docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/memcache_v1beta2.projects.locations.instances.html b/docs/dyn/memcache_v1beta2.projects.locations.instances.html
index ad5457d..ddd9941 100644
--- a/docs/dyn/memcache_v1beta2.projects.locations.instances.html
+++ b/docs/dyn/memcache_v1beta2.projects.locations.instances.html
@@ -90,7 +90,7 @@
   <code><a href="#getIamPolicy">getIamPolicy(resource, options_requestedPolicyVersion=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Gets the access control policy for a resource.</p>
 <p class="toc_element">
-  <code><a href="#list">list(parent, filter=None, pageToken=None, orderBy=None, pageSize=None, x__xgafv=None)</a></code></p>
+  <code><a href="#list">list(parent, pageToken=None, orderBy=None, pageSize=None, filter=None, x__xgafv=None)</a></code></p>
 <p class="firstline">Lists Instances in a given project and location.</p>
 <p class="toc_element">
   <code><a href="#list_next">list_next(previous_request, previous_response)</a></code></p>
@@ -120,12 +120,12 @@
     The object takes the form of:
 
 { # Request for ApplyParameters.
-    &quot;nodeIds&quot;: [ # Nodes to which we should apply the instance-level parameter group.
-      &quot;A String&quot;,
-    ],
     &quot;applyAll&quot;: True or False, # Whether to apply instance-level parameter group to all nodes. If set to
         # true, will explicitly restrict users from specifying any nodes, and apply
         # parameter group updates to all nodes within the instance.
+    &quot;nodeIds&quot;: [ # Nodes to which we should apply the instance-level parameter group.
+      &quot;A String&quot;,
+    ],
   }
 
   x__xgafv: string, V1 error format.
@@ -138,6 +138,15 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -158,26 +167,17 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
   }</pre>
 </div>
 
@@ -193,32 +193,6 @@
     The object takes the form of:
 
 {
-  &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
-      # purposes. Cannot be more than 80 characters.
-  &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
-  &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
-      # Refer to cloud documentation on labels for more details.
-      # https://cloud.google.com/compute/docs/labeling-resources
-    &quot;a_key&quot;: &quot;A String&quot;,
-  },
-  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
-  &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
-      # Memcached nodes will be equally distributed across these zones. If not
-      # provided, the service will by default create nodes in all zones in the
-      # region for the instance.
-    &quot;A String&quot;,
-  ],
-  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
-  &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
-      # on each node.
-    &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
-        # can use this id to determine if the parameters associated with the instance
-        # differ from the parameters associated with the nodes and any action needs
-        # to be taken to apply parameters on nodes.
-    &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
-      &quot;a_key&quot;: &quot;A String&quot;,
-    },
-  },
   &quot;memcacheNodes&quot;: [ # Output only. List of Memcached nodes.
       # Refer to [Node] message for more details.
     {
@@ -249,10 +223,6 @@
       # latest supported major version is MEMCACHE_1_5.
       # The minor version will be automatically determined by our system based on
       # the latest supported minor version.
-  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
-      # [network](/compute/docs/networks-and-firewalls#networks) to which the
-      # instance is connected. If left unspecified, the `default` network
-      # will be used.
   &quot;memcacheFullVersion&quot;: &quot;A String&quot;, # Output only. The full version of memcached server running on this instance.
       # System automatically determines the full memcached version for an instance
       # based on the input MemcacheVersion.
@@ -263,6 +233,10 @@
       &quot;message&quot;: &quot;A String&quot;, # Message on memcached instance which will be exposed to users.
     },
   ],
+  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
+      # [network](/compute/docs/networks-and-firewalls#networks) to which the
+      # instance is connected. If left unspecified, the `default` network
+      # will be used.
   &quot;state&quot;: &quot;A String&quot;, # Output only. The state of this Memcached instance.
   &quot;name&quot;: &quot;A String&quot;, # Required. Unique name of the resource in this scope including project and
       # location using the form:
@@ -273,6 +247,32 @@
       # zones Memcached nodes within an instances should be provisioned in.
       # Refer to [zones] field for more details.
   &quot;discoveryEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint for Discovery API
+  &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
+      # purposes. Cannot be more than 80 characters.
+  &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
+  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
+  &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
+      # Refer to cloud documentation on labels for more details.
+      # https://cloud.google.com/compute/docs/labeling-resources
+    &quot;a_key&quot;: &quot;A String&quot;,
+  },
+  &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
+      # Memcached nodes will be equally distributed across these zones. If not
+      # provided, the service will by default create nodes in all zones in the
+      # region for the instance.
+    &quot;A String&quot;,
+  ],
+  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
+  &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
+      # on each node.
+    &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
+        # can use this id to determine if the parameters associated with the instance
+        # differ from the parameters associated with the nodes and any action needs
+        # to be taken to apply parameters on nodes.
+    &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
+      &quot;a_key&quot;: &quot;A String&quot;,
+    },
+  },
 }
 
   instanceId: string, Required. The logical name of the Memcached instance in the user
@@ -293,6 +293,15 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -313,26 +322,17 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
   }</pre>
 </div>
 
@@ -354,6 +354,15 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -374,26 +383,17 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
   }</pre>
 </div>
 
