docs: update generated docs (#981)

diff --git a/docs/dyn/accesscontextmanager_v1beta.accessPolicies.servicePerimeters.html b/docs/dyn/accesscontextmanager_v1beta.accessPolicies.servicePerimeters.html
index f13fee0..5e435a9 100644
--- a/docs/dyn/accesscontextmanager_v1beta.accessPolicies.servicePerimeters.html
+++ b/docs/dyn/accesscontextmanager_v1beta.accessPolicies.servicePerimeters.html
@@ -119,17 +119,17 @@
       # Service Perimeter Bridges can contain only Google Cloud projects as members,
       # a single Google Cloud project may belong to multiple Service Perimeter
       # Bridges.
-    "perimeterType": "A String", # Perimeter type indicator. A single project is
-        # allowed to be a member of single regular perimeter, but multiple service
-        # perimeter bridges. A project cannot be a included in a perimeter bridge
-        # without being included in regular perimeter. For perimeter bridges,
-        # restricted/unrestricted service lists as well as access lists must be
-        # empty.
-    "title": "A String", # Human readable title. Must be unique within the Policy.
     "status": { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources,
         # restricted/unrestricted services and access levels that determine perimeter
         # content and boundaries.
         # describe specific Service Perimeter configuration.
+      "unrestrictedServices": [ # Google Cloud services that are not subject to the Service Perimeter
+          # restrictions. Deprecated. Must be set to a single wildcard "*".
+          #
+          # The wildcard means that unless explicitly specified by
+          # "restricted_services" list, any service is treated as unrestricted.
+        "A String",
+      ],
       "accessLevels": [ # A list of `AccessLevel` resource names that allow resources within the
           # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
           # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -140,6 +140,10 @@
           # For Service Perimeter Bridge, must be empty.
         "A String",
       ],
+      "resources": [ # A list of Google Cloud resources that are inside of the service perimeter.
+          # Currently only projects are allowed. Format: `projects/{project_number}`
+        "A String",
+      ],
       "restrictedServices": [ # Google Cloud services that are subject to the Service Perimeter
           # restrictions. Must contain a list of services. For example, if
           # `storage.googleapis.com` is specified, access to the storage buckets
@@ -148,30 +152,26 @@
       ],
       "vpcAccessibleServices": { # Specifies how APIs are allowed to communicate within the Service # Beta. Configuration for APIs allowed within Perimeter.
           # Perimeter.
-        "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of
-            # APIs specified in 'allowed_services'.
         "allowedServices": [ # The list of APIs usable within the Service Perimeter. Must be empty
             # unless 'enable_restriction' is True.
           "A String",
         ],
+        "enableRestriction": True or False, # Whether to restrict API calls within the Service Perimeter to the list of
+            # APIs specified in 'allowed_services'.
       },
-      "resources": [ # A list of Google Cloud resources that are inside of the service perimeter.
-          # Currently only projects are allowed. Format: `projects/{project_number}`
-        "A String",
-      ],
-      "unrestrictedServices": [ # Google Cloud services that are not subject to the Service Perimeter
-          # restrictions. Deprecated. Must be set to a single wildcard "*".
-          #
-          # The wildcard means that unless explicitly specified by
-          # "restricted_services" list, any service is treated as unrestricted.
-        "A String",
-      ],
     },
+    "perimeterType": "A String", # Perimeter type indicator. A single project is
+        # allowed to be a member of single regular perimeter, but multiple service
+        # perimeter bridges. A project cannot be a included in a perimeter bridge
+        # without being included in regular perimeter. For perimeter bridges,
+        # restricted/unrestricted service lists as well as access lists must be
+        # empty.
+    "title": "A String", # Human readable title. Must be unique within the Policy.
+    "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect
+        # behavior.
     "name": "A String", # Required. Resource name for the ServicePerimeter.  The `short_name`
         # component must begin with a letter and only include alphanumeric and '_'.
         # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-    "description": "A String", # Description of the `ServicePerimeter` and its use. Does not affect
-        # behavior.
   }
 
   x__xgafv: string, V1 error format.
@@ -184,36 +184,12 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
-    "name": "A String", # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      "details": [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          "a_key": "", # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-      "code": 42, # The status code, which should be an enum value of google.rpc.Code.
-      "message": "A String", # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-    },
     "metadata": { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
         # Some services might not provide such metadata.  Any method that returns a
         # long-running operation should document the metadata type, if any.
       "a_key": "", # Properties of the object. Contains field @type with type URL.
     },
-    "done": True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
     "response": { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -224,6 +200,30 @@
         # `TakeSnapshotResponse`.
       "a_key": "", # Properties of the object. Contains field @type with type URL.
