cdktf: update index.html.markdown,r/workspace_variable_set.html.markdown,r/workspace_settings.markdown,r/workspace_run_task.html.markdown,r/workspace_run.html.markdown,r/workspace_policy_set_exclusion.html.markdown,r/workspace_policy_set.html.markdown,r/workspace.html.markdown,r/variable_set.html.markdown,r/variable.html.markdown,r/tfe_test_variable.html.markdown,r/terraform_version.html.markdown,r/team_token.html.markdown,r/team_project_access.html.markdown,r/team_organization_members.html.markdown,r/team_organization_member.html.markdown,r/team_notification_configuration.html.markdown,r/team_members.html.markdown,r/team_member.html.markdown,r/team_access.html.markdown,r/team.html.markdown,r/stack.html.markdown,r/ssh_key.html.markdown,r/sentinel_version.html.markdown,r/sentinel_policy.html.markdown,r/saml_settings.html.markdown,r/run_trigger.html.markdown,r/registry_provider.html.markdown,r/registry_module.html.markdown,r/registry_gpg_key.html.markdown,r/project_variable_set.html.markdown,r/project_policy_set.html.markdown,r/project_oauth_client.html.markdown,r/project.html.markdown,r/policy_set_parameter.html.markdown,r/policy_set.html.markdown,r/policy.html.markdown,r/organization_token.html.markdown,r/organization_run_task_global_settings.html.markdown,r/organization_run_task.html.markdown,r/organization_module_sharing.html.markdown,r/organization_membership.html.markdown,r/organization_default_settings.html.markdown,r/organization.html.markdown,r/opa_version.html.markdown,r/oauth_client.html.markdown,r/notification_configuration.html.markdown,r/no_code_module.html.markdown,r/data_retention_policy.html.markdown,r/audit_trail_token.html.markdown,r/agent_token.html.markdown,r/agent_pool_allowed_workspaces.html.markdown,r/agent_pool.html.markdown,r/admin_organization_settings.markdown,ephemeral-resources/team_token.html.markdown,ephemeral-resources/outputs.html.markdown,d/workspace_run_task.html.markdown,d/workspace_ids.html.markdown,d/workspace.html.markdown,d/variables.html.markdown,d/variable_set.html.markdown,d/teams.html.markdown,d/team_project_access.html.markdown,d/team_access.html.markdown,d/team.html.markdown,d/ssh_key.html.markdown,d/slug.html.markdown,d/saml_settings.html.markdown,d/registry_providers.html.markdown,d/registry_provider.html.markdown,d/registry_module.html.markdown,d/registry_gpg_keys.html.markdown,d/registry_gpg_key.html.markdown,d/projects.html.markdown,d/project.html.markdown,d/policy_set.html.markdown,d/outputs.html.markdown,d/organizations.html.markdown,d/organization_tags.html.markdown,d/organization_run_task_global_settings.html.markdown,d/organization_run_task.html.markdown,d/organization_membership.html.markdown,d/organization_members.html.markdown,d/organization.html.markdown,d/oauth_client.html.markdown,d/no_code_module.html.markdown,d/ip_ranges.html.markdown,d/github_app_installation.html.markdown,d/agent_pool.html.markdown (#1777)

Author: team-tf-cdk

website/docs/cdktf/python/ephemeral-resources/team_token.html.markdown

@@ -2,17 +2,23 @@
 layout: "tfe"
 page_title: "Terraform Enterprise: Ephemeral: tfe_team_token"
 description: |-
-  Generates a new team token that is guaranteed not to be written to
-  state.
+  Generates an ephemeral team token.
 ---
 
 
 <!-- Please do not edit this file, it is generated. -->
 # Ephemeral: tfe_team_token
 
-Terraform ephemeral resource for managing a TFE team token. This
-resource is used to generate a new team token that is guaranteed not to
-be written to state. Since team tokens are singleton resources, using this ephemeral resource will replace any existing team token for a given team.
+Generates an ephemeral team token for use during a Terraform run.
+
+Ephemeral team tokens are only valid within the context of a single run, and
+are not stored in Terraform state.
+
+Ephemeral resources are provisioned during the plan phase of a run as well as
+the apply phase.
+
+If you need the team token to remain valid for long-lived use, consider using the
+`tfe_team_token` managed resource instead.
 
