key/value pairs that help to organize and filter resources.",
 "type": "object"
 },
 "locationsDetails": {
-"description": "Output only. The list of locations that this association is in and its details.",
+"description": "Output only. The list of locations where the association is present. This information is retrieved from the linked endpoint group, and not configured as part of the association itself.",
 "items": {
 "$ref": "InterceptEndpointGroupAssociationLocationDetails"
 },
@@ -6521,15 +6572,15 @@
 "type": "array"
 },
 "name": {
-"description": "Immutable. Identifier. The name of the InterceptEndpointGroupAssociation.",
+"description": "Immutable. Identifier. The resource name of this endpoint group association, for example: `projects/123456789/locations/global/interceptEndpointGroupAssociations/my-eg-association`. See https://google.aip.dev/122 for more details.",
 "type": "string"
 },
 "network": {
-"description": "Required. Immutable. The VPC network associated. Format: projects/{project}/global/networks/{network}.",
+"description": "Immutable. The VPC network that is associated. for example: `projects/123456789/global/networks/my-network`. See https://google.aip.dev/124.",
 "type": "string"
 },
 "reconciling": {
-"description": "Output only. Whether reconciling is in progress, recommended per https://google.aip.dev/128.",
+"description": "Output only. The current state of the resource does not match the user's intended state, and the system is working to reconcile them. This part of the normal operation (e.g. adding a new location to the target deployment group). See https://google.aip.dev/128.",
 "readOnly": true,
 "type": "boolean"
 },
@@ -6546,18 +6597,18 @@
 ],
 "enumDescriptions": [
 "Not set.",
-"Ready.",
-"Being created.",
-"Being deleted.",
-"Intercept is disabled due to an operation on another resource.",
-"The underlying data plane is out of sync with the association. The association is not expected to be usable. This state can result in undefined behavior. See the `locations_details` field for more details.",
+"The association is ready and in sync with the linked endpoint group.",
+"The association is being created.",
+"The association is being deleted.",
+"The association is disabled due to a breaking change in another resource.",
+"The association is out of sync with the linked endpoint group. In most cases, this is a result of a transient issue within the system (e.g. an inaccessible location) and the system is expected to recover automatically. Check the `locations_details` field for more details.",
 "An attempt to delete the association has failed. This is a terminal state and the association is not expected to be usable as some of its resources have been deleted. The only permitted operation is to retry deleting the association."
 ],
 "readOnly": true,
 "type": "string"
 },
 "updateTime": {
-"description": "Output only. [Output only] Update time stamp",
+"description": "Output only. The timestamp when the resource was most recently updated. See https://google.aip.dev/148#timestamps.",
 "format": "google-datetime",
 "readOnly": true,
 "type": "string"
@@ -6566,21 +6617,21 @@
 "type": "object"
 },
 "InterceptEndpointGroupAssociationDetails": {
-"description": "This is a subset of the InterceptEndpointGroupAssociation message, containing fields to be used by the consumer.",
+"description": "The endpoint group's view of a connected association.",
 "id": "InterceptEndpointGroupAssociationDetails",
 "properties": {
 "name": {
-"description": "Output only. The resource name of the InterceptEndpointGroupAssociation. Format: projects/{project}/locations/{location}/interceptEndpointGroupAssociations/{interceptEndpointGroupAssociation}",
+"description": "Output only. The connected association's resource name, for example: `projects/123456789/locations/global/interceptEndpointGroupAssociations/my-ega`. See https://google.aip.dev/124.",
 "readOnly": true,
 "type": "string"
 },
 "network": {
-"description": "Output only. The VPC network associated. Format: projects/{project}/global/networks/{name}.",
+"description": "Output only. The associated network, for example: projects/123456789/global/networks/my-network. See https://google.aip.dev/124.",
 "readOnly": true,
 "type": "string"
 },
 "state": {
-"description": "Output only. Current state of the association.",
+"description": "Output only. Most recent known state of the association.",
 "enum": [
 "STATE_UNSPECIFIED",
 "ACTIVE",
@@ -6592,11 +6643,11 @@
 ],
 "enumDescriptions": [
 "Not set.",
-"Ready.",
-"Being created.",
-"Being deleted.",
-"Intercept is disabled due to an operation on another resource.",
-"The underlying data plane is out of sync with the association. The association is not expected to be usable. This state can result in undefined behavior. See the `locations_details` field for more details.",
+"The association is ready and in sync with the linked endpoint group.",
+"The association is being created.",
+"The association is being deleted.",
+"The association is disabled due to a breaking change in another resource.",
+"The association is out of sync with the linked endpoint group. In most cases, this is a result of a transient issue within the system (e.g. an inaccessible location) and the system is expected to recover automatically. Check the `locations_details` field for more details.",
 "An attempt to delete the association has failed. This is a terminal state and the association is not expected to be usable as some of its resources have been deleted. The only permitted operation is to retry deleting the association."
