cdktf: update index.html.markdown,r/workspace_variable_set.html.markdown,r/workspace_settings.markdown,r/workspace_run_task.html.markdown,r/workspace_run.html.markdown,r/workspace_policy_set_exclusion.html.markdown,r/workspace_policy_set.html.markdown,r/workspace.html.markdown,r/variable_set.html.markdown,r/variable.html.markdown,r/tfe_test_variable.html.markdown,r/terraform_version.html.markdown,r/team_token.html.markdown,r/team_project_access.html.markdown,r/team_organization_members.html.markdown,r/team_organization_member.html.markdown,r/team_notification_configuration.html.markdown,r/team_members.html.markdown,r/team_member.html.markdown,r/team_access.html.markdown,r/team.html.markdown,r/stack.html.markdown,r/ssh_key.html.markdown,r/sentinel_version.html.markdown,r/sentinel_policy.html.markdown,r/saml_settings.html.markdown,r/run_trigger.html.markdown,r/registry_provider.html.markdown,r/registry_module.html.markdown,r/registry_gpg_key.html.markdown,r/project_variable_set.html.markdown,r/project_policy_set.html.markdown,r/project_oauth_client.html.markdown,r/project.html.markdown,r/policy_set_parameter.html.markdown,r/policy_set.html.markdown,r/policy.html.markdown,r/organization_token.html.markdown,r/organization_run_task_global_settings.html.markdown,r/organization_run_task.html.markdown,r/organization_module_sharing.html.markdown,r/organization_membership.html.markdown,r/organization_default_settings.html.markdown,r/organization.html.markdown,r/opa_version.html.markdown,r/oauth_client.html.markdown,r/notification_configuration.html.markdown,r/no_code_module.html.markdown,r/data_retention_policy.html.markdown,r/audit_trail_token.html.markdown,r/agent_token.html.markdown,r/agent_pool_allowed_workspaces.html.markdown,r/agent_pool.html.markdown,r/admin_organization_settings.markdown,ephemeral-resources/team_token.html.markdown,ephemeral-resources/outputs.html.markdown,ephemeral-resources/organization_token.html.markdown,ephemeral-resources/audit_trail.html.markdown,ephemeral-resources/agent_token.html.markdown,d/workspace_run_task.html.markdown,d/workspace_ids.html.markdown,d/workspace.html.markdown,d/variables.html.markdown,d/variable_set.html.markdown,d/teams.html.markdown,d/team_project_access.html.markdown,d/team_access.html.markdown,d/team.html.markdown,d/ssh_key.html.markdown,d/slug.html.markdown,d/saml_settings.html.markdown,d/registry_providers.html.markdown,d/registry_provider.html.markdown,d/registry_gpg_keys.html.markdown,d/registry_gpg_key.html.markdown,d/projects.html.markdown,d/project.html.markdown,d/policy_set.html.markdown,d/outputs.html.markdown,d/organizations.html.markdown,d/organization_tags.html.markdown,d/organization_run_task_global_settings.html.markdown,d/organization_run_task.html.markdown,d/organization_membership.html.markdown,d/organization_members.html.markdown,d/organization.html.markdown,d/oauth_client.html.markdown,d/no_code_module.html.markdown,d/ip_ranges.html.markdown,d/github_app_installation.html.markdown,d/agent_pool.html.markdown (#1677)

Author: team-tf-cdk

website/docs/cdktf/python/d/ssh_key.html.markdown

@@ -36,12 +36,13 @@ class MyConvertedCode(TerraformStack):
 The following arguments are supported:
 
 * `name` - (Required) Name of the SSH key.
-* `organization` - (Required) Name of the organization.
+* `organization` - (Optional) Name of the organization. If omitted, organization
+  must be defined in the provider config.
 
 ## Attributes Reference
 
 In addition to all arguments above, the following attributes are exported:
 
 * `id` - The ID of the SSH key.
 
-<!-- cache-key: cdktf-0.20.8 input-806b3725b385ea145f9913c0e0d9cd7b045ae9faf7bb22bbddfa40eda1fb10e3 -->
+<!-- cache-key: cdktf-0.20.8 input-eb29ed64f702678fe5f4e16b19cee416f189775eb585e2b64df226614d29f489 -->