@@ -414,32 +414,6 @@
   An object of the form:
 
     {
-    &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
-        # purposes. Cannot be more than 80 characters.
-    &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
-    &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
-        # Refer to cloud documentation on labels for more details.
-        # https://cloud.google.com/compute/docs/labeling-resources
-      &quot;a_key&quot;: &quot;A String&quot;,
-    },
-    &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
-    &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
-        # Memcached nodes will be equally distributed across these zones. If not
-        # provided, the service will by default create nodes in all zones in the
-        # region for the instance.
-      &quot;A String&quot;,
-    ],
-    &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
-    &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
-        # on each node.
-      &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
-          # can use this id to determine if the parameters associated with the instance
-          # differ from the parameters associated with the nodes and any action needs
-          # to be taken to apply parameters on nodes.
-      &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
-        &quot;a_key&quot;: &quot;A String&quot;,
-      },
-    },
     &quot;memcacheNodes&quot;: [ # Output only. List of Memcached nodes.
         # Refer to [Node] message for more details.
       {
@@ -470,10 +444,6 @@
         # latest supported major version is MEMCACHE_1_5.
         # The minor version will be automatically determined by our system based on
         # the latest supported minor version.
-    &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
-        # [network](/compute/docs/networks-and-firewalls#networks) to which the
-        # instance is connected. If left unspecified, the `default` network
-        # will be used.
     &quot;memcacheFullVersion&quot;: &quot;A String&quot;, # Output only. The full version of memcached server running on this instance.
         # System automatically determines the full memcached version for an instance
         # based on the input MemcacheVersion.
@@ -484,6 +454,10 @@
         &quot;message&quot;: &quot;A String&quot;, # Message on memcached instance which will be exposed to users.
       },
     ],
+    &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
+        # [network](/compute/docs/networks-and-firewalls#networks) to which the
+        # instance is connected. If left unspecified, the `default` network
+        # will be used.
     &quot;state&quot;: &quot;A String&quot;, # Output only. The state of this Memcached instance.
     &quot;name&quot;: &quot;A String&quot;, # Required. Unique name of the resource in this scope including project and
         # location using the form:
@@ -494,6 +468,32 @@
         # zones Memcached nodes within an instances should be provisioned in.
         # Refer to [zones] field for more details.
     &quot;discoveryEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint for Discovery API
+    &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
+        # purposes. Cannot be more than 80 characters.
+    &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
+    &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
+    &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
+        # Refer to cloud documentation on labels for more details.
+        # https://cloud.google.com/compute/docs/labeling-resources
+      &quot;a_key&quot;: &quot;A String&quot;,
+    },
+    &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
+        # Memcached nodes will be equally distributed across these zones. If not
+        # provided, the service will by default create nodes in all zones in the
+        # region for the instance.
+      &quot;A String&quot;,
+    ],
+    &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
+    &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
+        # on each node.
+      &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
+          # can use this id to determine if the parameters associated with the instance
+          # differ from the parameters associated with the nodes and any action needs
+          # to be taken to apply parameters on nodes.
+      &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
+        &quot;a_key&quot;: &quot;A String&quot;,
+      },
+    },
   }</pre>
 </div>
 
