diff --git a/sdk/dotnet/AccessPoint.cs b/sdk/dotnet/AccessPoint.cs
index dab69c05..f729d4e3 100644
--- a/sdk/dotnet/AccessPoint.cs
+++ b/sdk/dotnet/AccessPoint.cs
@@ -90,6 +90,12 @@ public partial class AccessPoint : global::Pulumi.CustomResource
         [Output("awsEgressPrivateLinkEndpoint")]
         public Output<Outputs.AccessPointAwsEgressPrivateLinkEndpoint?> AwsEgressPrivateLinkEndpoint { get; private set; } = null!;
 
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
+        [Output("awsPrivateNetworkInterface")]
+        public Output<Outputs.AccessPointAwsPrivateNetworkInterface?> AwsPrivateNetworkInterface { get; private set; } = null!;
+
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
@@ -163,6 +169,12 @@ public sealed class AccessPointArgs : global::Pulumi.ResourceArgs
         [Input("awsEgressPrivateLinkEndpoint")]
         public Input<Inputs.AccessPointAwsEgressPrivateLinkEndpointArgs>? AwsEgressPrivateLinkEndpoint { get; set; }
 
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
+        [Input("awsPrivateNetworkInterface")]
+        public Input<Inputs.AccessPointAwsPrivateNetworkInterfaceArgs>? AwsPrivateNetworkInterface { get; set; }
+
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
@@ -198,6 +210,12 @@ public sealed class AccessPointState : global::Pulumi.ResourceArgs
         [Input("awsEgressPrivateLinkEndpoint")]
         public Input<Inputs.AccessPointAwsEgressPrivateLinkEndpointGetArgs>? AwsEgressPrivateLinkEndpoint { get; set; }
 
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
+        [Input("awsPrivateNetworkInterface")]
+        public Input<Inputs.AccessPointAwsPrivateNetworkInterfaceGetArgs>? AwsPrivateNetworkInterface { get; set; }
+
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
diff --git a/sdk/dotnet/CertificateAuthority.cs b/sdk/dotnet/CertificateAuthority.cs
index f8ff8cc7..39b29b7e 100644
--- a/sdk/dotnet/CertificateAuthority.cs
+++ b/sdk/dotnet/CertificateAuthority.cs
@@ -10,7 +10,7 @@
 namespace Pulumi.ConfluentCloud
 {
     /// <summary>
-    /// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+    /// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
     /// 
     /// `confluentcloud.CertificateAuthority` provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.
     /// 
diff --git a/sdk/dotnet/CertificatePool.cs b/sdk/dotnet/CertificatePool.cs
index 20735e96..4c2e6fc1 100644
--- a/sdk/dotnet/CertificatePool.cs
+++ b/sdk/dotnet/CertificatePool.cs
@@ -10,7 +10,7 @@
 namespace Pulumi.ConfluentCloud
 {
     /// <summary>
-    /// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+    /// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
     /// 
     /// `confluentcloud.CertificatePool` provides a Certificate Pool resource that enables creating, editing, and deleting Certificate Pools on Confluent Cloud.
     /// 
diff --git a/sdk/dotnet/Connector.cs b/sdk/dotnet/Connector.cs
index a9ae0ef5..0a6c8250 100644
--- a/sdk/dotnet/Connector.cs
+++ b/sdk/dotnet/Connector.cs
@@ -21,6 +21,7 @@ namespace Pulumi.ConfluentCloud
     /// 
     /// return await Deployment.RunAsync(() =&gt; 
     /// {
+    ///     // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/managed-datagen-source-connector
     ///     var source = new ConfluentCloud.Connector("source", new()
     ///     {
     ///         Environment = new ConfluentCloud.Inputs.ConnectorEnvironmentArgs
@@ -66,6 +67,7 @@ namespace Pulumi.ConfluentCloud
     /// 
     /// return await Deployment.RunAsync(() =&gt; 
     /// {
+    ///     // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector
     ///     var sink = new ConfluentCloud.Connector("sink", new()
     ///     {
     ///         Environment = new ConfluentCloud.Inputs.ConnectorEnvironmentArgs
@@ -114,6 +116,64 @@ namespace Pulumi.ConfluentCloud
     /// });
     /// ```
     /// 
+    /// ### Example Managed [Amazon S3 Sink Connector](https://docs.confluent.io/cloud/current/connectors/cc-s3-sink.html) that uses a service account to communicate with your Kafka cluster and IAM Roles for AWS authentication
+    /// ```csharp
+    /// using System.Collections.Generic;
+    /// using System.Linq;
+    /// using Pulumi;
+    /// using ConfluentCloud = Pulumi.ConfluentCloud;
+    /// 
+    /// return await Deployment.RunAsync(() =&gt; 
+    /// {
+    ///     // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector-assume-role
+    ///     var sink = new ConfluentCloud.Connector("sink", new()
+    ///     {
+    ///         Environment = new ConfluentCloud.Inputs.ConnectorEnvironmentArgs
+    ///         {
+    ///             Id = staging.Id,
+    ///         },
+    ///         KafkaCluster = new ConfluentCloud.Inputs.ConnectorKafkaClusterArgs
+    ///         {
+    ///             Id = basic.Id,
+    ///         },
+    ///         ConfigSensitive = null,
+    ///         ConfigNonsensitive = 
+    ///         {
+    ///             { "topics", orders.TopicName },
+    ///             { "input.data.format", "JSON" },
+    ///             { "connector.class", "S3_SINK" },
+    ///             { "name", "S3_SINKConnector_0" },
+    ///             { "kafka.auth.mode", "SERVICE_ACCOUNT" },
+    ///             { "kafka.service.account.id", app_connector.Id },
+    ///             { "s3.bucket.name", "&lt;s3-bucket-name&gt;" },
+    ///             { "output.data.format", "JSON" },
+    ///             { "time.interval", "DAILY" },
+    ///             { "flush.size", "1000" },
+    ///             { "tasks.max", "1" },
+    ///             { "authentication.method", "IAM Roles" },
+    ///             { "provider.integration.id", main.Id },
+    ///         },
+    ///     }, new CustomResourceOptions
+    ///     {
+    ///         DependsOn =
+    ///         {
+    ///             app_connector_describe_on_cluster,
+    ///             app_connector_read_on_target_topic,
+    ///             app_connector_create_on_dlq_lcc_topics,
+    ///             app_connector_write_on_dlq_lcc_topics,
+    ///             app_connector_create_on_success_lcc_topics,
+    ///             app_connector_write_on_success_lcc_topics,
+    ///             app_connector_create_on_error_lcc_topics,
+    ///             app_connector_write_on_error_lcc_topics,
+    ///             app_connector_read_on_connect_lcc_group,
+    ///             main,
+    ///             s3AccessRole,
+    ///         },
+    ///     });
+    /// 
+    /// });
+    /// ```
+    /// 
     /// ### Example Managed [Amazon DynamoDB Connector](https://docs.confluent.io/cloud/current/connectors/cc-amazon-dynamo-db-sink.html) that uses a service account to communicate with your Kafka cluster
     /// ```csharp
     /// using System.Collections.Generic;
@@ -123,6 +183,7 @@ namespace Pulumi.ConfluentCloud
     /// 
     /// return await Deployment.RunAsync(() =&gt; 
     /// {
+    ///     // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/dynamo-db-sink-connector
     ///     var sink = new ConfluentCloud.Connector("sink", new()
     ///     {
     ///         Environment = new ConfluentCloud.Inputs.ConnectorEnvironmentArgs
@@ -170,7 +231,6 @@ namespace Pulumi.ConfluentCloud
     /// ```
     /// 
     /// ### Example Custom [Datagen Source Connector](https://www.confluent.io/hub/confluentinc/kafka-connect-datagen) that uses a Kafka API Key to communicate with your Kafka cluster
-    /// 
     /// ```csharp
     /// using System.Collections.Generic;
     /// using System.Linq;
@@ -179,6 +239,7 @@ namespace Pulumi.ConfluentCloud
     /// 
     /// return await Deployment.RunAsync(() =&gt; 
     /// {
+    ///     // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/custom-datagen-source-connector
     ///     var source = new ConfluentCloud.Connector("source", new()
     ///     {
     ///         Environment = new ConfluentCloud.Inputs.ConnectorEnvironmentArgs
@@ -219,13 +280,11 @@ namespace Pulumi.ConfluentCloud
     /// });
     /// ```
     /// 
-    /// &gt; **Note:** Custom connectors are available in **Preview** for early adopters. Preview features are introduced to gather customer feedback. This feature should be used only for evaluation and non-production testing purposes or to provide feedback to Confluent, particularly as it becomes more widely available in follow-on editions.\
-    /// **Preview** features are intended for evaluation use in development and testing environments only, and not for production use. The warranty, SLA, and Support Services provisions of your agreement with Confluent do not apply to Preview features. Preview features are considered to be a Proof of Concept as defined in the Confluent Cloud Terms of Service. Confluent may discontinue providing preview releases of the Preview features at any time in Confluent’s sole discretion.
-    /// 
     /// ## Getting Started
     /// 
     /// The following end-to-end examples might help to get started with `confluentcloud.Connector` resource:
     /// * `s3-sink-connector`
+    /// * `s3-sink-connector-assume-role`
     /// * `snowflake-sink-connector`
     /// * `managed-datagen-source-connector`
     /// * `elasticsearch-sink-connector`
diff --git a/sdk/dotnet/FlinkArtifact.cs b/sdk/dotnet/FlinkArtifact.cs
index de6dac27..d4815d1b 100644
--- a/sdk/dotnet/FlinkArtifact.cs
+++ b/sdk/dotnet/FlinkArtifact.cs
@@ -43,14 +43,14 @@ namespace Pulumi.ConfluentCloud
     /// 
     /// ## Import
     /// 
-    /// You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `&lt;region&gt;/&lt;cloud&gt;/&lt;Flink Artifact ID&gt;`. The following example shows how to import a Flink Artifact:
+    /// You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `&lt;Environment ID&gt;/&lt;region&gt;/&lt;cloud&gt;/&lt;Flink Artifact ID&gt;`. The following example shows how to import a Flink Artifact:
     /// 
     /// $ export CONFLUENT_CLOUD_API_KEY="&lt;cloud_api_key&gt;"
     /// 
     /// $ export CONFLUENT_CLOUD_API_SECRET="&lt;cloud_api_secret&gt;"
     /// 
     /// ```sh
-    /// $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main us-east-1/aws/fa-123
+    /// $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main env-abc123/us-east-1/aws/fa-123
     /// ```
     /// 
     /// !&gt; **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
diff --git a/sdk/dotnet/Gateway.cs b/sdk/dotnet/Gateway.cs
index d2ac6989..d18b6e99 100644
--- a/sdk/dotnet/Gateway.cs
+++ b/sdk/dotnet/Gateway.cs
@@ -68,6 +68,12 @@ public partial class Gateway : global::Pulumi.CustomResource
         [Output("awsEgressPrivateLinkGateway")]
         public Output<Outputs.GatewayAwsEgressPrivateLinkGateway> AwsEgressPrivateLinkGateway { get; private set; } = null!;
 
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
+        [Output("awsPrivateNetworkInterfaceGateway")]
+        public Output<Outputs.GatewayAwsPrivateNetworkInterfaceGateway> AwsPrivateNetworkInterfaceGateway { get; private set; } = null!;
+
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
@@ -138,6 +144,12 @@ public sealed class GatewayArgs : global::Pulumi.ResourceArgs
         [Input("awsEgressPrivateLinkGateway")]
         public Input<Inputs.GatewayAwsEgressPrivateLinkGatewayArgs>? AwsEgressPrivateLinkGateway { get; set; }
 
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
+        [Input("awsPrivateNetworkInterfaceGateway")]
+        public Input<Inputs.GatewayAwsPrivateNetworkInterfaceGatewayArgs>? AwsPrivateNetworkInterfaceGateway { get; set; }
+
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
@@ -170,6 +182,12 @@ public sealed class GatewayState : global::Pulumi.ResourceArgs
         [Input("awsEgressPrivateLinkGateway")]
         public Input<Inputs.GatewayAwsEgressPrivateLinkGatewayGetArgs>? AwsEgressPrivateLinkGateway { get; set; }
 
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
+        [Input("awsPrivateNetworkInterfaceGateway")]
+        public Input<Inputs.GatewayAwsPrivateNetworkInterfaceGatewayGetArgs>? AwsPrivateNetworkInterfaceGateway { get; set; }
+
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
diff --git a/sdk/dotnet/GetAccessPoint.cs b/sdk/dotnet/GetAccessPoint.cs
index b7103835..5b35c37f 100644
--- a/sdk/dotnet/GetAccessPoint.cs
+++ b/sdk/dotnet/GetAccessPoint.cs
@@ -124,6 +124,10 @@ public sealed class GetAccessPointResult
         /// </summary>
         public readonly ImmutableArray<Outputs.GetAccessPointAwsEgressPrivateLinkEndpointResult> AwsEgressPrivateLinkEndpoints;
         /// <summary>
+        /// (Optional Configuration Block) Supports the following:
+        /// </summary>
+        public readonly ImmutableArray<Outputs.GetAccessPointAwsPrivateNetworkInterfaceResult> AwsPrivateNetworkInterfaces;
+        /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
         public readonly ImmutableArray<Outputs.GetAccessPointAzureEgressPrivateLinkEndpointResult> AzureEgressPrivateLinkEndpoints;
@@ -145,6 +149,8 @@ public sealed class GetAccessPointResult
         private GetAccessPointResult(
             ImmutableArray<Outputs.GetAccessPointAwsEgressPrivateLinkEndpointResult> awsEgressPrivateLinkEndpoints,
 