 ~> **NOTE:** Ephemeral resources are a new feature and may evolve as we continue to explore their most effective uses. [Learn more](https://developer.hashicorp.com/terraform/language/v1.10.x/resources/ephemeral).
 
@@ -57,4 +63,4 @@ This ephemeral resource exports the following attributes in addition to the argu
 * `token` - The generated token. This value is sensitive and will not be stored
   in state.
 
-<!-- cache-key: cdktf-0.20.8 input-7fb01a6dc5b51ba75a5b6999da4581efd4284ddd49dccc9781612f2a6883c6a0 -->
+<!-- cache-key: cdktf-0.20.8 input-392968ac0f012ea80837f8853f23ad92cb0723053dd23744b461934c5de20dd9 -->

website/docs/cdktf/python/index.html.markdown

@@ -10,7 +10,7 @@ description: |-
 # HCP Terraform and Terraform Enterprise Provider
 
 This provider is used to interact with the many resources supported by
-[HCP Terraform](/docs/cloud/index.html).  As [Terraform
+[HCP Terraform](/docs/cloud/index.html). As [Terraform
 Enterprise](/docs/enterprise/index.html) is a self-hosted distribution of
 HCP Terraform, this provider supports both Cloud and Enterprise.
 
@@ -32,7 +32,7 @@ token](/docs/cloud/users-teams-organizations/api-tokens.html) from an account
 with appropriate permissions. This user should belong to the "owners" team of
 every organization you wish to manage. Alternatively, you can use [an organization or team
 token](/docs/cloud/users-teams-organizations/api-tokens.html) instead of a user
-token, but it will limit which resources you can manage.  Organization and team
+token, but it will limit which resources you can manage. Organization and team
 tokens cannot manage resources across multiple organizations, and organization
 tokens cannot manage certain resource types (like SSH keys). See the [API token
 documentation](/docs/cloud/users-teams-organizations/api-tokens.html#access-levels)
@@ -41,10 +41,10 @@ for more details about access to specific resources.
 There are several ways to provide the required token:
 
 - **Set the `token` argument in the provider configuration.** You can set
-the `token` argument in the provider configuration.  Use an input variable for
-the token.
+  the `token` argument in the provider configuration. Use an input variable for
+  the token.
 - **Set the `TFE_TOKEN` environment variable:** The provider can read the
-`TFE_TOKEN` environment variable and the token stored there to authenticate.
+  `TFE_TOKEN` environment variable and the token stored there to authenticate.
 
 When configuring the input variable for either of these options, mark them as sensitive.
 
@@ -58,14 +58,13 @@ If you are using this provider on your local command line without remote operati
 are two more options available to you:
 
 - **Use `terraform login` to generate credentials:** When using this provider with
-Terraform on your local command line, it can automatically discover the credentials generated by
-[`terraform login`](https://developer.hashicorp.com/terraform/cli/commands/login).
+  Terraform on your local command line, it can automatically discover the credentials generated by
+  [`terraform login`](https://developer.hashicorp.com/terraform/cli/commands/login).
 - **Set a `credentials` block in your CLI config file (.terraformrc):** See
-the [CLI Configuration File documentation](/docs/commands/cli-config.html).
-If you used the `TF_CLI_CONFIG_FILE` environment variable to specify a
-non-default location for .terraformrc, the provider will also use that location.
-Using a `credentials_helper` block is not supported.
-
+  the [CLI Configuration File documentation](/docs/commands/cli-config.html).
+  If you used the `TF_CLI_CONFIG_FILE` environment variable to specify a
+  non-default location for .terraformrc, the provider will also use that location.
+  Using a `credentials_helper` block is not supported.
 
 ## Versions
 
@@ -89,7 +88,7 @@ The above snippet using `required_providers` is for Terraform 0.13+; if you are
 
 ```hcl
 provider "tfe" {
-  version = "~> 0.64.0"
+  version = "~> 0.67.1"
   ...
 }
 ```
@@ -125,17 +124,17 @@ class MyConvertedCode(TerraformStack):
 
 The following arguments are supported:
 
