diff --git a/generated/google/apis/cloudtasks_v2.rb b/generated/google/apis/cloudtasks_v2.rb
index 46b6e3dfc..1b7c59559 100644
--- a/generated/google/apis/cloudtasks_v2.rb
+++ b/generated/google/apis/cloudtasks_v2.rb
@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/tasks/
     module CloudtasksV2
       VERSION = 'V2'
-      REVISION = '20200414'
+      REVISION = '20200505'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
diff --git a/generated/google/apis/cloudtasks_v2/classes.rb b/generated/google/apis/cloudtasks_v2/classes.rb
index 3185713eb..d693070e3 100644
--- a/generated/google/apis/cloudtasks_v2/classes.rb
+++ b/generated/google/apis/cloudtasks_v2/classes.rb
@@ -564,6 +564,9 @@ module Google
         # Requests for policies with any conditional bindings must specify version 3.
         # Policies without any conditional bindings may specify any valid value or
         # leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM
+        # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # Corresponds to the JSON property `requestedPolicyVersion`
         # @return [Fixnum]
         attr_accessor :requested_policy_version
@@ -906,10 +909,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -924,7 +930,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -997,6 +1005,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1383,10 +1394,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -1401,7 +1415,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
diff --git a/generated/google/apis/cloudtasks_v2beta2.rb b/generated/google/apis/cloudtasks_v2beta2.rb
index e0bb49273..db61d9559 100644
--- a/generated/google/apis/cloudtasks_v2beta2.rb
+++ b/generated/google/apis/cloudtasks_v2beta2.rb
@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/tasks/
     module CloudtasksV2beta2
       VERSION = 'V2beta2'
-      REVISION = '20200414'
+      REVISION = '20200505'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
diff --git a/generated/google/apis/cloudtasks_v2beta2/classes.rb b/generated/google/apis/cloudtasks_v2beta2/classes.rb
index 11960f13a..29409954c 100644
--- a/generated/google/apis/cloudtasks_v2beta2/classes.rb
+++ b/generated/google/apis/cloudtasks_v2beta2/classes.rb
@@ -700,6 +700,9 @@ module Google
         # Requests for policies with any conditional bindings must specify version 3.
         # Policies without any conditional bindings may specify any valid value or
         # leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM
+        # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # Corresponds to the JSON property `requestedPolicyVersion`
         # @return [Fixnum]
         attr_accessor :requested_policy_version
@@ -971,10 +974,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -989,7 +995,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -1062,6 +1070,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1551,10 +1562,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -1569,7 +1583,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
diff --git a/generated/google/apis/cloudtasks_v2beta3.rb b/generated/google/apis/cloudtasks_v2beta3.rb
index 110f8af07..82a8b3d4d 100644
--- a/generated/google/apis/cloudtasks_v2beta3.rb
+++ b/generated/google/apis/cloudtasks_v2beta3.rb
@@ -25,7 +25,7 @@ module Google
     # @see https://cloud.google.com/tasks/
     module CloudtasksV2beta3
       VERSION = 'V2beta3'
-      REVISION = '20200414'
+      REVISION = '20200505'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
diff --git a/generated/google/apis/cloudtasks_v2beta3/classes.rb b/generated/google/apis/cloudtasks_v2beta3/classes.rb
index ac3210184..e849df740 100644
--- a/generated/google/apis/cloudtasks_v2beta3/classes.rb
+++ b/generated/google/apis/cloudtasks_v2beta3/classes.rb
@@ -597,6 +597,9 @@ module Google
         # Requests for policies with any conditional bindings must specify version 3.
         # Policies without any conditional bindings may specify any valid value or
         # leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM
+        # documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # Corresponds to the JSON property `requestedPolicyVersion`
         # @return [Fixnum]
         attr_accessor :requested_policy_version
@@ -939,10 +942,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -957,7 +963,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -1030,6 +1038,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1406,10 +1417,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -1424,7 +1438,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
diff --git a/generated/google/apis/logging_v2.rb b/generated/google/apis/logging_v2.rb
index 1ebe4b8cd..2e9218998 100644
--- a/generated/google/apis/logging_v2.rb
+++ b/generated/google/apis/logging_v2.rb
@@ -28,7 +28,7 @@ module Google
     # @see https://cloud.google.com/logging/docs/
     module LoggingV2
       VERSION = 'V2'
-      REVISION = '20200407'
+      REVISION = '20200501'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
diff --git a/generated/google/apis/logging_v2/classes.rb b/generated/google/apis/logging_v2/classes.rb
index 0f668e745..63bc5b810 100644
--- a/generated/google/apis/logging_v2/classes.rb
+++ b/generated/google/apis/logging_v2/classes.rb
@@ -26,11 +26,12 @@ module Google
       class BigQueryOptions
         include Google::Apis::Core::Hashable
       