+            ImmutableArray<Outputs.GetAccessPointAwsPrivateNetworkInterfaceResult> awsPrivateNetworkInterfaces,
+
             ImmutableArray<Outputs.GetAccessPointAzureEgressPrivateLinkEndpointResult> azureEgressPrivateLinkEndpoints,
 
             string displayName,
@@ -156,6 +162,7 @@ private GetAccessPointResult(
             string id)
         {
             AwsEgressPrivateLinkEndpoints = awsEgressPrivateLinkEndpoints;
+            AwsPrivateNetworkInterfaces = awsPrivateNetworkInterfaces;
             AzureEgressPrivateLinkEndpoints = azureEgressPrivateLinkEndpoints;
             DisplayName = displayName;
             Environment = environment;
diff --git a/sdk/dotnet/GetCertificateAuthority.cs b/sdk/dotnet/GetCertificateAuthority.cs
index 3fd40ba3..431791d5 100644
--- a/sdk/dotnet/GetCertificateAuthority.cs
+++ b/sdk/dotnet/GetCertificateAuthority.cs
@@ -12,7 +12,7 @@ namespace Pulumi.ConfluentCloud
     public static class GetCertificateAuthority
     {
         /// <summary>
-        /// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        /// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
         /// 
         /// `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
         /// 
@@ -42,7 +42,7 @@ public static Task<GetCertificateAuthorityResult> InvokeAsync(GetCertificateAuth
             => global::Pulumi.Deployment.Instance.InvokeAsync<GetCertificateAuthorityResult>("confluentcloud:index/getCertificateAuthority:getCertificateAuthority", args ?? new GetCertificateAuthorityArgs(), options.WithDefaults());
 
         /// <summary>
-        /// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        /// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
         /// 
         /// `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
         /// 
diff --git a/sdk/dotnet/GetCertificatePool.cs b/sdk/dotnet/GetCertificatePool.cs
index 23368143..3886314e 100644
--- a/sdk/dotnet/GetCertificatePool.cs
+++ b/sdk/dotnet/GetCertificatePool.cs
@@ -12,7 +12,7 @@ namespace Pulumi.ConfluentCloud
     public static class GetCertificatePool
     {
         /// <summary>
-        /// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        /// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
         /// 
         /// `confluentcloud.CertificatePool` describes a Certificate Pool data source.
         /// 
@@ -46,7 +46,7 @@ public static Task<GetCertificatePoolResult> InvokeAsync(GetCertificatePoolArgs
             => global::Pulumi.Deployment.Instance.InvokeAsync<GetCertificatePoolResult>("confluentcloud:index/getCertificatePool:getCertificatePool", args ?? new GetCertificatePoolArgs(), options.WithDefaults());
 
         /// <summary>
-        /// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        /// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
         /// 
         /// `confluentcloud.CertificatePool` describes a Certificate Pool data source.
         /// 
diff --git a/sdk/dotnet/GetGateway.cs b/sdk/dotnet/GetGateway.cs
index e339f4f7..668abd92 100644
--- a/sdk/dotnet/GetGateway.cs
+++ b/sdk/dotnet/GetGateway.cs
@@ -130,6 +130,10 @@ public sealed class GetGatewayResult
         /// <summary>
         /// (Optional Configuration Block) supports the following:
         /// </summary>
+        public readonly ImmutableArray<Outputs.GetGatewayAwsPrivateNetworkInterfaceGatewayResult> AwsPrivateNetworkInterfaceGateways;
+        /// <summary>
+        /// (Optional Configuration Block) supports the following:
+        /// </summary>
         public readonly ImmutableArray<Outputs.GetGatewayAzureEgressPrivateLinkGatewayResult> AzureEgressPrivateLinkGateways;
         /// <summary>
         /// (Optional Configuration Block) supports the following:
@@ -148,6 +152,8 @@ private GetGatewayResult(
 
             ImmutableArray<Outputs.GetGatewayAwsPeeringGatewayResult> awsPeeringGateways,
 
+            ImmutableArray<Outputs.GetGatewayAwsPrivateNetworkInterfaceGatewayResult> awsPrivateNetworkInterfaceGateways,
+
             ImmutableArray<Outputs.GetGatewayAzureEgressPrivateLinkGatewayResult> azureEgressPrivateLinkGateways,
 
             ImmutableArray<Outputs.GetGatewayAzurePeeringGatewayResult> azurePeeringGateways,
@@ -160,6 +166,7 @@ private GetGatewayResult(
         {
             AwsEgressPrivateLinkGateways = awsEgressPrivateLinkGateways;
             AwsPeeringGateways = awsPeeringGateways;
+            AwsPrivateNetworkInterfaceGateways = awsPrivateNetworkInterfaceGateways;
             AzureEgressPrivateLinkGateways = azureEgressPrivateLinkGateways;
             AzurePeeringGateways = azurePeeringGateways;
             DisplayName = displayName;
diff --git a/sdk/dotnet/GetSchemaRegistryClusterConfig.cs b/sdk/dotnet/GetSchemaRegistryClusterConfig.cs
index e61d7927..71221ca6 100644
--- a/sdk/dotnet/GetSchemaRegistryClusterConfig.cs
+++ b/sdk/dotnet/GetSchemaRegistryClusterConfig.cs
@@ -191,6 +191,10 @@ public GetSchemaRegistryClusterConfigInvokeArgs()
     [OutputType]
     public sealed class GetSchemaRegistryClusterConfigResult
     {
+        /// <summary>
+        /// (Required String) The global Schema Registry compatibility group.
+        /// </summary>
+        public readonly string CompatibilityGroup;
         /// <summary>
         /// (Required String) The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
@@ -205,6 +209,8 @@ public sealed class GetSchemaRegistryClusterConfigResult
 
         [OutputConstructor]
         private GetSchemaRegistryClusterConfigResult(
+            string compatibilityGroup,
+
             string compatibilityLevel,
 
             Outputs.GetSchemaRegistryClusterConfigCredentialsResult? credentials,
@@ -215,6 +221,7 @@ private GetSchemaRegistryClusterConfigResult(
 
             Outputs.GetSchemaRegistryClusterConfigSchemaRegistryClusterResult? schemaRegistryCluster)
         {
+            CompatibilityGroup = compatibilityGroup;
             CompatibilityLevel = compatibilityLevel;
             Credentials = credentials;
             Id = id;
diff --git a/sdk/dotnet/GetSubjectConfig.cs b/sdk/dotnet/GetSubjectConfig.cs
index f63bd93a..0c25ec19 100644
--- a/sdk/dotnet/GetSubjectConfig.cs
+++ b/sdk/dotnet/GetSubjectConfig.cs
@@ -103,6 +103,10 @@ public GetSubjectConfigInvokeArgs()
     [OutputType]
     public sealed class GetSubjectConfigResult
     {
+        /// <summary>
+        /// (Required String) The Compatibility Group of the specified subject.
+        /// </summary>
+        public readonly string CompatibilityGroup;
         /// <summary>
         /// (Required String) The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
@@ -118,6 +122,8 @@ public sealed class GetSubjectConfigResult
 
         [OutputConstructor]
         private GetSubjectConfigResult(
+            string compatibilityGroup,
+
             string compatibilityLevel,
 
             Outputs.GetSubjectConfigCredentialsResult? credentials,
@@ -130,6 +136,7 @@ private GetSubjectConfigResult(
 
             string subjectName)
         {
+            CompatibilityGroup = compatibilityGroup;
             CompatibilityLevel = compatibilityLevel;
             Credentials = credentials;
             Id = id;
diff --git a/sdk/dotnet/Inputs/AccessPointAwsPrivateNetworkInterfaceArgs.cs b/sdk/dotnet/Inputs/AccessPointAwsPrivateNetworkInterfaceArgs.cs
new file mode 100644
index 00000000..d39187aa
--- /dev/null
+++ b/sdk/dotnet/Inputs/AccessPointAwsPrivateNetworkInterfaceArgs.cs
@@ -0,0 +1,38 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Inputs
+{
+
+    public sealed class AccessPointAwsPrivateNetworkInterfaceArgs : global::Pulumi.ResourceArgs
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        /// </summary>
+        [Input("account", required: true)]
+        public Input<string> Account { get; set; } = null!;
+
+        [Input("networkInterfaces", required: true)]
+        private InputList<string>? _networkInterfaces;
+
+        /// <summary>
+        /// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        /// </summary>
+        public InputList<string> NetworkInterfaces
+        {
+            get => _networkInterfaces ?? (_networkInterfaces = new InputList<string>());
+            set => _networkInterfaces = value;
+        }
+
+        public AccessPointAwsPrivateNetworkInterfaceArgs()
+        {
+        }
+        public static new AccessPointAwsPrivateNetworkInterfaceArgs Empty => new AccessPointAwsPrivateNetworkInterfaceArgs();
+    }
+}
diff --git a/sdk/dotnet/Inputs/AccessPointAwsPrivateNetworkInterfaceGetArgs.cs b/sdk/dotnet/Inputs/AccessPointAwsPrivateNetworkInterfaceGetArgs.cs
new file mode 100644
index 00000000..abfa88e7
--- /dev/null
+++ b/sdk/dotnet/Inputs/AccessPointAwsPrivateNetworkInterfaceGetArgs.cs
@@ -0,0 +1,38 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Inputs
+{
+
+    public sealed class AccessPointAwsPrivateNetworkInterfaceGetArgs : global::Pulumi.ResourceArgs
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        /// </summary>
+        [Input("account", required: true)]
+        public Input<string> Account { get; set; } = null!;
+
+        [Input("networkInterfaces", required: true)]
+        private InputList<string>? _networkInterfaces;
+
+        /// <summary>
+        /// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        /// </summary>
+        public InputList<string> NetworkInterfaces
+        {
+            get => _networkInterfaces ?? (_networkInterfaces = new InputList<string>());
+            set => _networkInterfaces = value;
+        }
+
+        public AccessPointAwsPrivateNetworkInterfaceGetArgs()
+        {
+        }
+        public static new AccessPointAwsPrivateNetworkInterfaceGetArgs Empty => new AccessPointAwsPrivateNetworkInterfaceGetArgs();
+    }
+}
diff --git a/sdk/dotnet/Inputs/GatewayAwsPrivateNetworkInterfaceGatewayArgs.cs b/sdk/dotnet/Inputs/GatewayAwsPrivateNetworkInterfaceGatewayArgs.cs
new file mode 100644
index 00000000..c590a5c1
--- /dev/null
+++ b/sdk/dotnet/Inputs/GatewayAwsPrivateNetworkInterfaceGatewayArgs.cs
@@ -0,0 +1,44 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Inputs
+{
+
+    public sealed class GatewayAwsPrivateNetworkInterfaceGatewayArgs : global::Pulumi.ResourceArgs
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        /// </summary>
+        [Input("account")]
+        public Input<string>? Account { get; set; }
+
+        /// <summary>
+        /// AWS region of the Private Network Interface Gateway.
+        /// </summary>
+        [Input("region", required: true)]
+        public Input<string> Region { get; set; } = null!;
+
+        [Input("zones", required: true)]
+        private InputList<string>? _zones;
+
+        /// <summary>
+        /// AWS availability zone ids of the Private Network Interface Gateway.
+        /// </summary>
+        public InputList<string> Zones
+        {
+            get => _zones ?? (_zones = new InputList<string>());
+            set => _zones = value;
+        }
+
+        public GatewayAwsPrivateNetworkInterfaceGatewayArgs()
+        {
+        }
+        public static new GatewayAwsPrivateNetworkInterfaceGatewayArgs Empty => new GatewayAwsPrivateNetworkInterfaceGatewayArgs();
+    }
+}
diff --git a/sdk/dotnet/Inputs/GatewayAwsPrivateNetworkInterfaceGatewayGetArgs.cs b/sdk/dotnet/Inputs/GatewayAwsPrivateNetworkInterfaceGatewayGetArgs.cs
new file mode 100644
index 00000000..1c12e03b
--- /dev/null
+++ b/sdk/dotnet/Inputs/GatewayAwsPrivateNetworkInterfaceGatewayGetArgs.cs
@@ -0,0 +1,44 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Inputs
+{
+
+    public sealed class GatewayAwsPrivateNetworkInterfaceGatewayGetArgs : global::Pulumi.ResourceArgs
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        /// </summary>
+        [Input("account")]
+        public Input<string>? Account { get; set; }
+
+        /// <summary>
+        /// AWS region of the Private Network Interface Gateway.
+        /// </summary>
+        [Input("region", required: true)]
+        public Input<string> Region { get; set; } = null!;
+
+        [Input("zones", required: true)]
+        private InputList<string>? _zones;
+
+        /// <summary>
+        /// AWS availability zone ids of the Private Network Interface Gateway.
+        /// </summary>
+        public InputList<string> Zones
+        {
+            get => _zones ?? (_zones = new InputList<string>());
+            set => _zones = value;
+        }
+
+        public GatewayAwsPrivateNetworkInterfaceGatewayGetArgs()
+        {
+        }
+        public static new GatewayAwsPrivateNetworkInterfaceGatewayGetArgs Empty => new GatewayAwsPrivateNetworkInterfaceGatewayGetArgs();
+    }
+}
diff --git a/sdk/dotnet/Outputs/AccessPointAwsPrivateNetworkInterface.cs b/sdk/dotnet/Outputs/AccessPointAwsPrivateNetworkInterface.cs
new file mode 100644
index 00000000..5ad3fd93
--- /dev/null
+++ b/sdk/dotnet/Outputs/AccessPointAwsPrivateNetworkInterface.cs
@@ -0,0 +1,35 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Outputs
+{
+
+    [OutputType]
+    public sealed class AccessPointAwsPrivateNetworkInterface
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        /// </summary>
+        public readonly string Account;
+        /// <summary>
+        /// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        /// </summary>
+        public readonly ImmutableArray<string> NetworkInterfaces;
+
+        [OutputConstructor]
+        private AccessPointAwsPrivateNetworkInterface(
+            string account,
+
+            ImmutableArray<string> networkInterfaces)
+        {
+            Account = account;
+            NetworkInterfaces = networkInterfaces;
+        }
+    }
+}
diff --git a/sdk/dotnet/Outputs/GatewayAwsPrivateNetworkInterfaceGateway.cs b/sdk/dotnet/Outputs/GatewayAwsPrivateNetworkInterfaceGateway.cs
new file mode 100644
index 00000000..89c6cabe
--- /dev/null
+++ b/sdk/dotnet/Outputs/GatewayAwsPrivateNetworkInterfaceGateway.cs
@@ -0,0 +1,42 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Outputs
+{
+
+    [OutputType]
+    public sealed class GatewayAwsPrivateNetworkInterfaceGateway
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        /// </summary>
+        public readonly string? Account;
+        /// <summary>
+        /// AWS region of the Private Network Interface Gateway.
+        /// </summary>
+        public readonly string Region;
+        /// <summary>
+        /// AWS availability zone ids of the Private Network Interface Gateway.
+        /// </summary>
+        public readonly ImmutableArray<string> Zones;
+
+        [OutputConstructor]
+        private GatewayAwsPrivateNetworkInterfaceGateway(
+            string? account,
+
+            string region,
+
+            ImmutableArray<string> zones)
+        {
+            Account = account;
+            Region = region;
+            Zones = zones;
+        }
+    }
+}
diff --git a/sdk/dotnet/Outputs/GetAccessPointAwsPrivateNetworkInterfaceResult.cs b/sdk/dotnet/Outputs/GetAccessPointAwsPrivateNetworkInterfaceResult.cs
new file mode 100644
index 00000000..080a026b
--- /dev/null
+++ b/sdk/dotnet/Outputs/GetAccessPointAwsPrivateNetworkInterfaceResult.cs
@@ -0,0 +1,35 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Outputs
+{
+
+    [OutputType]
+    public sealed class GetAccessPointAwsPrivateNetworkInterfaceResult
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        /// </summary>
+        public readonly string Account;
+        /// <summary>
+        /// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        /// </summary>
+        public readonly ImmutableArray<string> NetworkInterfaces;
+
+        [OutputConstructor]
+        private GetAccessPointAwsPrivateNetworkInterfaceResult(
+            string account,
+
+            ImmutableArray<string> networkInterfaces)
+        {
+            Account = account;
+            NetworkInterfaces = networkInterfaces;
+        }
+    }
+}
diff --git a/sdk/dotnet/Outputs/GetGatewayAwsPrivateNetworkInterfaceGatewayResult.cs b/sdk/dotnet/Outputs/GetGatewayAwsPrivateNetworkInterfaceGatewayResult.cs
new file mode 100644
index 00000000..0831e45a
--- /dev/null
+++ b/sdk/dotnet/Outputs/GetGatewayAwsPrivateNetworkInterfaceGatewayResult.cs
@@ -0,0 +1,42 @@
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+using System;
+using System.Collections.Generic;
+using System.Collections.Immutable;
+using System.Threading.Tasks;
+using Pulumi.Serialization;
+
+namespace Pulumi.ConfluentCloud.Outputs
+{
+
+    [OutputType]
+    public sealed class GetGatewayAwsPrivateNetworkInterfaceGatewayResult
+    {
+        /// <summary>
+        /// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        /// </summary>
+        public readonly string Account;
+        /// <summary>
+        /// (Required String) Azure region of the Peering Gateway.
+        /// </summary>
+        public readonly string Region;
+        /// <summary>
+        /// (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+        /// </summary>
+        public readonly ImmutableArray<string> Zones;
+
+        [OutputConstructor]
+        private GetGatewayAwsPrivateNetworkInterfaceGatewayResult(
+            string account,
+
+            string region,
+
+            ImmutableArray<string> zones)
+        {
+            Account = account;
+            Region = region;
+            Zones = zones;
+        }
+    }
+}
diff --git a/sdk/dotnet/SchemaRegistryClusterConfig.cs b/sdk/dotnet/SchemaRegistryClusterConfig.cs
index 37c89da4..5f8071df 100644
--- a/sdk/dotnet/SchemaRegistryClusterConfig.cs
+++ b/sdk/dotnet/SchemaRegistryClusterConfig.cs
@@ -53,6 +53,7 @@ namespace Pulumi.ConfluentCloud
     ///     var example = new ConfluentCloud.SchemaRegistryClusterConfig("example", new()
     ///     {
     ///         CompatibilityLevel = "FULL",
+    ///         CompatibilityGroup = "abc.cg.version",
     ///     });
     /// 
     /// });
@@ -77,6 +78,12 @@ namespace Pulumi.ConfluentCloud
     [ConfluentCloudResourceType("confluentcloud:index/schemaRegistryClusterConfig:SchemaRegistryClusterConfig")]
     public partial class SchemaRegistryClusterConfig : global::Pulumi.CustomResource
     {
+        /// <summary>
+        /// The global Schema Registry compatibility group.
+        /// </summary>
+        [Output("compatibilityGroup")]
+        public Output<string> CompatibilityGroup { get; private set; } = null!;
+
         /// <summary>
         /// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
@@ -148,6 +155,12 @@ public static SchemaRegistryClusterConfig Get(string name, Input<string> id, Sch
 
