docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/accesscontextmanager_v1.accessPolicies.servicePerimeters.html b/docs/dyn/accesscontextmanager_v1.accessPolicies.servicePerimeters.html
index 00b6a91..b57b497 100644
--- a/docs/dyn/accesscontextmanager_v1.accessPolicies.servicePerimeters.html
+++ b/docs/dyn/accesscontextmanager_v1.accessPolicies.servicePerimeters.html
@@ -143,6 +143,33 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    "name": "A String", # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      "message": "A String", # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      "details": [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          "a_key": "", # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      "code": 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    "metadata": { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      "a_key": "", # Properties of the object. Contains field @type with type URL.
+    },
     "done": True or False, # If the value is `false`, it means the operation is still in progress.
         # If `true`, the operation is completed, and either `error` or `response` is
         # available.
@@ -156,33 +183,6 @@
         # `TakeSnapshotResponse`.
       "a_key": "", # Properties of the object. Contains field @type with type URL.
     },
-    "name": "A String", # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      "code": 42, # The status code, which should be an enum value of google.rpc.Code.
-      "message": "A String", # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-      "details": [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          "a_key": "", # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-    },
-    "metadata": { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      "a_key": "", # Properties of the object. Contains field @type with type URL.
-    },
   }</pre>
 </div>
 
@@ -212,6 +212,16 @@
     # Service Perimeter Bridges can contain only Google Cloud projects as members,
     # a single Google Cloud project may belong to multiple Service Perimeter
     # Bridges.
+  &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
+      # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
+      # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
+  &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+      # allowed to be a member of single regular perimeter, but multiple service
+      # perimeter bridges. A project cannot be a included in a perimeter bridge
+      # without being included in regular perimeter. For perimeter bridges,
+      # the restricted service list as well as access level lists must be
+      # empty.
+  &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
   &quot;useExplicitDryRunSpec&quot;: True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly
       # exists  for all Service Perimeters, and that spec is identical to the
       # status for those Service Perimeters. When this flag is set, it inhibits the
@@ -228,6 +238,10 @@
       # restricted services and access levels that determine perimeter
       # content and boundaries.
       # describe specific Service Perimeter configuration.
+    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+        # Currently only projects are allowed. Format: `projects/{project_number}`
+      &quot;A String&quot;,
+    ],
     &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
         # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
         # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -253,16 +267,16 @@
         &quot;A String&quot;,
       ],
     },
-    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-        # Currently only projects are allowed. Format: `projects/{project_number}`
-      &quot;A String&quot;,
-    ],
   },
   &quot;spec&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration
       # allows to specify and test ServicePerimeter configuration without enforcing
       # actual access restrictions. Only allowed to be set when the
       # &quot;use_explicit_dry_run_spec&quot; flag is set.
       # describe specific Service Perimeter configuration.
+    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+        # Currently only projects are allowed. Format: `projects/{project_number}`
+      &quot;A String&quot;,
+    ],
     &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
         # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
         # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -288,21 +302,7 @@
         &quot;A String&quot;,
       ],
     },
-    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-        # Currently only projects are allowed. Format: `projects/{project_number}`
-      &quot;A String&quot;,
-    ],
   },
-  &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
-      # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
-      # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-  &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-      # allowed to be a member of single regular perimeter, but multiple service
-      # perimeter bridges. A project cannot be a included in a perimeter bridge
-      # without being included in regular perimeter. For perimeter bridges,
-      # the restricted service list as well as access level lists must be
-      # empty.
-  &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
 }
 
   x__xgafv: string, V1 error format.
@@ -315,6 +315,33 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
     &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
         # If `true`, the operation is completed, and either `error` or `response` is
         # available.
@@ -328,33 +355,6 @@
         # `TakeSnapshotResponse`.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
-    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-    },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
   }</pre>
 </div>
 