@@ -593,6 +593,111 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
+    &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
+        # `condition` that determines how and when the `bindings` are applied. Each
+        # of the `bindings` must contain at least one member.
+      { # Associates `members` with a `role`.
+        &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
+            #
+            # If the condition evaluates to `true`, then this binding applies to the
+            # current request.
+            #
+            # If the condition evaluates to `false`, then this binding does not apply to
+            # the current request. However, a different role binding might grant the same
+            # role to one or more of the members in this binding.
+            #
+            # To learn which resources support conditions in their IAM policies, see the
+            # [IAM
+            # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+            # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
+            # are documented at https://github.com/google/cel-spec.
+            #
+            # Example (Comparison):
+            #
+            #     title: &quot;Summary size limit&quot;
+            #     description: &quot;Determines if a summary is less than 100 chars&quot;
+            #     expression: &quot;document.summary.size() &lt; 100&quot;
+            #
+            # Example (Equality):
+            #
+            #     title: &quot;Requestor is owner&quot;
+            #     description: &quot;Determines if requestor is the document owner&quot;
+            #     expression: &quot;document.owner == request.auth.claims.email&quot;
+            #
+            # Example (Logic):
+            #
+            #     title: &quot;Public documents&quot;
+            #     description: &quot;Determine whether the document should be publicly visible&quot;
+            #     expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
+            #
+            # Example (Data Manipulation):
+            #
+            #     title: &quot;Notification string&quot;
+            #     description: &quot;Create a notification string with a timestamp.&quot;
+            #     expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
+            #
+            # The exact variables and functions that may be referenced within an expression
+            # are determined by the service that evaluates it. See the service
+            # documentation for additional information.
+          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+              # syntax.
+          &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
+              # its purpose. This can be used e.g. in UIs which allow to enter the
+              # expression.
+          &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
+              # reporting, e.g. a file name and a position in the file.
+          &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
+              # describes the expression, e.g. when hovered over it in a UI.
+        },
+        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+            # `members` can have the following values:
+            #
+            # * `allUsers`: A special identifier that represents anyone who is
+            #    on the internet; with or without a Google account.
+            #
+            # * `allAuthenticatedUsers`: A special identifier that represents anyone
+            #    who is authenticated with a Google account or a service account.
+            #
+            # * `user:{emailid}`: An email address that represents a specific Google
+            #    account. For example, `alice@example.com` .
+            #
+            #
+            # * `serviceAccount:{emailid}`: An email address that represents a service
+            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+            #
+            # * `group:{emailid}`: An email address that represents a Google group.
+            #    For example, `admins@example.com`.
+            #
+            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a user that has been recently deleted. For
+            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+            #    recovered, this value reverts to `user:{emailid}` and the recovered user
+            #    retains the role in the binding.
+            #
+            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+            #    unique identifier) representing a service account that has been recently
+            #    deleted. For example,
+            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+            #    If the service account is undeleted, this value reverts to
+            #    `serviceAccount:{emailid}` and the undeleted service account retains the
+            #    role in the binding.
+            #
+            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a Google group that has been recently
+            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+            #    the group is recovered, this value reverts to `group:{emailid}` and the
+            #    recovered group retains the role in the binding.
+            #
+            #
+            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+            #    users of that domain. For example, `google.com` or `example.com`.
+            #
+          &quot;A String&quot;,
+        ],
+        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
+            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+      },
+    ],
     &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
         # prevent simultaneous updates of a policy from overwriting each other.
         # It is strongly suggested that systems make use of the `etag` in the
@@ -681,6 +786,9 @@
           # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
           # logging. It also exempts jose@example.com from DATA_READ logging, and
           # aliya@example.com from DATA_WRITE logging.
+        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
+            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+            # `allServices` is a special value that covers all services.
         &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
           { # Provides the configuration for logging a type of permissions.
               # Example:
@@ -709,129 +817,19 @@
             &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
           },
         ],
-        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
-            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
-            # `allServices` is a special value that covers all services.
-      },
-    ],
-    &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
-        # `condition` that determines how and when the `bindings` are applied. Each
-        # of the `bindings` must contain at least one member.
-      { # Associates `members` with a `role`.
-        &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
-            #
-            # If the condition evaluates to `true`, then this binding applies to the
-            # current request.
-            #
-            # If the condition evaluates to `false`, then this binding does not apply to
-            # the current request. However, a different role binding might grant the same
-            # role to one or more of the members in this binding.
-            #
-            # To learn which resources support conditions in their IAM policies, see the
-            # [IAM
-            # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
-            # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
-            # are documented at https://github.com/google/cel-spec.
-            #
-            # Example (Comparison):
-            #
-            #     title: &quot;Summary size limit&quot;
-            #     description: &quot;Determines if a summary is less than 100 chars&quot;
-            #     expression: &quot;document.summary.size() &lt; 100&quot;
-            #
-            # Example (Equality):
-            #
-            #     title: &quot;Requestor is owner&quot;
-            #     description: &quot;Determines if requestor is the document owner&quot;
-            #     expression: &quot;document.owner == request.auth.claims.email&quot;
-            #
-            # Example (Logic):
-            #
-            #     title: &quot;Public documents&quot;
-            #     description: &quot;Determine whether the document should be publicly visible&quot;
-            #     expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
-            #
-            # Example (Data Manipulation):
-            #
-            #     title: &quot;Notification string&quot;
-            #     description: &quot;Create a notification string with a timestamp.&quot;
-            #     expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
-            #
-            # The exact variables and functions that may be referenced within an expression
-            # are determined by the service that evaluates it. See the service
-            # documentation for additional information.
-          &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
-              # its purpose. This can be used e.g. in UIs which allow to enter the
-              # expression.
-          &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
-              # reporting, e.g. a file name and a position in the file.
-          &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
-              # describes the expression, e.g. when hovered over it in a UI.
-          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-              # syntax.
-        },
-        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-            # `members` can have the following values:
-            #
-            # * `allUsers`: A special identifier that represents anyone who is
-            #    on the internet; with or without a Google account.
-            #
-            # * `allAuthenticatedUsers`: A special identifier that represents anyone
-            #    who is authenticated with a Google account or a service account.
-            #
-            # * `user:{emailid}`: An email address that represents a specific Google
-            #    account. For example, `alice@example.com` .
-            #
-            #
-            # * `serviceAccount:{emailid}`: An email address that represents a service
-            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-            #
-            # * `group:{emailid}`: An email address that represents a Google group.
-            #    For example, `admins@example.com`.
-            #
-            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a user that has been recently deleted. For
-            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-            #    recovered, this value reverts to `user:{emailid}` and the recovered user
-            #    retains the role in the binding.
-            #
-            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-            #    unique identifier) representing a service account that has been recently
-            #    deleted. For example,
-            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-            #    If the service account is undeleted, this value reverts to
-            #    `serviceAccount:{emailid}` and the undeleted service account retains the
-            #    role in the binding.
-            #
-            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a Google group that has been recently
-            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-            #    the group is recovered, this value reverts to `group:{emailid}` and the
-            #    recovered group retains the role in the binding.
-            #
-            #
-            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-            #    users of that domain. For example, `google.com` or `example.com`.
-            #
-          &quot;A String&quot;,
-        ],
-        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
-            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
   }</pre>
 </div>
 
 <div class="method">
-    <code class="details" id="list">list(parent, filter=None, pageToken=None, orderBy=None, pageSize=None, x__xgafv=None)</code>
+    <code class="details" id="list">list(parent, pageToken=None, orderBy=None, pageSize=None, filter=None, x__xgafv=None)</code>
   <pre>Lists Instances in a given project and location.
 