     public sealed class SchemaRegistryClusterConfigArgs : global::Pulumi.ResourceArgs
     {
+        /// <summary>
+        /// The global Schema Registry compatibility group.
+        /// </summary>
+        [Input("compatibilityGroup")]
+        public Input<string>? CompatibilityGroup { get; set; }
+
         /// <summary>
         /// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
@@ -187,6 +200,12 @@ public SchemaRegistryClusterConfigArgs()
 
     public sealed class SchemaRegistryClusterConfigState : global::Pulumi.ResourceArgs
     {
+        /// <summary>
+        /// The global Schema Registry compatibility group.
+        /// </summary>
+        [Input("compatibilityGroup")]
+        public Input<string>? CompatibilityGroup { get; set; }
+
         /// <summary>
         /// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
diff --git a/sdk/dotnet/SubjectConfig.cs b/sdk/dotnet/SubjectConfig.cs
index 37cda600..4a0cc84c 100644
--- a/sdk/dotnet/SubjectConfig.cs
+++ b/sdk/dotnet/SubjectConfig.cs
@@ -31,6 +31,7 @@ namespace Pulumi.ConfluentCloud
     ///         RestEndpoint = essentialsConfluentSchemaRegistryCluster.RestEndpoint,
     ///         SubjectName = "proto-purchase-value",
     ///         CompatibilityLevel = "BACKWARD",
+    ///         CompatibilityGroup = "abc.cg.version",
     ///         Credentials = new ConfluentCloud.Inputs.SubjectConfigCredentialsArgs
     ///         {
     ///             Key = "&lt;Schema Registry API Key for data.confluent_schema_registry_cluster.essentials&gt;",
@@ -55,6 +56,7 @@ namespace Pulumi.ConfluentCloud
     ///     {
     ///         SubjectName = "proto-purchase-value",
     ///         CompatibilityLevel = "BACKWARD",
+    ///         CompatibilityGroup = "abc.cg.version",
     ///     });
     /// 
     /// });
@@ -79,6 +81,12 @@ namespace Pulumi.ConfluentCloud
     [ConfluentCloudResourceType("confluentcloud:index/subjectConfig:SubjectConfig")]
     public partial class SubjectConfig : global::Pulumi.CustomResource
     {
+        /// <summary>
+        /// The Compatibility Group of the specified subject.
+        /// </summary>
+        [Output("compatibilityGroup")]
+        public Output<string> CompatibilityGroup { get; private set; } = null!;
+
         /// <summary>
         /// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
@@ -156,6 +164,12 @@ public static SubjectConfig Get(string name, Input<string> id, SubjectConfigStat
 
     public sealed class SubjectConfigArgs : global::Pulumi.ResourceArgs
     {
+        /// <summary>
+        /// The Compatibility Group of the specified subject.
+        /// </summary>
+        [Input("compatibilityGroup")]
+        public Input<string>? CompatibilityGroup { get; set; }
+
         /// <summary>
         /// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
@@ -201,6 +215,12 @@ public SubjectConfigArgs()
 
     public sealed class SubjectConfigState : global::Pulumi.ResourceArgs
     {
+        /// <summary>
+        /// The Compatibility Group of the specified subject.
+        /// </summary>
+        [Input("compatibilityGroup")]
+        public Input<string>? CompatibilityGroup { get; set; }
+
         /// <summary>
         /// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         /// </summary>
diff --git a/sdk/go/confluentcloud/accessPoint.go b/sdk/go/confluentcloud/accessPoint.go
index 58d69c8e..6fb03aab 100644
--- a/sdk/go/confluentcloud/accessPoint.go
+++ b/sdk/go/confluentcloud/accessPoint.go
@@ -92,6 +92,8 @@ type AccessPoint struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkEndpoint AccessPointAwsEgressPrivateLinkEndpointPtrOutput `pulumi:"awsEgressPrivateLinkEndpoint"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterface AccessPointAwsPrivateNetworkInterfacePtrOutput `pulumi:"awsPrivateNetworkInterface"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkEndpoint AccessPointAzureEgressPrivateLinkEndpointPtrOutput `pulumi:"azureEgressPrivateLinkEndpoint"`
 	// The name of the Access Point.
 	DisplayName pulumi.StringOutput `pulumi:"displayName"`
@@ -139,6 +141,8 @@ type accessPointState struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkEndpoint *AccessPointAwsEgressPrivateLinkEndpoint `pulumi:"awsEgressPrivateLinkEndpoint"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterface *AccessPointAwsPrivateNetworkInterface `pulumi:"awsPrivateNetworkInterface"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkEndpoint *AccessPointAzureEgressPrivateLinkEndpoint `pulumi:"azureEgressPrivateLinkEndpoint"`
 	// The name of the Access Point.
 	DisplayName *string `pulumi:"displayName"`
@@ -151,6 +155,8 @@ type AccessPointState struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkEndpoint AccessPointAwsEgressPrivateLinkEndpointPtrInput
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterface AccessPointAwsPrivateNetworkInterfacePtrInput
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkEndpoint AccessPointAzureEgressPrivateLinkEndpointPtrInput
 	// The name of the Access Point.
 	DisplayName pulumi.StringPtrInput
@@ -167,6 +173,8 @@ type accessPointArgs struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkEndpoint *AccessPointAwsEgressPrivateLinkEndpoint `pulumi:"awsEgressPrivateLinkEndpoint"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterface *AccessPointAwsPrivateNetworkInterface `pulumi:"awsPrivateNetworkInterface"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkEndpoint *AccessPointAzureEgressPrivateLinkEndpoint `pulumi:"azureEgressPrivateLinkEndpoint"`
 	// The name of the Access Point.
 	DisplayName *string `pulumi:"displayName"`
@@ -180,6 +188,8 @@ type AccessPointArgs struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkEndpoint AccessPointAwsEgressPrivateLinkEndpointPtrInput
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterface AccessPointAwsPrivateNetworkInterfacePtrInput
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkEndpoint AccessPointAzureEgressPrivateLinkEndpointPtrInput
 	// The name of the Access Point.
 	DisplayName pulumi.StringPtrInput
@@ -282,6 +292,13 @@ func (o AccessPointOutput) AwsEgressPrivateLinkEndpoint() AccessPointAwsEgressPr
 	}).(AccessPointAwsEgressPrivateLinkEndpointPtrOutput)
 }
 
+// (Optional Configuration Block) supports the following:
+func (o AccessPointOutput) AwsPrivateNetworkInterface() AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return o.ApplyT(func(v *AccessPoint) AccessPointAwsPrivateNetworkInterfacePtrOutput {
+		return v.AwsPrivateNetworkInterface
+	}).(AccessPointAwsPrivateNetworkInterfacePtrOutput)
+}
+
 // (Optional Configuration Block) supports the following:
 func (o AccessPointOutput) AzureEgressPrivateLinkEndpoint() AccessPointAzureEgressPrivateLinkEndpointPtrOutput {
 	return o.ApplyT(func(v *AccessPoint) AccessPointAzureEgressPrivateLinkEndpointPtrOutput {
diff --git a/sdk/go/confluentcloud/certificateAuthority.go b/sdk/go/confluentcloud/certificateAuthority.go
index 50762fb3..f50979f8 100644
--- a/sdk/go/confluentcloud/certificateAuthority.go
+++ b/sdk/go/confluentcloud/certificateAuthority.go
@@ -12,7 +12,7 @@ import (
 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 )
 
-// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 //
 // `CertificateAuthority` provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.
 //
diff --git a/sdk/go/confluentcloud/certificatePool.go b/sdk/go/confluentcloud/certificatePool.go
index d639edb3..1e726e52 100644
--- a/sdk/go/confluentcloud/certificatePool.go
+++ b/sdk/go/confluentcloud/certificatePool.go
@@ -12,7 +12,7 @@ import (
 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 )
 
-// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 //
 // `CertificatePool` provides a Certificate Pool resource that enables creating, editing, and deleting Certificate Pools on Confluent Cloud.
 //
diff --git a/sdk/go/confluentcloud/connector.go b/sdk/go/confluentcloud/connector.go
index b85d4902..e531e5c0 100644
--- a/sdk/go/confluentcloud/connector.go
+++ b/sdk/go/confluentcloud/connector.go
@@ -27,6 +27,7 @@ import (
 //
 //	func main() {
 //		pulumi.Run(func(ctx *pulumi.Context) error {
+//			// https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/managed-datagen-source-connector
 //			_, err := confluentcloud.NewConnector(ctx, "source", &confluentcloud.ConnectorArgs{
 //				Environment: &confluentcloud.ConnectorEnvironmentArgs{
 //					Id: pulumi.Any(staging.Id),
@@ -73,6 +74,7 @@ import (
 //
 //	func main() {
 //		pulumi.Run(func(ctx *pulumi.Context) error {
+//			// https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector
 //			_, err := confluentcloud.NewConnector(ctx, "sink", &confluentcloud.ConnectorArgs{
 //				Environment: &confluentcloud.ConnectorEnvironmentArgs{
 //					Id: pulumi.Any(staging.Id),
@@ -117,6 +119,65 @@ import (
 //
 // ```
 //
+// ### Example Managed [Amazon S3 Sink Connector](https://docs.confluent.io/cloud/current/connectors/cc-s3-sink.html) that uses a service account to communicate with your Kafka cluster and IAM Roles for AWS authentication
+// ```go
+// package main
+//
+// import (
+//
+//	"github.com/pulumi/pulumi-confluentcloud/sdk/v2/go/confluentcloud"
+//	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
+//
+// )
+//
+//	func main() {
+//		pulumi.Run(func(ctx *pulumi.Context) error {
+//			// https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector-assume-role
+//			_, err := confluentcloud.NewConnector(ctx, "sink", &confluentcloud.ConnectorArgs{
+//				Environment: &confluentcloud.ConnectorEnvironmentArgs{
+//					Id: pulumi.Any(staging.Id),
+//				},
+//				KafkaCluster: &confluentcloud.ConnectorKafkaClusterArgs{
+//					Id: pulumi.Any(basic.Id),
+//				},
+//				ConfigSensitive: pulumi.StringMap{},
+//				ConfigNonsensitive: pulumi.StringMap{
+//					"topics":                   pulumi.Any(orders.TopicName),
+//					"input.data.format":        pulumi.String("JSON"),
+//					"connector.class":          pulumi.String("S3_SINK"),
+//					"name":                     pulumi.String("S3_SINKConnector_0"),
+//					"kafka.auth.mode":          pulumi.String("SERVICE_ACCOUNT"),
+//					"kafka.service.account.id": pulumi.Any(app_connector.Id),
+//					"s3.bucket.name":           pulumi.String("<s3-bucket-name>"),
+//					"output.data.format":       pulumi.String("JSON"),
+//					"time.interval":            pulumi.String("DAILY"),
+//					"flush.size":               pulumi.String("1000"),
+//					"tasks.max":                pulumi.String("1"),
+//					"authentication.method":    pulumi.String("IAM Roles"),
+//					"provider.integration.id":  pulumi.Any(main.Id),
+//				},
+//			}, pulumi.DependsOn([]pulumi.Resource{
+//				app_connector_describe_on_cluster,
+//				app_connector_read_on_target_topic,
+//				app_connector_create_on_dlq_lcc_topics,
+//				app_connector_write_on_dlq_lcc_topics,
+//				app_connector_create_on_success_lcc_topics,
+//				app_connector_write_on_success_lcc_topics,
+//				app_connector_create_on_error_lcc_topics,
+//				app_connector_write_on_error_lcc_topics,
+//				app_connector_read_on_connect_lcc_group,
+//				main,
+//				s3AccessRole,
+//			}))
+//			if err != nil {
+//				return err
+//			}
+//			return nil
+//		})
+//	}
+//
+// ```
+//
 // ### Example Managed [Amazon DynamoDB Connector](https://docs.confluent.io/cloud/current/connectors/cc-amazon-dynamo-db-sink.html) that uses a service account to communicate with your Kafka cluster
 // ```go
 // package main
@@ -130,6 +191,7 @@ import (
 //
 //	func main() {
 //		pulumi.Run(func(ctx *pulumi.Context) error {
+//			// https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/dynamo-db-sink-connector
 //			_, err := confluentcloud.NewConnector(ctx, "sink", &confluentcloud.ConnectorArgs{
 //				Environment: &confluentcloud.ConnectorEnvironmentArgs{
 //					Id: pulumi.Any(staging.Id),
@@ -173,7 +235,6 @@ import (
 // ```
 //
 // ### Example Custom [Datagen Source Connector](https://www.confluent.io/hub/confluentinc/kafka-connect-datagen) that uses a Kafka API Key to communicate with your Kafka cluster
-//
 // ```go
 // package main
 //
@@ -186,6 +247,7 @@ import (
 //
 //	func main() {
 //		pulumi.Run(func(ctx *pulumi.Context) error {
+//			// https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/custom-datagen-source-connector
 //			_, err := confluentcloud.NewConnector(ctx, "source", &confluentcloud.ConnectorArgs{
 //				Environment: &confluentcloud.ConnectorEnvironmentArgs{
 //					Id: pulumi.Any(staging.Id),
@@ -222,13 +284,11 @@ import (
 //
 // ```
 //
-// > **Note:** Custom connectors are available in **Preview** for early adopters. Preview features are introduced to gather customer feedback. This feature should be used only for evaluation and non-production testing purposes or to provide feedback to Confluent, particularly as it becomes more widely available in follow-on editions.\
-// **Preview** features are intended for evaluation use in development and testing environments only, and not for production use. The warranty, SLA, and Support Services provisions of your agreement with Confluent do not apply to Preview features. Preview features are considered to be a Proof of Concept as defined in the Confluent Cloud Terms of Service. Confluent may discontinue providing preview releases of the Preview features at any time in Confluent’s sole discretion.
-//
 // ## Getting Started
 //
 // The following end-to-end examples might help to get started with `Connector` resource:
 // * `s3-sink-connector`
+// * `s3-sink-connector-assume-role`
 // * `snowflake-sink-connector`
 // * `managed-datagen-source-connector`
 // * `elasticsearch-sink-connector`
diff --git a/sdk/go/confluentcloud/flinkArtifact.go b/sdk/go/confluentcloud/flinkArtifact.go
index a8ae8a37..58de3f15 100644
--- a/sdk/go/confluentcloud/flinkArtifact.go
+++ b/sdk/go/confluentcloud/flinkArtifact.go
@@ -53,14 +53,14 @@ import (
 //
 // ## Import
 //
-// You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
+// You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<Environment ID>/<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
 //
 // $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
 //
 // $ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
 //
 // ```sh
-// $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main us-east-1/aws/fa-123
+// $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main env-abc123/us-east-1/aws/fa-123
 // ```
 //
 // !> **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
diff --git a/sdk/go/confluentcloud/gateway.go b/sdk/go/confluentcloud/gateway.go
index a7a4c0e0..1bf28a48 100644
--- a/sdk/go/confluentcloud/gateway.go
+++ b/sdk/go/confluentcloud/gateway.go
@@ -73,6 +73,8 @@ type Gateway struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkGateway GatewayAwsEgressPrivateLinkGatewayOutput `pulumi:"awsEgressPrivateLinkGateway"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterfaceGateway GatewayAwsPrivateNetworkInterfaceGatewayOutput `pulumi:"awsPrivateNetworkInterfaceGateway"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkGateway GatewayAzureEgressPrivateLinkGatewayOutput `pulumi:"azureEgressPrivateLinkGateway"`
 	// The name of the Gateway.
 	DisplayName pulumi.StringOutput `pulumi:"displayName"`
@@ -119,6 +121,8 @@ type gatewayState struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkGateway *GatewayAwsEgressPrivateLinkGateway `pulumi:"awsEgressPrivateLinkGateway"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterfaceGateway *GatewayAwsPrivateNetworkInterfaceGateway `pulumi:"awsPrivateNetworkInterfaceGateway"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkGateway *GatewayAzureEgressPrivateLinkGateway `pulumi:"azureEgressPrivateLinkGateway"`
 	// The name of the Gateway.
 	DisplayName *string `pulumi:"displayName"`
@@ -130,6 +134,8 @@ type GatewayState struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkGateway GatewayAwsEgressPrivateLinkGatewayPtrInput
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterfaceGateway GatewayAwsPrivateNetworkInterfaceGatewayPtrInput
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkGateway GatewayAzureEgressPrivateLinkGatewayPtrInput
 	// The name of the Gateway.
 	DisplayName pulumi.StringPtrInput
@@ -145,6 +151,8 @@ type gatewayArgs struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkGateway *GatewayAwsEgressPrivateLinkGateway `pulumi:"awsEgressPrivateLinkGateway"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterfaceGateway *GatewayAwsPrivateNetworkInterfaceGateway `pulumi:"awsPrivateNetworkInterfaceGateway"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkGateway *GatewayAzureEgressPrivateLinkGateway `pulumi:"azureEgressPrivateLinkGateway"`
 	// The name of the Gateway.
 	DisplayName string `pulumi:"displayName"`
@@ -157,6 +165,8 @@ type GatewayArgs struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkGateway GatewayAwsEgressPrivateLinkGatewayPtrInput
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterfaceGateway GatewayAwsPrivateNetworkInterfaceGatewayPtrInput
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkGateway GatewayAzureEgressPrivateLinkGatewayPtrInput
 	// The name of the Gateway.
 	DisplayName pulumi.StringInput
@@ -256,6 +266,13 @@ func (o GatewayOutput) AwsEgressPrivateLinkGateway() GatewayAwsEgressPrivateLink
 	return o.ApplyT(func(v *Gateway) GatewayAwsEgressPrivateLinkGatewayOutput { return v.AwsEgressPrivateLinkGateway }).(GatewayAwsEgressPrivateLinkGatewayOutput)
 }
 
+// (Optional Configuration Block) supports the following:
+func (o GatewayOutput) AwsPrivateNetworkInterfaceGateway() GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return o.ApplyT(func(v *Gateway) GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+		return v.AwsPrivateNetworkInterfaceGateway
+	}).(GatewayAwsPrivateNetworkInterfaceGatewayOutput)
+}
+
 // (Optional Configuration Block) supports the following:
 func (o GatewayOutput) AzureEgressPrivateLinkGateway() GatewayAzureEgressPrivateLinkGatewayOutput {
 	return o.ApplyT(func(v *Gateway) GatewayAzureEgressPrivateLinkGatewayOutput { return v.AzureEgressPrivateLinkGateway }).(GatewayAzureEgressPrivateLinkGatewayOutput)
diff --git a/sdk/go/confluentcloud/getAccessPoint.go b/sdk/go/confluentcloud/getAccessPoint.go
index 8262fffc..3bef3176 100644
--- a/sdk/go/confluentcloud/getAccessPoint.go
+++ b/sdk/go/confluentcloud/getAccessPoint.go
@@ -65,6 +65,8 @@ type LookupAccessPointArgs struct {
 type LookupAccessPointResult struct {
 	// (Optional Configuration Block) supports the following:
 	AwsEgressPrivateLinkEndpoints []GetAccessPointAwsEgressPrivateLinkEndpoint `pulumi:"awsEgressPrivateLinkEndpoints"`
+	// (Optional Configuration Block) Supports the following:
+	AwsPrivateNetworkInterfaces []GetAccessPointAwsPrivateNetworkInterface `pulumi:"awsPrivateNetworkInterfaces"`
 	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkEndpoints []GetAccessPointAzureEgressPrivateLinkEndpoint `pulumi:"azureEgressPrivateLinkEndpoints"`
 	// (Required String) A human-readable name for the Access Point.
@@ -128,6 +130,13 @@ func (o LookupAccessPointResultOutput) AwsEgressPrivateLinkEndpoints() GetAccess
 	}).(GetAccessPointAwsEgressPrivateLinkEndpointArrayOutput)
 }
 
+// (Optional Configuration Block) Supports the following:
+func (o LookupAccessPointResultOutput) AwsPrivateNetworkInterfaces() GetAccessPointAwsPrivateNetworkInterfaceArrayOutput {
+	return o.ApplyT(func(v LookupAccessPointResult) []GetAccessPointAwsPrivateNetworkInterface {
+		return v.AwsPrivateNetworkInterfaces
+	}).(GetAccessPointAwsPrivateNetworkInterfaceArrayOutput)
+}
+
 // (Optional Configuration Block) supports the following:
 func (o LookupAccessPointResultOutput) AzureEgressPrivateLinkEndpoints() GetAccessPointAzureEgressPrivateLinkEndpointArrayOutput {
 	return o.ApplyT(func(v LookupAccessPointResult) []GetAccessPointAzureEgressPrivateLinkEndpoint {
diff --git a/sdk/go/confluentcloud/getCertificateAuthority.go b/sdk/go/confluentcloud/getCertificateAuthority.go
index 6ad00537..4b17b2f2 100644
--- a/sdk/go/confluentcloud/getCertificateAuthority.go
+++ b/sdk/go/confluentcloud/getCertificateAuthority.go
@@ -11,7 +11,7 @@ import (
 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 )
 
-// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 //
 // `CertificateAuthority` describes a Certificate Authority data source.
 //
diff --git a/sdk/go/confluentcloud/getCertificatePool.go b/sdk/go/confluentcloud/getCertificatePool.go
index 12bdb7d6..0a9939c4 100644
--- a/sdk/go/confluentcloud/getCertificatePool.go
+++ b/sdk/go/confluentcloud/getCertificatePool.go
@@ -11,7 +11,7 @@ import (
 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 )
 
-// [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+// [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 //
 // `CertificatePool` describes a Certificate Pool data source.
 //
diff --git a/sdk/go/confluentcloud/getGateway.go b/sdk/go/confluentcloud/getGateway.go
index 7407149b..58b3bd22 100644
--- a/sdk/go/confluentcloud/getGateway.go
+++ b/sdk/go/confluentcloud/getGateway.go
@@ -68,6 +68,8 @@ type LookupGatewayResult struct {
 	// (Optional Configuration Block) supports the following:
 	AwsPeeringGateways []GetGatewayAwsPeeringGateway `pulumi:"awsPeeringGateways"`
 	// (Optional Configuration Block) supports the following:
+	AwsPrivateNetworkInterfaceGateways []GetGatewayAwsPrivateNetworkInterfaceGateway `pulumi:"awsPrivateNetworkInterfaceGateways"`
+	// (Optional Configuration Block) supports the following:
 	AzureEgressPrivateLinkGateways []GetGatewayAzureEgressPrivateLinkGateway `pulumi:"azureEgressPrivateLinkGateways"`
 	// (Optional Configuration Block) supports the following:
 	AzurePeeringGateways []GetGatewayAzurePeeringGateway `pulumi:"azurePeeringGateways"`
@@ -134,6 +136,13 @@ func (o LookupGatewayResultOutput) AwsPeeringGateways() GetGatewayAwsPeeringGate
 	return o.ApplyT(func(v LookupGatewayResult) []GetGatewayAwsPeeringGateway { return v.AwsPeeringGateways }).(GetGatewayAwsPeeringGatewayArrayOutput)
 }
 
+// (Optional Configuration Block) supports the following:
+func (o LookupGatewayResultOutput) AwsPrivateNetworkInterfaceGateways() GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput {
+	return o.ApplyT(func(v LookupGatewayResult) []GetGatewayAwsPrivateNetworkInterfaceGateway {
+		return v.AwsPrivateNetworkInterfaceGateways
+	}).(GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput)
+}
+
 // (Optional Configuration Block) supports the following:
 func (o LookupGatewayResultOutput) AzureEgressPrivateLinkGateways() GetGatewayAzureEgressPrivateLinkGatewayArrayOutput {
 	return o.ApplyT(func(v LookupGatewayResult) []GetGatewayAzureEgressPrivateLinkGateway {
diff --git a/sdk/go/confluentcloud/getSchemaRegistryClusterConfig.go b/sdk/go/confluentcloud/getSchemaRegistryClusterConfig.go
index 6b58e874..90b98743 100644
--- a/sdk/go/confluentcloud/getSchemaRegistryClusterConfig.go
+++ b/sdk/go/confluentcloud/getSchemaRegistryClusterConfig.go
@@ -95,6 +95,8 @@ type LookupSchemaRegistryClusterConfigArgs struct {
 
 // A collection of values returned by getSchemaRegistryClusterConfig.
 type LookupSchemaRegistryClusterConfigResult struct {
+	// (Required String) The global Schema Registry compatibility group.
+	CompatibilityGroup string `pulumi:"compatibilityGroup"`
 	// (Required String) The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel string                                     `pulumi:"compatibilityLevel"`
 	Credentials        *GetSchemaRegistryClusterConfigCredentials `pulumi:"credentials"`
@@ -150,6 +152,11 @@ func (o LookupSchemaRegistryClusterConfigResultOutput) ToLookupSchemaRegistryClu
 	return o
 }
 
+// (Required String) The global Schema Registry compatibility group.
+func (o LookupSchemaRegistryClusterConfigResultOutput) CompatibilityGroup() pulumi.StringOutput {
+	return o.ApplyT(func(v LookupSchemaRegistryClusterConfigResult) string { return v.CompatibilityGroup }).(pulumi.StringOutput)
+}
+
 // (Required String) The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 func (o LookupSchemaRegistryClusterConfigResultOutput) CompatibilityLevel() pulumi.StringOutput {
 	return o.ApplyT(func(v LookupSchemaRegistryClusterConfigResult) string { return v.CompatibilityLevel }).(pulumi.StringOutput)
diff --git a/sdk/go/confluentcloud/getSubjectConfig.go b/sdk/go/confluentcloud/getSubjectConfig.go
index 47c10c49..abc2b4e2 100644
--- a/sdk/go/confluentcloud/getSubjectConfig.go
+++ b/sdk/go/confluentcloud/getSubjectConfig.go
@@ -38,6 +38,8 @@ type LookupSubjectConfigArgs struct {
 
 // A collection of values returned by getSubjectConfig.
 type LookupSubjectConfigResult struct {
+	// (Required String) The Compatibility Group of the specified subject.
+	CompatibilityGroup string `pulumi:"compatibilityGroup"`
 	// (Required String) The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel string                       `pulumi:"compatibilityLevel"`
 	Credentials        *GetSubjectConfigCredentials `pulumi:"credentials"`
@@ -96,6 +98,11 @@ func (o LookupSubjectConfigResultOutput) ToLookupSubjectConfigResultOutputWithCo
 	return o
 }
 
+// (Required String) The Compatibility Group of the specified subject.
+func (o LookupSubjectConfigResultOutput) CompatibilityGroup() pulumi.StringOutput {
+	return o.ApplyT(func(v LookupSubjectConfigResult) string { return v.CompatibilityGroup }).(pulumi.StringOutput)
+}
+
 // (Required String) The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 func (o LookupSubjectConfigResultOutput) CompatibilityLevel() pulumi.StringOutput {
 	return o.ApplyT(func(v LookupSubjectConfigResult) string { return v.CompatibilityLevel }).(pulumi.StringOutput)
diff --git a/sdk/go/confluentcloud/pulumiTypes.go b/sdk/go/confluentcloud/pulumiTypes.go
index 52a65794..f1112b4a 100644
--- a/sdk/go/confluentcloud/pulumiTypes.go
+++ b/sdk/go/confluentcloud/pulumiTypes.go
@@ -207,6 +207,162 @@ func (o AccessPointAwsEgressPrivateLinkEndpointPtrOutput) VpcEndpointServiceName
 	}).(pulumi.StringPtrOutput)
 }
 
+type AccessPointAwsPrivateNetworkInterface struct {
+	// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+	Account string `pulumi:"account"`
+	// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+	NetworkInterfaces []string `pulumi:"networkInterfaces"`
+}
+
+// AccessPointAwsPrivateNetworkInterfaceInput is an input type that accepts AccessPointAwsPrivateNetworkInterfaceArgs and AccessPointAwsPrivateNetworkInterfaceOutput values.
+// You can construct a concrete instance of `AccessPointAwsPrivateNetworkInterfaceInput` via:
+//
+//	AccessPointAwsPrivateNetworkInterfaceArgs{...}
+type AccessPointAwsPrivateNetworkInterfaceInput interface {
+	pulumi.Input
+
+	ToAccessPointAwsPrivateNetworkInterfaceOutput() AccessPointAwsPrivateNetworkInterfaceOutput
+	ToAccessPointAwsPrivateNetworkInterfaceOutputWithContext(context.Context) AccessPointAwsPrivateNetworkInterfaceOutput
+}
+
+type AccessPointAwsPrivateNetworkInterfaceArgs struct {
+	// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+	Account pulumi.StringInput `pulumi:"account"`
+	// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+	NetworkInterfaces pulumi.StringArrayInput `pulumi:"networkInterfaces"`
+}
+
+func (AccessPointAwsPrivateNetworkInterfaceArgs) ElementType() reflect.Type {
+	return reflect.TypeOf((*AccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (i AccessPointAwsPrivateNetworkInterfaceArgs) ToAccessPointAwsPrivateNetworkInterfaceOutput() AccessPointAwsPrivateNetworkInterfaceOutput {
+	return i.ToAccessPointAwsPrivateNetworkInterfaceOutputWithContext(context.Background())
+}
+
+func (i AccessPointAwsPrivateNetworkInterfaceArgs) ToAccessPointAwsPrivateNetworkInterfaceOutputWithContext(ctx context.Context) AccessPointAwsPrivateNetworkInterfaceOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(AccessPointAwsPrivateNetworkInterfaceOutput)
+}
+
+func (i AccessPointAwsPrivateNetworkInterfaceArgs) ToAccessPointAwsPrivateNetworkInterfacePtrOutput() AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return i.ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(context.Background())
+}
+
+func (i AccessPointAwsPrivateNetworkInterfaceArgs) ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(ctx context.Context) AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(AccessPointAwsPrivateNetworkInterfaceOutput).ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(ctx)
+}
+
+// AccessPointAwsPrivateNetworkInterfacePtrInput is an input type that accepts AccessPointAwsPrivateNetworkInterfaceArgs, AccessPointAwsPrivateNetworkInterfacePtr and AccessPointAwsPrivateNetworkInterfacePtrOutput values.
+// You can construct a concrete instance of `AccessPointAwsPrivateNetworkInterfacePtrInput` via:
+//
+//	        AccessPointAwsPrivateNetworkInterfaceArgs{...}
+//
+//	or:
+//
+//	        nil
+type AccessPointAwsPrivateNetworkInterfacePtrInput interface {
+	pulumi.Input
+
+	ToAccessPointAwsPrivateNetworkInterfacePtrOutput() AccessPointAwsPrivateNetworkInterfacePtrOutput
+	ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(context.Context) AccessPointAwsPrivateNetworkInterfacePtrOutput
+}
+
+type accessPointAwsPrivateNetworkInterfacePtrType AccessPointAwsPrivateNetworkInterfaceArgs
+
+func AccessPointAwsPrivateNetworkInterfacePtr(v *AccessPointAwsPrivateNetworkInterfaceArgs) AccessPointAwsPrivateNetworkInterfacePtrInput {
+	return (*accessPointAwsPrivateNetworkInterfacePtrType)(v)
+}
+
+func (*accessPointAwsPrivateNetworkInterfacePtrType) ElementType() reflect.Type {
+	return reflect.TypeOf((**AccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (i *accessPointAwsPrivateNetworkInterfacePtrType) ToAccessPointAwsPrivateNetworkInterfacePtrOutput() AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return i.ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(context.Background())
+}
+
+func (i *accessPointAwsPrivateNetworkInterfacePtrType) ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(ctx context.Context) AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(AccessPointAwsPrivateNetworkInterfacePtrOutput)
+}
+
+type AccessPointAwsPrivateNetworkInterfaceOutput struct{ *pulumi.OutputState }
+
+func (AccessPointAwsPrivateNetworkInterfaceOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((*AccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (o AccessPointAwsPrivateNetworkInterfaceOutput) ToAccessPointAwsPrivateNetworkInterfaceOutput() AccessPointAwsPrivateNetworkInterfaceOutput {
+	return o
+}
+
+func (o AccessPointAwsPrivateNetworkInterfaceOutput) ToAccessPointAwsPrivateNetworkInterfaceOutputWithContext(ctx context.Context) AccessPointAwsPrivateNetworkInterfaceOutput {
+	return o
+}
+
+func (o AccessPointAwsPrivateNetworkInterfaceOutput) ToAccessPointAwsPrivateNetworkInterfacePtrOutput() AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return o.ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(context.Background())
+}
+
+func (o AccessPointAwsPrivateNetworkInterfaceOutput) ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(ctx context.Context) AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return o.ApplyTWithContext(ctx, func(_ context.Context, v AccessPointAwsPrivateNetworkInterface) *AccessPointAwsPrivateNetworkInterface {
+		return &v
+	}).(AccessPointAwsPrivateNetworkInterfacePtrOutput)
+}
+
+// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+func (o AccessPointAwsPrivateNetworkInterfaceOutput) Account() pulumi.StringOutput {
+	return o.ApplyT(func(v AccessPointAwsPrivateNetworkInterface) string { return v.Account }).(pulumi.StringOutput)
+}
+
+// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+func (o AccessPointAwsPrivateNetworkInterfaceOutput) NetworkInterfaces() pulumi.StringArrayOutput {
+	return o.ApplyT(func(v AccessPointAwsPrivateNetworkInterface) []string { return v.NetworkInterfaces }).(pulumi.StringArrayOutput)
+}
+
+type AccessPointAwsPrivateNetworkInterfacePtrOutput struct{ *pulumi.OutputState }
+
+func (AccessPointAwsPrivateNetworkInterfacePtrOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((**AccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (o AccessPointAwsPrivateNetworkInterfacePtrOutput) ToAccessPointAwsPrivateNetworkInterfacePtrOutput() AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return o
+}
+
+func (o AccessPointAwsPrivateNetworkInterfacePtrOutput) ToAccessPointAwsPrivateNetworkInterfacePtrOutputWithContext(ctx context.Context) AccessPointAwsPrivateNetworkInterfacePtrOutput {
+	return o
+}
+
+func (o AccessPointAwsPrivateNetworkInterfacePtrOutput) Elem() AccessPointAwsPrivateNetworkInterfaceOutput {
+	return o.ApplyT(func(v *AccessPointAwsPrivateNetworkInterface) AccessPointAwsPrivateNetworkInterface {
+		if v != nil {
+			return *v
+		}
+		var ret AccessPointAwsPrivateNetworkInterface
+		return ret
+	}).(AccessPointAwsPrivateNetworkInterfaceOutput)
+}
+
+// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+func (o AccessPointAwsPrivateNetworkInterfacePtrOutput) Account() pulumi.StringPtrOutput {
+	return o.ApplyT(func(v *AccessPointAwsPrivateNetworkInterface) *string {
+		if v == nil {
+			return nil
+		}
+		return &v.Account
+	}).(pulumi.StringPtrOutput)
+}
+
+// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+func (o AccessPointAwsPrivateNetworkInterfacePtrOutput) NetworkInterfaces() pulumi.StringArrayOutput {
+	return o.ApplyT(func(v *AccessPointAwsPrivateNetworkInterface) []string {
+		if v == nil {
+			return nil
+		}
+		return v.NetworkInterfaces
+	}).(pulumi.StringArrayOutput)
+}
+
 type AccessPointAzureEgressPrivateLinkEndpoint struct {
 	// (Required List of Strings) Domains of the Private Endpoint (if any) based off FQDNs in Azure custom DNS configs, which are required in your private DNS setup, for example: `["dbname.database.windows.net", "dbname-region.database.windows.net"]`.
 	PrivateEndpointCustomDnsConfigDomains []string `pulumi:"privateEndpointCustomDnsConfigDomains"`
@@ -6773,6 +6929,181 @@ func (o GatewayAwsEgressPrivateLinkGatewayPtrOutput) Region() pulumi.StringPtrOu
 	}).(pulumi.StringPtrOutput)
 }
 
