docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/gameservices_v1beta.projects.locations.gameServerDeployments.html b/docs/dyn/gameservices_v1beta.projects.locations.gameServerDeployments.html
index 840bcdb..ffc309a 100644
--- a/docs/dyn/gameservices_v1beta.projects.locations.gameServerDeployments.html
+++ b/docs/dyn/gameservices_v1beta.projects.locations.gameServerDeployments.html
@@ -98,7 +98,7 @@
   <code><a href="#getRollout">getRollout(name, x__xgafv=None)</a></code></p>
 <p class="firstline">Gets details a single game server deployment rollout.</p>
 <p class="toc_element">
-  <code><a href="#list">list(parent, pageSize=None, filter=None, pageToken=None, orderBy=None, x__xgafv=None)</a></code></p>
+  <code><a href="#list">list(parent, pageToken=None, orderBy=None, pageSize=None, filter=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Lists game server deployments in a given project and location.</p>
 <p class="toc_element">
   <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
@@ -132,11 +132,11 @@
 { # A game server deployment resource.
   &quot;description&quot;: &quot;A String&quot;, # Human readable description of the game server delpoyment.
   &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
+  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
   &quot;labels&quot;: { # The labels associated with this game server deployment. Each label is a
       # key-value pair.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
-  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
   &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
   &quot;name&quot;: &quot;A String&quot;, # The resource name of the game server deployment. Uses the form:
       # 
@@ -180,16 +180,16 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -241,16 +241,16 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -291,29 +291,30 @@
     ],
     &quot;clusterState&quot;: [ # The state of the game server deployment in each game server cluster.
       { # The game server cluster changes made by the game server deployment.
+        &quot;cluster&quot;: &quot;A String&quot;, # The name of the cluster.
         &quot;fleetDetails&quot;: [ # The details about the Agones fleets and autoscalers created in the
             # game server cluster.
           { # Details of the deployed Agones fleet.
             &quot;deployedAutoscaler&quot;: { # Details about the Agones autoscaler. # Information about the Agones autoscaler for that fleet.
-              &quot;autoscaler&quot;: &quot;A String&quot;, # The name of the Agones autoscaler.
               &quot;specSource&quot;: { # Encapsulates Agones fleet spec and Agones autoscaler spec sources. # The source spec that is used to create the autoscaler.
                   # The GameServerConfig resource may no longer exist in the system.
+                &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
+                    # the Agones fleet or Agones autoscaler spec.
                 &quot;gameServerConfigName&quot;: &quot;A String&quot;, # The game server config resource. Uses the form:
                     #
                     # `projects/{project}/locations/{location}/gameServerDeployments/{deployment_id}/configs/{config_id}`.
-                &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
-                    # the Agones fleet or Agones autoscaler spec.
               },
               &quot;fleetAutoscalerSpec&quot;: &quot;A String&quot;, # The autoscaler spec retrieved from Agones.
+              &quot;autoscaler&quot;: &quot;A String&quot;, # The name of the Agones autoscaler.
             },
             &quot;deployedFleet&quot;: { # Agones fleet specification and details. # Information about the Agones fleet.
               &quot;specSource&quot;: { # Encapsulates Agones fleet spec and Agones autoscaler spec sources. # The source spec that is used to create the Agones fleet.
                   # The GameServerConfig resource may no longer exist in the system.
+                &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
+                    # the Agones fleet or Agones autoscaler spec.
                 &quot;gameServerConfigName&quot;: &quot;A String&quot;, # The game server config resource. Uses the form:
                     #
                     # `projects/{project}/locations/{location}/gameServerDeployments/{deployment_id}/configs/{config_id}`.
-                &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
-                    # the Agones fleet or Agones autoscaler spec.
               },
               &quot;fleetSpec&quot;: &quot;A String&quot;, # The fleet spec retrieved from the Agones fleet.
               &quot;fleet&quot;: &quot;A String&quot;, # The name of the Agones fleet.
@@ -330,7 +331,6 @@
             },
           },
         ],
-        &quot;cluster&quot;: &quot;A String&quot;, # The name of the cluster.
       },
     ],
   }</pre>
@@ -355,11 +355,11 @@
     { # A game server deployment resource.
     &quot;description&quot;: &quot;A String&quot;, # Human readable description of the game server delpoyment.
     &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
+    &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
     &quot;labels&quot;: { # The labels associated with this game server deployment. Each label is a
         # key-value pair.
       &quot;a_key&quot;: &quot;A String&quot;,
     },
-    &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
     &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
     &quot;name&quot;: &quot;A String&quot;, # The resource name of the game server deployment. Uses the form:
         #
@@ -466,18 +466,6 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