 Args:
   parent: string, Required. The resource name of the instance location using the form:
     `projects/{project_id}/locations/{location_id}`
 where `location_id` refers to a GCP region (required)
-  filter: string, List filter. For example, exclude all Memcached instances with name as
-my-instance by specifying &quot;name != my-instance&quot;.
   pageToken: string, The next_page_token value returned from a previous List request,
 if any.
   orderBy: string, Sort results. Supported values are &quot;name&quot;, &quot;name desc&quot; or &quot;&quot; (unsorted).
@@ -842,6 +840,8 @@
 and a caller should only rely on response&#x27;s
 next_page_token
 to determine if there are more instances left to be queried.
+  filter: string, List filter. For example, exclude all Memcached instances with name as
+my-instance by specifying &quot;name != my-instance&quot;.
   x__xgafv: string, V1 error format.
     Allowed values
       1 - v1 error format
@@ -857,32 +857,6 @@
         # If the `location_id` in the parent field of the request is &quot;-&quot;, all regions
         # available to the project are queried, and the results aggregated.
       {
-        &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
-            # purposes. Cannot be more than 80 characters.
-        &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
-        &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
-            # Refer to cloud documentation on labels for more details.
-            # https://cloud.google.com/compute/docs/labeling-resources
-          &quot;a_key&quot;: &quot;A String&quot;,
-        },
-        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
-        &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
-            # Memcached nodes will be equally distributed across these zones. If not
-            # provided, the service will by default create nodes in all zones in the
-            # region for the instance.
-          &quot;A String&quot;,
-        ],
-        &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
-        &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
-            # on each node.
-          &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
-              # can use this id to determine if the parameters associated with the instance
-              # differ from the parameters associated with the nodes and any action needs
-              # to be taken to apply parameters on nodes.
-          &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
-            &quot;a_key&quot;: &quot;A String&quot;,
-          },
-        },
         &quot;memcacheNodes&quot;: [ # Output only. List of Memcached nodes.
             # Refer to [Node] message for more details.
           {
@@ -913,10 +887,6 @@
             # latest supported major version is MEMCACHE_1_5.
             # The minor version will be automatically determined by our system based on
             # the latest supported minor version.
-        &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
-            # [network](/compute/docs/networks-and-firewalls#networks) to which the
-            # instance is connected. If left unspecified, the `default` network
-            # will be used.
         &quot;memcacheFullVersion&quot;: &quot;A String&quot;, # Output only. The full version of memcached server running on this instance.
             # System automatically determines the full memcached version for an instance
             # based on the input MemcacheVersion.
@@ -927,6 +897,10 @@
             &quot;message&quot;: &quot;A String&quot;, # Message on memcached instance which will be exposed to users.
           },
         ],
+        &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
+            # [network](/compute/docs/networks-and-firewalls#networks) to which the
+            # instance is connected. If left unspecified, the `default` network
+            # will be used.
         &quot;state&quot;: &quot;A String&quot;, # Output only. The state of this Memcached instance.
         &quot;name&quot;: &quot;A String&quot;, # Required. Unique name of the resource in this scope including project and
             # location using the form:
@@ -937,6 +911,32 @@
             # zones Memcached nodes within an instances should be provisioned in.
             # Refer to [zones] field for more details.
         &quot;discoveryEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint for Discovery API
+        &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
+            # purposes. Cannot be more than 80 characters.
+        &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
+        &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
+        &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
+            # Refer to cloud documentation on labels for more details.
+            # https://cloud.google.com/compute/docs/labeling-resources
+          &quot;a_key&quot;: &quot;A String&quot;,
+        },
+        &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
+            # Memcached nodes will be equally distributed across these zones. If not
+            # provided, the service will by default create nodes in all zones in the
+            # region for the instance.
+          &quot;A String&quot;,
+        ],
+        &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
+        &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
+            # on each node.
+          &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
+              # can use this id to determine if the parameters associated with the instance
+              # differ from the parameters associated with the nodes and any action needs
+              # to be taken to apply parameters on nodes.
+          &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
+            &quot;a_key&quot;: &quot;A String&quot;,
+          },
+        },
       },
     ],
     &quot;nextPageToken&quot;: &quot;A String&quot;, # Token to retrieve the next page of results, or empty if there are no more
@@ -978,32 +978,6 @@
     The object takes the form of:
 