@@ -380,6 +380,33 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
     &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
         # If `true`, the operation is completed, and either `error` or `response` is
         # available.
@@ -393,33 +420,6 @@
         # `TakeSnapshotResponse`.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
-    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-    },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
   }</pre>
 </div>
 
@@ -451,6 +451,16 @@
       # Service Perimeter Bridges can contain only Google Cloud projects as members,
       # a single Google Cloud project may belong to multiple Service Perimeter
       # Bridges.
+    &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
+        # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
+        # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
+    &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+        # allowed to be a member of single regular perimeter, but multiple service
+        # perimeter bridges. A project cannot be a included in a perimeter bridge
+        # without being included in regular perimeter. For perimeter bridges,
+        # the restricted service list as well as access level lists must be
+        # empty.
+    &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
     &quot;useExplicitDryRunSpec&quot;: True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly
         # exists  for all Service Perimeters, and that spec is identical to the
         # status for those Service Perimeters. When this flag is set, it inhibits the
@@ -467,6 +477,10 @@
         # restricted services and access levels that determine perimeter
         # content and boundaries.
         # describe specific Service Perimeter configuration.
+      &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+          # Currently only projects are allowed. Format: `projects/{project_number}`
+        &quot;A String&quot;,
+      ],
       &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
           # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
           # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -492,16 +506,16 @@
           &quot;A String&quot;,
         ],
       },
-      &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-          # Currently only projects are allowed. Format: `projects/{project_number}`
-        &quot;A String&quot;,
-      ],
     },
     &quot;spec&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration
         # allows to specify and test ServicePerimeter configuration without enforcing
         # actual access restrictions. Only allowed to be set when the
         # &quot;use_explicit_dry_run_spec&quot; flag is set.
         # describe specific Service Perimeter configuration.
+      &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+          # Currently only projects are allowed. Format: `projects/{project_number}`
+        &quot;A String&quot;,
+      ],
       &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
           # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
           # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -527,21 +541,7 @@
           &quot;A String&quot;,
         ],
       },
-      &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-          # Currently only projects are allowed. Format: `projects/{project_number}`
-        &quot;A String&quot;,
-      ],
     },
-    &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
-        # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
-        # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-    &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-        # allowed to be a member of single regular perimeter, but multiple service
-        # perimeter bridges. A project cannot be a included in a perimeter bridge
-        # without being included in regular perimeter. For perimeter bridges,
-        # the restricted service list as well as access level lists must be
-        # empty.
-    &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
   }</pre>
 </div>
 
@@ -568,8 +568,6 @@
   An object of the form:
 