-    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-        # prevent simultaneous updates of a policy from overwriting each other.
-        # It is strongly suggested that systems make use of the `etag` in the
-        # read-modify-write cycle to perform policy updates in order to avoid race
-        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-        # systems are expected to put that etag in the request to `setIamPolicy` to
-        # ensure that their change will be applied to the same version of the policy.
-        #
-        # **Important:** If you use IAM Conditions, you must include the `etag` field
-        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-        # you to overwrite a version `3` policy with a version `1` policy, and all of
-        # the conditions in the version `3` policy are lost.
     &quot;iamOwned&quot;: True or False,
     &quot;rules&quot;: [ # If more than one rule is specified, the rules are applied in the following
         # manner:
@@ -489,9 +477,25 @@
         #   Logging will be applied if one or more matching rule requires logging.
         # - Otherwise, if no rule applies, permission is denied.
       { # A rule to be applied in a Policy.
+        &quot;conditions&quot;: [ # Additional restrictions that must be met. All conditions must pass for the
+            # rule to match.
+          { # A condition to be met.
+            &quot;svc&quot;: &quot;A String&quot;, # Trusted attributes discharged by the service.
+            &quot;iam&quot;: &quot;A String&quot;, # Trusted attributes supplied by the IAM system.
+            &quot;values&quot;: [ # The objects of the condition.
+              &quot;A String&quot;,
+            ],
+            &quot;sys&quot;: &quot;A String&quot;, # Trusted attributes supplied by any service that owns resources and uses
+                # the IAM system for access control.
+            &quot;op&quot;: &quot;A String&quot;, # An operator to apply the subject with.
+          },
+        ],
         &quot;logConfig&quot;: [ # The config returned to callers of tech.iam.IAM.CheckPolicy for any entries
             # that match the LOG action.
           { # Specifies what kind of log the caller must write
+            &quot;dataAccess&quot;: { # Write a Data Access (Gin) log # Data access options.
+              &quot;logMode&quot;: &quot;A String&quot;,
+            },
             &quot;cloudAudit&quot;: { # Write a Cloud Audit log # Cloud audit options.
               &quot;logName&quot;: &quot;A String&quot;, # The log_name to populate in the Cloud Audit Record.
               &quot;authorizationLoggingOptions&quot;: { # Authorization-related information used by Cloud Audit Logging. # Information used by the Cloud Audit Logging pipeline.
@@ -519,22 +523,19 @@
                 #   counter { metric: &quot;/debug_access_count&quot;  field: &quot;iam_principal&quot; }
                 #   ==&gt; increment counter /iam/policy/debug_access_count
                 #                         {iam_principal=[value of IAMContext.principal]}
-              &quot;metric&quot;: &quot;A String&quot;, # The metric to update.
-              &quot;field&quot;: &quot;A String&quot;, # The field value to attribute.
               &quot;customFields&quot;: [ # Custom fields.
                 { # Custom fields.
                     # These can be used to create a counter with arbitrary field/value
                     # pairs.
                     # See: go/rpcsp-custom-fields.
+                  &quot;name&quot;: &quot;A String&quot;, # Name is the field name.
                   &quot;value&quot;: &quot;A String&quot;, # Value is the field value. It is important that in contrast to the
                       # CounterOptions.field, the value here is a constant that is not
                       # derived from the IAMContext.
-                  &quot;name&quot;: &quot;A String&quot;, # Name is the field name.
                 },
               ],
-            },
-            &quot;dataAccess&quot;: { # Write a Data Access (Gin) log # Data access options.
-              &quot;logMode&quot;: &quot;A String&quot;,
+              &quot;metric&quot;: &quot;A String&quot;, # The metric to update.
+              &quot;field&quot;: &quot;A String&quot;, # The field value to attribute.
             },
           },
         ],
@@ -555,19 +556,6 @@
           &quot;A String&quot;,
         ],
         &quot;description&quot;: &quot;A String&quot;, # Human-readable description of the rule.
-        &quot;conditions&quot;: [ # Additional restrictions that must be met. All conditions must pass for the
-            # rule to match.
-          { # A condition to be met.
-            &quot;iam&quot;: &quot;A String&quot;, # Trusted attributes supplied by the IAM system.
-            &quot;values&quot;: [ # The objects of the condition.
-              &quot;A String&quot;,
-            ],
-            &quot;sys&quot;: &quot;A String&quot;, # Trusted attributes supplied by any service that owns resources and uses
-                # the IAM system for access control.
-            &quot;op&quot;: &quot;A String&quot;, # An operator to apply the subject with.
-            &quot;svc&quot;: &quot;A String&quot;, # Trusted attributes discharged by the service.
-          },
-        ],
       },
     ],
     &quot;version&quot;: 42, # Specifies the format of the policy.
@@ -788,6 +776,18 @@
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        #
+        # **Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+        # you to overwrite a version `3` policy with a version `1` policy, and all of
+        # the conditions in the version `3` policy are lost.
   }</pre>
 </div>
 