-* `hostname` - (Optional) The HCP Terraform or Terraform Enterprise hostname to connect to.
+- `hostname` - (Optional) The HCP Terraform or Terraform Enterprise hostname to connect to.
   Defaults to `app.terraform.io`. Can be overridden by setting the
   `TFE_HOSTNAME` environment variable.
-* `token` - (Optional) The token used to authenticate with HCP Terraform or Terraform Enterprise.
+- `token` - (Optional) The token used to authenticate with HCP Terraform or Terraform Enterprise.
   See [Authentication](#authentication) above for more information.
-* `ssl_skip_verify` - (Optional) Whether or not to skip certificate verifications.
+- `ssl_skip_verify` - (Optional) Whether or not to skip certificate verifications.
   Defaults to `false`. Can be overridden setting the `TFE_SSL_SKIP_VERIFY`
   environment variable.
-* `organization` - (Optional) The default organization that resources should
+- `organization` - (Optional) The default organization that resources should
   belong to. If provided, it's usually possible to omit resource-specific `organization`
   arguments. Ensure that the organization already exists prior to using this argument.
   This can also be specified using the `TFE_ORGANIZATION` environment variable.
 
-<!-- cache-key: cdktf-0.20.8 input-05486c7d4c175286118a02a92524efe52d7b89a7fe28678c16f1950704e3650b -->
+<!-- cache-key: cdktf-0.20.8 input-a4528fac3136fd1ca80fe48358dfb8ad565e80df9b4ece24df86ee2def3f2649 -->

website/docs/cdktf/python/r/notification_configuration.html.markdown

@@ -167,10 +167,7 @@ The following arguments are supported:
   be used by the receiving server to verify request authenticity when configured for notification
   configurations with a destination type of `generic`. Defaults to `null`.
   This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
-* `token_wo` - (Optional) Write-only secure token for the notification configuration, which can
-  be used by the receiving server to verify request authenticity when configured for notification
-  configurations with a destination type of `generic`. Defaults to `null`.
-  This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
+* `token_wo` - (Optional, [Write-Only](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments)) Write-only secure token for the notification configuration, which can be used by the receiving server to verify request authenticity when configured for notification configurations with a destination type of `generic`. Either `token` or `token_wo` can be provided, but not both. This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
 * `triggers` - (Optional) The array of triggers for which this notification configuration will
   send notifications. Valid values are `run:created`, `run:planning`, `run:needs_attention`, `run:applying`
   `run:completed`, `run:errored`, `assessment:check_failure`, `assessment:drifted`, `assessment:failed`, `workspace:auto_destroy_reminder`, or `workspace:auto_destroy_run_results`.
@@ -194,4 +191,4 @@ Notification configurations can be imported; use `<NOTIFICATION CONFIGURATION ID
 terraform import tfe_notification_configuration.test nc-qV9JnKRkmtMa4zcA
 ```
 
-<!-- cache-key: cdktf-0.20.8 input-602abbb3e61f8ee1ab3e37f93f617a0ee9bd51107cba5e96e1c93dcbcc40147c -->
+<!-- cache-key: cdktf-0.20.8 input-dd61ff105262594a5f42b23b50aeca147747e8946666c3d76f526b8351b6cfb6 -->

website/docs/cdktf/python/r/organization_run_task.html.markdown

@@ -46,7 +46,8 @@ The following arguments are supported:
 * `enabled` - (Optional) Whether the task will be run.
 * `description` - (Optional) A short description of the the task.
 * `hmac_key` - (Optional) HMAC key to verify run task.
-* `hmac_key_wo` - (Optional) Write-only HMAC key to verify run task.
+* `hmac_key_wo` - (Optional, [Write-Only](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments)) Write-only HMAC key to verify run task. Either `hmac_key` or `hmac_key_wo` can be provided, but not both.
+
 * `name` - (Required) Name of the task.
 * `organization` - (Optional) Name of the organization. If omitted, organization must be defined in the provider config.
 * `url` - (Required) URL to send a run task payload.
@@ -64,4 +65,5 @@ import ID. For example:
 terraform import tfe_organization_run_task.test my-org-name/task-name
 ```
 -> **Note:** Write-Only argument `hmac_key_wo` is available to use in place of `hmac_key`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
-<!-- cache-key: cdktf-0.20.8 input-afc530d14013df0095835e1f25d6d21eb46d0fa97edd04013a3cc98fb8fd84b2 -->
+
+<!-- cache-key: cdktf-0.20.8 input-039df03871d723a66050b1f719515044bcfb16941fe4b297d4ad11281a34813b -->

website/docs/cdktf/python/r/policy_set_parameter.html.markdown

@@ -54,7 +54,8 @@ The following arguments are supported:
 