website/docs/cdktf/python/ephemeral-resources/audit_trail.html.markdown

@@ -0,0 +1,74 @@
+---
+layout: "tfe"
+page_title: "Terraform Enterprise: Ephemeral: tfe_audit_trail_token"
+description: |-
+  Generates a new audit trail token that is guaranteed not to be written to
+  state.
+---
+
+
+<!-- Please do not edit this file, it is generated. -->
+# Ephemeral: tfe_audit_trail_token
+
+Terraform ephemeral resource for managing a TFE audit trail token. This
+resource is used to generate a new audit trail token that is guaranteed not to
+be written to state. Since audit trail tokens are singleton resources, using this ephemeral resource will replace any existing audit trail token, including those managed by `tfe_audit_trail_token`.
+
+~> **NOTE:** Ephemeral resources are a new feature and may evolve as we continue to explore their most effective uses. [Learn more](https://developer.hashicorp.com/terraform/language/v1.10.x/resources/ephemeral).
+
+## Example Usage
+
+### Generate a new audit trail token:
+
+This will invalidate any existing audit trail token.
+
+```python
+# DO NOT EDIT. Code generated by 'cdktf convert' - Please report bugs at https://cdk.tf/bug
+from constructs import Construct
+from cdktf import TerraformStack
+class MyConvertedCode(TerraformStack):
+    def __init__(self, scope, name):
+        super().__init__(scope, name)
+```
+
+### Generate a new audit trail token with 30 day expiration:
+
+This will invalidate any existing audit trail token.
+
+```python
+# DO NOT EDIT. Code generated by 'cdktf convert' - Please report bugs at https://cdk.tf/bug
+from constructs import Construct
+from cdktf import TerraformStack
+#
+# Provider bindings are generated by running `cdktf get`.
+# See https://cdk.tf/provider-generation for more details.
+#
+from imports.time.rotating import Rotating
+class MyConvertedCode(TerraformStack):
+    def __init__(self, scope, name):
+        super().__init__(scope, name)
+        # The following providers are missing schema information and might need manual adjustments to synthesize correctly: time.
+        #     For a more precise conversion please use the --provider flag in convert.
+        Rotating(self, "example",
+            rotation_days=30
+        )
+```
+
+## Argument Reference
+
+The following arguments are required:
+
+* `organization` - (Optional) Name of the organization. If omitted, organization must be defined in the provider config.
+
+The following arguments are optional:
+
+* `expired_at` - (Optional) The token's expiration date. The expiration date must be a date/time string in RFC3339 
+format (e.g., "2024-12-31T23:59:59Z"). If no expiration date is supplied, the expiration date will default to null and 
+never expire.
+
+This ephemeral resource exports the following attributes in addition to the arguments above:
+
+* `token` - The generated token. This value is sensitive and will not be stored
+  in state.
+
+<!-- cache-key: cdktf-0.20.8 input-e07431295fe6b9a13a56067153dda5e847e37938339557dc88c8b7ea2ebd4dcd -->

website/docs/cdktf/python/ephemeral-resources/outputs.html.markdown

@@ -0,0 +1,73 @@
+---
+layout: "tfe"
+page_title: "Terraform Enterprise: Ephemeral: tfe_outputs"
+description: |-
+  Get output values from another organization/workspace without writing
+  sensitive data to state.
+---
+
+
+<!-- Please do not edit this file, it is generated. -->
+# Ephemeral: tfe_outputs
+
+This ephemeral resource is used to retrieve the state outputs for a given workspace.
+It enables output values in one Terraform configuration to be used in another.
+The retrieved output values are guaranteed not to be written to state.
+
+~> **NOTE:** Ephemeral resources are a new feature and may evolve as we continue to explore their most effective uses. [Learn more](https://developer.hashicorp.com/terraform/language/v1.10.x/resources/ephemeral).
+
+---
+
+~> **NOTE:** Regardless of the sensitivity of the output values as set in HCP
+Terraform, the `values` and `nonsensitive_values` attributes in this ephemeral
+resource are both treated as sensitive.
+
+## Example Usage
+
+Using the `tfe_outputs` ephemeral resource, the outputs `vault_role_id` and `vault_secret_id` can be used to configure a vault provider instance as seen below:
+
+In the example below, assume we have outputs defined in a `my-org/my-workspace`:
+
+```python
+# DO NOT EDIT. Code generated by 'cdktf convert' - Please report bugs at https://cdk.tf/bug
+from constructs import Construct
+from cdktf import TerraformStack
+#
+# Provider bindings are generated by running `cdktf get`.
+# See https://cdk.tf/provider-generation for more details.
+#
+from imports.vault.provider import VaultProvider
+class MyConvertedCode(TerraformStack):
+    def __init__(self, scope, name):
+        super().__init__(scope, name)
+        # The following providers are missing schema information and might need manual adjustments to synthesize correctly: vault.
+        #     For a more precise conversion please use the --provider flag in convert.
+        VaultProvider(self, "vault",
+            auth_login=[{
+                "parameters": [{
+                    "role_id": foo.values.vault_role_id,
+                    "secret_id": foo.values.vault_secret_id
+                }
+                ],
+                "path": "auth/approle/login"
+            }
+            ]
+        )
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `organization` - (Optional) The name of the organization. If omitted, the
+  organization must be defined in the provider config.
+* `workspace` - (Required) The name of the workspace.
+
+## Attributes Reference
+
+The following attributes are exported:
+
+* `values` - The current output values for the specified workspace.
+* `nonsensitive_values` - The current non-sensitive output values for the specified workspace, this is a subset of all output values.
+
+<!-- cache-key: cdktf-0.20.8 input-25868a462b51b850499a9e695e33687f8cb610c5427b2aba1ca0998eac2049fc -->