     },
+    "name": "A String", # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    "error": { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      "message": "A String", # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      "details": [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          "a_key": "", # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      "code": 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    "done": True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
   }</pre>
 </div>
 
@@ -249,36 +249,12 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
-    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-    },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
         # Some services might not provide such metadata.  Any method that returns a
         # long-running operation should document the metadata type, if any.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -289,6 +265,30 @@
         # `TakeSnapshotResponse`.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
+    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
   }</pre>
 </div>
 
@@ -320,17 +320,17 @@
         # Service Perimeter Bridges can contain only Google Cloud projects as members,
         # a single Google Cloud project may belong to multiple Service Perimeter
         # Bridges.
-      &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-          # allowed to be a member of single regular perimeter, but multiple service
-          # perimeter bridges. A project cannot be a included in a perimeter bridge
-          # without being included in regular perimeter. For perimeter bridges,
-          # restricted/unrestricted service lists as well as access lists must be
-          # empty.
-      &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
       &quot;status&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources,
           # restricted/unrestricted services and access levels that determine perimeter
           # content and boundaries.
           # describe specific Service Perimeter configuration.
+        &quot;unrestrictedServices&quot;: [ # Google Cloud services that are not subject to the Service Perimeter
+            # restrictions. Deprecated. Must be set to a single wildcard &quot;*&quot;.
+            #
+            # The wildcard means that unless explicitly specified by
+            # &quot;restricted_services&quot; list, any service is treated as unrestricted.
+          &quot;A String&quot;,
+        ],
         &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
             # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
             # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -341,6 +341,10 @@
             # For Service Perimeter Bridge, must be empty.
           &quot;A String&quot;,
         ],
+        &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+            # Currently only projects are allowed. Format: `projects/{project_number}`
+          &quot;A String&quot;,
+        ],
         &quot;restrictedServices&quot;: [ # Google Cloud services that are subject to the Service Perimeter
             # restrictions. Must contain a list of services. For example, if
             # `storage.googleapis.com` is specified, access to the storage buckets
@@ -349,30 +353,26 @@
         ],
         &quot;vpcAccessibleServices&quot;: { # Specifies how APIs are allowed to communicate within the Service # Beta. Configuration for APIs allowed within Perimeter.
             # Perimeter.
-          &quot;enableRestriction&quot;: True or False, # Whether to restrict API calls within the Service Perimeter to the list of
-              # APIs specified in &#x27;allowed_services&#x27;.
           &quot;allowedServices&quot;: [ # The list of APIs usable within the Service Perimeter. Must be empty
               # unless &#x27;enable_restriction&#x27; is True.
             &quot;A String&quot;,
           ],
+          &quot;enableRestriction&quot;: True or False, # Whether to restrict API calls within the Service Perimeter to the list of
+              # APIs specified in &#x27;allowed_services&#x27;.
         },
-        &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-            # Currently only projects are allowed. Format: `projects/{project_number}`
-          &quot;A String&quot;,
-        ],
-        &quot;unrestrictedServices&quot;: [ # Google Cloud services that are not subject to the Service Perimeter
-            # restrictions. Deprecated. Must be set to a single wildcard &quot;*&quot;.
-            #
-            # The wildcard means that unless explicitly specified by
-            # &quot;restricted_services&quot; list, any service is treated as unrestricted.
-          &quot;A String&quot;,
-        ],
       },
+      &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+          # allowed to be a member of single regular perimeter, but multiple service
+          # perimeter bridges. A project cannot be a included in a perimeter bridge
+          # without being included in regular perimeter. For perimeter bridges,
+          # restricted/unrestricted service lists as well as access lists must be
+          # empty.
+      &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
+      &quot;description&quot;: &quot;A String&quot;, # Description of the `ServicePerimeter` and its use. Does not affect
+          # behavior.
       &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
           # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
           # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-      &quot;description&quot;: &quot;A String&quot;, # Description of the `ServicePerimeter` and its use. Does not affect
-          # behavior.
     }</pre>
 </div>
 
@@ -410,17 +410,17 @@
             # Service Perimeter Bridges can contain only Google Cloud projects as members,
             # a single Google Cloud project may belong to multiple Service Perimeter
             # Bridges.
-          &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-              # allowed to be a member of single regular perimeter, but multiple service
-              # perimeter bridges. A project cannot be a included in a perimeter bridge
-              # without being included in regular perimeter. For perimeter bridges,
-              # restricted/unrestricted service lists as well as access lists must be
-              # empty.
-          &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
           &quot;status&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources,
               # restricted/unrestricted services and access levels that determine perimeter
               # content and boundaries.
               # describe specific Service Perimeter configuration.
+            &quot;unrestrictedServices&quot;: [ # Google Cloud services that are not subject to the Service Perimeter
+                # restrictions. Deprecated. Must be set to a single wildcard &quot;*&quot;.
