azuread_conditional_access_policy: document conditional forcenew for …

…devices block

docs/resources/conditional_access_policy.md

@@ -32,7 +32,7 @@ resource "azuread_conditional_access_policy" "example" {
     }
 
     devices {
-      device_filter {
+      filter {
         mode = "exclude"
         rule = "device.operatingSystem eq \"Doors\""
       }
@@ -113,11 +113,11 @@ The following arguments are supported:
 
 `devices` block supports the following:
 
-* `device_filter` - (Optional) A `device_filter` block as described below.
+* `filter` - (Optional) A `filter` block as described below. A `device` block can be added to an existing policy, but removing the `device` block forces a new resource to be created.
 
 ---
 
-`device_filter` block supports the following:
+`filter` block supports the following:
 
 * `mode` - (Required) Whether to include in, or exclude from, matching devices from the policy. Supported values are `include` or `exclude`.
 * `rule` - (Required) Condition filter to match devices. For more information, see [official documentation](https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices#supported-operators-and-device-properties-for-filters).