docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/datafusion_v1beta1.projects.locations.instances.html b/docs/dyn/datafusion_v1beta1.projects.locations.instances.html
index ffb0271..6895fab 100644
--- a/docs/dyn/datafusion_v1beta1.projects.locations.instances.html
+++ b/docs/dyn/datafusion_v1beta1.projects.locations.instances.html
@@ -120,33 +120,6 @@
 
 { # Represents a Data Fusion instance.
     # Next available ID: 23
-  "availableVersion": [ # Available versions that the instance can be upgraded to using
-      # UpdateInstanceRequest.
-    { # The Data Fusion version.
-      "versionNumber": "A String", # The version number of the Data Fusion instance, such as '6.0.1.0'.
-    },
-  ],
-  "displayName": "A String", # Display name for an instance.
-  "zone": "A String", # Name of the zone in which the Data Fusion instance will be created.
-  "apiEndpoint": "A String", # Output only. Endpoint on which the REST APIs is accessible.
-  "createTime": "A String", # Output only. The time the instance was created.
-  "labels": { # The resource labels for instance to use to annotate any related underlying
-      # resources such as Compute Engine VMs. The character '=' is not allowed to
-      # be used within the labels.
-    "a_key": "A String",
-  },
-  "updateTime": "A String", # Output only. The time the instance was last updated.
-  "serviceEndpoint": "A String", # Output only. Endpoint on which the Data Fusion UI is accessible.
-  "enableStackdriverMonitoring": True or False, # Option to enable Stackdriver Monitoring.
-  "type": "A String", # Required. Instance type.
-  "version": "A String", # Current version of Data Fusion.
-  "stateMessage": "A String", # Output only. Additional information about the current state of this Data
-      # Fusion instance if available.
-  "accelerators": [ # List of accelerators enabled for this CDF instance.
-    { # Identifies Data Fusion accelerators for an instance.
-      "acceleratorType": "A String", # The type of an accelator for a CDF instance.
-    },
-  ],
   "description": "A String", # Optional. An optional description of this instance.
   "options": { # Map of additional options used to configure the behavior of
       # Data Fusion instance.
@@ -177,6 +150,33 @@
       # able to access the public internet.
   "serviceAccount": "A String", # Output only. Service account which will be used to access resources in
       # the customer project."
+  "availableVersion": [ # Available versions that the instance can be upgraded to using
+      # UpdateInstanceRequest.
+    { # The Data Fusion version.
+      "versionNumber": "A String", # The version number of the Data Fusion instance, such as '6.0.1.0'.
+    },
+  ],
+  "displayName": "A String", # Display name for an instance.
+  "zone": "A String", # Name of the zone in which the Data Fusion instance will be created.
+  "apiEndpoint": "A String", # Output only. Endpoint on which the REST APIs is accessible.
+  "createTime": "A String", # Output only. The time the instance was created.
+  "labels": { # The resource labels for instance to use to annotate any related underlying
+      # resources such as Compute Engine VMs. The character '=' is not allowed to
+      # be used within the labels.
+    "a_key": "A String",
+  },
+  "serviceEndpoint": "A String", # Output only. Endpoint on which the Data Fusion UI is accessible.
+  "updateTime": "A String", # Output only. The time the instance was last updated.
+  "enableStackdriverMonitoring": True or False, # Option to enable Stackdriver Monitoring.
+  "type": "A String", # Required. Instance type.
+  "version": "A String", # Current version of Data Fusion.
+  "accelerators": [ # List of accelerators enabled for this CDF instance.
+    { # Identifies Data Fusion accelerators for an instance.
+      "acceleratorType": "A String", # The type of an accelator for a CDF instance.
+    },
+  ],
+  "stateMessage": "A String", # Output only. Additional information about the current state of this Data
+      # Fusion instance if available.
 }
 
   instanceId: string, The name of the instance to create.
@@ -210,6 +210,9 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      "message": "A String", # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       "details": [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
@@ -217,9 +220,6 @@
         },
       ],
       "code": 42, # The status code, which should be an enum value of google.rpc.Code.
-      "message": "A String", # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     "metadata": { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -270,6 +270,9 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      "message": "A String", # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       "details": [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
@@ -277,9 +280,6 @@
         },
       ],
       "code": 42, # The status code, which should be an enum value of google.rpc.Code.