+type GatewayAwsPrivateNetworkInterfaceGateway struct {
+	// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+	Account *string `pulumi:"account"`
+	// AWS region of the Private Network Interface Gateway.
+	Region string `pulumi:"region"`
+	// AWS availability zone ids of the Private Network Interface Gateway.
+	Zones []string `pulumi:"zones"`
+}
+
+// GatewayAwsPrivateNetworkInterfaceGatewayInput is an input type that accepts GatewayAwsPrivateNetworkInterfaceGatewayArgs and GatewayAwsPrivateNetworkInterfaceGatewayOutput values.
+// You can construct a concrete instance of `GatewayAwsPrivateNetworkInterfaceGatewayInput` via:
+//
+//	GatewayAwsPrivateNetworkInterfaceGatewayArgs{...}
+type GatewayAwsPrivateNetworkInterfaceGatewayInput interface {
+	pulumi.Input
+
+	ToGatewayAwsPrivateNetworkInterfaceGatewayOutput() GatewayAwsPrivateNetworkInterfaceGatewayOutput
+	ToGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(context.Context) GatewayAwsPrivateNetworkInterfaceGatewayOutput
+}
+
+type GatewayAwsPrivateNetworkInterfaceGatewayArgs struct {
+	// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+	Account pulumi.StringPtrInput `pulumi:"account"`
+	// AWS region of the Private Network Interface Gateway.
+	Region pulumi.StringInput `pulumi:"region"`
+	// AWS availability zone ids of the Private Network Interface Gateway.
+	Zones pulumi.StringArrayInput `pulumi:"zones"`
+}
+
+func (GatewayAwsPrivateNetworkInterfaceGatewayArgs) ElementType() reflect.Type {
+	return reflect.TypeOf((*GatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (i GatewayAwsPrivateNetworkInterfaceGatewayArgs) ToGatewayAwsPrivateNetworkInterfaceGatewayOutput() GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return i.ToGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(context.Background())
+}
+
+func (i GatewayAwsPrivateNetworkInterfaceGatewayArgs) ToGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(ctx context.Context) GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GatewayAwsPrivateNetworkInterfaceGatewayOutput)
+}
+
+func (i GatewayAwsPrivateNetworkInterfaceGatewayArgs) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutput() GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return i.ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(context.Background())
+}
+
+func (i GatewayAwsPrivateNetworkInterfaceGatewayArgs) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(ctx context.Context) GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GatewayAwsPrivateNetworkInterfaceGatewayOutput).ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(ctx)
+}
+
+// GatewayAwsPrivateNetworkInterfaceGatewayPtrInput is an input type that accepts GatewayAwsPrivateNetworkInterfaceGatewayArgs, GatewayAwsPrivateNetworkInterfaceGatewayPtr and GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput values.
+// You can construct a concrete instance of `GatewayAwsPrivateNetworkInterfaceGatewayPtrInput` via:
+//
+//	        GatewayAwsPrivateNetworkInterfaceGatewayArgs{...}
+//
+//	or:
+//
+//	        nil
+type GatewayAwsPrivateNetworkInterfaceGatewayPtrInput interface {
+	pulumi.Input
+
+	ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutput() GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput
+	ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(context.Context) GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput
+}
+
+type gatewayAwsPrivateNetworkInterfaceGatewayPtrType GatewayAwsPrivateNetworkInterfaceGatewayArgs
+
+func GatewayAwsPrivateNetworkInterfaceGatewayPtr(v *GatewayAwsPrivateNetworkInterfaceGatewayArgs) GatewayAwsPrivateNetworkInterfaceGatewayPtrInput {
+	return (*gatewayAwsPrivateNetworkInterfaceGatewayPtrType)(v)
+}
+
+func (*gatewayAwsPrivateNetworkInterfaceGatewayPtrType) ElementType() reflect.Type {
+	return reflect.TypeOf((**GatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (i *gatewayAwsPrivateNetworkInterfaceGatewayPtrType) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutput() GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return i.ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(context.Background())
+}
+
+func (i *gatewayAwsPrivateNetworkInterfaceGatewayPtrType) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(ctx context.Context) GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput)
+}
+
+type GatewayAwsPrivateNetworkInterfaceGatewayOutput struct{ *pulumi.OutputState }
+
+func (GatewayAwsPrivateNetworkInterfaceGatewayOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((*GatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) ToGatewayAwsPrivateNetworkInterfaceGatewayOutput() GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return o
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) ToGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(ctx context.Context) GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return o
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutput() GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return o.ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(context.Background())
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(ctx context.Context) GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return o.ApplyTWithContext(ctx, func(_ context.Context, v GatewayAwsPrivateNetworkInterfaceGateway) *GatewayAwsPrivateNetworkInterfaceGateway {
+		return &v
+	}).(GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput)
+}
+
+// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) Account() pulumi.StringPtrOutput {
+	return o.ApplyT(func(v GatewayAwsPrivateNetworkInterfaceGateway) *string { return v.Account }).(pulumi.StringPtrOutput)
+}
+
+// AWS region of the Private Network Interface Gateway.
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) Region() pulumi.StringOutput {
+	return o.ApplyT(func(v GatewayAwsPrivateNetworkInterfaceGateway) string { return v.Region }).(pulumi.StringOutput)
+}
+
+// AWS availability zone ids of the Private Network Interface Gateway.
+func (o GatewayAwsPrivateNetworkInterfaceGatewayOutput) Zones() pulumi.StringArrayOutput {
+	return o.ApplyT(func(v GatewayAwsPrivateNetworkInterfaceGateway) []string { return v.Zones }).(pulumi.StringArrayOutput)
+}
+
+type GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput struct{ *pulumi.OutputState }
+
+func (GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((**GatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutput() GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return o
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) ToGatewayAwsPrivateNetworkInterfaceGatewayPtrOutputWithContext(ctx context.Context) GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput {
+	return o
+}
+
+func (o GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) Elem() GatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return o.ApplyT(func(v *GatewayAwsPrivateNetworkInterfaceGateway) GatewayAwsPrivateNetworkInterfaceGateway {
+		if v != nil {
+			return *v
+		}
+		var ret GatewayAwsPrivateNetworkInterfaceGateway
+		return ret
+	}).(GatewayAwsPrivateNetworkInterfaceGatewayOutput)
+}
+
+// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+func (o GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) Account() pulumi.StringPtrOutput {
+	return o.ApplyT(func(v *GatewayAwsPrivateNetworkInterfaceGateway) *string {
+		if v == nil {
+			return nil
+		}
+		return v.Account
+	}).(pulumi.StringPtrOutput)
+}
+
+// AWS region of the Private Network Interface Gateway.
+func (o GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) Region() pulumi.StringPtrOutput {
+	return o.ApplyT(func(v *GatewayAwsPrivateNetworkInterfaceGateway) *string {
+		if v == nil {
+			return nil
+		}
+		return &v.Region
+	}).(pulumi.StringPtrOutput)
+}
+
+// AWS availability zone ids of the Private Network Interface Gateway.
+func (o GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput) Zones() pulumi.StringArrayOutput {
+	return o.ApplyT(func(v *GatewayAwsPrivateNetworkInterfaceGateway) []string {
+		if v == nil {
+			return nil
+		}
+		return v.Zones
+	}).(pulumi.StringArrayOutput)
+}
+
 type GatewayAzureEgressPrivateLinkGateway struct {
 	// Azure region of the Gateway, for example, `eastus`.
 	Region string `pulumi:"region"`
@@ -20280,6 +20611,112 @@ func (o GetAccessPointAwsEgressPrivateLinkEndpointArrayOutput) Index(i pulumi.In
 	}).(GetAccessPointAwsEgressPrivateLinkEndpointOutput)
 }
 
+type GetAccessPointAwsPrivateNetworkInterface struct {
+	// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+	Account string `pulumi:"account"`
+	// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+	NetworkInterfaces []string `pulumi:"networkInterfaces"`
+}
+
+// GetAccessPointAwsPrivateNetworkInterfaceInput is an input type that accepts GetAccessPointAwsPrivateNetworkInterfaceArgs and GetAccessPointAwsPrivateNetworkInterfaceOutput values.
+// You can construct a concrete instance of `GetAccessPointAwsPrivateNetworkInterfaceInput` via:
+//
+//	GetAccessPointAwsPrivateNetworkInterfaceArgs{...}
+type GetAccessPointAwsPrivateNetworkInterfaceInput interface {
+	pulumi.Input
+
+	ToGetAccessPointAwsPrivateNetworkInterfaceOutput() GetAccessPointAwsPrivateNetworkInterfaceOutput
+	ToGetAccessPointAwsPrivateNetworkInterfaceOutputWithContext(context.Context) GetAccessPointAwsPrivateNetworkInterfaceOutput
+}
+
+type GetAccessPointAwsPrivateNetworkInterfaceArgs struct {
+	// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+	Account pulumi.StringInput `pulumi:"account"`
+	// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+	NetworkInterfaces pulumi.StringArrayInput `pulumi:"networkInterfaces"`
+}
+
+func (GetAccessPointAwsPrivateNetworkInterfaceArgs) ElementType() reflect.Type {
+	return reflect.TypeOf((*GetAccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (i GetAccessPointAwsPrivateNetworkInterfaceArgs) ToGetAccessPointAwsPrivateNetworkInterfaceOutput() GetAccessPointAwsPrivateNetworkInterfaceOutput {
+	return i.ToGetAccessPointAwsPrivateNetworkInterfaceOutputWithContext(context.Background())
+}
+
+func (i GetAccessPointAwsPrivateNetworkInterfaceArgs) ToGetAccessPointAwsPrivateNetworkInterfaceOutputWithContext(ctx context.Context) GetAccessPointAwsPrivateNetworkInterfaceOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GetAccessPointAwsPrivateNetworkInterfaceOutput)
+}
+
+// GetAccessPointAwsPrivateNetworkInterfaceArrayInput is an input type that accepts GetAccessPointAwsPrivateNetworkInterfaceArray and GetAccessPointAwsPrivateNetworkInterfaceArrayOutput values.
+// You can construct a concrete instance of `GetAccessPointAwsPrivateNetworkInterfaceArrayInput` via:
+//
+//	GetAccessPointAwsPrivateNetworkInterfaceArray{ GetAccessPointAwsPrivateNetworkInterfaceArgs{...} }
+type GetAccessPointAwsPrivateNetworkInterfaceArrayInput interface {
+	pulumi.Input
+
+	ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutput() GetAccessPointAwsPrivateNetworkInterfaceArrayOutput
+	ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutputWithContext(context.Context) GetAccessPointAwsPrivateNetworkInterfaceArrayOutput
+}
+
+type GetAccessPointAwsPrivateNetworkInterfaceArray []GetAccessPointAwsPrivateNetworkInterfaceInput
+
+func (GetAccessPointAwsPrivateNetworkInterfaceArray) ElementType() reflect.Type {
+	return reflect.TypeOf((*[]GetAccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (i GetAccessPointAwsPrivateNetworkInterfaceArray) ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutput() GetAccessPointAwsPrivateNetworkInterfaceArrayOutput {
+	return i.ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutputWithContext(context.Background())
+}
+
+func (i GetAccessPointAwsPrivateNetworkInterfaceArray) ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutputWithContext(ctx context.Context) GetAccessPointAwsPrivateNetworkInterfaceArrayOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GetAccessPointAwsPrivateNetworkInterfaceArrayOutput)
+}
+
+type GetAccessPointAwsPrivateNetworkInterfaceOutput struct{ *pulumi.OutputState }
+
+func (GetAccessPointAwsPrivateNetworkInterfaceOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((*GetAccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (o GetAccessPointAwsPrivateNetworkInterfaceOutput) ToGetAccessPointAwsPrivateNetworkInterfaceOutput() GetAccessPointAwsPrivateNetworkInterfaceOutput {
+	return o
+}
+
+func (o GetAccessPointAwsPrivateNetworkInterfaceOutput) ToGetAccessPointAwsPrivateNetworkInterfaceOutputWithContext(ctx context.Context) GetAccessPointAwsPrivateNetworkInterfaceOutput {
+	return o
+}
+
+// (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+func (o GetAccessPointAwsPrivateNetworkInterfaceOutput) Account() pulumi.StringOutput {
+	return o.ApplyT(func(v GetAccessPointAwsPrivateNetworkInterface) string { return v.Account }).(pulumi.StringOutput)
+}
+
+// (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+func (o GetAccessPointAwsPrivateNetworkInterfaceOutput) NetworkInterfaces() pulumi.StringArrayOutput {
+	return o.ApplyT(func(v GetAccessPointAwsPrivateNetworkInterface) []string { return v.NetworkInterfaces }).(pulumi.StringArrayOutput)
+}
+
+type GetAccessPointAwsPrivateNetworkInterfaceArrayOutput struct{ *pulumi.OutputState }
+
+func (GetAccessPointAwsPrivateNetworkInterfaceArrayOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((*[]GetAccessPointAwsPrivateNetworkInterface)(nil)).Elem()
+}
+
+func (o GetAccessPointAwsPrivateNetworkInterfaceArrayOutput) ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutput() GetAccessPointAwsPrivateNetworkInterfaceArrayOutput {
+	return o
+}
+
+func (o GetAccessPointAwsPrivateNetworkInterfaceArrayOutput) ToGetAccessPointAwsPrivateNetworkInterfaceArrayOutputWithContext(ctx context.Context) GetAccessPointAwsPrivateNetworkInterfaceArrayOutput {
+	return o
+}
+
+func (o GetAccessPointAwsPrivateNetworkInterfaceArrayOutput) Index(i pulumi.IntInput) GetAccessPointAwsPrivateNetworkInterfaceOutput {
+	return pulumi.All(o, i).ApplyT(func(vs []interface{}) GetAccessPointAwsPrivateNetworkInterface {
+		return vs[0].([]GetAccessPointAwsPrivateNetworkInterface)[vs[1].(int)]
+	}).(GetAccessPointAwsPrivateNetworkInterfaceOutput)
+}
+
 type GetAccessPointAzureEgressPrivateLinkEndpoint struct {
 	// (Required List of Strings) Domains of the Private Endpoint (if any) based off FQDNs in Azure custom DNS configs, which are required in your private DNS setup, for example: `["dbname.database.windows.net", "dbname-region.database.windows.net"]`.
 	PrivateEndpointCustomDnsConfigDomains []string `pulumi:"privateEndpointCustomDnsConfigDomains"`
@@ -22502,6 +22939,121 @@ func (o GetGatewayAwsPeeringGatewayArrayOutput) Index(i pulumi.IntInput) GetGate
 	}).(GetGatewayAwsPeeringGatewayOutput)
 }
 