@@ -809,6 +809,10 @@
 
     { # The game server deployment rollout which represents the desired rollout
         # state.
+      &quot;defaultGameServerConfig&quot;: &quot;A String&quot;, # The default game server config is applied to all realms unless overridden
+          # in the rollout. For example,
+          #
+          # `projects/my-project/locations/global/gameServerDeployments/my-game/configs/my-config`.
       &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
       &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
       &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
@@ -830,30 +834,26 @@
           &quot;configVersion&quot;: &quot;A String&quot;, # The game server config for this override.
         },
       ],
-      &quot;defaultGameServerConfig&quot;: &quot;A String&quot;, # The default game server config is applied to all realms unless overridden
-          # in the rollout. For example,
-          #
-          # `projects/my-project/locations/global/gameServerDeployments/my-game/configs/my-config`.
     }</pre>
 </div>
 
 <div class="method">
-    <code class="details" id="list">list(parent, pageSize=None, filter=None, pageToken=None, orderBy=None, x__xgafv=None)</code>
+    <code class="details" id="list">list(parent, pageToken=None, orderBy=None, pageSize=None, filter=None, x__xgafv=None)</code>
   <pre>Lists game server deployments in a given project and location.
 
 Args:
   parent: string, Required. The parent resource name. Uses the form:
 `projects/{project}/locations/{location}`. (required)
+  pageToken: string, Optional. The next_page_token value returned from a previous List request,
+if any.
+  orderBy: string, Optional. Specifies the ordering of results following syntax at
+https://cloud.google.com/apis/design/design_patterns#sorting_order.
   pageSize: integer, Optional. The maximum number of items to return.  If unspecified, the server
 will pick an appropriate default. The server may return fewer items than
 requested. A caller should only rely on response&#x27;s
 next_page_token to
 determine if there are more GameServerDeployments left to be queried.
   filter: string, Optional. The filter to apply to list results.
-  pageToken: string, Optional. The next_page_token value returned from a previous List request,
-if any.
-  orderBy: string, Optional. Specifies the ordering of results following syntax at
-https://cloud.google.com/apis/design/design_patterns#sorting_order.
   x__xgafv: string, V1 error format.
     Allowed values
       1 - v1 error format
@@ -869,11 +869,11 @@
       { # A game server deployment resource.
         &quot;description&quot;: &quot;A String&quot;, # Human readable description of the game server delpoyment.
         &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
+        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
         &quot;labels&quot;: { # The labels associated with this game server deployment. Each label is a
             # key-value pair.
           &quot;a_key&quot;: &quot;A String&quot;,
         },
-        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
         &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
         &quot;name&quot;: &quot;A String&quot;, # The resource name of the game server deployment. Uses the form:
             #
@@ -920,11 +920,11 @@
 { # A game server deployment resource.
   &quot;description&quot;: &quot;A String&quot;, # Human readable description of the game server delpoyment.
   &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
+  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
   &quot;labels&quot;: { # The labels associated with this game server deployment. Each label is a
       # key-value pair.
     &quot;a_key&quot;: &quot;A String&quot;,
   },
-  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
   &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
   &quot;name&quot;: &quot;A String&quot;, # The resource name of the game server deployment. Uses the form:
       # 
@@ -973,16 +973,16 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
@@ -1010,6 +1010,10 @@
 