-      "message": "A String", # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     "metadata": { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -310,33 +310,6 @@
 
     { # Represents a Data Fusion instance.
       # Next available ID: 23
-    "availableVersion": [ # Available versions that the instance can be upgraded to using
-        # UpdateInstanceRequest.
-      { # The Data Fusion version.
-        "versionNumber": "A String", # The version number of the Data Fusion instance, such as '6.0.1.0'.
-      },
-    ],
-    "displayName": "A String", # Display name for an instance.
-    "zone": "A String", # Name of the zone in which the Data Fusion instance will be created.
-    "apiEndpoint": "A String", # Output only. Endpoint on which the REST APIs is accessible.
-    "createTime": "A String", # Output only. The time the instance was created.
-    "labels": { # The resource labels for instance to use to annotate any related underlying
-        # resources such as Compute Engine VMs. The character '=' is not allowed to
-        # be used within the labels.
-      "a_key": "A String",
-    },
-    "updateTime": "A String", # Output only. The time the instance was last updated.
-    "serviceEndpoint": "A String", # Output only. Endpoint on which the Data Fusion UI is accessible.
-    "enableStackdriverMonitoring": True or False, # Option to enable Stackdriver Monitoring.
-    "type": "A String", # Required. Instance type.
-    "version": "A String", # Current version of Data Fusion.
-    "stateMessage": "A String", # Output only. Additional information about the current state of this Data
-        # Fusion instance if available.
-    "accelerators": [ # List of accelerators enabled for this CDF instance.
-      { # Identifies Data Fusion accelerators for an instance.
-        "acceleratorType": "A String", # The type of an accelator for a CDF instance.
-      },
-    ],
     "description": "A String", # Optional. An optional description of this instance.
     "options": { # Map of additional options used to configure the behavior of
         # Data Fusion instance.
@@ -367,6 +340,33 @@
         # able to access the public internet.
     "serviceAccount": "A String", # Output only. Service account which will be used to access resources in
         # the customer project."
+    "availableVersion": [ # Available versions that the instance can be upgraded to using
+        # UpdateInstanceRequest.
+      { # The Data Fusion version.
+        "versionNumber": "A String", # The version number of the Data Fusion instance, such as '6.0.1.0'.
+      },
+    ],
+    "displayName": "A String", # Display name for an instance.
+    "zone": "A String", # Name of the zone in which the Data Fusion instance will be created.
+    "apiEndpoint": "A String", # Output only. Endpoint on which the REST APIs is accessible.
+    "createTime": "A String", # Output only. The time the instance was created.
+    "labels": { # The resource labels for instance to use to annotate any related underlying
+        # resources such as Compute Engine VMs. The character '=' is not allowed to
+        # be used within the labels.
+      "a_key": "A String",
+    },
+    "serviceEndpoint": "A String", # Output only. Endpoint on which the Data Fusion UI is accessible.
+    "updateTime": "A String", # Output only. The time the instance was last updated.
+    "enableStackdriverMonitoring": True or False, # Option to enable Stackdriver Monitoring.
+    "type": "A String", # Required. Instance type.
+    "version": "A String", # Current version of Data Fusion.
+    "accelerators": [ # List of accelerators enabled for this CDF instance.
+      { # Identifies Data Fusion accelerators for an instance.
+        "acceleratorType": "A String", # The type of an accelator for a CDF instance.
+      },
+    ],
+    "stateMessage": "A String", # Output only. Additional information about the current state of this Data
+        # Fusion instance if available.
   }</pre>
 </div>
 
@@ -458,18 +458,6 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
-    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-        # prevent simultaneous updates of a policy from overwriting each other.
-        # It is strongly suggested that systems make use of the `etag` in the
-        # read-modify-write cycle to perform policy updates in order to avoid race
-        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-        # systems are expected to put that etag in the request to `setIamPolicy` to
-        # ensure that their change will be applied to the same version of the policy.
-        #
-        # **Important:** If you use IAM Conditions, you must include the `etag` field
-        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-        # you to overwrite a version `3` policy with a version `1` policy, and all of
-        # the conditions in the version `3` policy are lost.
     &quot;version&quot;: 42, # Specifies the format of the policy.