+type GetGatewayAwsPrivateNetworkInterfaceGateway struct {
+	// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+	Account string `pulumi:"account"`
+	// (Required String) Azure region of the Peering Gateway.
+	Region string `pulumi:"region"`
+	// (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+	Zones []string `pulumi:"zones"`
+}
+
+// GetGatewayAwsPrivateNetworkInterfaceGatewayInput is an input type that accepts GetGatewayAwsPrivateNetworkInterfaceGatewayArgs and GetGatewayAwsPrivateNetworkInterfaceGatewayOutput values.
+// You can construct a concrete instance of `GetGatewayAwsPrivateNetworkInterfaceGatewayInput` via:
+//
+//	GetGatewayAwsPrivateNetworkInterfaceGatewayArgs{...}
+type GetGatewayAwsPrivateNetworkInterfaceGatewayInput interface {
+	pulumi.Input
+
+	ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutput() GetGatewayAwsPrivateNetworkInterfaceGatewayOutput
+	ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(context.Context) GetGatewayAwsPrivateNetworkInterfaceGatewayOutput
+}
+
+type GetGatewayAwsPrivateNetworkInterfaceGatewayArgs struct {
+	// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+	Account pulumi.StringInput `pulumi:"account"`
+	// (Required String) Azure region of the Peering Gateway.
+	Region pulumi.StringInput `pulumi:"region"`
+	// (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+	Zones pulumi.StringArrayInput `pulumi:"zones"`
+}
+
+func (GetGatewayAwsPrivateNetworkInterfaceGatewayArgs) ElementType() reflect.Type {
+	return reflect.TypeOf((*GetGatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (i GetGatewayAwsPrivateNetworkInterfaceGatewayArgs) ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutput() GetGatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return i.ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(context.Background())
+}
+
+func (i GetGatewayAwsPrivateNetworkInterfaceGatewayArgs) ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(ctx context.Context) GetGatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GetGatewayAwsPrivateNetworkInterfaceGatewayOutput)
+}
+
+// GetGatewayAwsPrivateNetworkInterfaceGatewayArrayInput is an input type that accepts GetGatewayAwsPrivateNetworkInterfaceGatewayArray and GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput values.
+// You can construct a concrete instance of `GetGatewayAwsPrivateNetworkInterfaceGatewayArrayInput` via:
+//
+//	GetGatewayAwsPrivateNetworkInterfaceGatewayArray{ GetGatewayAwsPrivateNetworkInterfaceGatewayArgs{...} }
+type GetGatewayAwsPrivateNetworkInterfaceGatewayArrayInput interface {
+	pulumi.Input
+
+	ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput() GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput
+	ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutputWithContext(context.Context) GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput
+}
+
+type GetGatewayAwsPrivateNetworkInterfaceGatewayArray []GetGatewayAwsPrivateNetworkInterfaceGatewayInput
+
+func (GetGatewayAwsPrivateNetworkInterfaceGatewayArray) ElementType() reflect.Type {
+	return reflect.TypeOf((*[]GetGatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (i GetGatewayAwsPrivateNetworkInterfaceGatewayArray) ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput() GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput {
+	return i.ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutputWithContext(context.Background())
+}
+
+func (i GetGatewayAwsPrivateNetworkInterfaceGatewayArray) ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutputWithContext(ctx context.Context) GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput {
+	return pulumi.ToOutputWithContext(ctx, i).(GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput)
+}
+
+type GetGatewayAwsPrivateNetworkInterfaceGatewayOutput struct{ *pulumi.OutputState }
+
+func (GetGatewayAwsPrivateNetworkInterfaceGatewayOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((*GetGatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayOutput) ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutput() GetGatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return o
+}
+
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayOutput) ToGetGatewayAwsPrivateNetworkInterfaceGatewayOutputWithContext(ctx context.Context) GetGatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return o
+}
+
+// (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayOutput) Account() pulumi.StringOutput {
+	return o.ApplyT(func(v GetGatewayAwsPrivateNetworkInterfaceGateway) string { return v.Account }).(pulumi.StringOutput)
+}
+
+// (Required String) Azure region of the Peering Gateway.
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayOutput) Region() pulumi.StringOutput {
+	return o.ApplyT(func(v GetGatewayAwsPrivateNetworkInterfaceGateway) string { return v.Region }).(pulumi.StringOutput)
+}
+
+// (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayOutput) Zones() pulumi.StringArrayOutput {
+	return o.ApplyT(func(v GetGatewayAwsPrivateNetworkInterfaceGateway) []string { return v.Zones }).(pulumi.StringArrayOutput)
+}
+
+type GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput struct{ *pulumi.OutputState }
+
+func (GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput) ElementType() reflect.Type {
+	return reflect.TypeOf((*[]GetGatewayAwsPrivateNetworkInterfaceGateway)(nil)).Elem()
+}
+
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput) ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput() GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput {
+	return o
+}
+
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput) ToGetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutputWithContext(ctx context.Context) GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput {
+	return o
+}
+
+func (o GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput) Index(i pulumi.IntInput) GetGatewayAwsPrivateNetworkInterfaceGatewayOutput {
+	return pulumi.All(o, i).ApplyT(func(vs []interface{}) GetGatewayAwsPrivateNetworkInterfaceGateway {
+		return vs[0].([]GetGatewayAwsPrivateNetworkInterfaceGateway)[vs[1].(int)]
+	}).(GetGatewayAwsPrivateNetworkInterfaceGatewayOutput)
+}
+
 type GetGatewayAzureEgressPrivateLinkGateway struct {
 	// (Required String) Azure region of the Peering Gateway.
 	Region string `pulumi:"region"`
@@ -33199,6 +33751,8 @@ func (o GetTransitGatewayAttachmentNetworkArrayOutput) Index(i pulumi.IntInput)
 func init() {
 	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointAwsEgressPrivateLinkEndpointInput)(nil)).Elem(), AccessPointAwsEgressPrivateLinkEndpointArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointAwsEgressPrivateLinkEndpointPtrInput)(nil)).Elem(), AccessPointAwsEgressPrivateLinkEndpointArgs{})
+	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointAwsPrivateNetworkInterfaceInput)(nil)).Elem(), AccessPointAwsPrivateNetworkInterfaceArgs{})
+	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointAwsPrivateNetworkInterfacePtrInput)(nil)).Elem(), AccessPointAwsPrivateNetworkInterfaceArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointAzureEgressPrivateLinkEndpointInput)(nil)).Elem(), AccessPointAzureEgressPrivateLinkEndpointArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointAzureEgressPrivateLinkEndpointPtrInput)(nil)).Elem(), AccessPointAzureEgressPrivateLinkEndpointArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*AccessPointEnvironmentInput)(nil)).Elem(), AccessPointEnvironmentArgs{})
@@ -33285,6 +33839,8 @@ func init() {
 	pulumi.RegisterInputType(reflect.TypeOf((*FlinkStatementPrincipalPtrInput)(nil)).Elem(), FlinkStatementPrincipalArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GatewayAwsEgressPrivateLinkGatewayInput)(nil)).Elem(), GatewayAwsEgressPrivateLinkGatewayArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GatewayAwsEgressPrivateLinkGatewayPtrInput)(nil)).Elem(), GatewayAwsEgressPrivateLinkGatewayArgs{})
+	pulumi.RegisterInputType(reflect.TypeOf((*GatewayAwsPrivateNetworkInterfaceGatewayInput)(nil)).Elem(), GatewayAwsPrivateNetworkInterfaceGatewayArgs{})
+	pulumi.RegisterInputType(reflect.TypeOf((*GatewayAwsPrivateNetworkInterfaceGatewayPtrInput)(nil)).Elem(), GatewayAwsPrivateNetworkInterfaceGatewayArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GatewayAzureEgressPrivateLinkGatewayInput)(nil)).Elem(), GatewayAzureEgressPrivateLinkGatewayArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GatewayAzureEgressPrivateLinkGatewayPtrInput)(nil)).Elem(), GatewayAzureEgressPrivateLinkGatewayArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GatewayEnvironmentInput)(nil)).Elem(), GatewayEnvironmentArgs{})
@@ -33475,6 +34031,8 @@ func init() {
 	pulumi.RegisterInputType(reflect.TypeOf((*TransitGatewayAttachmentNetworkPtrInput)(nil)).Elem(), TransitGatewayAttachmentNetworkArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointAwsEgressPrivateLinkEndpointInput)(nil)).Elem(), GetAccessPointAwsEgressPrivateLinkEndpointArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointAwsEgressPrivateLinkEndpointArrayInput)(nil)).Elem(), GetAccessPointAwsEgressPrivateLinkEndpointArray{})
+	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointAwsPrivateNetworkInterfaceInput)(nil)).Elem(), GetAccessPointAwsPrivateNetworkInterfaceArgs{})
+	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointAwsPrivateNetworkInterfaceArrayInput)(nil)).Elem(), GetAccessPointAwsPrivateNetworkInterfaceArray{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointAzureEgressPrivateLinkEndpointInput)(nil)).Elem(), GetAccessPointAzureEgressPrivateLinkEndpointArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointAzureEgressPrivateLinkEndpointArrayInput)(nil)).Elem(), GetAccessPointAzureEgressPrivateLinkEndpointArray{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetAccessPointEnvironmentInput)(nil)).Elem(), GetAccessPointEnvironmentArgs{})
@@ -33512,6 +34070,8 @@ func init() {
 	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAwsEgressPrivateLinkGatewayArrayInput)(nil)).Elem(), GetGatewayAwsEgressPrivateLinkGatewayArray{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAwsPeeringGatewayInput)(nil)).Elem(), GetGatewayAwsPeeringGatewayArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAwsPeeringGatewayArrayInput)(nil)).Elem(), GetGatewayAwsPeeringGatewayArray{})
+	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAwsPrivateNetworkInterfaceGatewayInput)(nil)).Elem(), GetGatewayAwsPrivateNetworkInterfaceGatewayArgs{})
+	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAwsPrivateNetworkInterfaceGatewayArrayInput)(nil)).Elem(), GetGatewayAwsPrivateNetworkInterfaceGatewayArray{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAzureEgressPrivateLinkGatewayInput)(nil)).Elem(), GetGatewayAzureEgressPrivateLinkGatewayArgs{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAzureEgressPrivateLinkGatewayArrayInput)(nil)).Elem(), GetGatewayAzureEgressPrivateLinkGatewayArray{})
 	pulumi.RegisterInputType(reflect.TypeOf((*GetGatewayAzurePeeringGatewayInput)(nil)).Elem(), GetGatewayAzurePeeringGatewayArgs{})
@@ -33687,6 +34247,8 @@ func init() {
 	pulumi.RegisterInputType(reflect.TypeOf((*GetTransitGatewayAttachmentNetworkArrayInput)(nil)).Elem(), GetTransitGatewayAttachmentNetworkArray{})
 	pulumi.RegisterOutputType(AccessPointAwsEgressPrivateLinkEndpointOutput{})
 	pulumi.RegisterOutputType(AccessPointAwsEgressPrivateLinkEndpointPtrOutput{})
+	pulumi.RegisterOutputType(AccessPointAwsPrivateNetworkInterfaceOutput{})
+	pulumi.RegisterOutputType(AccessPointAwsPrivateNetworkInterfacePtrOutput{})
 	pulumi.RegisterOutputType(AccessPointAzureEgressPrivateLinkEndpointOutput{})
 	pulumi.RegisterOutputType(AccessPointAzureEgressPrivateLinkEndpointPtrOutput{})
 	pulumi.RegisterOutputType(AccessPointEnvironmentOutput{})
@@ -33773,6 +34335,8 @@ func init() {
 	pulumi.RegisterOutputType(FlinkStatementPrincipalPtrOutput{})
 	pulumi.RegisterOutputType(GatewayAwsEgressPrivateLinkGatewayOutput{})
 	pulumi.RegisterOutputType(GatewayAwsEgressPrivateLinkGatewayPtrOutput{})
+	pulumi.RegisterOutputType(GatewayAwsPrivateNetworkInterfaceGatewayOutput{})
+	pulumi.RegisterOutputType(GatewayAwsPrivateNetworkInterfaceGatewayPtrOutput{})
 	pulumi.RegisterOutputType(GatewayAzureEgressPrivateLinkGatewayOutput{})
 	pulumi.RegisterOutputType(GatewayAzureEgressPrivateLinkGatewayPtrOutput{})
 	pulumi.RegisterOutputType(GatewayEnvironmentOutput{})
@@ -33963,6 +34527,8 @@ func init() {
 	pulumi.RegisterOutputType(TransitGatewayAttachmentNetworkPtrOutput{})
 	pulumi.RegisterOutputType(GetAccessPointAwsEgressPrivateLinkEndpointOutput{})
 	pulumi.RegisterOutputType(GetAccessPointAwsEgressPrivateLinkEndpointArrayOutput{})
+	pulumi.RegisterOutputType(GetAccessPointAwsPrivateNetworkInterfaceOutput{})
+	pulumi.RegisterOutputType(GetAccessPointAwsPrivateNetworkInterfaceArrayOutput{})
 	pulumi.RegisterOutputType(GetAccessPointAzureEgressPrivateLinkEndpointOutput{})
 	pulumi.RegisterOutputType(GetAccessPointAzureEgressPrivateLinkEndpointArrayOutput{})
 	pulumi.RegisterOutputType(GetAccessPointEnvironmentOutput{})
@@ -34000,6 +34566,8 @@ func init() {
 	pulumi.RegisterOutputType(GetGatewayAwsEgressPrivateLinkGatewayArrayOutput{})
 	pulumi.RegisterOutputType(GetGatewayAwsPeeringGatewayOutput{})
 	pulumi.RegisterOutputType(GetGatewayAwsPeeringGatewayArrayOutput{})
+	pulumi.RegisterOutputType(GetGatewayAwsPrivateNetworkInterfaceGatewayOutput{})
+	pulumi.RegisterOutputType(GetGatewayAwsPrivateNetworkInterfaceGatewayArrayOutput{})
 	pulumi.RegisterOutputType(GetGatewayAzureEgressPrivateLinkGatewayOutput{})
 	pulumi.RegisterOutputType(GetGatewayAzureEgressPrivateLinkGatewayArrayOutput{})
 	pulumi.RegisterOutputType(GetGatewayAzurePeeringGatewayOutput{})
diff --git a/sdk/go/confluentcloud/schemaRegistryClusterConfig.go b/sdk/go/confluentcloud/schemaRegistryClusterConfig.go
index 92e0e94d..55522252 100644
--- a/sdk/go/confluentcloud/schemaRegistryClusterConfig.go
+++ b/sdk/go/confluentcloud/schemaRegistryClusterConfig.go
@@ -63,6 +63,7 @@ import (
 //		pulumi.Run(func(ctx *pulumi.Context) error {
 //			_, err := confluentcloud.NewSchemaRegistryClusterConfig(ctx, "example", &confluentcloud.SchemaRegistryClusterConfigArgs{
 //				CompatibilityLevel: pulumi.String("FULL"),
+//				CompatibilityGroup: pulumi.String("abc.cg.version"),
 //			})
 //			if err != nil {
 //				return err
@@ -91,6 +92,8 @@ import (
 type SchemaRegistryClusterConfig struct {
 	pulumi.CustomResourceState
 