 { # The game server deployment rollout which represents the desired rollout
       # state.
+    &quot;defaultGameServerConfig&quot;: &quot;A String&quot;, # The default game server config is applied to all realms unless overridden
+        # in the rollout. For example,
+        # 
+        # `projects/my-project/locations/global/gameServerDeployments/my-game/configs/my-config`.
     &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
     &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
     &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
@@ -1031,10 +1035,6 @@
         &quot;configVersion&quot;: &quot;A String&quot;, # The game server config for this override.
       },
     ],
-    &quot;defaultGameServerConfig&quot;: &quot;A String&quot;, # The default game server config is applied to all realms unless overridden
-        # in the rollout. For example,
-        # 
-        # `projects/my-project/locations/global/gameServerDeployments/my-game/configs/my-config`.
   }
 
   previewTime: string, Optional. The target timestamp to compute the preview. Defaults to the immediately
@@ -1055,16 +1055,12 @@
 
     { # Response message for PreviewGameServerDeploymentRollout.
       # This has details about the Agones fleet and autoscaler to be actuated.
-    &quot;etag&quot;: &quot;A String&quot;, # ETag of the game server deployment.
     &quot;unavailable&quot;: [ # Locations that could not be reached on this request.
       &quot;A String&quot;,
     ],
     &quot;targetState&quot;: { # Encapsulates the Target state. # The target state.
       &quot;details&quot;: [ # Details about Agones fleets.
         { # Details about the Agones resources.
-          &quot;gameServerClusterName&quot;: &quot;A String&quot;, # The game server cluster name. Uses the form:
-              #
-              # `projects/{project}/locations/{location}/realms/{realm}/gameServerClusters/{cluster}`.
           &quot;gameServerDeploymentName&quot;: &quot;A String&quot;, # The game server deployment name. Uses the form:
               #
               # `projects/{project}/locations/{location}/gameServerDeployments/{deployment_id}`.
@@ -1074,29 +1070,33 @@
                 &quot;name&quot;: &quot;A String&quot;, # The name of the Agones autoscaler.
                 &quot;specSource&quot;: { # Encapsulates Agones fleet spec and Agones autoscaler spec sources. # Encapsulates the source of the Agones fleet spec.
                     # Details about the Agones autoscaler spec.
+                  &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
+                      # the Agones fleet or Agones autoscaler spec.
                   &quot;gameServerConfigName&quot;: &quot;A String&quot;, # The game server config resource. Uses the form:
                       #
                       # `projects/{project}/locations/{location}/gameServerDeployments/{deployment_id}/configs/{config_id}`.
-                  &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
-                      # the Agones fleet or Agones autoscaler spec.
                 },
               },
               &quot;fleet&quot;: { # Target Agones fleet specification. # Reference to target Agones fleet.
                 &quot;name&quot;: &quot;A String&quot;, # The name of the Agones fleet.
                 &quot;specSource&quot;: { # Encapsulates Agones fleet spec and Agones autoscaler spec sources. # Encapsulates the source of the Agones fleet spec.
                     # The Agones fleet spec source.
+                  &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
+                      # the Agones fleet or Agones autoscaler spec.
                   &quot;gameServerConfigName&quot;: &quot;A String&quot;, # The game server config resource. Uses the form:
                       #
                       # `projects/{project}/locations/{location}/gameServerDeployments/{deployment_id}/configs/{config_id}`.
-                  &quot;name&quot;: &quot;A String&quot;, # The name of the Agones leet config or Agones scaling config used to derive
-                      # the Agones fleet or Agones autoscaler spec.
                 },
               },
             },
           ],
+          &quot;gameServerClusterName&quot;: &quot;A String&quot;, # The game server cluster name. Uses the form:
+              #
+              # `projects/{project}/locations/{location}/realms/{realm}/gameServerClusters/{cluster}`.
         },
       ],
     },
+    &quot;etag&quot;: &quot;A String&quot;, # ETag of the game server deployment.
   }</pre>
 </div>
 
@@ -1114,6 +1114,11 @@
     The object takes the form of:
 