-        # Optional. Whether to use BigQuery's partition tables. By default, Logging
-        # creates dated tables based on the log entries' timestamps, e.g.
-        # syslog_20170523. With partitioned tables the date suffix is no longer present
-        # and special query syntax has to be used instead. In both cases, tables are
-        # sharded based on UTC timezone.
+        # Optional. Whether to use BigQuery's partition tables (https://cloud.google.com/
+        # bigquery/docs/partitioned-tables). By default, Logging creates dated tables
+        # based on the log entries' timestamps, e.g. syslog_20170523. With partitioned
+        # tables the date suffix is no longer present and special query syntax (https://
+        # cloud.google.com/bigquery/docs/querying-partitioned-tables) has to be used
+        # instead. In both cases, tables are sharded based on UTC timezone.
         # Corresponds to the JSON property `usePartitionedTables`
         # @return [Boolean]
         attr_accessor :use_partitioned_tables
@@ -119,7 +120,8 @@ module Google
       # a project, folder, organization, billing account, or flexible resource.Note:
       # CMEK for the Logs Router can currently only be configured for GCP
       # organizations. Once configured, it applies to all projects and folders in the
-      # GCP organization.See Enabling CMEK for Logs Router for more information.
+      # GCP organization.See Enabling CMEK for Logs Router (https://cloud.google.com/
+      # logging/docs/routing/managed-encryption) for more information.
       class CmekSettings
         include Google::Apis::Core::Hashable
       
@@ -135,7 +137,8 @@ module Google
         # operations will be completed using the key that was used at the time of
         # encryption unless access to that key has been revoked.To disable CMEK for the
         # Logs Router, set this field to an empty string.See Enabling CMEK for Logs
-        # Router for more information.
+        # Router (https://cloud.google.com/logging/docs/routing/managed-encryption) for
+        # more information.
         # Corresponds to the JSON property `kmsKeyName`
         # @return [String]
         attr_accessor :kms_key_name
@@ -150,7 +153,8 @@ module Google
         # assign the role roles/cloudkms.cryptoKeyEncrypterDecrypter to the service
         # account that the Logs Router will use to access your Cloud KMS key. Use
         # GetCmekSettings to obtain the service account ID.See Enabling CMEK for Logs
-        # Router for more information.
+        # Router (https://cloud.google.com/logging/docs/routing/managed-encryption) for
+        # more information.
         # Corresponds to the JSON property `serviceAccountId`
         # @return [String]
         attr_accessor :service_account_id
@@ -491,10 +495,11 @@ module Google
         include Google::Apis::Core::Hashable
       
         # Optional. A filter that chooses which log entries to return. See Advanced Logs
-        # Queries. Only log entries that match the filter are returned. An empty filter
-        # matches all log entries in the resources listed in resource_names. Referencing
-        # a parent resource that is not listed in resource_names will cause the filter
-        # to return no results. The maximum length of the filter is 20000 characters.
+        # Queries (https://cloud.google.com/logging/docs/view/advanced-queries). Only
+        # log entries that match the filter are returned. An empty filter matches all
+        # log entries in the resources listed in resource_names. Referencing a parent
+        # resource that is not listed in resource_names will cause the filter to return
+        # no results. The maximum length of the filter is 20000 characters.
         # Corresponds to the JSON property `filter`
         # @return [String]
         attr_accessor :filter
@@ -887,9 +892,10 @@ module Google
         # If this field is omitted in a new log entry, then Logging assigns it the
         # current time. Timestamps have nanosecond accuracy, but trailing zeros in the
         # fractional seconds might be omitted when the timestamp is displayed.Incoming
-        # log entries must have timestamps that don't exceed the logs retention period
-        # in the past, and that don't exceed 24 hours in the future. Log entries outside
-        # those time boundaries aren't ingested by Logging.
+        # log entries must have timestamps that don't exceed the logs retention period (
+        # https://cloud.google.com/logging/quotas#logs_retention_periods) in the past,
+        # and that don't exceed 24 hours in the future. Log entries outside those time
+        # boundaries aren't ingested by Logging.
         # Corresponds to the JSON property `timestamp`
         # @return [String]
         attr_accessor :timestamp
@@ -1048,11 +1054,13 @@ module Google
         attr_accessor :disabled
         alias_method :disabled?, :disabled
       