         #
         # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
@@ -566,12 +554,12 @@
               #
               # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
               # jose@example.com from DATA_READ logging.
-            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
                 # permission.
                 # Follows the same format of Binding.members.
               &quot;A String&quot;,
             ],
+            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
           },
         ],
       },
@@ -580,6 +568,51 @@
         # `condition` that determines how and when the `bindings` are applied. Each
         # of the `bindings` must contain at least one member.
       { # Associates `members` with a `role`.
+        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+            # `members` can have the following values:
+            #
+            # * `allUsers`: A special identifier that represents anyone who is
+            #    on the internet; with or without a Google account.
+            #
+            # * `allAuthenticatedUsers`: A special identifier that represents anyone
+            #    who is authenticated with a Google account or a service account.
+            #
+            # * `user:{emailid}`: An email address that represents a specific Google
+            #    account. For example, `alice@example.com` .
+            #
+            #
+            # * `serviceAccount:{emailid}`: An email address that represents a service
+            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+            #
+            # * `group:{emailid}`: An email address that represents a Google group.
+            #    For example, `admins@example.com`.
+            #
+            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a user that has been recently deleted. For
+            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+            #    recovered, this value reverts to `user:{emailid}` and the recovered user
+            #    retains the role in the binding.
+            #
+            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+            #    unique identifier) representing a service account that has been recently
+            #    deleted. For example,
+            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+            #    If the service account is undeleted, this value reverts to
+            #    `serviceAccount:{emailid}` and the undeleted service account retains the
+            #    role in the binding.
+            #
+            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a Google group that has been recently
+            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+            #    the group is recovered, this value reverts to `group:{emailid}` and the
+            #    recovered group retains the role in the binding.
+            #
+            #
+            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+            #    users of that domain. For example, `google.com` or `example.com`.
+            #
+          &quot;A String&quot;,
+        ],
         &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
@@ -626,53 +659,20 @@
           &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
               # syntax.
         },
-        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-            # `members` can have the following values:
-            #
-            # * `allUsers`: A special identifier that represents anyone who is
-            #    on the internet; with or without a Google account.
-            #
-            # * `allAuthenticatedUsers`: A special identifier that represents anyone
-            #    who is authenticated with a Google account or a service account.
-            #
-            # * `user:{emailid}`: An email address that represents a specific Google
-            #    account. For example, `alice@example.com` .
-            #
-            #
-            # * `serviceAccount:{emailid}`: An email address that represents a service
-            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-            #
-            # * `group:{emailid}`: An email address that represents a Google group.
-            #    For example, `admins@example.com`.
-            #
-            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a user that has been recently deleted. For
-            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-            #    recovered, this value reverts to `user:{emailid}` and the recovered user
-            #    retains the role in the binding.
-            #
-            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-            #    unique identifier) representing a service account that has been recently
-            #    deleted. For example,
-            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-            #    If the service account is undeleted, this value reverts to
-            #    `serviceAccount:{emailid}` and the undeleted service account retains the
-            #    role in the binding.
-            #
-            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a Google group that has been recently
-            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-            #    the group is recovered, this value reverts to `group:{emailid}` and the
-            #    recovered group retains the role in the binding.
-            #
-            #
-            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-            #    users of that domain. For example, `google.com` or `example.com`.
-            #
-          &quot;A String&quot;,
-        ],
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        #
+        # **Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+        # you to overwrite a version `3` policy with a version `1` policy, and all of
+        # the conditions in the version `3` policy are lost.
   }</pre>
 </div>
 
@@ -699,39 +699,9 @@
   An object of the form:
 
     { # Response message for the list instance request.
-    &quot;unreachable&quot;: [ # Locations that could not be reached.
-      &quot;A String&quot;,
-    ],
     &quot;instances&quot;: [ # Represents a list of Data Fusion instances.
       { # Represents a Data Fusion instance.
           # Next available ID: 23
-        &quot;availableVersion&quot;: [ # Available versions that the instance can be upgraded to using
-            # UpdateInstanceRequest.
-          { # The Data Fusion version.
-            &quot;versionNumber&quot;: &quot;A String&quot;, # The version number of the Data Fusion instance, such as &#x27;6.0.1.0&#x27;.
-          },
-        ],
-        &quot;displayName&quot;: &quot;A String&quot;, # Display name for an instance.
-        &quot;zone&quot;: &quot;A String&quot;, # Name of the zone in which the Data Fusion instance will be created.