 * `key` - (Required) Name of the parameter.
 * `value` - (Required) Value of the parameter.
-* `value_wo` - (Required) Write-only value of the parameter.
+* `value_wo` - (Optional, [Write-Only](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments)) Write-only value of the parameter. Either `value` or `value_wo` can be provided, but not both.
+
 * `sensitive` - (Optional) Whether the value is sensitive. If true then the
   parameter is written once and not visible thereafter. Defaults to `false`.
 * `policy_set_id` - (Required) The ID of the policy set that owns the parameter.
@@ -75,4 +76,4 @@ terraform import tfe_policy_set_parameter.test polset-wAs3zYmWAhYK7peR/var-5rTwn
 
 -> **Note:** Write-Only argument `value_wo` is available to use in place of `value`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
 
-<!-- cache-key: cdktf-0.20.8 input-9407d3e4f2059d5e47f2ca6b48d9903b45579e73fff781c0b7d5871a0378b553 -->
+<!-- cache-key: cdktf-0.20.8 input-42fcb606484d85e415494f572d486c767045f2bc11f03fe7b36dccb6b4ea0564 -->

website/docs/cdktf/python/r/saml_settings.html.markdown

@@ -57,7 +57,7 @@ The following arguments are supported:
 * `sso_api_token_session_timeout` - (Optional) Specifies the Single Sign On session timeout in seconds. Defaults to 14 days.
 * `certificate` - (Optional) The certificate used for request and assertion signing.
 * `private_key` - (Optional) The private key used for request and assertion signing.
-* `private_key_wo` - (Optional) The private key used for request and assertion signing, guaranteed not to be written to plan or state artifacts. One of `private_key` or `private_key_wo` must be provided.
+* `private_key_wo` - (Optional, [Write-Only](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments)) The private key used for request and assertion signing, guaranteed not to be written to plan or state artifacts. Either `private_key` or `private_key_wo` can be provided, but not both.
 * `signature_signing_method` - (Optional) Signature Signing Method. Must be either `SHA1` or `SHA256`. Defaults to `SHA256`.
 * `signature_digest_method` - (Optional) Signature Digest Method. Must be either `SHA1` or `SHA256`. Defaults to `SHA256`.
 
@@ -78,4 +78,4 @@ SAML Settings can be imported.
 terraform import tfe_saml_settings.this saml
 ```
 
-<!-- cache-key: cdktf-0.20.8 input-5fa9d70e545ec380df377f78bd03d35417ec9718041b71cd9f817ee3691f3141 -->
+<!-- cache-key: cdktf-0.20.8 input-6e71321b8aa7612361601347f5216bf83460d5273c1f8d934c06f7a6925258da -->

website/docs/cdktf/python/r/ssh_key.html.markdown

@@ -43,7 +43,7 @@ The following arguments are supported:
 * `organization` - (Optional) Name of the organization. If omitted, organization must be defined in the provider config.
 * `key` - (Optional) The text of the SSH private key. One of `key` or `key_wo`
   must be provided.
-* `key_wo` - (Optional) The text of the SSH private key, guaranteed not to be
+* `key_wo` - (Optional, [Write-Only](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments)) The text of the SSH private key, guaranteed not to be
   written to plan or state artifacts. One of `key` or `key_wo` must be provided.
 
 ## Attributes Reference
@@ -57,4 +57,4 @@ content, this resource cannot be imported.
 
 -> **Note:** Write-Only argument `key_wo` is available to use in place of `key`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
 
-<!-- cache-key: cdktf-0.20.8 input-8fd63e504edbedc2b128309474372aca9db27ddff986cf877d21ca65edf3fe4b -->
+<!-- cache-key: cdktf-0.20.8 input-4145429fa09f70dcbd1e53bbbe9cacef09123cd081cf03a8b4a30f26615f87e5 -->

website/docs/cdktf/python/r/stack.html.markdown

@@ -15,7 +15,7 @@ Defines a Stack resource.
 
 ## Example Usage
 
-Basic usage:
+### Create a stack with a VCS repository:
 