 {
-  &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
-      # purposes. Cannot be more than 80 characters.
-  &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
-  &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
-      # Refer to cloud documentation on labels for more details.
-      # https://cloud.google.com/compute/docs/labeling-resources
-    &quot;a_key&quot;: &quot;A String&quot;,
-  },
-  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
-  &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
-      # Memcached nodes will be equally distributed across these zones. If not
-      # provided, the service will by default create nodes in all zones in the
-      # region for the instance.
-    &quot;A String&quot;,
-  ],
-  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
-  &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
-      # on each node.
-    &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
-        # can use this id to determine if the parameters associated with the instance
-        # differ from the parameters associated with the nodes and any action needs
-        # to be taken to apply parameters on nodes.
-    &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
-      &quot;a_key&quot;: &quot;A String&quot;,
-    },
-  },
   &quot;memcacheNodes&quot;: [ # Output only. List of Memcached nodes.
       # Refer to [Node] message for more details.
     {
@@ -1034,10 +1008,6 @@
       # latest supported major version is MEMCACHE_1_5.
       # The minor version will be automatically determined by our system based on
       # the latest supported minor version.
-  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
-      # [network](/compute/docs/networks-and-firewalls#networks) to which the
-      # instance is connected. If left unspecified, the `default` network
-      # will be used.
   &quot;memcacheFullVersion&quot;: &quot;A String&quot;, # Output only. The full version of memcached server running on this instance.
       # System automatically determines the full memcached version for an instance
       # based on the input MemcacheVersion.
@@ -1048,6 +1018,10 @@
       &quot;message&quot;: &quot;A String&quot;, # Message on memcached instance which will be exposed to users.
     },
   ],
+  &quot;authorizedNetwork&quot;: &quot;A String&quot;, # Optional. The full name of the Google Compute Engine
+      # [network](/compute/docs/networks-and-firewalls#networks) to which the
+      # instance is connected. If left unspecified, the `default` network
+      # will be used.
   &quot;state&quot;: &quot;A String&quot;, # Output only. The state of this Memcached instance.
   &quot;name&quot;: &quot;A String&quot;, # Required. Unique name of the resource in this scope including project and
       # location using the form:
@@ -1058,6 +1032,32 @@
       # zones Memcached nodes within an instances should be provisioned in.
       # Refer to [zones] field for more details.
   &quot;discoveryEndpoint&quot;: &quot;A String&quot;, # Output only. Endpoint for Discovery API
+  &quot;displayName&quot;: &quot;A String&quot;, # Optional. User provided name for the instance only used for display
+      # purposes. Cannot be more than 80 characters.
+  &quot;nodeCount&quot;: 42, # Required. Number of nodes in the Memcached instance.
+  &quot;createTime&quot;: &quot;A String&quot;, # Output only. The time the instance was created.
+  &quot;labels&quot;: { # Optional. Resource labels to represent user-provided metadata.
+      # Refer to cloud documentation on labels for more details.
+      # https://cloud.google.com/compute/docs/labeling-resources
+    &quot;a_key&quot;: &quot;A String&quot;,
+  },
+  &quot;zones&quot;: [ # Optional. Zones where Memcached nodes should be provisioned in.
+      # Memcached nodes will be equally distributed across these zones. If not
+      # provided, the service will by default create nodes in all zones in the
+      # region for the instance.
+    &quot;A String&quot;,
+  ],
+  &quot;updateTime&quot;: &quot;A String&quot;, # Output only. The time the instance was updated.
+  &quot;parameters&quot;: { # Optional: User defined parameters to apply to the memcached process
+      # on each node.
+    &quot;id&quot;: &quot;A String&quot;, # Output only. The unique ID associated with this set of parameters. Users
+        # can use this id to determine if the parameters associated with the instance
+        # differ from the parameters associated with the nodes and any action needs
+        # to be taken to apply parameters on nodes.
+    &quot;params&quot;: { # User defined set of parameters to use in the memcached process.
+      &quot;a_key&quot;: &quot;A String&quot;,
+    },
+  },
 }
 
   updateMask: string, Required. Mask of fields to update.
@@ -1072,6 +1072,15 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -1092,26 +1101,17 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
   }</pre>
 </div>
 
@@ -1129,11 +1129,6 @@
     The object takes the form of:
 