     { # A response to `ListServicePerimetersRequest`.
-    &quot;nextPageToken&quot;: &quot;A String&quot;, # The pagination token to retrieve the next page of results. If the value is
-        # empty, no further results remain.
     &quot;servicePerimeters&quot;: [ # List of the Service Perimeter instances.
       { # `ServicePerimeter` describes a set of Google Cloud resources which can freely
           # import and export data amongst themselves, but not export outside of the
@@ -581,6 +579,16 @@
           # Service Perimeter Bridges can contain only Google Cloud projects as members,
           # a single Google Cloud project may belong to multiple Service Perimeter
           # Bridges.
+        &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
+            # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
+            # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
+        &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+            # allowed to be a member of single regular perimeter, but multiple service
+            # perimeter bridges. A project cannot be a included in a perimeter bridge
+            # without being included in regular perimeter. For perimeter bridges,
+            # the restricted service list as well as access level lists must be
+            # empty.
+        &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
         &quot;useExplicitDryRunSpec&quot;: True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly
             # exists  for all Service Perimeters, and that spec is identical to the
             # status for those Service Perimeters. When this flag is set, it inhibits the
@@ -597,6 +605,10 @@
             # restricted services and access levels that determine perimeter
             # content and boundaries.
             # describe specific Service Perimeter configuration.
+          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+              # Currently only projects are allowed. Format: `projects/{project_number}`
+            &quot;A String&quot;,
+          ],
           &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
               # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
               # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -622,16 +634,16 @@
               &quot;A String&quot;,
             ],
           },
-          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-              # Currently only projects are allowed. Format: `projects/{project_number}`
-            &quot;A String&quot;,
-          ],
         },
         &quot;spec&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration
             # allows to specify and test ServicePerimeter configuration without enforcing
             # actual access restrictions. Only allowed to be set when the
             # &quot;use_explicit_dry_run_spec&quot; flag is set.
             # describe specific Service Perimeter configuration.
+          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+              # Currently only projects are allowed. Format: `projects/{project_number}`
+            &quot;A String&quot;,
+          ],
           &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
               # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
               # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -657,23 +669,11 @@
               &quot;A String&quot;,
             ],
           },
-          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-              # Currently only projects are allowed. Format: `projects/{project_number}`
-            &quot;A String&quot;,
-          ],
         },
-        &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
-            # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
-            # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-        &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-            # allowed to be a member of single regular perimeter, but multiple service
-            # perimeter bridges. A project cannot be a included in a perimeter bridge
-            # without being included in regular perimeter. For perimeter bridges,
-            # the restricted service list as well as access level lists must be
-            # empty.
-        &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
       },
     ],
+    &quot;nextPageToken&quot;: &quot;A String&quot;, # The pagination token to retrieve the next page of results. If the value is
+        # empty, no further results remain.
   }</pre>
 </div>
 
@@ -716,6 +716,16 @@
     # Service Perimeter Bridges can contain only Google Cloud projects as members,
     # a single Google Cloud project may belong to multiple Service Perimeter
     # Bridges.
+  &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
+      # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
+      # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
+  &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+      # allowed to be a member of single regular perimeter, but multiple service
+      # perimeter bridges. A project cannot be a included in a perimeter bridge
+      # without being included in regular perimeter. For perimeter bridges,
+      # the restricted service list as well as access level lists must be
+      # empty.
+  &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
   &quot;useExplicitDryRunSpec&quot;: True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly
       # exists  for all Service Perimeters, and that spec is identical to the
       # status for those Service Perimeters. When this flag is set, it inhibits the
@@ -732,6 +742,10 @@
       # restricted services and access levels that determine perimeter
       # content and boundaries.
       # describe specific Service Perimeter configuration.
+    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+        # Currently only projects are allowed. Format: `projects/{project_number}`
+      &quot;A String&quot;,
+    ],
     &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
         # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
         # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -757,16 +771,16 @@
         &quot;A String&quot;,
       ],
     },
-    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-        # Currently only projects are allowed. Format: `projects/{project_number}`
-      &quot;A String&quot;,
-    ],
   },
   &quot;spec&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration
       # allows to specify and test ServicePerimeter configuration without enforcing
       # actual access restrictions. Only allowed to be set when the
       # &quot;use_explicit_dry_run_spec&quot; flag is set.
       # describe specific Service Perimeter configuration.
+    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+        # Currently only projects are allowed. Format: `projects/{project_number}`
+      &quot;A String&quot;,
+    ],
     &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
         # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
         # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -792,21 +806,7 @@
         &quot;A String&quot;,
       ],
     },
-    &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-        # Currently only projects are allowed. Format: `projects/{project_number}`
-      &quot;A String&quot;,
-    ],
   },
-  &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
-      # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
-      # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-  &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-      # allowed to be a member of single regular perimeter, but multiple service
-      # perimeter bridges. A project cannot be a included in a perimeter bridge
-      # without being included in regular perimeter. For perimeter bridges,
-      # the restricted service list as well as access level lists must be
-      # empty.
-  &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
 }
 
   updateMask: string, Required. Mask to control which fields get updated. Must be non-empty.
@@ -820,6 +820,33 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
     &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
         # If `true`, the operation is completed, and either `error` or `response` is
         # available.
@@ -833,33 +860,6 @@
         # `TakeSnapshotResponse`.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
-    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-    },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
   }</pre>
 </div>
 
