diff --git a/build/terraform b/build/terraform
index 04801e8163d7..c205750aa9fd 160000
--- a/build/terraform
+++ b/build/terraform
@@ -1 +1 @@
-Subproject commit 04801e8163d7474ce7992d022ee269b62171290a
+Subproject commit c205750aa9fd87af65bb7096399f8a950f4a9cd7
diff --git a/build/terraform-beta b/build/terraform-beta
index 596c43fb109b..dd21b90f7ec8 160000
--- a/build/terraform-beta
+++ b/build/terraform-beta
@@ -1 +1 @@
-Subproject commit 596c43fb109b3926a293b351cc05d21f09354fe0
+Subproject commit dd21b90f7ec8c03bdd115ae9ee529da2caf56fa4
diff --git a/products/accesscontextmanager/api.yaml b/products/accesscontextmanager/api.yaml
index 8c2f1fe8b10c..a2e49f7a4d0a 100644
--- a/products/accesscontextmanager/api.yaml
+++ b/products/accesscontextmanager/api.yaml
@@ -197,12 +197,14 @@ objects:
               - !ruby/object:Api::Type::Array
                 name: 'members'
                 description: |
-                  An allowed list of members (users, groups, service accounts).
+                  An allowed list of members (users, service accounts).
+                  Using groups is not supported yet.
+
                   The signed-in user originating the request must be a part of one
                   of the provided members. If not specified, a request may come
                   from any user (logged in/not logged in, not present in any
                   groups, etc.).
-                  Formats: `user:{emailid}`, `group:{emailid}`, `serviceAccount:{emailid}`
+                  Formats: `user:{emailid}`, `serviceAccount:{emailid}`
                 item_type: Api::Type::String
               - !ruby/object:Api::Type::Boolean
                 name: 'negate'