 { # Request message for `SetIamPolicy` method.
-    &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
-        # the fields in the mask will be modified. If no mask is provided, the
-        # following default mask is used:
-        # 
-        # `paths: &quot;bindings, etag&quot;`
     &quot;policy&quot;: { # An Identity and Access Management (IAM) policy, which specifies access # REQUIRED: The complete policy to be applied to the `resource`. The size of
         # the policy is limited to a few 10s of KB. An empty policy is a
         # valid policy but certain Cloud Platform services (such as Projects)
@@ -1204,6 +1199,111 @@
         #
         # For a description of IAM and its features, see the
         # [IAM documentation](https://cloud.google.com/iam/docs/).
+      &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
+          # `condition` that determines how and when the `bindings` are applied. Each
+          # of the `bindings` must contain at least one member.
+        { # Associates `members` with a `role`.
+          &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
+              #
+              # If the condition evaluates to `true`, then this binding applies to the
+              # current request.
+              #
+              # If the condition evaluates to `false`, then this binding does not apply to
+              # the current request. However, a different role binding might grant the same
+              # role to one or more of the members in this binding.
+              #
+              # To learn which resources support conditions in their IAM policies, see the
+              # [IAM
+              # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+              # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
+              # are documented at https://github.com/google/cel-spec.
+              #
+              # Example (Comparison):
+              #
+              #     title: &quot;Summary size limit&quot;
+              #     description: &quot;Determines if a summary is less than 100 chars&quot;
+              #     expression: &quot;document.summary.size() &lt; 100&quot;
+              #
+              # Example (Equality):
+              #
+              #     title: &quot;Requestor is owner&quot;
+              #     description: &quot;Determines if requestor is the document owner&quot;
+              #     expression: &quot;document.owner == request.auth.claims.email&quot;
+              #
+              # Example (Logic):
+              #
+              #     title: &quot;Public documents&quot;
+              #     description: &quot;Determine whether the document should be publicly visible&quot;
+              #     expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
+              #
+              # Example (Data Manipulation):
+              #
+              #     title: &quot;Notification string&quot;
+              #     description: &quot;Create a notification string with a timestamp.&quot;
+              #     expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
+              #
+              # The exact variables and functions that may be referenced within an expression
+              # are determined by the service that evaluates it. See the service
+              # documentation for additional information.
+            &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+                # syntax.
+            &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
+                # its purpose. This can be used e.g. in UIs which allow to enter the
+                # expression.
+            &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
+                # reporting, e.g. a file name and a position in the file.
+            &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
+                # describes the expression, e.g. when hovered over it in a UI.
+          },
+          &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+              # `members` can have the following values:
+              #
+              # * `allUsers`: A special identifier that represents anyone who is
+              #    on the internet; with or without a Google account.
+              #
+              # * `allAuthenticatedUsers`: A special identifier that represents anyone
+              #    who is authenticated with a Google account or a service account.
+              #
+              # * `user:{emailid}`: An email address that represents a specific Google
+              #    account. For example, `alice@example.com` .
+              #
+              #
+              # * `serviceAccount:{emailid}`: An email address that represents a service
+              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+              #
+              # * `group:{emailid}`: An email address that represents a Google group.
+              #    For example, `admins@example.com`.
+              #
+              # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+              #    identifier) representing a user that has been recently deleted. For
+              #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+              #    recovered, this value reverts to `user:{emailid}` and the recovered user
+              #    retains the role in the binding.
+              #
+              # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+              #    unique identifier) representing a service account that has been recently
+              #    deleted. For example,
+              #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+              #    If the service account is undeleted, this value reverts to
+              #    `serviceAccount:{emailid}` and the undeleted service account retains the
+              #    role in the binding.
+              #
+              # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+              #    identifier) representing a Google group that has been recently
+              #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+              #    the group is recovered, this value reverts to `group:{emailid}` and the
+              #    recovered group retains the role in the binding.
+              #
+              #
+              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+              #    users of that domain. For example, `google.com` or `example.com`.
+              #
+            &quot;A String&quot;,
+          ],
+          &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
+              # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+        },
+      ],
       &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
           # prevent simultaneous updates of a policy from overwriting each other.
           # It is strongly suggested that systems make use of the `etag` in the
@@ -1292,6 +1392,9 @@
             # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
             # logging. It also exempts jose@example.com from DATA_READ logging, and
             # aliya@example.com from DATA_WRITE logging.
+          &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
+              # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+              # `allServices` is a special value that covers all services.
           &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
             { # Provides the configuration for logging a type of permissions.
                 # Example:
@@ -1320,117 +1423,14 @@
               &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             },
           ],
-          &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
-              # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
-              # `allServices` is a special value that covers all services.
-        },
-      ],
-      &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
-          # `condition` that determines how and when the `bindings` are applied. Each
-          # of the `bindings` must contain at least one member.
-        { # Associates `members` with a `role`.
-          &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
-              #
-              # If the condition evaluates to `true`, then this binding applies to the
-              # current request.
-              #
-              # If the condition evaluates to `false`, then this binding does not apply to
-              # the current request. However, a different role binding might grant the same
-              # role to one or more of the members in this binding.
-              #
-              # To learn which resources support conditions in their IAM policies, see the
-              # [IAM
-              # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
-              # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
-              # are documented at https://github.com/google/cel-spec.
-              #
-              # Example (Comparison):
-              #
-              #     title: &quot;Summary size limit&quot;
-              #     description: &quot;Determines if a summary is less than 100 chars&quot;
-              #     expression: &quot;document.summary.size() &lt; 100&quot;
-              #
-              # Example (Equality):
-              #
-              #     title: &quot;Requestor is owner&quot;
-              #     description: &quot;Determines if requestor is the document owner&quot;
-              #     expression: &quot;document.owner == request.auth.claims.email&quot;
-              #
-              # Example (Logic):
-              #
-              #     title: &quot;Public documents&quot;
-              #     description: &quot;Determine whether the document should be publicly visible&quot;
-              #     expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
-              #
-              # Example (Data Manipulation):
-              #
-              #     title: &quot;Notification string&quot;
-              #     description: &quot;Create a notification string with a timestamp.&quot;
-              #     expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
-              #
-              # The exact variables and functions that may be referenced within an expression
-              # are determined by the service that evaluates it. See the service
-              # documentation for additional information.
-            &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
-                # its purpose. This can be used e.g. in UIs which allow to enter the
-                # expression.
-            &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
-                # reporting, e.g. a file name and a position in the file.
-            &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
-                # describes the expression, e.g. when hovered over it in a UI.
-            &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-                # syntax.
-          },
-          &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-              # `members` can have the following values:
-              #
-              # * `allUsers`: A special identifier that represents anyone who is
-              #    on the internet; with or without a Google account.
-              #
-              # * `allAuthenticatedUsers`: A special identifier that represents anyone
-              #    who is authenticated with a Google account or a service account.
-              #
-              # * `user:{emailid}`: An email address that represents a specific Google
-              #    account. For example, `alice@example.com` .
-              #
-              #
-              # * `serviceAccount:{emailid}`: An email address that represents a service
-              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-              #
-              # * `group:{emailid}`: An email address that represents a Google group.
-              #    For example, `admins@example.com`.
-              #
-              # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-              #    identifier) representing a user that has been recently deleted. For
-              #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-              #    recovered, this value reverts to `user:{emailid}` and the recovered user
-              #    retains the role in the binding.
-              #
-              # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-              #    unique identifier) representing a service account that has been recently
-              #    deleted. For example,
-              #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-              #    If the service account is undeleted, this value reverts to
-              #    `serviceAccount:{emailid}` and the undeleted service account retains the
-              #    role in the binding.
-              #
-              # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-              #    identifier) representing a Google group that has been recently
-              #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-              #    the group is recovered, this value reverts to `group:{emailid}` and the
-              #    recovered group retains the role in the binding.
-              #
-              #
-              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-              #    users of that domain. For example, `google.com` or `example.com`.
-              #
-            &quot;A String&quot;,
-          ],
-          &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
-              # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         },
       ],
     },
+    &quot;updateMask&quot;: &quot;A String&quot;, # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
+        # the fields in the mask will be modified. If no mask is provided, the
+        # following default mask is used:
+        # 
+        # `paths: &quot;bindings, etag&quot;`
   }
 
