diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/README.md b/clients/google-api-services-cloudasset/v1/2.0.0/README.md
index 2475a4aeeae..9b9651796dc 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/README.md
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1-rev20260801-2.0.0</version>
+      <version>v1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
index caa9763d387..8eaa06ad492 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
@@ -54,9 +54,9 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressSource extends com.
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -114,9 +114,9 @@ public GoogleIdentityAccesscontextmanagerV1EgressSource setPscEndpoint(GoogleIde
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @return value or {@code null} for none
    */
   public java.lang.String getResource() {
@@ -125,9 +125,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @param resource resource or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressSource setResource(java.lang.String resource) {
diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
index 772cae08b3e..f65d86a2b2e 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
@@ -60,10 +60,11 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressTo extends com.goog
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -122,10 +123,11 @@ public GoogleIdentityAccesscontextmanagerV1EgressTo setOperations(java.util.List
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -133,10 +135,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
index ae3e80a2206..a365b8546fb 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
@@ -52,8 +52,9 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressSource extends com
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -112,8 +113,9 @@ public GoogleIdentityAccesscontextmanagerV1IngressSource setPscEndpoint(GoogleId
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -125,8 +127,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
index 941f9b4e072..43e2f02f2ae 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
@@ -47,10 +47,11 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressTo extends com.goo
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -84,10 +85,11 @@ public GoogleIdentityAccesscontextmanagerV1IngressTo setOperations(java.util.Lis
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -95,10 +97,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1IngressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
index db19dd7a627..655c38d6883 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/com/google/api/services/cloudasset/v1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
@@ -74,8 +74,9 @@ public final class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig ex
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * The value may be {@code null}.
    */
@@ -170,8 +171,9 @@ public GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig setIngressPoli
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @return value or {@code null} for none
    */
@@ -180,8 +182,9 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @param resources resources or {@code null} for none
    */
diff --git a/clients/google-api-services-cloudasset/v1/2.0.0/pom.xml b/clients/google-api-services-cloudasset/v1/2.0.0/pom.xml
index d67f4bff0f2..3668c677cd9 100644
--- a/clients/google-api-services-cloudasset/v1/2.0.0/pom.xml
+++ b/clients/google-api-services-cloudasset/v1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-cloudasset</artifactId>
-  <version>v1-rev20260801-2.0.0</version>
-  <name>Cloud Asset API v1-rev20260801-2.0.0</name>
+  <version>v1-rev20261010-2.0.0</version>
+  <name>Cloud Asset API v1-rev20261010-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-cloudasset/v1/README.md b/clients/google-api-services-cloudasset/v1/README.md
index 2475a4aeeae..9b9651796dc 100644
--- a/clients/google-api-services-cloudasset/v1/README.md
+++ b/clients/google-api-services-cloudasset/v1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1-rev20260801-2.0.0</version>
+      <version>v1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/README.md b/clients/google-api-services-cloudasset/v1beta1/2.0.0/README.md
index 10f88f73ed6..0619ee6f379 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/README.md
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1beta1-rev20260801-2.0.0</version>
+      <version>v1beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
index fee31dd0147..e056f408b16 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
@@ -54,9 +54,9 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressSource extends com.
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -114,9 +114,9 @@ public GoogleIdentityAccesscontextmanagerV1EgressSource setPscEndpoint(GoogleIde
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @return value or {@code null} for none
    */
   public java.lang.String getResource() {
@@ -125,9 +125,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @param resource resource or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressSource setResource(java.lang.String resource) {
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
index e7f687170e4..ff01cf46c76 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
@@ -60,10 +60,11 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressTo extends com.goog
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -122,10 +123,11 @@ public GoogleIdentityAccesscontextmanagerV1EgressTo setOperations(java.util.List
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -133,10 +135,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
index 9698b734676..310f8a50788 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
@@ -52,8 +52,9 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressSource extends com
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -112,8 +113,9 @@ public GoogleIdentityAccesscontextmanagerV1IngressSource setPscEndpoint(GoogleId
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -125,8 +127,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
index 1c1997bbb0a..1ae20574c5a 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
@@ -47,10 +47,11 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressTo extends com.goo
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -84,10 +85,11 @@ public GoogleIdentityAccesscontextmanagerV1IngressTo setOperations(java.util.Lis
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -95,10 +97,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1IngressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
index 9733d0e2bb1..04bd2bd533a 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/com/google/api/services/cloudasset/v1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
@@ -74,8 +74,9 @@ public final class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig ex
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * The value may be {@code null}.