-        # Required. An advanced logs filter that matches the log entries to be excluded.
-        # By using the sample function, you can exclude less than 100% of the matching
-        # log entries. For example, the following query matches 99% of low-severity log
-        # entries from Google Cloud Storage buckets:"resource.type=gcs_bucket severity<
-        # ERROR sample(insertId, 0.99)"
+        # Required. An advanced logs filter (https://cloud.google.com/logging/docs/view/
+        # advanced-queries) that matches the log entries to be excluded. By using the
+        # sample function (https://cloud.google.com/logging/docs/view/advanced-queries#
+        # sample), you can exclude less than 100% of the matching log entries. For
+        # example, the following query matches 99% of low-severity log entries from
+        # Google Cloud Storage buckets:"resource.type=gcs_bucket severity<ERROR sample(
+        # insertId, 0.99)"
         # Corresponds to the JSON property `filter`
         # @return [String]
         attr_accessor :filter
@@ -1160,7 +1168,8 @@ module Google
         # @return [String]
         attr_accessor :description
       
-        # Required. An advanced logs filter which is used to match log entries. Example:
+        # Required. An advanced logs filter (https://cloud.google.com/logging/docs/view/
+        # advanced_filters) which is used to match log entries. Example:
         # "resource.type=gae_app AND severity>=ERROR"
         # The maximum length of the filter is 20000 characters.
         # Corresponds to the JSON property `filter`
@@ -1280,7 +1289,8 @@ module Google
         # "pubsub.googleapis.com/projects/[PROJECT_ID]/topics/[TOPIC_ID]"
         # The sink's writer_identity, set when the sink is created, must have permission
         # to write to the destination or else the log entries are not exported. For more
-        # information, see Exporting Logs with Sinks.
+        # information, see Exporting Logs with Sinks (https://cloud.google.com/logging/
+        # docs/api/tasks/exporting-logs).
         # Corresponds to the JSON property `destination`
         # @return [String]
         attr_accessor :destination
@@ -1292,9 +1302,9 @@ module Google
         attr_accessor :disabled
         alias_method :disabled?, :disabled
       
-        # Optional. An advanced logs filter. The only exported log entries are those
-        # that are in the resource owning the sink and that match the filter. For
-        # example:
+        # Optional. An advanced logs filter (https://cloud.google.com/logging/docs/view/
+        # advanced-queries). The only exported log entries are those that are in the
+        # resource owning the sink and that match the filter. For example:
         # logName="projects/[PROJECT_ID]/logs/[LOG_ID]" AND severity>=ERROR
         # Corresponds to the JSON property `filter`
         # @return [String]
@@ -1326,8 +1336,7 @@ module Google
         # @return [String]
         attr_accessor :name
       