   x__xgafv: string, V1 error format.
@@ -1508,6 +1508,111 @@
       #
       # For a description of IAM and its features, see the
       # [IAM documentation](https://cloud.google.com/iam/docs/).
+    &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
+        # `condition` that determines how and when the `bindings` are applied. Each
+        # of the `bindings` must contain at least one member.
+      { # Associates `members` with a `role`.
+        &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
+            #
+            # If the condition evaluates to `true`, then this binding applies to the
+            # current request.
+            #
+            # If the condition evaluates to `false`, then this binding does not apply to
+            # the current request. However, a different role binding might grant the same
+            # role to one or more of the members in this binding.
+            #
+            # To learn which resources support conditions in their IAM policies, see the
+            # [IAM
+            # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
+            # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
+            # are documented at https://github.com/google/cel-spec.
+            #
+            # Example (Comparison):
+            #
+            #     title: &quot;Summary size limit&quot;
+            #     description: &quot;Determines if a summary is less than 100 chars&quot;
+            #     expression: &quot;document.summary.size() &lt; 100&quot;
+            #
+            # Example (Equality):
+            #
+            #     title: &quot;Requestor is owner&quot;
+            #     description: &quot;Determines if requestor is the document owner&quot;
+            #     expression: &quot;document.owner == request.auth.claims.email&quot;
+            #
+            # Example (Logic):
+            #
+            #     title: &quot;Public documents&quot;
+            #     description: &quot;Determine whether the document should be publicly visible&quot;
+            #     expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
+            #
+            # Example (Data Manipulation):
+            #
+            #     title: &quot;Notification string&quot;
+            #     description: &quot;Create a notification string with a timestamp.&quot;
+            #     expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
+            #
+            # The exact variables and functions that may be referenced within an expression
+            # are determined by the service that evaluates it. See the service
+            # documentation for additional information.
+          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
+              # syntax.
+          &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
+              # its purpose. This can be used e.g. in UIs which allow to enter the
+              # expression.
+          &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
+              # reporting, e.g. a file name and a position in the file.
+          &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
+              # describes the expression, e.g. when hovered over it in a UI.
+        },
+        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+            # `members` can have the following values:
+            #
+            # * `allUsers`: A special identifier that represents anyone who is
+            #    on the internet; with or without a Google account.
+            #
+            # * `allAuthenticatedUsers`: A special identifier that represents anyone
+            #    who is authenticated with a Google account or a service account.
+            #
+            # * `user:{emailid}`: An email address that represents a specific Google
+            #    account. For example, `alice@example.com` .
+            #
+            #
+            # * `serviceAccount:{emailid}`: An email address that represents a service
+            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+            #
+            # * `group:{emailid}`: An email address that represents a Google group.
+            #    For example, `admins@example.com`.
+            #
+            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a user that has been recently deleted. For
+            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+            #    recovered, this value reverts to `user:{emailid}` and the recovered user
+            #    retains the role in the binding.
+            #
+            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+            #    unique identifier) representing a service account that has been recently
+            #    deleted. For example,
+            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+            #    If the service account is undeleted, this value reverts to
+            #    `serviceAccount:{emailid}` and the undeleted service account retains the
+            #    role in the binding.
+            #
+            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a Google group that has been recently
+            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+            #    the group is recovered, this value reverts to `group:{emailid}` and the
+            #    recovered group retains the role in the binding.
+            #
+            #
+            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+            #    users of that domain. For example, `google.com` or `example.com`.
+            #
+          &quot;A String&quot;,
+        ],
+        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
+            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
+      },
+    ],
     &quot;etag&quot;: &quot;A String&quot;, # `etag` is used for optimistic concurrency control as a way to help
         # prevent simultaneous updates of a policy from overwriting each other.
         # It is strongly suggested that systems make use of the `etag` in the
@@ -1596,6 +1701,9 @@
           # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
           # logging. It also exempts jose@example.com from DATA_READ logging, and
           # aliya@example.com from DATA_WRITE logging.
+        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
+            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+            # `allServices` is a special value that covers all services.
         &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
           { # Provides the configuration for logging a type of permissions.
               # Example:
@@ -1624,114 +1732,6 @@
             &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