    */
@@ -170,8 +171,9 @@ public GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig setIngressPoli
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @return value or {@code null} for none
    */
@@ -180,8 +182,9 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @param resources resources or {@code null} for none
    */
diff --git a/clients/google-api-services-cloudasset/v1beta1/2.0.0/pom.xml b/clients/google-api-services-cloudasset/v1beta1/2.0.0/pom.xml
index 30b12e3b156..fe40a6599e4 100644
--- a/clients/google-api-services-cloudasset/v1beta1/2.0.0/pom.xml
+++ b/clients/google-api-services-cloudasset/v1beta1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-cloudasset</artifactId>
-  <version>v1beta1-rev20260801-2.0.0</version>
-  <name>Cloud Asset API v1beta1-rev20260801-2.0.0</name>
+  <version>v1beta1-rev20261010-2.0.0</version>
+  <name>Cloud Asset API v1beta1-rev20261010-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-cloudasset/v1beta1/README.md b/clients/google-api-services-cloudasset/v1beta1/README.md
index 10f88f73ed6..0619ee6f379 100644
--- a/clients/google-api-services-cloudasset/v1beta1/README.md
+++ b/clients/google-api-services-cloudasset/v1beta1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1beta1-rev20260801-2.0.0</version>
+      <version>v1beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/README.md b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/README.md
index 38550ce9ec6..e576e8d76a3 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/README.md
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1p1beta1-rev20260801-2.0.0</version>
+      <version>v1p1beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1p1beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1p1beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
index f1aea7f0e5a..89f70367d3b 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
@@ -54,9 +54,9 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressSource extends com.
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -114,9 +114,9 @@ public GoogleIdentityAccesscontextmanagerV1EgressSource setPscEndpoint(GoogleIde
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @return value or {@code null} for none
    */
   public java.lang.String getResource() {
@@ -125,9 +125,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @param resource resource or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressSource setResource(java.lang.String resource) {
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
index 49f5eb05f40..df203355106 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
@@ -60,10 +60,11 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressTo extends com.goog
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -122,10 +123,11 @@ public GoogleIdentityAccesscontextmanagerV1EgressTo setOperations(java.util.List
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -133,10 +135,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
index 39e20606419..01309f672a5 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
@@ -52,8 +52,9 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressSource extends com
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -112,8 +113,9 @@ public GoogleIdentityAccesscontextmanagerV1IngressSource setPscEndpoint(GoogleId
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -125,8 +127,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
index a207d3eddcd..82ad5fb377d 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
@@ -47,10 +47,11 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressTo extends com.goo
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -84,10 +85,11 @@ public GoogleIdentityAccesscontextmanagerV1IngressTo setOperations(java.util.Lis
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -95,10 +97,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1IngressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
index ffbd44a15d7..fe2499af72a 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/com/google/api/services/cloudasset/v1p1beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
@@ -74,8 +74,9 @@ public final class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig ex
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * The value may be {@code null}.
    */
@@ -170,8 +171,9 @@ public GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig setIngressPoli
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @return value or {@code null} for none
    */
@@ -180,8 +182,9 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @param resources resources or {@code null} for none
    */
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/pom.xml b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/pom.xml
index cafac8aa8b7..399b2aaf132 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/pom.xml
+++ b/clients/google-api-services-cloudasset/v1p1beta1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-cloudasset</artifactId>
-  <version>v1p1beta1-rev20260801-2.0.0</version>
-  <name>Cloud Asset API v1p1beta1-rev20260801-2.0.0</name>
+  <version>v1p1beta1-rev20261010-2.0.0</version>
+  <name>Cloud Asset API v1p1beta1-rev20261010-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-cloudasset/v1p1beta1/README.md b/clients/google-api-services-cloudasset/v1p1beta1/README.md
index 38550ce9ec6..e576e8d76a3 100644
--- a/clients/google-api-services-cloudasset/v1p1beta1/README.md
+++ b/clients/google-api-services-cloudasset/v1p1beta1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1p1beta1-rev20260801-2.0.0</version>
+      <version>v1p1beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1p1beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1p1beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/README.md b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/README.md
index 2c83ccdf566..2b1f7b7bf24 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/README.md
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1p5beta1-rev20260801-2.0.0</version>
+      <version>v1p5beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1p5beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1p5beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
index 3450897e3fc..79b45432865 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
@@ -54,9 +54,9 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressSource extends com.