-        &quot;apiEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the REST APIs is accessible.
-        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
-        &quot;labels&quot;: { # The resource labels for instance to use to annotate any related underlying
-            # resources such as Compute Engine VMs. The character &#x27;=&#x27; is not allowed to
-            # be used within the labels.
-          &quot;a_key&quot;: &quot;A String&quot;,
-        },
-        &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was last updated.
-        &quot;serviceEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the Data Fusion UI is accessible.
-        &quot;enableStackdriverMonitoring&quot;: True or False, # Option to enable Stackdriver Monitoring.
-        &quot;type&quot;: &quot;A String&quot;, # Required. Instance type.
-        &quot;version&quot;: &quot;A String&quot;, # Current version of Data Fusion.
-        &quot;stateMessage&quot;: &quot;A String&quot;, # Output only. Additional information about the current state of this Data
-            # Fusion instance if available.
-        &quot;accelerators&quot;: [ # List of accelerators enabled for this CDF instance.
-          { # Identifies Data Fusion accelerators for an instance.
-            &quot;acceleratorType&quot;: &quot;A String&quot;, # The type of an accelator for a CDF instance.
-          },
-        ],
         &quot;description&quot;: &quot;A String&quot;, # Optional. An optional description of this instance.
         &quot;options&quot;: { # Map of additional options used to configure the behavior of
             # Data Fusion instance.
@@ -762,10 +732,40 @@
             # able to access the public internet.
         &quot;serviceAccount&quot;: &quot;A String&quot;, # Output only. Service account which will be used to access resources in
             # the customer project.&quot;
+        &quot;availableVersion&quot;: [ # Available versions that the instance can be upgraded to using
+            # UpdateInstanceRequest.
+          { # The Data Fusion version.
+            &quot;versionNumber&quot;: &quot;A String&quot;, # The version number of the Data Fusion instance, such as &#x27;6.0.1.0&#x27;.
+          },
+        ],
+        &quot;displayName&quot;: &quot;A String&quot;, # Display name for an instance.
+        &quot;zone&quot;: &quot;A String&quot;, # Name of the zone in which the Data Fusion instance will be created.
+        &quot;apiEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the REST APIs is accessible.
+        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
+        &quot;labels&quot;: { # The resource labels for instance to use to annotate any related underlying
+            # resources such as Compute Engine VMs. The character &#x27;=&#x27; is not allowed to
+            # be used within the labels.
+          &quot;a_key&quot;: &quot;A String&quot;,
+        },
+        &quot;serviceEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the Data Fusion UI is accessible.
+        &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was last updated.
+        &quot;enableStackdriverMonitoring&quot;: True or False, # Option to enable Stackdriver Monitoring.
+        &quot;type&quot;: &quot;A String&quot;, # Required. Instance type.
+        &quot;version&quot;: &quot;A String&quot;, # Current version of Data Fusion.
+        &quot;accelerators&quot;: [ # List of accelerators enabled for this CDF instance.
+          { # Identifies Data Fusion accelerators for an instance.
+            &quot;acceleratorType&quot;: &quot;A String&quot;, # The type of an accelator for a CDF instance.
+          },
+        ],
+        &quot;stateMessage&quot;: &quot;A String&quot;, # Output only. Additional information about the current state of this Data
+            # Fusion instance if available.
       },
     ],
     &quot;nextPageToken&quot;: &quot;A String&quot;, # Token to retrieve the next page of results or empty if there are no more
         # results in the list.
+    &quot;unreachable&quot;: [ # Locations that could not be reached.
+      &quot;A String&quot;,
+    ],
   }</pre>
 </div>
 
@@ -795,33 +795,6 @@
 
 { # Represents a Data Fusion instance.
     # Next available ID: 23
-  &quot;availableVersion&quot;: [ # Available versions that the instance can be upgraded to using
-      # UpdateInstanceRequest.
-    { # The Data Fusion version.
-      &quot;versionNumber&quot;: &quot;A String&quot;, # The version number of the Data Fusion instance, such as &#x27;6.0.1.0&#x27;.
-    },
-  ],
-  &quot;displayName&quot;: &quot;A String&quot;, # Display name for an instance.
-  &quot;zone&quot;: &quot;A String&quot;, # Name of the zone in which the Data Fusion instance will be created.