-        # Deprecated. The log entry format to use for this sink's exported log entries.
-        # The v2 format is used by default and cannot be changed.
+        # Deprecated. This field is unused.
         # Corresponds to the JSON property `outputVersionFormat`
         # @return [String]
         attr_accessor :output_version_format
@@ -1343,7 +1352,9 @@ module Google
         # field is set by sinks.create and sinks.update based on the value of
         # unique_writer_identity in those methods.Until you grant this identity write-
         # access to the destination, log entry exports from this sink will fail. For
-        # more information, see Granting Access for a Resource. Consult the destination
+        # more information, see Granting Access for a Resource (https://cloud.google.com/
+        # iam/docs/granting-roles-to-service-accounts#
+        # granting_access_to_a_service_account_for_a_resource). Consult the destination
         # service's documentation to determine the appropriate IAM roles to assign to
         # the identity.
         # Corresponds to the JSON property `writerIdentity`
@@ -2035,10 +2046,12 @@ module Google
         # respectively. The supplied values are chosen so that, among the log entries
         # that did not supply their own values, the entries earlier in the list will
         # sort before the entries later in the list. See the entries.list method.Log
-        # entries with timestamps that are more than the logs retention period in the
-        # past or more than 24 hours in the future will not be available when calling
-        # entries.list. However, those log entries can still be exported with LogSinks.
-        # To improve throughput and to avoid exceeding the quota limit for calls to
+        # entries with timestamps that are more than the logs retention period (https://
+        # cloud.google.com/logging/quota-policy) in the past or more than 24 hours in
+        # the future will not be available when calling entries.list. However, those log
+        # entries can still be exported with LogSinks (https://cloud.google.com/logging/
+        # docs/api/tasks/exporting-logs).To improve throughput and to avoid exceeding
+        # the quota limit (https://cloud.google.com/logging/quota-policy) for calls to
         # entries.write, you should try to include several log entries in this list,
         # rather than calling this method for each individual log entry.
         # Corresponds to the JSON property `entries`
diff --git a/generated/google/apis/logging_v2/service.rb b/generated/google/apis/logging_v2/service.rb
index ecd7f3639..62eb19ab4 100644
--- a/generated/google/apis/logging_v2/service.rb
+++ b/generated/google/apis/logging_v2/service.rb
@@ -768,7 +768,7 @@ module Google
         
         # Lists log entries. Use this method to retrieve log entries that originated
         # from a project/folder/organization/billing account. For ways to export log
-        # entries, see Exporting Logs.
+        # entries, see Exporting Logs (https://cloud.google.com/logging/docs/export).
         # @param [Google::Apis::LoggingV2::ListLogEntriesRequest] list_log_entries_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -2012,7 +2012,8 @@ module Google
         # Gets the Logs Router CMEK settings for the given resource.Note: CMEK for the
         # Logs Router can currently only be configured for GCP organizations. Once
         # configured, it applies to all projects and folders in the GCP organization.See
-        # Enabling CMEK for Logs Router for more information.
+        # Enabling CMEK for Logs Router (https://cloud.google.com/logging/docs/routing/
+        # managed-encryption) for more information.
         # @param [String] name
         #   Required. The resource for which to retrieve CMEK settings.
         #   "projects/[PROJECT_ID]/cmekSettings"
@@ -2055,7 +2056,8 @@ module Google
         # UpdateCmekSettings will fail if 1) kms_key_name is invalid, or 2) the
         # associated service account does not have the required roles/cloudkms.
         # cryptoKeyEncrypterDecrypter role assigned for the key, or 3) access to the key
-        # is disabled.See Enabling CMEK for Logs Router for more information.
+        # is disabled.See Enabling CMEK for Logs Router (https://cloud.google.com/
+        # logging/docs/routing/managed-encryption) for more information.
         # @param [String] name
         #   Required. The resource name for the CMEK settings to update.
         #   "projects/[PROJECT_ID]/cmekSettings"
@@ -3943,7 +3945,8 @@ module Google
         # Gets the Logs Router CMEK settings for the given resource.Note: CMEK for the
         # Logs Router can currently only be configured for GCP organizations. Once
         # configured, it applies to all projects and folders in the GCP organization.See
-        # Enabling CMEK for Logs Router for more information.
+        # Enabling CMEK for Logs Router (https://cloud.google.com/logging/docs/routing/
+        # managed-encryption) for more information.
         # @param [String] name
         #   Required. The resource for which to retrieve CMEK settings.
         #   "projects/[PROJECT_ID]/cmekSettings"
@@ -3986,7 +3989,8 @@ module Google
         # UpdateCmekSettings will fail if 1) kms_key_name is invalid, or 2) the
         # associated service account does not have the required roles/cloudkms.
         # cryptoKeyEncrypterDecrypter role assigned for the key, or 3) access to the key
-        # is disabled.See Enabling CMEK for Logs Router for more information.
+        # is disabled.See Enabling CMEK for Logs Router (https://cloud.google.com/
+        # logging/docs/routing/managed-encryption) for more information.
         # @param [String] name
         #   Required. The resource name for the CMEK settings to update.
         #   "projects/[PROJECT_ID]/cmekSettings"
diff --git a/generated/google/apis/networkmanagement_v1beta1.rb b/generated/google/apis/networkmanagement_v1beta1.rb
index f755483b6..c97f60561 100644
--- a/generated/google/apis/networkmanagement_v1beta1.rb
+++ b/generated/google/apis/networkmanagement_v1beta1.rb
@@ -26,7 +26,7 @@ module Google
     # @see https://cloud.google.com/
     module NetworkmanagementV1beta1
       VERSION = 'V1beta1'
-      REVISION = '20200303'
+      REVISION = '20200505'
 