website/docs/cdktf/python/r/notification_configuration.html.markdown

@@ -163,7 +163,11 @@ The following arguments are supported:
   if `destination_type` is `generic`, `microsoft-teams`, or `slack`.
 * `enabled` - (Optional) Whether the notification configuration should be enabled or not.
   Disabled configurations will not send any notifications. Defaults to `false`.
-* `token` - (Optional) A write-only secure token for the notification configuration, which can
+* `token` - (Optional) A token for the notification configuration, which can
+  be used by the receiving server to verify request authenticity when configured for notification
+  configurations with a destination type of `generic`. Defaults to `null`.
+  This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
+* `token_wo` - (Optional) Write-only secure token for the notification configuration, which can
   be used by the receiving server to verify request authenticity when configured for notification
   configurations with a destination type of `generic`. Defaults to `null`.
   This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
@@ -176,6 +180,8 @@ The following arguments are supported:
   is `email`.
 * `workspace_id` - (Required) The id of the workspace that owns the notification configuration.
 
+-> **Note:** Write-Only argument `token_wo` is available to use in place of `token`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
+
 ## Attributes Reference
 
 * `id` - The ID of the notification configuration.
@@ -188,4 +194,4 @@ Notification configurations can be imported; use `<NOTIFICATION CONFIGURATION ID
 terraform import tfe_notification_configuration.test nc-qV9JnKRkmtMa4zcA
 ```
 
-<!-- cache-key: cdktf-0.20.8 input-710b7782960f76dfa6c0cc90313ce4411ea1070e9620f03dafea7305849d1d27 -->
+<!-- cache-key: cdktf-0.20.8 input-602abbb3e61f8ee1ab3e37f93f617a0ee9bd51107cba5e96e1c93dcbcc40147c -->

website/docs/cdktf/python/r/organization_run_task.html.markdown

@@ -46,6 +46,7 @@ The following arguments are supported:
 * `enabled` - (Optional) Whether the task will be run.
 * `description` - (Optional) A short description of the the task.
 * `hmac_key` - (Optional) HMAC key to verify run task.
+* `hmac_key_wo` - (Optional) Write-only HMAC key to verify run task.
 * `name` - (Required) Name of the task.
 * `organization` - (Optional) Name of the organization. If omitted, organization must be defined in the provider config.
 * `url` - (Required) URL to send a run task payload.
@@ -63,4 +64,4 @@ import ID. For example:
 terraform import tfe_organization_run_task.test my-org-name/task-name
 ```
 -> **Note:** Write-Only argument `hmac_key_wo` is available to use in place of `hmac_key`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
-<!-- cache-key: cdktf-0.20.8 input-91c45f6554a40c95a02a693f26d13fec2e11f5cf24033d1f8864c9e8a25d43be -->
+<!-- cache-key: cdktf-0.20.8 input-afc530d14013df0095835e1f25d6d21eb46d0fa97edd04013a3cc98fb8fd84b2 -->

website/docs/cdktf/python/r/policy_set_parameter.html.markdown

@@ -54,6 +54,7 @@ The following arguments are supported:
 
 * `key` - (Required) Name of the parameter.
 * `value` - (Required) Value of the parameter.
+* `value_wo` - (Required) Write-only value of the parameter.
 * `sensitive` - (Optional) Whether the value is sensitive. If true then the
   parameter is written once and not visible thereafter. Defaults to `false`.
 * `policy_set_id` - (Required) The ID of the policy set that owns the parameter.
@@ -74,4 +75,4 @@ terraform import tfe_policy_set_parameter.test polset-wAs3zYmWAhYK7peR/var-5rTwn
 
 -> **Note:** Write-Only argument `value_wo` is available to use in place of `value`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
 
-<!-- cache-key: cdktf-0.20.8 input-187122d94383c3f0a1bf8f37a537c91855fb7d3649f9b9c5384c4261bf4b184a -->
+<!-- cache-key: cdktf-0.20.8 input-9407d3e4f2059d5e47f2ca6b48d9903b45579e73fff781c0b7d5871a0378b553 -->

website/docs/cdktf/python/r/saml_settings.html.markdown

@@ -57,9 +57,12 @@ The following arguments are supported:
 * `sso_api_token_session_timeout` - (Optional) Specifies the Single Sign On session timeout in seconds. Defaults to 14 days.
 * `certificate` - (Optional) The certificate used for request and assertion signing.
 * `private_key` - (Optional) The private key used for request and assertion signing.
+* `private_key_wo` - (Optional) The private key used for request and assertion signing, guaranteed not to be written to plan or state artifacts. One of `private_key` or `private_key_wo` must be provided.
 * `signature_signing_method` - (Optional) Signature Signing Method. Must be either `SHA1` or `SHA256`. Defaults to `SHA256`.
 * `signature_digest_method` - (Optional) Signature Digest Method. Must be either `SHA1` or `SHA256`. Defaults to `SHA256`.
 