+                #
+                # The wildcard means that unless explicitly specified by
+                # &quot;restricted_services&quot; list, any service is treated as unrestricted.
+              &quot;A String&quot;,
+            ],
             &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
                 # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
                 # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -431,6 +431,10 @@
                 # For Service Perimeter Bridge, must be empty.
               &quot;A String&quot;,
             ],
+            &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+                # Currently only projects are allowed. Format: `projects/{project_number}`
+              &quot;A String&quot;,
+            ],
             &quot;restrictedServices&quot;: [ # Google Cloud services that are subject to the Service Perimeter
                 # restrictions. Must contain a list of services. For example, if
                 # `storage.googleapis.com` is specified, access to the storage buckets
@@ -439,30 +443,26 @@
             ],
             &quot;vpcAccessibleServices&quot;: { # Specifies how APIs are allowed to communicate within the Service # Beta. Configuration for APIs allowed within Perimeter.
                 # Perimeter.
-              &quot;enableRestriction&quot;: True or False, # Whether to restrict API calls within the Service Perimeter to the list of
-                  # APIs specified in &#x27;allowed_services&#x27;.
               &quot;allowedServices&quot;: [ # The list of APIs usable within the Service Perimeter. Must be empty
                   # unless &#x27;enable_restriction&#x27; is True.
                 &quot;A String&quot;,
               ],
+              &quot;enableRestriction&quot;: True or False, # Whether to restrict API calls within the Service Perimeter to the list of
+                  # APIs specified in &#x27;allowed_services&#x27;.
             },
-            &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-                # Currently only projects are allowed. Format: `projects/{project_number}`
-              &quot;A String&quot;,
-            ],
-            &quot;unrestrictedServices&quot;: [ # Google Cloud services that are not subject to the Service Perimeter
-                # restrictions. Deprecated. Must be set to a single wildcard &quot;*&quot;.
-                #
-                # The wildcard means that unless explicitly specified by
-                # &quot;restricted_services&quot; list, any service is treated as unrestricted.
-              &quot;A String&quot;,
-            ],
           },
+          &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+              # allowed to be a member of single regular perimeter, but multiple service
+              # perimeter bridges. A project cannot be a included in a perimeter bridge
+              # without being included in regular perimeter. For perimeter bridges,
+              # restricted/unrestricted service lists as well as access lists must be
+              # empty.
+          &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
+          &quot;description&quot;: &quot;A String&quot;, # Description of the `ServicePerimeter` and its use. Does not affect
+              # behavior.
           &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
               # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
               # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-          &quot;description&quot;: &quot;A String&quot;, # Description of the `ServicePerimeter` and its use. Does not affect
-              # behavior.
         },
     ],
     &quot;nextPageToken&quot;: &quot;A String&quot;, # The pagination token to retrieve the next page of results. If the value is
@@ -509,17 +509,17 @@
       # Service Perimeter Bridges can contain only Google Cloud projects as members,
       # a single Google Cloud project may belong to multiple Service Perimeter
       # Bridges.
-    &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
-        # allowed to be a member of single regular perimeter, but multiple service
-        # perimeter bridges. A project cannot be a included in a perimeter bridge
-        # without being included in regular perimeter. For perimeter bridges,
-        # restricted/unrestricted service lists as well as access lists must be
-        # empty.
-    &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
     &quot;status&quot;: { # `ServicePerimeterConfig` specifies a set of Google Cloud resources that # Current ServicePerimeter configuration. Specifies sets of resources,
         # restricted/unrestricted services and access levels that determine perimeter
         # content and boundaries.
         # describe specific Service Perimeter configuration.
+      &quot;unrestrictedServices&quot;: [ # Google Cloud services that are not subject to the Service Perimeter
+          # restrictions. Deprecated. Must be set to a single wildcard &quot;*&quot;.
+          #
+          # The wildcard means that unless explicitly specified by
+          # &quot;restricted_services&quot; list, any service is treated as unrestricted.
+        &quot;A String&quot;,
+      ],
       &quot;accessLevels&quot;: [ # A list of `AccessLevel` resource names that allow resources within the
           # `ServicePerimeter` to be accessed from the internet. `AccessLevels` listed
           # must be in the same policy as this `ServicePerimeter`. Referencing a
@@ -530,6 +530,10 @@
           # For Service Perimeter Bridge, must be empty.
         &quot;A String&quot;,
       ],
+      &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
+          # Currently only projects are allowed. Format: `projects/{project_number}`
+        &quot;A String&quot;,
+      ],
       &quot;restrictedServices&quot;: [ # Google Cloud services that are subject to the Service Perimeter
           # restrictions. Must contain a list of services. For example, if
           # `storage.googleapis.com` is specified, access to the storage buckets
@@ -538,30 +542,26 @@
       ],
       &quot;vpcAccessibleServices&quot;: { # Specifies how APIs are allowed to communicate within the Service # Beta. Configuration for APIs allowed within Perimeter.