-  &quot;apiEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the REST APIs is accessible.
-  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
-  &quot;labels&quot;: { # The resource labels for instance to use to annotate any related underlying
-      # resources such as Compute Engine VMs. The character &#x27;=&#x27; is not allowed to
-      # be used within the labels.
-    &quot;a_key&quot;: &quot;A String&quot;,
-  },
-  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was last updated.
-  &quot;serviceEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the Data Fusion UI is accessible.
-  &quot;enableStackdriverMonitoring&quot;: True or False, # Option to enable Stackdriver Monitoring.
-  &quot;type&quot;: &quot;A String&quot;, # Required. Instance type.
-  &quot;version&quot;: &quot;A String&quot;, # Current version of Data Fusion.
-  &quot;stateMessage&quot;: &quot;A String&quot;, # Output only. Additional information about the current state of this Data
-      # Fusion instance if available.
-  &quot;accelerators&quot;: [ # List of accelerators enabled for this CDF instance.
-    { # Identifies Data Fusion accelerators for an instance.
-      &quot;acceleratorType&quot;: &quot;A String&quot;, # The type of an accelator for a CDF instance.
-    },
-  ],
   &quot;description&quot;: &quot;A String&quot;, # Optional. An optional description of this instance.
   &quot;options&quot;: { # Map of additional options used to configure the behavior of
       # Data Fusion instance.
@@ -852,6 +825,33 @@
       # able to access the public internet.
   &quot;serviceAccount&quot;: &quot;A String&quot;, # Output only. Service account which will be used to access resources in
       # the customer project.&quot;
+  &quot;availableVersion&quot;: [ # Available versions that the instance can be upgraded to using
+      # UpdateInstanceRequest.
+    { # The Data Fusion version.
+      &quot;versionNumber&quot;: &quot;A String&quot;, # The version number of the Data Fusion instance, such as &#x27;6.0.1.0&#x27;.
+    },
+  ],
+  &quot;displayName&quot;: &quot;A String&quot;, # Display name for an instance.
+  &quot;zone&quot;: &quot;A String&quot;, # Name of the zone in which the Data Fusion instance will be created.
+  &quot;apiEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the REST APIs is accessible.
+  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
+  &quot;labels&quot;: { # The resource labels for instance to use to annotate any related underlying
+      # resources such as Compute Engine VMs. The character &#x27;=&#x27; is not allowed to
+      # be used within the labels.
+    &quot;a_key&quot;: &quot;A String&quot;,
+  },
+  &quot;serviceEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint on which the Data Fusion UI is accessible.
+  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was last updated.
+  &quot;enableStackdriverMonitoring&quot;: True or False, # Option to enable Stackdriver Monitoring.
+  &quot;type&quot;: &quot;A String&quot;, # Required. Instance type.
+  &quot;version&quot;: &quot;A String&quot;, # Current version of Data Fusion.
+  &quot;accelerators&quot;: [ # List of accelerators enabled for this CDF instance.
+    { # Identifies Data Fusion accelerators for an instance.
+      &quot;acceleratorType&quot;: &quot;A String&quot;, # The type of an accelator for a CDF instance.
+    },
+  ],
+  &quot;stateMessage&quot;: &quot;A String&quot;, # Output only. Additional information about the current state of this Data
+      # Fusion instance if available.
 }
 
   updateMask: string, Field mask is used to specify the fields that the update will overwrite
@@ -890,6 +890,9 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
@@ -897,9 +900,6 @@
         },
       ],
       &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -957,6 +957,9 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
@@ -964,9 +967,6 @@
         },
       ],
       &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -1060,18 +1060,6 @@
         #
         # For a description of IAM and its features, see the
         # [IAM documentation](https://cloud.google.com/iam/docs/).
-      &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-          # prevent simultaneous updates of a policy from overwriting each other.
-          # It is strongly suggested that systems make use of the `etag` in the
-          # read-modify-write cycle to perform policy updates in order to avoid race
-          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-          # systems are expected to put that etag in the request to `setIamPolicy` to
-          # ensure that their change will be applied to the same version of the policy.
-          #
-          # **Important:** If you use IAM Conditions, you must include the `etag` field
-          # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-          # you to overwrite a version `3` policy with a version `1` policy, and all of
-          # the conditions in the version `3` policy are lost.
