Add data_api_access into resource_sql_database_instance

Author: JianweiQ

mmv1/third_party/terraform/services/sql/resource_sql_database_instance.go.tmpl

@@ -873,6 +873,13 @@ API (for read pools, effective_availability_type may differ from availability_ty
 							ValidateFunc: validation.StringInSlice([]string{"NOT_REQUIRED", "REQUIRED"}, false),
 							Description:  `Enables the enforcement of Cloud SQL Auth Proxy or Cloud SQL connectors for all the connections. If enabled, all the direct connections are rejected.`,
 						},
+						"data_api_access": {
+						    Type:         schema.TypeString,
+							Optional:     true,
+							Computed:     true,
+							ValidateFunc: validation.StringInSlice([]string{"DISALLOW_DATA_API", "ALLOW_DATA_API"}, false),
+							Description:  `Allows using ExecuteSql API to connect to the instance. Disallowed when unspecified.`,
+						},
 						"deletion_protection_enabled": {
 							Type:        schema.TypeBool,
 							Optional:    true,
@@ -1743,6 +1750,7 @@ func expandSqlDatabaseInstanceSettings(configured []interface{}, databaseVersion
 		AvailabilityType:              _settings["availability_type"].(string),
 		ConnectorEnforcement:          _settings["connector_enforcement"].(string),
 		Collation:                     _settings["collation"].(string),
+		DataApiAccess:                 _settings["data_api_access"].(string),
 		DataDiskSizeGb:                int64(_settings["disk_size"].(int)),
 		DataDiskType:                  _settings["disk_type"].(string),
 {{- if ne $.TargetVersionName "ga" }}
@@ -2806,6 +2814,7 @@ func flattenSettings(settings *sqladmin.Settings, iType string, d *schema.Resour
 		"effective_availability_type":      settings.AvailabilityType,
 		"collation":                        settings.Collation,
 		"connector_enforcement":            settings.ConnectorEnforcement,
+		"data_api_access":                  settings.DataApiAccess,
 		"disk_type":                        settings.DataDiskType,
 		"disk_size":                        settings.DataDiskSizeGb,
 {{- if ne $.TargetVersionName "ga" }}

mmv1/third_party/terraform/services/sql/resource_sql_database_instance_meta.yaml.tmpl

@@ -110,6 +110,7 @@ fields:
   - api_field: 'settings.connectionPoolConfig.flags.name'
   - api_field: 'settings.connectionPoolConfig.flags.value'
   - api_field: 'settings.connectorEnforcement'
+  - api_field: 'settings.dataApiAccess'
   - api_field: 'settings.dataCacheConfig.dataCacheEnabled'
   - api_field: 'settings.databaseFlags.name'
   - api_field: 'settings.databaseFlags.value'

mmv1/third_party/terraform/services/sql/resource_sql_database_instance_test.go.tmpl

@@ -7198,6 +7198,7 @@ resource "google_sql_database_instance" "instance" {
 
     activation_policy = "ALWAYS"
     connector_enforcement = "REQUIRED"
+	data_api_access = "ALLOW_DATA_API"
   }
 }
 `

mmv1/third_party/terraform/website/docs/r/sql_database_instance.html.markdown

@@ -423,6 +423,8 @@ The `settings` block supports:
 
 * `connector_enforcement` - (Optional) Control the enforcement of Cloud SQL Auth Proxy or Cloud SQL connectors for all the connections, can be `REQUIRED` or `NOT_REQUIRED`. If enabled, all the direct connections are rejected.
 
+* `data_api_access` - (Optional) Configures ExecuteSql API's access to the instance. connections, can be `ALLOW_DATA_API` or `DISALLOW_DATA_API` (default). `ALLOW_DATA_API` allows using ExecuteSql API to connect to the instance. For private IP instances, this allows authorized users to access the instance from the public internet using ExecuteSql API.
+
 * `deletion_protection_enabled` - (Optional) Enables deletion protection of an instance at the GCP level. Enabling this protection will guard against accidental deletion across all surfaces (API, gcloud, Cloud Console and Terraform) by enabling the [GCP Cloud SQL instance deletion protection](https://cloud.google.com/sql/docs/postgres/deletion-protection). Terraform provider support was introduced in version 4.48.0. Defaults to `false`.
 
 * `enable_google_ml_integration` - (Optional) Enables [Cloud SQL instances to connect to Vertex AI](https://cloud.google.com/sql/docs/postgres/integrate-cloud-sql-with-vertex-ai) and pass requests for real-time predictions and insights. Defaults to `false`.