diff --git a/build/terraform b/build/terraform
index b69bcdd0c493..2a828f44e9a5 160000
--- a/build/terraform
+++ b/build/terraform
@@ -1 +1 @@
-Subproject commit b69bcdd0c493e76c4f44db501ce3bfa39ea647b5
+Subproject commit 2a828f44e9a5ce5a95223ff295e1d5b739819144
diff --git a/build/terraform-beta b/build/terraform-beta
index c4885271ec54..9b2712f9cf58 160000
--- a/build/terraform-beta
+++ b/build/terraform-beta
@@ -1 +1 @@
-Subproject commit c4885271ec54120e1f991d6f2ad5d3b005d7a1f0
+Subproject commit 9b2712f9cf58ebf6f38b1ab9beac863f586d9252
diff --git a/build/terraform-mapper b/build/terraform-mapper
index d0e4cb1a9a19..79c12621e6da 160000
--- a/build/terraform-mapper
+++ b/build/terraform-mapper
@@ -1 +1 @@
-Subproject commit d0e4cb1a9a194873d0f0d3c8ec207f48bdafc74a
+Subproject commit 79c12621e6da0dc911a5aedd4e5584ed99b6f818
diff --git a/products/accesscontextmanager/api.yaml b/products/accesscontextmanager/api.yaml
index f763276b18bd..c4aff80a8409 100644
--- a/products/accesscontextmanager/api.yaml
+++ b/products/accesscontextmanager/api.yaml
@@ -276,6 +276,14 @@ objects:
                           - :DESKTOP_WINDOWS
                           - :DESKTOP_LINUX
                           - :DESKTOP_CHROME_OS
+                  - !ruby/object:Api::Type::Boolean
+                    name: 'requireAdminApproval'
+                    description: |
+                      Whether the device needs to be approved by the customer admin.
+                  - !ruby/object:Api::Type::Boolean
+                    name: 'requireCorpOwned'
+                    description: |
+                      Whether the device needs to be corp owned.
   - !ruby/object:Api::Resource
     name: 'ServicePerimeter'
     # This is an unusual API, so we need to use a few fields to map the methods
diff --git a/third_party/terraform/tests/resource_access_context_manager_access_level_test.go.erb b/third_party/terraform/tests/resource_access_context_manager_access_level_test.go.erb
index 5601c341a923..f4e94949c27c 100644
--- a/third_party/terraform/tests/resource_access_context_manager_access_level_test.go.erb
+++ b/third_party/terraform/tests/resource_access_context_manager_access_level_test.go.erb
@@ -146,6 +146,8 @@ resource "google_access_context_manager_access_level" "test-access" {
       negate = false
       device_policy {
         require_screen_lock = false
+        require_admin_approval = false
+        require_corp_owned = true
         os_constraints {
           os_type = "DESKTOP_CHROME_OS"
         }