 ],
 "readOnly": true,
@@ -6606,16 +6657,16 @@
 "type": "object"
 },
 "InterceptEndpointGroupAssociationLocationDetails": {
-"description": "Details about the association status in a specific cloud location.",
+"description": "Contains details about the state of an association in a specific cloud location.",
 "id": "InterceptEndpointGroupAssociationLocationDetails",
 "properties": {
 "location": {
-"description": "Output only. The cloud location.",
+"description": "Output only. The cloud location, e.g. \"us-central1-a\" or \"asia-south1\".",
 "readOnly": true,
 "type": "string"
 },
 "state": {
-"description": "Output only. The association state in this location.",
+"description": "Output only. The current state of the association in this location.",
 "enum": [
 "STATE_UNSPECIFIED",
 "ACTIVE",
@@ -6623,8 +6674,8 @@
 ],
 "enumDescriptions": [
 "Not set.",
-"Ready.",
-"The data plane is out of sync with the association in this location."
+"The association is ready and in sync with the linked endpoint group.",
+"The association is out of sync with the linked endpoint group. In most cases, this is a result of a transient issue within the system (e.g. an inaccessible location) and the system is expected to recover automatically."
 ],
 "readOnly": true,
 "type": "string"
@@ -6684,6 +6735,13 @@
 "nextPageToken": {
 "description": "If there might be more results than those appearing in this response, then `next_page_token` is included. To get the next set of results, call this method again using the value of `next_page_token` as `page_token`.",
 "type": "string"
+},
+"unreachable": {
+"description": "Locations that could not be reached.",
+"items": {
+"type": "string"
+},
+"type": "array"
 }
 },
 "type": "object"
@@ -6875,36 +6933,36 @@
 "type": "object"
 },
 "ListInterceptDeploymentGroupsResponse": {
-"description": "Message for response to listing InterceptDeploymentGroups",
+"description": "Response message for ListInterceptDeploymentGroups.",
 "id": "ListInterceptDeploymentGroupsResponse",
 "properties": {
 "interceptDeploymentGroups": {
-"description": "The list of InterceptDeploymentGroup",
+"description": "The deployment groups from the specified parent.",
 "items": {
 "$ref": "InterceptDeploymentGroup"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 }
 },
 "type": "object"
 },
 "ListInterceptDeploymentsResponse": {
-"description": "Message for response to listing InterceptDeployments",
+"description": "Response message for ListInterceptDeployments.",
 "id": "ListInterceptDeploymentsResponse",
 "properties": {
 "interceptDeployments": {
-"description": "The list of InterceptDeployment",
+"description": "The deployments from the specified parent.",
 "items": {
 "$ref": "InterceptDeployment"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 },
 "unreachable": {
@@ -6918,36 +6976,36 @@
 "type": "object"
 },
 "ListInterceptEndpointGroupAssociationsResponse": {
-"description": "Message for response to listing InterceptEndpointGroupAssociations",
+"description": "Response message for ListInterceptEndpointGroupAssociations.",
 "id": "ListInterceptEndpointGroupAssociationsResponse",
 "properties": {
 "interceptEndpointGroupAssociations": {
-"description": "The list of InterceptEndpointGroupAssociation",
+"description": "The associations from the specified parent.",
 "items": {
 "$ref": "InterceptEndpointGroupAssociation"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 }
 },
 "type": "object"
 },
 "ListInterceptEndpointGroupsResponse": {
-"description": "Message for response to listing InterceptEndpointGroups",
+"description": "Response message for ListInterceptEndpointGroups.",
 "id": "ListInterceptEndpointGroupsResponse",
 "properties": {
 "interceptEndpointGroups": {
-"description": "The list of InterceptEndpointGroup",
+"description": "The endpoint groups from the specified parent.",
 "items": {
 "$ref": "InterceptEndpointGroup"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 }
 },
@@ -6972,36 +7030,36 @@
 "type": "object"
 },
 "ListMirroringDeploymentGroupsResponse": {
-"description": "Message for response to listing MirroringDeploymentGroups",
+"description": "Response message for ListMirroringDeploymentGroups.",
 "id": "ListMirroringDeploymentGroupsResponse",
 "properties": {
 "mirroringDeploymentGroups": {
-"description": "The list of MirroringDeploymentGroup",
+"description": "The deployment groups from the specified parent.",
 "items": {
 "$ref": "MirroringDeploymentGroup"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 }
 },
 "type": "object"
 },
 "ListMirroringDeploymentsResponse": {
-"description": "Message for response to listing MirroringDeployments",
+"description": "Response message for ListMirroringDeployments.",
 "id": "ListMirroringDeploymentsResponse",
 "properties": {
 "mirroringDeployments": {
-"description": "The list of MirroringDeployment",
+"description": "The deployments from the specified parent.",
 "items": {
 "$ref": "MirroringDeployment"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 },
 "unreachable": {
@@ -7015,36 +7073,36 @@
 "type": "object"
 },
 "ListMirroringEndpointGroupAssociationsResponse": {
-"description": "Response message for listing associations.",
+"description": "Response message for ListMirroringEndpointGroupAssociations.",
 "id": "ListMirroringEndpointGroupAssociationsResponse",
 "properties": {
 "mirroringEndpointGroupAssociations": {