 { # Request message for `SetIamPolicy` method.
+    &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+        # the fields in the mask will be modified. If no mask is provided, the
+        # following default mask is used:
+        # 
+        # `paths: &quot;bindings, etag&quot;`
     &quot;policy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of
         # the policy is limited to a few 10s of KB. An empty policy is a
         # valid policy but certain Cloud Platform services (such as Projects)
@@ -1184,18 +1189,6 @@
         #
         # For a description of IAM and its features, see the
         # [IAM documentation](https://cloud.google.com/iam/docs/).
-      &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-          # prevent simultaneous updates of a policy from overwriting each other.
-          # It is strongly suggested that systems make use of the `etag` in the
-          # read-modify-write cycle to perform policy updates in order to avoid race
-          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-          # systems are expected to put that etag in the request to `setIamPolicy` to
-          # ensure that their change will be applied to the same version of the policy.
-          #
-          # **Important:** If you use IAM Conditions, you must include the `etag` field
-          # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-          # you to overwrite a version `3` policy with a version `1` policy, and all of
-          # the conditions in the version `3` policy are lost.
       &quot;iamOwned&quot;: True or False,
       &quot;rules&quot;: [ # If more than one rule is specified, the rules are applied in the following
           # manner:
@@ -1207,9 +1200,25 @@
           #   Logging will be applied if one or more matching rule requires logging.
           # - Otherwise, if no rule applies, permission is denied.
         { # A rule to be applied in a Policy.
+          &quot;conditions&quot;: [ # Additional restrictions that must be met. All conditions must pass for the
+              # rule to match.
+            { # A condition to be met.
+              &quot;svc&quot;: &quot;A String&quot;, # Trusted attributes discharged by the service.
+              &quot;iam&quot;: &quot;A String&quot;, # Trusted attributes supplied by the IAM system.
+              &quot;values&quot;: [ # The objects of the condition.
+                &quot;A String&quot;,
+              ],
+              &quot;sys&quot;: &quot;A String&quot;, # Trusted attributes supplied by any service that owns resources and uses
+                  # the IAM system for access control.
+              &quot;op&quot;: &quot;A String&quot;, # An operator to apply the subject with.
+            },
+          ],
           &quot;logConfig&quot;: [ # The config returned to callers of tech.iam.IAM.CheckPolicy for any entries
               # that match the LOG action.
             { # Specifies what kind of log the caller must write
+              &quot;dataAccess&quot;: { # Write a Data Access (Gin) log # Data access options.
+                &quot;logMode&quot;: &quot;A String&quot;,
+              },
               &quot;cloudAudit&quot;: { # Write a Cloud Audit log # Cloud audit options.
                 &quot;logName&quot;: &quot;A String&quot;, # The log_name to populate in the Cloud Audit Record.
                 &quot;authorizationLoggingOptions&quot;: { # Authorization-related information used by Cloud Audit Logging. # Information used by the Cloud Audit Logging pipeline.
@@ -1237,22 +1246,19 @@
                   #   counter { metric: &quot;/debug_access_count&quot;  field: &quot;iam_principal&quot; }
                   #   ==&gt; increment counter /iam/policy/debug_access_count
                   #                         {iam_principal=[value of IAMContext.principal]}
-                &quot;metric&quot;: &quot;A String&quot;, # The metric to update.
-                &quot;field&quot;: &quot;A String&quot;, # The field value to attribute.
                 &quot;customFields&quot;: [ # Custom fields.
                   { # Custom fields.
                       # These can be used to create a counter with arbitrary field/value
                       # pairs.
                       # See: go/rpcsp-custom-fields.
+                    &quot;name&quot;: &quot;A String&quot;, # Name is the field name.
                     &quot;value&quot;: &quot;A String&quot;, # Value is the field value. It is important that in contrast to the
                         # CounterOptions.field, the value here is a constant that is not
                         # derived from the IAMContext.
-                    &quot;name&quot;: &quot;A String&quot;, # Name is the field name.
                   },
                 ],
-              },
-              &quot;dataAccess&quot;: { # Write a Data Access (Gin) log # Data access options.
-                &quot;logMode&quot;: &quot;A String&quot;,
+                &quot;metric&quot;: &quot;A String&quot;, # The metric to update.
+                &quot;field&quot;: &quot;A String&quot;, # The field value to attribute.
               },
             },
           ],
@@ -1273,19 +1279,6 @@
             &quot;A String&quot;,
           ],
           &quot;description&quot;: &quot;A String&quot;, # Human-readable description of the rule.
-          &quot;conditions&quot;: [ # Additional restrictions that must be met. All conditions must pass for the
-              # rule to match.
-            { # A condition to be met.
-              &quot;iam&quot;: &quot;A String&quot;, # Trusted attributes supplied by the IAM system.
-              &quot;values&quot;: [ # The objects of the condition.
-                &quot;A String&quot;,
-              ],
-              &quot;sys&quot;: &quot;A String&quot;, # Trusted attributes supplied by any service that owns resources and uses
-                  # the IAM system for access control.
-              &quot;op&quot;: &quot;A String&quot;, # An operator to apply the subject with.
-              &quot;svc&quot;: &quot;A String&quot;, # Trusted attributes discharged by the service.
-            },
-          ],
         },
       ],
       &quot;version&quot;: 42, # Specifies the format of the policy.
@@ -1506,12 +1499,19 @@
               # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         },
       ],
+      &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+          # prevent simultaneous updates of a policy from overwriting each other.
+          # It is strongly suggested that systems make use of the `etag` in the
+          # read-modify-write cycle to perform policy updates in order to avoid race
+          # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+          # systems are expected to put that etag in the request to `setIamPolicy` to
+          # ensure that their change will be applied to the same version of the policy.
+          #
+          # **Important:** If you use IAM Conditions, you must include the `etag` field
+          # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+          # you to overwrite a version `3` policy with a version `1` policy, and all of
+          # the conditions in the version `3` policy are lost.
     },
-    &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
-        # the fields in the mask will be modified. If no mask is provided, the
-        # following default mask is used:
-        # 
-        # `paths: &quot;bindings, etag&quot;`
   }
 