           },
         ],
-        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
-            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
-            # `allServices` is a special value that covers all services.
-      },
-    ],
-    &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
-        # `condition` that determines how and when the `bindings` are applied. Each
-        # of the `bindings` must contain at least one member.
-      { # Associates `members` with a `role`.
-        &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
-            #
-            # If the condition evaluates to `true`, then this binding applies to the
-            # current request.
-            #
-            # If the condition evaluates to `false`, then this binding does not apply to
-            # the current request. However, a different role binding might grant the same
-            # role to one or more of the members in this binding.
-            #
-            # To learn which resources support conditions in their IAM policies, see the
-            # [IAM
-            # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
-            # syntax. CEL is a C-like expression language. The syntax and semantics of CEL
-            # are documented at https://github.com/google/cel-spec.
-            #
-            # Example (Comparison):
-            #
-            #     title: &quot;Summary size limit&quot;
-            #     description: &quot;Determines if a summary is less than 100 chars&quot;
-            #     expression: &quot;document.summary.size() &lt; 100&quot;
-            #
-            # Example (Equality):
-            #
-            #     title: &quot;Requestor is owner&quot;
-            #     description: &quot;Determines if requestor is the document owner&quot;
-            #     expression: &quot;document.owner == request.auth.claims.email&quot;
-            #
-            # Example (Logic):
-            #
-            #     title: &quot;Public documents&quot;
-            #     description: &quot;Determine whether the document should be publicly visible&quot;
-            #     expression: &quot;document.type != &#x27;private&#x27; &amp;&amp; document.type != &#x27;internal&#x27;&quot;
-            #
-            # Example (Data Manipulation):
-            #
-            #     title: &quot;Notification string&quot;
-            #     description: &quot;Create a notification string with a timestamp.&quot;
-            #     expression: &quot;&#x27;New message received at &#x27; + string(document.create_time)&quot;
-            #
-            # The exact variables and functions that may be referenced within an expression
-            # are determined by the service that evaluates it. See the service
-            # documentation for additional information.
-          &quot;title&quot;: &quot;A String&quot;, # Optional. Title for the expression, i.e. a short string describing
-              # its purpose. This can be used e.g. in UIs which allow to enter the
-              # expression.
-          &quot;location&quot;: &quot;A String&quot;, # Optional. String indicating the location of the expression for error
-              # reporting, e.g. a file name and a position in the file.
-          &quot;description&quot;: &quot;A String&quot;, # Optional. Description of the expression. This is a longer text which
-              # describes the expression, e.g. when hovered over it in a UI.
-          &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
-              # syntax.
-        },
-        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-            # `members` can have the following values:
-            #
-            # * `allUsers`: A special identifier that represents anyone who is
-            #    on the internet; with or without a Google account.
-            #
-            # * `allAuthenticatedUsers`: A special identifier that represents anyone
-            #    who is authenticated with a Google account or a service account.
-            #
-            # * `user:{emailid}`: An email address that represents a specific Google
-            #    account. For example, `alice@example.com` .
-            #
-            #
-            # * `serviceAccount:{emailid}`: An email address that represents a service
-            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-            #
-            # * `group:{emailid}`: An email address that represents a Google group.
-            #    For example, `admins@example.com`.
-            #
-            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a user that has been recently deleted. For
-            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-            #    recovered, this value reverts to `user:{emailid}` and the recovered user
-            #    retains the role in the binding.
-            #
-            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-            #    unique identifier) representing a service account that has been recently
-            #    deleted. For example,
-            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-            #    If the service account is undeleted, this value reverts to
-            #    `serviceAccount:{emailid}` and the undeleted service account retains the
-            #    role in the binding.
-            #
-            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a Google group that has been recently
-            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-            #    the group is recovered, this value reverts to `group:{emailid}` and the
-            #    recovered group retains the role in the binding.
-            #
-            #
-            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-            #    users of that domain. For example, `google.com` or `example.com`.
-            #
-          &quot;A String&quot;,
-        ],
-        &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
-            # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
       },
     ],
   }</pre>
@@ -1813,6 +1813,15 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -1833,26 +1842,17 @@
         #
         # You can find out more about this error model and how to work with it in the
         # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
       &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
           # message types for APIs to use.
         {
           &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
         },
       ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
     },
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
   }</pre>
 </div>