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -114,9 +114,9 @@ public GoogleIdentityAccesscontextmanagerV1EgressSource setPscEndpoint(GoogleIde
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @return value or {@code null} for none
    */
   public java.lang.String getResource() {
@@ -125,9 +125,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @param resource resource or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressSource setResource(java.lang.String resource) {
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
index 62199cd0981..b59db6fe46d 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
@@ -60,10 +60,11 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressTo extends com.goog
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -122,10 +123,11 @@ public GoogleIdentityAccesscontextmanagerV1EgressTo setOperations(java.util.List
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -133,10 +135,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
index 324c33f5ed7..7cb1636254f 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
@@ -52,8 +52,9 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressSource extends com
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -112,8 +113,9 @@ public GoogleIdentityAccesscontextmanagerV1IngressSource setPscEndpoint(GoogleId
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -125,8 +127,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
index c10e84145f2..51e2cfc09c9 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
@@ -47,10 +47,11 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressTo extends com.goo
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -84,10 +85,11 @@ public GoogleIdentityAccesscontextmanagerV1IngressTo setOperations(java.util.Lis
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -95,10 +97,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1IngressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
index b0359b970a7..1bc2fce0131 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/com/google/api/services/cloudasset/v1p5beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
@@ -74,8 +74,9 @@ public final class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig ex
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * The value may be {@code null}.
    */
@@ -170,8 +171,9 @@ public GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig setIngressPoli
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @return value or {@code null} for none
    */
@@ -180,8 +182,9 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @param resources resources or {@code null} for none
    */
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/pom.xml b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/pom.xml
index 3f74093b6d8..21a88a0585e 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/pom.xml
+++ b/clients/google-api-services-cloudasset/v1p5beta1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-cloudasset</artifactId>
-  <version>v1p5beta1-rev20260801-2.0.0</version>
-  <name>Cloud Asset API v1p5beta1-rev20260801-2.0.0</name>
+  <version>v1p5beta1-rev20261010-2.0.0</version>
+  <name>Cloud Asset API v1p5beta1-rev20261010-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-cloudasset/v1p5beta1/README.md b/clients/google-api-services-cloudasset/v1p5beta1/README.md
index 2c83ccdf566..2b1f7b7bf24 100644
--- a/clients/google-api-services-cloudasset/v1p5beta1/README.md
+++ b/clients/google-api-services-cloudasset/v1p5beta1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1p5beta1-rev20260801-2.0.0</version>
+      <version>v1p5beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1p5beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1p5beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/README.md b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/README.md
index 81fc449c845..e8b815277b5 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/README.md
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1p7beta1-rev20260801-2.0.0</version>
+      <version>v1p7beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1p7beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1p7beta1-rev20261010-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
index 1270870c3de..c8c28765c2b 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressSource.java
@@ -54,9 +54,9 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressSource extends com.
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -114,9 +114,9 @@ public GoogleIdentityAccesscontextmanagerV1EgressSource setPscEndpoint(GoogleIde
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @return value or {@code null} for none
    */
   public java.lang.String getResource() {
@@ -125,9 +125,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource from the service perimeter that you want to allow to access data
-   * outside the perimeter. This field supports only projects. The project format is
-   * `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud
-   * resources.
+   * outside the perimeter. This field supports projects, folders, and organizations in the form
+   * `projects/`, `folders/`, and `organizations/`. You can't use `*` in this field to allow all
+   * Google Cloud resources.
    * @param resource resource or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressSource setResource(java.lang.String resource) {
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
index d0afe983d7b..b588d29d9c1 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1EgressTo.java
@@ -60,10 +60,11 @@ public final class GoogleIdentityAccesscontextmanagerV1EgressTo extends com.goog
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -122,10 +123,11 @@ public GoogleIdentityAccesscontextmanagerV1EgressTo setOperations(java.util.List
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -133,10 +135,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, that are allowed to be
-   * accessed by sources defined in the corresponding EgressFrom. A request matches if it contains a
-   * resource in this list. If `*` is specified for `resources`, then this EgressTo rule will
-   * authorize access to all resources outside the perimeter.