@@ -886,12 +886,6 @@
 
 { # A request to replace all existing Service Perimeters in an Access Policy
       # with the Service Perimeters provided. This is done atomically.
-    &quot;etag&quot;: &quot;A String&quot;, # Optional. The etag for the version of the Access Policy that this
-        # replace operation is to be performed on. If, at the time of replace, the
-        # etag for the Access Policy stored in Access Context Manager is different
-        # from the specified etag, then the replace operation will not be performed
-        # and the call will fail. This field is not required. If etag is not
-        # provided, the operation will be performed as if a valid etag is provided.
     &quot;servicePerimeters&quot;: [ # Required. The desired Service Perimeters that should
         # replace all existing Service Perimeters in the
         # Access Policy.
@@ -905,6 +899,16 @@
           # Service Perimeter Bridges can contain only Google Cloud projects as members,
           # a single Google Cloud project may belong to multiple Service Perimeter
           # Bridges.
+        &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
+            # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
+            # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
+        &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+            # allowed to be a member of single regular perimeter, but multiple service
+            # perimeter bridges. A project cannot be a included in a perimeter bridge
+            # without being included in regular perimeter. For perimeter bridges,
+            # the restricted service list as well as access level lists must be
+            # empty.
+        &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
         &quot;useExplicitDryRunSpec&quot;: True or False, # Use explicit dry run spec flag. Ordinarily, a dry-run spec implicitly
             # exists  for all Service Perimeters, and that spec is identical to the
             # status for those Service Perimeters. When this flag is set, it inhibits the
@@ -921,6 +925,10 @@
             # restricted services and access levels that determine perimeter
             # content and boundaries.
             # describe specific Service Perimeter configuration.
+          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+              # Currently only projects are allowed. Format: `projects/{project_number}`
+            &quot;A String&quot;,
+          ],
           &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
               # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
               # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -946,16 +954,16 @@
               &quot;A String&quot;,
             ],
           },
-          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-              # Currently only projects are allowed. Format: `projects/{project_number}`
-            &quot;A String&quot;,
-          ],
         },
         &quot;spec&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Proposed (or dry run) ServicePerimeter configuration. This configuration
             # allows to specify and test ServicePerimeter configuration without enforcing
             # actual access restrictions. Only allowed to be set when the
             # &quot;use_explicit_dry_run_spec&quot; flag is set.
             # describe specific Service Perimeter configuration.
+          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+              # Currently only projects are allowed. Format: `projects/{project_number}`
+            &quot;A String&quot;,
+          ],
           &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
               # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
               # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -981,23 +989,15 @@
               &quot;A String&quot;,
             ],
           },
-          &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-              # Currently only projects are allowed. Format: `projects/{project_number}`
-            &quot;A String&quot;,
-          ],
         },
-        &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
-            # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
-            # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-        &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-            # allowed to be a member of single regular perimeter, but multiple service
-            # perimeter bridges. A project cannot be a included in a perimeter bridge
-            # without being included in regular perimeter. For perimeter bridges,
-            # the restricted service list as well as access level lists must be
-            # empty.
-        &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # Optional. The etag for the version of the Access Policy that this
+        # replace operation is to be performed on. If, at the time of replace, the
+        # etag for the Access Policy stored in Access Context Manager is different
+        # from the specified etag, then the replace operation will not be performed
+        # and the call will fail. This field is not required. If etag is not
+        # provided, the operation will be performed as if a valid etag is provided.
   }
 
   x__xgafv: string, V1 error format.
@@ -1010,6 +1010,33 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
     &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
         # If `true`, the operation is completed, and either `error` or `response` is
         # available.
@@ -1023,33 +1050,6 @@
         # `TakeSnapshotResponse`.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
-    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-    },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
   }</pre>
 </div>