           # Perimeter.
-        &quot;enableRestriction&quot;: True or False, # Whether to restrict API calls within the Service Perimeter to the list of
-            # APIs specified in &#x27;allowed_services&#x27;.
         &quot;allowedServices&quot;: [ # The list of APIs usable within the Service Perimeter. Must be empty
             # unless &#x27;enable_restriction&#x27; is True.
           &quot;A String&quot;,
         ],
+        &quot;enableRestriction&quot;: True or False, # Whether to restrict API calls within the Service Perimeter to the list of
+            # APIs specified in &#x27;allowed_services&#x27;.
       },
-      &quot;resources&quot;: [ # A list of Google Cloud resources that are inside of the service perimeter.
-          # Currently only projects are allowed. Format: `projects/{project_number}`
-        &quot;A String&quot;,
-      ],
-      &quot;unrestrictedServices&quot;: [ # Google Cloud services that are not subject to the Service Perimeter
-          # restrictions. Deprecated. Must be set to a single wildcard &quot;*&quot;.
-          #
-          # The wildcard means that unless explicitly specified by
-          # &quot;restricted_services&quot; list, any service is treated as unrestricted.
-        &quot;A String&quot;,
-      ],
     },
+    &quot;perimeterType&quot;: &quot;A String&quot;, # Perimeter type indicator. A single project is
+        # allowed to be a member of single regular perimeter, but multiple service
+        # perimeter bridges. A project cannot be a included in a perimeter bridge
+        # without being included in regular perimeter. For perimeter bridges,
+        # restricted/unrestricted service lists as well as access lists must be
+        # empty.
+    &quot;title&quot;: &quot;A String&quot;, # Human readable title. Must be unique within the Policy.
+    &quot;description&quot;: &quot;A String&quot;, # Description of the `ServicePerimeter` and its use. Does not affect
+        # behavior.
     &quot;name&quot;: &quot;A String&quot;, # Required. Resource name for the ServicePerimeter.  The `short_name`
         # component must begin with a letter and only include alphanumeric and &#x27;_&#x27;.
         # Format: `accessPolicies/{policy_id}/servicePerimeters/{short_name}`
-    &quot;description&quot;: &quot;A String&quot;, # Description of the `ServicePerimeter` and its use. Does not affect
-        # behavior.
   }
 
   updateMask: string, Required. Mask to control which fields get updated. Must be non-empty.
@@ -575,36 +575,12 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
-    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
-        # originally returns it. If you use the default HTTP mapping, the
-        # `name` should be a resource name ending with `operations/{unique_id}`.
-    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
-        # different programming environments, including REST APIs and RPC APIs. It is
-        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
-        # three pieces of data: error code, error message, and error details.
-        #
-        # You can find out more about this error model and how to work with it in the
-        # [API Design Guide](https://cloud.google.com/apis/design/errors).
-      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
-          # message types for APIs to use.
-        {
-          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-        },
-      ],
-      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
-      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
-          # user-facing error message should be localized and sent in the
-          # google.rpc.Status.details field, or localized by the client.
-    },
     &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
         # contains progress information and common metadata such as create time.
         # Some services might not provide such metadata.  Any method that returns a
         # long-running operation should document the metadata type, if any.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -615,6 +591,30 @@
         # `TakeSnapshotResponse`.
       &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
     },
+    &quot;name&quot;: &quot;A String&quot;, # The server-assigned name, which is only unique within the same service that
+        # originally returns it. If you use the default HTTP mapping, the
+        # `name` should be a resource name ending with `operations/{unique_id}`.
+    &quot;error&quot;: { # The `Status` type defines a logical error model that is suitable for # The error result of the operation in case of failure or cancellation.
+        # different programming environments, including REST APIs and RPC APIs. It is
+        # used by [gRPC](https://github.com/grpc). Each `Status` message contains
+        # three pieces of data: error code, error message, and error details.
+        #
+        # You can find out more about this error model and how to work with it in the
+        # [API Design Guide](https://cloud.google.com/apis/design/errors).
+      &quot;message&quot;: &quot;A String&quot;, # A developer-facing error message, which should be in English. Any
+          # user-facing error message should be localized and sent in the
+          # google.rpc.Status.details field, or localized by the client.
+      &quot;details&quot;: [ # A list of messages that carry the error details.  There is a common set of
+          # message types for APIs to use.
+        {
+          &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+        },
+      ],
+      &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
   }</pre>
 </div>