anchor.diff:  	transformed := make([]interface{}, 0, len(accessControl.AllowedIpRanges))
   	for _, ipRange := range accessControl.AllowedIpRanges {
   		data := map[string]interface{}{
  -			"value": ipRange.Value,
  +			"value":       ipRange.Value,
   			"description": ipRange.Description,
   		}
   		transformed = append(transformed, data)
  
positive.code: 										ForceNew:         true,
  										ValidateFunc:     validateServiceAccountRelativeNameOrEmail,
  										DiffSuppressFunc: compareServiceAccountEmailToLink,
  									},
  									"tags": {
  										Type:     schema.TypeSet,
  
negative.code: 							AtLeastOneOf: composerConfigKeys,
  							MaxItems:     1,
  							ForceNew:     true,
  							Description:  `The configuration used for the Private IP Cloud Composer environment.`,
  							Elem: &schema.Resource{
  								Schema: map[string]*schema.Schema{
  									"enable_private_endpoint": {
  										Type:     schema.TypeBool,
  										Optional: true,
  										Default:  true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew:    true,
  										Description: `If true, access to the public endpoint of the GKE cluster is denied.`,
  									},
  									"master_ipv4_cidr_block": {
  										Type:     schema.TypeString,
  										Optional: true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew:    true,
  										Default:     "172.16.0.0/28",
  										Description: `The IP range in CIDR notation to use for the hosted master network. This range is used for assigning internal IP addresses to the cluster master or set of masters and to the internal load balancer virtual IP. This range must not overlap with any other ranges in use within the cluster's network. If left blank, the default value of '172.16.0.0/28' is used.`,
  									},
  									"web_server_ipv4_cidr_block": {
  										Type:     schema.TypeString,
  										Optional: true,
  										Computed: true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew:    true,
  										Description: `The CIDR block from which IP range for web server will be reserved. Needs to be disjoint from master_ipv4_cidr_block and cloud_sql_ipv4_cidr_block.`,
  									},
  									"cloud_sql_ipv4_cidr_block": {
  										Type:     schema.TypeString,
  										Optional: true,
  										Computed: true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew:    true,
  										Description: `The CIDR block from which IP range in tenant project will be reserved for Cloud SQL. Needs to be disjoint from web_server_ipv4_cidr_block.`,
  									},
  								},
  							},
  						},
  <% unless version == "ga" -%>
  						"web_server_network_access_control": {
  							Type:        schema.TypeList,
  							Optional:    true,
  							Computed:    true,
  							MaxItems:    1,
  							Description: `The network-level access control policy for the Airflow web server. If unspecified, no network-level access restrictions will be applied.`,
  							Elem: &schema.Resource{
  								Schema: map[string]*schema.Schema{
  									"allowed_ip_range": {
  										Type:        schema.TypeSet,
  										Computed:    true,
  										Optional:    true,
  										Elem:        allowedIpRangesConfig,
  										Description: `A collection of allowed IP ranges with descriptions.`,
  									},
  								},
  							},
  						},
  <% end -%>
  						"airflow_uri": {
  							Type:        schema.TypeString,
  							Computed:    true,
  							Description: `The URI of the Apache Airflow Web UI hosted within this environment.`,
  						},
  						"dag_gcs_prefix": {
  							Type:        schema.TypeString,
  							Computed:    true,
  							Description: `The Cloud Storage prefix of the DAGs for this environment. Although Cloud Storage objects reside in a flat namespace, a hierarchical file tree can be simulated using '/'-delimited object name prefixes. DAG objects for this environment reside in a simulated directory with this prefix.`,
  						},
  						"gke_cluster": {
  							Type:        schema.TypeString,
  							Computed:    true,
  							Description: `The Kubernetes Engine cluster used to run this environment.`,
  						},
  					},
  				},
  			},
  			"labels": {
  				Type:        schema.TypeMap,
  				Optional:    true,
  				Elem:        &schema.Schema{Type: schema.TypeString},
  				Description: `User-defined labels for this environment. The labels map can contain no more than 64 entries. Entries of the labels map are UTF8 strings that comply with the following restrictions: Label keys must be between 1 and 63 characters long and must conform to the following regular expression: [a-z]([-a-z0-9]*[a-z0-9])?. Label values must be between 0 and 63 characters long and must conform to the regular expression ([a-z]([-a-z0-9]*[a-z0-9])?)?. No more than 64 labels can be associated with a given environment. Both keys and values must be <= 128 bytes in size.`,
  			},
  		},
  	}
  