       &quot;version&quot;: 42, # Specifies the format of the policy.
           #
           # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
@@ -1168,12 +1156,12 @@
                 #
                 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
                 # jose@example.com from DATA_READ logging.
-              &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
               &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
                   # permission.
                   # Follows the same format of Binding.members.
                 &quot;A String&quot;,
               ],
+              &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             },
           ],
         },
@@ -1182,6 +1170,51 @@
           # `condition` that determines how and when the `bindings` are applied. Each
           # of the `bindings` must contain at least one member.
         { # Associates `members` with a `role`.
+          &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+              # `members` can have the following values:
+              #
+              # * `allUsers`: A special identifier that represents anyone who is
+              #    on the internet; with or without a Google account.
+              #
+              # * `allAuthenticatedUsers`: A special identifier that represents anyone
+              #    who is authenticated with a Google account or a service account.
+              #
+              # * `user:{emailid}`: An email address that represents a specific Google
+              #    account. For example, `alice@example.com` .
+              #
+              #
+              # * `serviceAccount:{emailid}`: An email address that represents a service
+              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+              #
+              # * `group:{emailid}`: An email address that represents a Google group.
+              #    For example, `admins@example.com`.
+              #
+              # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+              #    identifier) representing a user that has been recently deleted. For
+              #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+              #    recovered, this value reverts to `user:{emailid}` and the recovered user
+              #    retains the role in the binding.
+              #
+              # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+              #    unique identifier) representing a service account that has been recently
+              #    deleted. For example,
+              #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+              #    If the service account is undeleted, this value reverts to
+              #    `serviceAccount:{emailid}` and the undeleted service account retains the
+              #    role in the binding.
+              #
+              # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+              #    identifier) representing a Google group that has been recently
+              #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+              #    the group is recovered, this value reverts to `group:{emailid}` and the
+              #    recovered group retains the role in the binding.
+              #
+              #
+              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+              #    users of that domain. For example, `google.com` or `example.com`.
+              #
+            &quot;A String&quot;,
+          ],
           &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
               # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
           &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
@@ -1228,53 +1261,20 @@
             &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
                 # syntax.
           },
-          &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-              # `members` can have the following values:
-              #
-              # * `allUsers`: A special identifier that represents anyone who is
-              #    on the internet; with or without a Google account.
-              #
-              # * `allAuthenticatedUsers`: A special identifier that represents anyone
-              #    who is authenticated with a Google account or a service account.
-              #
-              # * `user:{emailid}`: An email address that represents a specific Google
-              #    account. For example, `alice@example.com` .
-              #
-              #
-              # * `serviceAccount:{emailid}`: An email address that represents a service
-              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-              #
-              # * `group:{emailid}`: An email address that represents a Google group.
-              #    For example, `admins@example.com`.
-              #
-              # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-              #    identifier) representing a user that has been recently deleted. For
-              #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-              #    recovered, this value reverts to `user:{emailid}` and the recovered user
-              #    retains the role in the binding.
-              #
-              # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-              #    unique identifier) representing a service account that has been recently
-              #    deleted. For example,
-              #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-              #    If the service account is undeleted, this value reverts to
-              #    `serviceAccount:{emailid}` and the undeleted service account retains the
-              #    role in the binding.
-              #
-              # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-              #    identifier) representing a Google group that has been recently
-              #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-              #    the group is recovered, this value reverts to `group:{emailid}` and the
-              #    recovered group retains the role in the binding.
-              #
-              #
-              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-              #    users of that domain. For example, `google.com` or `example.com`.
-              #
-            &quot;A String&quot;,
-          ],
         },
       ],
+      &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+          # prevent simultaneous updates of a policy from overwriting each other.
+          # It is strongly suggested that systems make use of the `etag` in the
+          # read-modify-write cycle to perform policy updates in order to avoid race
+          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+          # systems are expected to put that etag in the request to `setIamPolicy` to
+          # ensure that their change will be applied to the same version of the policy.
+          #
+          # **Important:** If you use IAM Conditions, you must include the `etag` field
+          # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+          # you to overwrite a version `3` policy with a version `1` policy, and all of
+          # the conditions in the version `3` policy are lost.
     },
     &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
         # the fields in the mask will be modified. If no mask is provided, the
@@ -1354,18 +1354,6 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
-    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-        # prevent simultaneous updates of a policy from overwriting each other.