       # View and manage your data across Google Cloud Platform services
       AUTH_CLOUD_PLATFORM = 'https://www.googleapis.com/auth/cloud-platform'
diff --git a/generated/google/apis/networkmanagement_v1beta1/classes.rb b/generated/google/apis/networkmanagement_v1beta1/classes.rb
index ad5574f99..34993ae42 100644
--- a/generated/google/apis/networkmanagement_v1beta1/classes.rb
+++ b/generated/google/apis/networkmanagement_v1beta1/classes.rb
@@ -290,7 +290,7 @@ module Google
         attr_accessor :labels
       
         # Required. Unique name of the resource using the form:
-        # `projects/`project_id`/tests/`test_id``
+        # `projects/`project_id`/locations/global/connectivityTests/`test``
         # Corresponds to the JSON property `name`
         # @return [String]
         attr_accessor :name
@@ -1135,7 +1135,7 @@ module Google
         attr_accessor :status_detail
       
         # Target of the operation - for example
-        # projects/project-1/connectivityTests/test-1
+        # projects/project-1/locations/global/connectivityTests/test-1
         # Corresponds to the JSON property `target`
         # @return [String]
         attr_accessor :target
@@ -1168,10 +1168,13 @@ module Google
       # Google groups, and domains (such as G Suite). A `role` is a named list of
       # permissions; each `role` can be an IAM predefined role or a user-created
       # custom role.
-      # Optionally, a `binding` can specify a `condition`, which is a logical
-      # expression that allows access to a resource only if the expression evaluates
-      # to `true`. A condition can add constraints based on attributes of the
-      # request, the resource, or both.
+      # For some types of Google Cloud resources, a `binding` can also specify a
+      # `condition`, which is a logical expression that allows access to a resource
+      # only if the expression evaluates to `true`. A condition can add constraints
+      # based on attributes of the request, the resource, or both. To learn which
+      # resources support conditions in their IAM policies, see the
+      # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+      # policies).
       # **JSON example:**
       # `
       # "bindings": [
@@ -1186,7 +1189,9 @@ module Google
       # `,
       # `
       # "role": "roles/resourcemanager.organizationViewer",
-      # "members": ["user:eve@example.com"],
+      # "members": [
+      # "user:eve@example.com"
+      # ],
       # "condition": `
       # "title": "expirable access",
       # "description": "Does not grant access after Sep 2020",
@@ -1264,6 +1269,9 @@ module Google
         # the conditions in the version `3` policy are lost.
         # If a policy does not include any conditions, operations on that policy may
         # specify any valid version or leave the field unset.
+        # To learn which resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # Corresponds to the JSON property `version`
         # @return [Fixnum]
         attr_accessor :version
@@ -1419,10 +1427,13 @@ module Google
         # Google groups, and domains (such as G Suite). A `role` is a named list of
         # permissions; each `role` can be an IAM predefined role or a user-created
         # custom role.
-        # Optionally, a `binding` can specify a `condition`, which is a logical
-        # expression that allows access to a resource only if the expression evaluates
-        # to `true`. A condition can add constraints based on attributes of the
-        # request, the resource, or both.
+        # For some types of Google Cloud resources, a `binding` can also specify a
+        # `condition`, which is a logical expression that allows access to a resource
+        # only if the expression evaluates to `true`. A condition can add constraints
+        # based on attributes of the request, the resource, or both. To learn which
+        # resources support conditions in their IAM policies, see the
+        # [IAM documentation](https://cloud.google.com/iam/help/conditions/resource-
+        # policies).
         # **JSON example:**
         # `
         # "bindings": [
@@ -1437,7 +1448,9 @@ module Google
         # `,
         # `
         # "role": "roles/resourcemanager.organizationViewer",
-        # "members": ["user:eve@example.com"],
+        # "members": [