 ```python
 # DO NOT EDIT. Code generated by 'cdktf convert' - Please report bugs at https://cdk.tf/bug
@@ -54,13 +54,47 @@ class MyConvertedCode(TerraformStack):
         )
 ```
 
+### Create a stack without a VCS repository:
+
+```python
+# DO NOT EDIT. Code generated by 'cdktf convert' - Please report bugs at https://cdk.tf/bug
+from constructs import Construct
+from cdktf import Token, TerraformStack
+#
+# Provider bindings are generated by running `cdktf get`.
+# See https://cdk.tf/provider-generation for more details.
+#
+from imports.tfe.data_tfe_organization import DataTfeOrganization
+from imports.tfe.oauth_client import OauthClient
+from imports.tfe.stack import Stack
+class MyConvertedCode(TerraformStack):
+    def __init__(self, scope, name):
+        super().__init__(scope, name)
+        OauthClient(self, "test",
+            api_url="https://api.github.com",
+            http_url="https://github.com",
+            oauth_token=github_token.string_value,
+            organization="my-example-org",
+            service_provider="github"
+        )
+        organization = DataTfeOrganization(self, "organization",
+            name="my-example-org"
+        )
+        Stack(self, "test-stack",
+            description="A Terraform Stack using two components with two environments",
+            name="my-stack",
+            project_id=Token.as_string(organization.default_project_id)
+        )
+```
+
+
 ## Argument Reference
 
 The following arguments are supported:
 
 * `name` - (Required) Name of the stack.
 * `project_id` - (Required) ID of the project where the stack should be created.
-* `vcs_repo` - (Required) Settings for the stack's VCS repository.
+* `vcs_repo` - (Optional) Settings for the stack's VCS repository.
 * `description` - (Optional) Description of the stack
 <!--
 NOTE: This is a proposed schema for allowing force-delete actions on a stack. Force delete is not implemented yet so I've commented it out for now.
@@ -89,4 +123,4 @@ Example:
 terraform import tfe_stack.test-stack st-9cs9Vf6Z49Zzrk1t
 ```
 
-<!-- cache-key: cdktf-0.20.8 input-647b86834df95c1c357e66862aa1ce8a7f6e71374728ea1ad8fd13f979f2709f -->
+<!-- cache-key: cdktf-0.20.8 input-72b2f6d4e6727f7bf9f716fd0b103d8c72dc93adf23466fbde49e96ec659d5ee -->

website/docs/cdktf/python/r/team_notification_configuration.html.markdown

@@ -181,11 +181,8 @@ The following arguments are supported:
   if `destination_type` is `generic`, `microsoft-teams`, or `slack`.
 - `enabled` - (Optional) Whether the notification configuration should be enabled or not.
   Disabled configurations will not send any notifications. Defaults to `false`.
-- `token` - (Optional) A write-only secure token for the notification configuration, which can
-  be used by the receiving server to verify request authenticity when configured for notification
-  configurations with a destination type of `generic`. Defaults to `null`.
-  This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
-- `token_wo` - (Optional) A write-only secure token for the notification configuration, guaranteed not to be written to plan or state artifacts. Only one of `token` or `token_wo` can be provided.
+- `token` - (Optional) A write-only secure token for the notification configuration, which can be used by the receiving server to verify request authenticity when configured for notification configurations with a destination type of `generic`. Defaults to `null`. This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
+- `token_wo` - (Optional, [Write-Only](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments)) A write-only secure token for the notification configuration, guaranteed not to be written to plan or state artifacts. Either `token` or `token_wo` can be provided, but not both. This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
 - `triggers` - (Optional) The array of triggers for which this notification configuration will
   send notifications. Currently, the only valid value is `change_request:created`.
 
@@ -201,4 +198,5 @@ Team notification configurations can be imported; use `<NOTIFICATION CONFIGURATI
 terraform import tfe_team_notification_configuration.test nc-qV9JnKRkmtMa4zcA
 ```
 > **Note:** Write-Only argument `token_wo` is available to use in place of `token_wo`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
-<!-- cache-key: cdktf-0.20.8 input-b2a07a1fcbfa0a13f76e1177f498fa32de3fbd78dafdb389af241667cee464bb -->
+
+<!-- cache-key: cdktf-0.20.8 input-7fba13f400a07acdbcb49ea8aa42298d53429f96ca00c2dbe68dfb3a55dfdfd6 -->