-        # It is strongly suggested that systems make use of the `etag` in the
-        # read-modify-write cycle to perform policy updates in order to avoid race
-        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-        # systems are expected to put that etag in the request to `setIamPolicy` to
-        # ensure that their change will be applied to the same version of the policy.
-        #
-        # **Important:** If you use IAM Conditions, you must include the `etag` field
-        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-        # you to overwrite a version `3` policy with a version `1` policy, and all of
-        # the conditions in the version `3` policy are lost.
     &quot;version&quot;: 42, # Specifies the format of the policy.
         #
         # Valid values are `0`, `1`, and `3`. Requests that specify an invalid value
@@ -1462,12 +1450,12 @@
               #
               # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
               # jose@example.com from DATA_READ logging.
-            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
                 # permission.
                 # Follows the same format of Binding.members.
               &quot;A String&quot;,
             ],
+            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
           },
         ],
       },
@@ -1476,6 +1464,51 @@
         # `condition` that determines how and when the `bindings` are applied. Each
         # of the `bindings` must contain at least one member.
       { # Associates `members` with a `role`.
+        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+            # `members` can have the following values:
+            #
+            # * `allUsers`: A special identifier that represents anyone who is
+            #    on the internet; with or without a Google account.
+            #
+            # * `allAuthenticatedUsers`: A special identifier that represents anyone
+            #    who is authenticated with a Google account or a service account.
+            #
+            # * `user:{emailid}`: An email address that represents a specific Google
+            #    account. For example, `alice@example.com` .
+            #
+            #
+            # * `serviceAccount:{emailid}`: An email address that represents a service
+            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+            #
+            # * `group:{emailid}`: An email address that represents a Google group.
+            #    For example, `admins@example.com`.
+            #
+            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a user that has been recently deleted. For
+            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+            #    recovered, this value reverts to `user:{emailid}` and the recovered user
+            #    retains the role in the binding.
+            #
+            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+            #    unique identifier) representing a service account that has been recently
+            #    deleted. For example,
+            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+            #    If the service account is undeleted, this value reverts to
+            #    `serviceAccount:{emailid}` and the undeleted service account retains the
+            #    role in the binding.
+            #
+            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a Google group that has been recently
+            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+            #    the group is recovered, this value reverts to `group:{emailid}` and the
+            #    recovered group retains the role in the binding.
+            #
+            #
+            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+            #    users of that domain. For example, `google.com` or `example.com`.
+            #
+          &quot;A String&quot;,
+        ],
         &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
@@ -1522,53 +1555,20 @@
           &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
               # syntax.
         },
-        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-            # `members` can have the following values:
-            #
-            # * `allUsers`: A special identifier that represents anyone who is
-            #    on the internet; with or without a Google account.
-            #
-            # * `allAuthenticatedUsers`: A special identifier that represents anyone
-            #    who is authenticated with a Google account or a service account.
-            #
-            # * `user:{emailid}`: An email address that represents a specific Google
-            #    account. For example, `alice@example.com` .
-            #
-            #
-            # * `serviceAccount:{emailid}`: An email address that represents a service
-            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-            #
-            # * `group:{emailid}`: An email address that represents a Google group.
-            #    For example, `admins@example.com`.
-            #
-            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a user that has been recently deleted. For
-            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-            #    recovered, this value reverts to `user:{emailid}` and the recovered user
-            #    retains the role in the binding.
-            #
-            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-            #    unique identifier) representing a service account that has been recently
-            #    deleted. For example,
-            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-            #    If the service account is undeleted, this value reverts to
-            #    `serviceAccount:{emailid}` and the undeleted service account retains the
-            #    role in the binding.
-            #
-            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a Google group that has been recently
-            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-            #    the group is recovered, this value reverts to `group:{emailid}` and the
-            #    recovered group retains the role in the binding.
-            #
-            #
-            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-            #    users of that domain. For example, `google.com` or `example.com`.
-            #
-          &quot;A String&quot;,
-        ],
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        #
+        # **Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+        # you to overwrite a version `3` policy with a version `1` policy, and all of
+        # the conditions in the version `3` policy are lost.
   }</pre>
 </div>
 
@@ -1660,6 +1660,9 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
@@ -1667,9 +1670,6 @@
         },
       ],
       &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.