+-> **Note:** Write-Only argument `private_key_wo` is available to use in place of `private_key`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
+
 ## Attributes Reference
 
 * `id` - The ID of the SAML Settings. Always `saml`.
@@ -75,4 +78,4 @@ SAML Settings can be imported.
 terraform import tfe_saml_settings.this saml
 ```
 
-<!-- cache-key: cdktf-0.20.8 input-638ff2b3454a9c98199c9259ef06e339ead03786f80128a77130cb8fde31700e -->
+<!-- cache-key: cdktf-0.20.8 input-5fa9d70e545ec380df377f78bd03d35417ec9718041b71cd9f817ee3691f3141 -->

website/docs/cdktf/python/r/ssh_key.html.markdown

@@ -41,7 +41,10 @@ The following arguments are supported:
 
 * `name` - (Required) Name to identify the SSH key.
 * `organization` - (Optional) Name of the organization. If omitted, organization must be defined in the provider config.
-* `key` - (Required) The text of the SSH private key.
+* `key` - (Optional) The text of the SSH private key. One of `key` or `key_wo`
+  must be provided.
+* `key_wo` - (Optional) The text of the SSH private key, guaranteed not to be
+  written to plan or state artifacts. One of `key` or `key_wo` must be provided.
 
 ## Attributes Reference
 
@@ -52,4 +55,6 @@ The following arguments are supported:
 Because the Terraform Enterprise API does not return the private SSH key
 content, this resource cannot be imported.
 
-<!-- cache-key: cdktf-0.20.8 input-ee94b4fd069224353c99784ca57ae132bbda89fc744065f36044f8e8c8a1f9b0 -->
+-> **Note:** Write-Only argument `key_wo` is available to use in place of `key`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
+
+<!-- cache-key: cdktf-0.20.8 input-8fd63e504edbedc2b128309474372aca9db27ddff986cf877d21ca65edf3fe4b -->

website/docs/cdktf/python/r/team_notification_configuration.html.markdown

@@ -185,6 +185,7 @@ The following arguments are supported:
   be used by the receiving server to verify request authenticity when configured for notification
   configurations with a destination type of `generic`. Defaults to `null`.
   This value _must not_ be provided if `destination_type` is `email`, `microsoft-teams`, or `slack`.
+- `token_wo` - (Optional) A write-only secure token for the notification configuration, guaranteed not to be written to plan or state artifacts. Only one of `token` or `token_wo` can be provided.
 - `triggers` - (Optional) The array of triggers for which this notification configuration will
   send notifications. Currently, the only valid value is `change_request:created`.
 
@@ -199,5 +200,5 @@ Team notification configurations can be imported; use `<NOTIFICATION CONFIGURATI
 ```shell
 terraform import tfe_team_notification_configuration.test nc-qV9JnKRkmtMa4zcA
 ```
-
-<!-- cache-key: cdktf-0.20.8 input-e19a07b2d6595b58e8595b5ac25d781ff68c58ce67d0af5d239cd0cd444484fa -->
+> **Note:** Write-Only argument `token_wo` is available to use in place of `token_wo`. Write-Only arguments are supported in HashiCorp Terraform 1.11.0 and later. [Learn more](https://developer.hashicorp.com/terraform/language/v1.11.x/resources/ephemeral#write-only-arguments).
+<!-- cache-key: cdktf-0.20.8 input-b2a07a1fcbfa0a13f76e1177f498fa32de3fbd78dafdb389af241667cee464bb -->

website/docs/cdktf/typescript/d/ssh_key.html.markdown

@@ -39,12 +39,13 @@ class MyConvertedCode extends TerraformStack {
 The following arguments are supported:
 
 * `name` - (Required) Name of the SSH key.
-* `organization` - (Required) Name of the organization.
+* `organization` - (Optional) Name of the organization. If omitted, organization
+  must be defined in the provider config.
 
 ## Attributes Reference
 
 In addition to all arguments above, the following attributes are exported:
 
 * `id` - The ID of the SSH key.
 
-<!-- cache-key: cdktf-0.20.8 input-806b3725b385ea145f9913c0e0d9cd7b045ae9faf7bb22bbddfa40eda1fb10e3 -->
+<!-- cache-key: cdktf-0.20.8 input-eb29ed64f702678fe5f4e16b19cee416f189775eb585e2b64df226614d29f489 -->