anchor.diff:  			"value": {
   				Type:     schema.TypeString,
   				Required: true,
  +				Description:  `IP address or range, defined using CIDR notation, of requests that this rule applies to. Examples: 192.168.1.1 or 192.168.0.0/16 or 2001:db8::/32 or 2001:0db8:0000:0042:0000:8a2e:0370:7334. IP range prefixes should be properly truncated. For example, 1.2.3.4/24 should be truncated to 1.2.3.0/24. Similarly, for IPv6, 2001:db8::1/32 should be truncated to 2001:db8::/32.`,
   			},
   			"description": {
   				Type:     schema.TypeString,
   				Optional: true,
  +				Description:  `A description of this ip range.`,
   			},
   		},
   	}
  +
   <% end -%>
   )
   
  
positive.code: 							AtLeastOneOf: composerConfigKeys,
  							MaxItems:     1,
  							ForceNew:     true,
  							Elem: &schema.Resource{
  								Schema: map[string]*schema.Schema{
  									"enable_private_endpoint": {
  										Type:         schema.TypeBool,
  										Optional:     true,
  										Default:      true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew: 	  true,
  									},
  									"master_ipv4_cidr_block": {
  										Type:         schema.TypeString,
  										Optional:     true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew: true,
  										Default:  "172.16.0.0/28",
  									},
  									"web_server_ipv4_cidr_block": {
  										Type:         schema.TypeString,
  										Optional:     true,
  										Computed:     true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew: true,
  									},
  									"cloud_sql_ipv4_cidr_block": {
  										Type:         schema.TypeString,
  										Optional:     true,
  										Computed:     true,
  										AtLeastOneOf: []string{
  											"config.0.private_environment_config.0.enable_private_endpoint",
  											"config.0.private_environment_config.0.master_ipv4_cidr_block",
  											"config.0.private_environment_config.0.cloud_sql_ipv4_cidr_block",
  											"config.0.private_environment_config.0.web_server_ipv4_cidr_block",
  										},
  										ForceNew: true,
  									},
  								},
  							},
  						},
  <% unless version == "ga" -%>
  						"web_server_network_access_control": {
  							Type:     schema.TypeList,
  							Optional: true,
  							Computed: true,
  							MaxItems: 1,
  							Elem:     &schema.Resource{
  								Schema: map[string]*schema.Schema{
  									"allowed_ip_range": {
  										Type:     schema.TypeSet,
  										Computed: true,
  										Optional: true,
  										Elem: allowedIpRangesConfig,
  									},
  								},
  							},
  						},
  <% end -%>
  						"airflow_uri": {
  							Type:     schema.TypeString,
  							Computed: true,
  						},
  						"dag_gcs_prefix": {
  							Type:     schema.TypeString,
  							Computed: true,
  						},
  						"gke_cluster": {
  							Type:     schema.TypeString,
  							Computed: true,
  						},
  					},
  				},
  			},
  			"labels": {
  				Type:     schema.TypeMap,
  				Optional: true,
  				Elem:     &schema.Schema{Type: schema.TypeString},
  			},
  		},
  	}
  
negative.code: 										ForceNew:         true,
  										ValidateFunc:     validateServiceAccountRelativeNameOrEmail,
  										DiffSuppressFunc: compareServiceAccountEmailToLink,
  										Description:      `The Google Cloud Platform Service Account to be used by the node VMs. If a service account is not specified, the "default" Compute Engine service account is used. Cannot be updated. If given, note that the service account must have roles/composer.worker for any GCP resources created under the Cloud Composer Environment.`,
  									},
  									"tags": {
  										Type:     schema.TypeSet,
  