+        # "user:eve@example.com"
+        # ],
         # "condition": `
         # "title": "expirable access",
         # "description": "Does not grant access after Sep 2020",
@@ -1475,8 +1488,7 @@ module Google
         # OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
         # the fields in the mask will be modified. If no mask is provided, the
         # following default mask is used:
-        # paths: "bindings, etag"
-        # This field is only used by Cloud IAM.
+        # `paths: "bindings, etag"`
         # Corresponds to the JSON property `updateMask`
         # @return [String]
         attr_accessor :update_mask
diff --git a/generated/google/apis/networkmanagement_v1beta1/service.rb b/generated/google/apis/networkmanagement_v1beta1/service.rb
index af604e1f6..ad86b60c3 100644
--- a/generated/google/apis/networkmanagement_v1beta1/service.rb
+++ b/generated/google/apis/networkmanagement_v1beta1/service.rb
@@ -173,7 +173,7 @@ module Google
         # Deletes a specific `ConnectivityTest`.
         # @param [String] name
         #   Required. Connectivity Test resource name using the form:
-        #   `projects/`project_id`/connectivityTests/`test_id``
+        #   `projects/`project_id`/locations/global/connectivityTests/`test_id``
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -245,6 +245,9 @@ module Google
         #   Requests for policies with any conditional bindings must specify version 3.
         #   Policies without any conditional bindings may specify any valid value or
         #   leave the field unset.
+        #   To learn which resources support conditions in their IAM policies, see the
+        #   [IAM
+        #   documentation](https://cloud.google.com/iam/help/conditions/resource-policies).
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -288,7 +291,7 @@ module Google
         #   field, or a synthetic field. Field names can be camelCase or snake_case.
         #   Examples:
         #   - Filter by name:
-        #   name = "projects/proj-1/connectivityTests/test-1
+        #   name = "projects/proj-1/locations/global/connectivityTests/test-1
         #   - Filter by labels:
         #   - Resources that have a key called `foo`
         #   labels.foo:*
@@ -345,7 +348,7 @@ module Google
         # in `ConnectivityTest` for for more details.
         # @param [String] name
         #   Required. Unique name of the resource using the form:
-        #   `projects/`project_id`/tests/`test_id``
+        #   `projects/`project_id`/locations/global/connectivityTests/`test``
         # @param [Google::Apis::NetworkmanagementV1beta1::ConnectivityTest] connectivity_test_object
         # @param [String] update_mask
         #   Required. Mask of fields to update. At least one path must be supplied in
@@ -392,7 +395,7 @@ module Google
         # the reachability result returns a value of `UNKNOWN`.
         # @param [String] name
         #   Required. Connectivity Test resource name using the form:
-        #   `projects/`project_id`/connectivityTests/`test_id``
+        #   `projects/`project_id`/locations/global/connectivityTests/`test_id``
         # @param [Google::Apis::NetworkmanagementV1beta1::RerunConnectivityTestRequest] rerun_connectivity_test_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -425,7 +428,7 @@ module Google
         
         # Sets the access control policy on the specified resource. Replaces any
         # existing policy.
-        # Can return Public Errors: NOT_FOUND, INVALID_ARGUMENT and PERMISSION_DENIED
+        # Can return `NOT_FOUND`, `INVALID_ARGUMENT`, and `PERMISSION_DENIED` errors.
         # @param [String] resource
         #   REQUIRED: The resource for which the policy is being specified.
         #   See the operation documentation for the appropriate value for this field.
@@ -461,7 +464,7 @@ module Google
         
         # Returns permissions that a caller has on the specified resource.
         # If the resource does not exist, this will return an empty set of
-        # permissions, not a NOT_FOUND error.
+        # permissions, not a `NOT_FOUND` error.
         # Note: This operation is designed to be used for building permission-aware
         # UIs and command-line tools, not for authorization checking. This operation
         # may "fail open" without warning.