   x__xgafv: string, V1 error format.
@@ -1589,18 +1589,6 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
-    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
-        # prevent simultaneous updates of a policy from overwriting each other.
-        # It is strongly suggested that systems make use of the `etag` in the
-        # read-modify-write cycle to perform policy updates in order to avoid race
-        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
-        # systems are expected to put that etag in the request to `setIamPolicy` to
-        # ensure that their change will be applied to the same version of the policy.
-        #
-        # **Important:** If you use IAM Conditions, you must include the `etag` field
-        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
-        # you to overwrite a version `3` policy with a version `1` policy, and all of
-        # the conditions in the version `3` policy are lost.
     &quot;iamOwned&quot;: True or False,
     &quot;rules&quot;: [ # If more than one rule is specified, the rules are applied in the following
         # manner:
@@ -1612,9 +1600,25 @@
         #   Logging will be applied if one or more matching rule requires logging.
         # - Otherwise, if no rule applies, permission is denied.
       { # A rule to be applied in a Policy.
+        &quot;conditions&quot;: [ # Additional restrictions that must be met. All conditions must pass for the
+            # rule to match.
+          { # A condition to be met.
+            &quot;svc&quot;: &quot;A String&quot;, # Trusted attributes discharged by the service.
+            &quot;iam&quot;: &quot;A String&quot;, # Trusted attributes supplied by the IAM system.
+            &quot;values&quot;: [ # The objects of the condition.
+              &quot;A String&quot;,
+            ],
+            &quot;sys&quot;: &quot;A String&quot;, # Trusted attributes supplied by any service that owns resources and uses
+                # the IAM system for access control.
+            &quot;op&quot;: &quot;A String&quot;, # An operator to apply the subject with.
+          },
+        ],
         &quot;logConfig&quot;: [ # The config returned to callers of tech.iam.IAM.CheckPolicy for any entries
             # that match the LOG action.
           { # Specifies what kind of log the caller must write
+            &quot;dataAccess&quot;: { # Write a Data Access (Gin) log # Data access options.
+              &quot;logMode&quot;: &quot;A String&quot;,
+            },
             &quot;cloudAudit&quot;: { # Write a Cloud Audit log # Cloud audit options.
               &quot;logName&quot;: &quot;A String&quot;, # The log_name to populate in the Cloud Audit Record.
               &quot;authorizationLoggingOptions&quot;: { # Authorization-related information used by Cloud Audit Logging. # Information used by the Cloud Audit Logging pipeline.
@@ -1642,22 +1646,19 @@
                 #   counter { metric: &quot;/debug_access_count&quot;  field: &quot;iam_principal&quot; }
                 #   ==&gt; increment counter /iam/policy/debug_access_count
                 #                         {iam_principal=[value of IAMContext.principal]}
-              &quot;metric&quot;: &quot;A String&quot;, # The metric to update.
-              &quot;field&quot;: &quot;A String&quot;, # The field value to attribute.
               &quot;customFields&quot;: [ # Custom fields.
                 { # Custom fields.
                     # These can be used to create a counter with arbitrary field/value
                     # pairs.
                     # See: go/rpcsp-custom-fields.
+                  &quot;name&quot;: &quot;A String&quot;, # Name is the field name.
                   &quot;value&quot;: &quot;A String&quot;, # Value is the field value. It is important that in contrast to the
                       # CounterOptions.field, the value here is a constant that is not