+   * A list of resources, currently projects, folders, and organizations in the form `projects/`,
+   * `folders/`, and `organizations/`, that are allowed to be accessed by sources defined in the
+   * corresponding EgressFrom. A request matches if it contains a resource in this list. If `*` is
+   * specified for `resources`, then this EgressTo rule will authorize access to all resources
+   * outside the perimeter.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1EgressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
index 826ac22cc7b..e1a4358b8eb 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressSource.java
@@ -52,8 +52,9 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressSource extends com
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -112,8 +113,9 @@ public GoogleIdentityAccesscontextmanagerV1IngressSource setPscEndpoint(GoogleId
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
@@ -125,8 +127,9 @@ public java.lang.String getResource() {
 
   /**
    * A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources
-   * will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project
-   * format: `projects/{project_number}` VPC network format:
+   * will be allowed to access perimeter data. Currently projects, folders, organizations, and VPCs
+   * are allowed. Project format: `projects/{project_number}` Folder format: `folders/{folder_id}`
+   * Organization format: `organizations/{organization_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in
    * any Google Cloud organization, not just the organization that the perimeter is defined in. `*`
    * is not allowed, the case of allowing all Google Cloud resources only is not supported.
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
index f5d1a94df35..9516123cd36 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1IngressTo.java
@@ -47,10 +47,11 @@ public final class GoogleIdentityAccesscontextmanagerV1IngressTo extends com.goo
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -84,10 +85,11 @@ public GoogleIdentityAccesscontextmanagerV1IngressTo setOperations(java.util.Lis
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @return value or {@code null} for none
    */
   public java.util.List<java.lang.String> getResources() {
@@ -95,10 +97,11 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of resources, currently only projects in the form `projects/`, protected by this
-   * ServicePerimeter that are allowed to be accessed by sources defined in the corresponding
-   * IngressFrom. If a single `*` is specified, then access to all resources inside the perimeter
-   * are allowed.
+   * A list of resources, currently projects, folders, and organizations in the form
+   * `projects/{project_number}`, `folders/{folder_id}`, and `organizations/{organization_id}`,
+   * protected by this ServicePerimeter that are allowed to be accessed by sources defined in the
+   * corresponding IngressFrom. If a single `*` is specified, then access to all resources inside
+   * the perimeter are allowed.
    * @param resources resources or {@code null} for none
    */
   public GoogleIdentityAccesscontextmanagerV1IngressTo setResources(java.util.List<java.lang.String> resources) {
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
index 4d0e7d69cc4..b36e98fe483 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/com/google/api/services/cloudasset/v1p7beta1/model/GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig.java
@@ -74,8 +74,9 @@ public final class GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig ex
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * The value may be {@code null}.
    */
@@ -170,8 +171,9 @@ public GoogleIdentityAccesscontextmanagerV1ServicePerimeterConfig setIngressPoli
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @return value or {@code null} for none
    */
@@ -180,8 +182,9 @@ public java.util.List<java.lang.String> getResources() {
   }
 
   /**
-   * A list of Google Cloud resources that are inside of the service perimeter. Currently only
-   * projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format:
+   * A list of Google Cloud resources that are inside of the service perimeter. Currently projects,
+   * folders, and VPCs are allowed. Project format: `projects/{project_number}` Folder format:
+   * `folders/{folder_id}` VPC network format:
    * `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`.
    * @param resources resources or {@code null} for none
    */
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/pom.xml b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/pom.xml
index f3154699bdd..a2a48459777 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/pom.xml
+++ b/clients/google-api-services-cloudasset/v1p7beta1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-cloudasset</artifactId>
-  <version>v1p7beta1-rev20260801-2.0.0</version>
-  <name>Cloud Asset API v1p7beta1-rev20260801-2.0.0</name>
+  <version>v1p7beta1-rev20261010-2.0.0</version>
+  <name>Cloud Asset API v1p7beta1-rev20261010-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-cloudasset/v1p7beta1/README.md b/clients/google-api-services-cloudasset/v1p7beta1/README.md
index 81fc449c845..e8b815277b5 100644
--- a/clients/google-api-services-cloudasset/v1p7beta1/README.md
+++ b/clients/google-api-services-cloudasset/v1p7beta1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudasset</artifactId>
-      <version>v1p7beta1-rev20260801-2.0.0</version>
+      <version>v1p7beta1-rev20261010-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudasset:v1p7beta1-rev20260801-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudasset:v1p7beta1-rev20261010-2.0.0'
 }
 ```