-"description": "The list of associations returned.",
+"description": "The associations from the specified parent.",
 "items": {
 "$ref": "MirroringEndpointGroupAssociation"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return. See https://google.aip.dev/158.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 }
 },
 "type": "object"
 },
 "ListMirroringEndpointGroupsResponse": {
-"description": "Message for response to listing MirroringEndpointGroups",
+"description": "Response message for ListMirroringEndpointGroups.",
 "id": "ListMirroringEndpointGroupsResponse",
 "properties": {
 "mirroringEndpointGroups": {
-"description": "The list of MirroringEndpointGroup",
+"description": "The endpoint groups from the specified parent.",
 "items": {
 "$ref": "MirroringEndpointGroup"
 },
 "type": "array"
 },
 "nextPageToken": {
-"description": "A token identifying a page of results the server should return.",
+"description": "A token that can be sent as `page_token` to retrieve the next page. If this field is omitted, there are no subsequent pages. See https://google.aip.dev/158 for more details.",
 "type": "string"
 }
 },
@@ -7339,6 +7397,14 @@
 "description": "Immutable. Identifier. The resource name of this deployment group, for example: `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`. See https://google.aip.dev/122 for more details.",
 "type": "string"
 },
+"nestedDeployments": {
+"description": "Output only. The list of Mirroring Deployments that belong to this group.",
+"items": {
+"$ref": "MirroringDeploymentGroupDeployment"
+},
+"readOnly": true,
+"type": "array"
+},
 "network": {
 "description": "Required. Immutable. The network that will be used for all child deployments, for example: `projects/{project}/global/networks/{network}`. See https://google.aip.dev/124.",
 "type": "string"
@@ -7386,6 +7452,39 @@
 },
 "type": "object"
 },
+"MirroringDeploymentGroupDeployment": {
+"description": "A deployment belonging to this deployment group.",
+"id": "MirroringDeploymentGroupDeployment",
+"properties": {
+"name": {
+"description": "Output only. The name of the Mirroring Deployment, in the format: `projects/{project}/locations/{location}/mirroringDeployments/{mirroring_deployment}`.",
+"readOnly": true,
+"type": "string"
+},
+"state": {
+"description": "Output only. Most recent known state of the deployment.",
+"enum": [
+"STATE_UNSPECIFIED",
+"ACTIVE",
+"CREATING",
+"DELETING",
+"OUT_OF_SYNC",
+"DELETE_FAILED"
+],
+"enumDescriptions": [
+"State not set (this is not a valid state).",
+"The deployment is ready and in sync with the parent group.",
+"The deployment is being created.",
+"The deployment is being deleted.",
+"The deployment is out of sync with the parent group. In most cases, this is a result of a transient issue within the system (e.g. a delayed data-path config) and the system is expected to recover automatically. See the parent deployment group's state for more details.",
+"An attempt to delete the deployment has failed. This is a terminal state and the deployment is not expected to recover. The only permitted operation is to retry deleting the deployment."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "MirroringEndpointGroup": {
 "description": "An endpoint group is a consumer frontend for a deployment group (backend). In order to configure mirroring for a network, consumers must create: - An association between their network and the endpoint group. - A security profile that points to the endpoint group. - A mirroring rule that references the security profile (group).",
 "id": "MirroringEndpointGroup",
@@ -7516,9 +7615,9 @@
 "enumDescriptions": [
 "Not set.",
 "The association is ready and in sync with the linked endpoint group.",
-"Being created.",
-"Being deleted.",
-"Mirroring is disabled due to an operation on another resource.",
+"The association is being created.",
+"The association is being deleted.",
+"The association is disabled due to a breaking change in another resource.",
 "The association is out of sync with the linked endpoint group. In most cases, this is a result of a transient issue within the system (e.g. an inaccessible location) and the system is expected to recover automatically. Check the `locations_details` field for more details.",
 "An attempt to delete the association has failed. This is a terminal state and the association is not expected to be usable as some of its resources have been deleted. The only permitted operation is to retry deleting the association."
 ],
@@ -7562,9 +7661,9 @@
 "enumDescriptions": [
 "Not set.",
 "The association is ready and in sync with the linked endpoint group.",
-"Being created.",
-"Being deleted.",
-"Mirroring is disabled due to an operation on another resource.",
+"The association is being created.",
+"The association is being deleted.",
+"The association is disabled due to a breaking change in another resource.",
 "The association is out of sync with the linked endpoint group. In most cases, this is a result of a transient issue within the system (e.g. an inaccessible location) and the system is expected to recover automatically. Check the `locations_details` field for more details.",
 "An attempt to delete the association has failed. This is a terminal state and the association is not expected to be usable as some of its resources have been deleted. The only permitted operation is to retry deleting the association."
 ],