                       # derived from the IAMContext.
-                  &quot;name&quot;: &quot;A String&quot;, # Name is the field name.
                 },
               ],
-            },
-            &quot;dataAccess&quot;: { # Write a Data Access (Gin) log # Data access options.
-              &quot;logMode&quot;: &quot;A String&quot;,
+              &quot;metric&quot;: &quot;A String&quot;, # The metric to update.
+              &quot;field&quot;: &quot;A String&quot;, # The field value to attribute.
             },
           },
         ],
@@ -1678,19 +1679,6 @@
           &quot;A String&quot;,
         ],
         &quot;description&quot;: &quot;A String&quot;, # Human-readable description of the rule.
-        &quot;conditions&quot;: [ # Additional restrictions that must be met. All conditions must pass for the
-            # rule to match.
-          { # A condition to be met.
-            &quot;iam&quot;: &quot;A String&quot;, # Trusted attributes supplied by the IAM system.
-            &quot;values&quot;: [ # The objects of the condition.
-              &quot;A String&quot;,
-            ],
-            &quot;sys&quot;: &quot;A String&quot;, # Trusted attributes supplied by any service that owns resources and uses
-                # the IAM system for access control.
-            &quot;op&quot;: &quot;A String&quot;, # An operator to apply the subject with.
-            &quot;svc&quot;: &quot;A String&quot;, # Trusted attributes discharged by the service.
-          },
-        ],
       },
     ],
     &quot;version&quot;: 42, # Specifies the format of the policy.
@@ -1911,6 +1899,18 @@
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
+    &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
+        # prevent simultaneous updates of a policy from overwriting each other.
+        # It is strongly suggested that systems make use of the `etag` in the
+        # read-modify-write cycle to perform policy updates in order to avoid race
+        # conditions: An `etag` is returned in the response to `getIamPolicy`, and
+        # systems are expected to put that etag in the request to `setIamPolicy` to
+        # ensure that their change will be applied to the same version of the policy.
+        #
+        # **Important:** If you use IAM Conditions, you must include the `etag` field
+        # whenever you call `setIamPolicy`. If you omit this field, then IAM allows
+        # you to overwrite a version `3` policy with a version `1` policy, and all of
+        # the conditions in the version `3` policy are lost.
   }</pre>
 </div>
 
@@ -1976,6 +1976,10 @@
 
 { # The game server deployment rollout which represents the desired rollout
       # state.
+    &quot;defaultGameServerConfig&quot;: &quot;A String&quot;, # The default game server config is applied to all realms unless overridden
+        # in the rollout. For example,
+        # 
+        # `projects/my-project/locations/global/gameServerDeployments/my-game/configs/my-config`.
     &quot;etag&quot;: &quot;A String&quot;, # ETag of the resource.
     &quot;createTime&quot;: &quot;A String&quot;, # Output only. The creation time.
     &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The last-modified time.
@@ -1997,10 +2001,6 @@
         &quot;configVersion&quot;: &quot;A String&quot;, # The game server config for this override.
       },
     ],
-    &quot;defaultGameServerConfig&quot;: &quot;A String&quot;, # The default game server config is applied to all realms unless overridden
-        # in the rollout. For example,
-        # 
-        # `projects/my-project/locations/global/gameServerDeployments/my-game/configs/my-config`.
   }
 
   updateMask: string, Required. Mask of fields to update. At least one path must be supplied in
@@ -2042,16 +2042,16 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.