+	// The global Schema Registry compatibility group.
+	CompatibilityGroup pulumi.StringOutput `pulumi:"compatibilityGroup"`
 	// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel pulumi.StringOutput `pulumi:"compatibilityLevel"`
 	// The Cluster API Credentials.
@@ -137,6 +140,8 @@ func GetSchemaRegistryClusterConfig(ctx *pulumi.Context,
 
 // Input properties used for looking up and filtering SchemaRegistryClusterConfig resources.
 type schemaRegistryClusterConfigState struct {
+	// The global Schema Registry compatibility group.
+	CompatibilityGroup *string `pulumi:"compatibilityGroup"`
 	// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel *string `pulumi:"compatibilityLevel"`
 	// The Cluster API Credentials.
@@ -147,6 +152,8 @@ type schemaRegistryClusterConfigState struct {
 }
 
 type SchemaRegistryClusterConfigState struct {
+	// The global Schema Registry compatibility group.
+	CompatibilityGroup pulumi.StringPtrInput
 	// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel pulumi.StringPtrInput
 	// The Cluster API Credentials.
@@ -161,6 +168,8 @@ func (SchemaRegistryClusterConfigState) ElementType() reflect.Type {
 }
 
 type schemaRegistryClusterConfigArgs struct {
+	// The global Schema Registry compatibility group.
+	CompatibilityGroup *string `pulumi:"compatibilityGroup"`
 	// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel *string `pulumi:"compatibilityLevel"`
 	// The Cluster API Credentials.
@@ -172,6 +181,8 @@ type schemaRegistryClusterConfigArgs struct {
 
 // The set of arguments for constructing a SchemaRegistryClusterConfig resource.
 type SchemaRegistryClusterConfigArgs struct {
+	// The global Schema Registry compatibility group.
+	CompatibilityGroup pulumi.StringPtrInput
 	// The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel pulumi.StringPtrInput
 	// The Cluster API Credentials.
@@ -268,6 +279,11 @@ func (o SchemaRegistryClusterConfigOutput) ToSchemaRegistryClusterConfigOutputWi
 	return o
 }
 
+// The global Schema Registry compatibility group.
+func (o SchemaRegistryClusterConfigOutput) CompatibilityGroup() pulumi.StringOutput {
+	return o.ApplyT(func(v *SchemaRegistryClusterConfig) pulumi.StringOutput { return v.CompatibilityGroup }).(pulumi.StringOutput)
+}
+
 // The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 func (o SchemaRegistryClusterConfigOutput) CompatibilityLevel() pulumi.StringOutput {
 	return o.ApplyT(func(v *SchemaRegistryClusterConfig) pulumi.StringOutput { return v.CompatibilityLevel }).(pulumi.StringOutput)
diff --git a/sdk/go/confluentcloud/subjectConfig.go b/sdk/go/confluentcloud/subjectConfig.go
index a024aac2..19d9cb1e 100644
--- a/sdk/go/confluentcloud/subjectConfig.go
+++ b/sdk/go/confluentcloud/subjectConfig.go
@@ -35,6 +35,7 @@ import (
 //				RestEndpoint:       pulumi.Any(essentialsConfluentSchemaRegistryCluster.RestEndpoint),
 //				SubjectName:        pulumi.String("proto-purchase-value"),
 //				CompatibilityLevel: pulumi.String("BACKWARD"),
+//				CompatibilityGroup: pulumi.String("abc.cg.version"),
 //				Credentials: &confluentcloud.SubjectConfigCredentialsArgs{
 //					Key:    pulumi.String("<Schema Registry API Key for data.confluent_schema_registry_cluster.essentials>"),
 //					Secret: pulumi.String("<Schema Registry API Secret for data.confluent_schema_registry_cluster.essentials>"),
@@ -66,6 +67,7 @@ import (
 //			_, err := confluentcloud.NewSubjectConfig(ctx, "example", &confluentcloud.SubjectConfigArgs{
 //				SubjectName:        pulumi.String("proto-purchase-value"),
 //				CompatibilityLevel: pulumi.String("BACKWARD"),
+//				CompatibilityGroup: pulumi.String("abc.cg.version"),
 //			})
 //			if err != nil {
 //				return err
@@ -94,6 +96,8 @@ import (
 type SubjectConfig struct {
 	pulumi.CustomResourceState
 
+	// The Compatibility Group of the specified subject.
+	CompatibilityGroup pulumi.StringOutput `pulumi:"compatibilityGroup"`
 	// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel pulumi.StringOutput `pulumi:"compatibilityLevel"`
 	// The Cluster API Credentials.
@@ -145,6 +149,8 @@ func GetSubjectConfig(ctx *pulumi.Context,
 
 // Input properties used for looking up and filtering SubjectConfig resources.
 type subjectConfigState struct {
+	// The Compatibility Group of the specified subject.
+	CompatibilityGroup *string `pulumi:"compatibilityGroup"`
 	// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel *string `pulumi:"compatibilityLevel"`
 	// The Cluster API Credentials.
@@ -157,6 +163,8 @@ type subjectConfigState struct {
 }
 
 type SubjectConfigState struct {
+	// The Compatibility Group of the specified subject.
+	CompatibilityGroup pulumi.StringPtrInput
 	// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel pulumi.StringPtrInput
 	// The Cluster API Credentials.
@@ -173,6 +181,8 @@ func (SubjectConfigState) ElementType() reflect.Type {
 }
 
 type subjectConfigArgs struct {
+	// The Compatibility Group of the specified subject.
+	CompatibilityGroup *string `pulumi:"compatibilityGroup"`
 	// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel *string `pulumi:"compatibilityLevel"`
 	// The Cluster API Credentials.
@@ -186,6 +196,8 @@ type subjectConfigArgs struct {
 
 // The set of arguments for constructing a SubjectConfig resource.
 type SubjectConfigArgs struct {
+	// The Compatibility Group of the specified subject.
+	CompatibilityGroup pulumi.StringPtrInput
 	// The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 	CompatibilityLevel pulumi.StringPtrInput
 	// The Cluster API Credentials.
@@ -284,6 +296,11 @@ func (o SubjectConfigOutput) ToSubjectConfigOutputWithContext(ctx context.Contex
 	return o
 }
 
+// The Compatibility Group of the specified subject.
+func (o SubjectConfigOutput) CompatibilityGroup() pulumi.StringOutput {
+	return o.ApplyT(func(v *SubjectConfig) pulumi.StringOutput { return v.CompatibilityGroup }).(pulumi.StringOutput)
+}
+
 // The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
 func (o SubjectConfigOutput) CompatibilityLevel() pulumi.StringOutput {
 	return o.ApplyT(func(v *SubjectConfig) pulumi.StringOutput { return v.CompatibilityLevel }).(pulumi.StringOutput)
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPoint.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPoint.java
index 7f3e15f5..f2289ea2 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPoint.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPoint.java
@@ -7,6 +7,7 @@
 import com.pulumi.confluentcloud.Utilities;
 import com.pulumi.confluentcloud.inputs.AccessPointState;
 import com.pulumi.confluentcloud.outputs.AccessPointAwsEgressPrivateLinkEndpoint;
+import com.pulumi.confluentcloud.outputs.AccessPointAwsPrivateNetworkInterface;
 import com.pulumi.confluentcloud.outputs.AccessPointAzureEgressPrivateLinkEndpoint;
 import com.pulumi.confluentcloud.outputs.AccessPointEnvironment;
 import com.pulumi.confluentcloud.outputs.AccessPointGateway;
@@ -122,6 +123,20 @@ public class AccessPoint extends com.pulumi.resources.CustomResource {
     public Output<Optional<AccessPointAwsEgressPrivateLinkEndpoint>> awsEgressPrivateLinkEndpoint() {
         return Codegen.optional(this.awsEgressPrivateLinkEndpoint);
     }
+    /**
+     * (Optional Configuration Block) supports the following:
+     * 
+     */
+    @Export(name="awsPrivateNetworkInterface", refs={AccessPointAwsPrivateNetworkInterface.class}, tree="[0]")
+    private Output</* @Nullable */ AccessPointAwsPrivateNetworkInterface> awsPrivateNetworkInterface;
+
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public Output<Optional<AccessPointAwsPrivateNetworkInterface>> awsPrivateNetworkInterface() {
+        return Codegen.optional(this.awsPrivateNetworkInterface);
+    }
     /**
      * (Optional Configuration Block) supports the following:
      * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPointArgs.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPointArgs.java
index 1c85ac93..a61d95be 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPointArgs.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/AccessPointArgs.java
@@ -4,6 +4,7 @@
 package com.pulumi.confluentcloud;
 
 import com.pulumi.confluentcloud.inputs.AccessPointAwsEgressPrivateLinkEndpointArgs;
+import com.pulumi.confluentcloud.inputs.AccessPointAwsPrivateNetworkInterfaceArgs;
 import com.pulumi.confluentcloud.inputs.AccessPointAzureEgressPrivateLinkEndpointArgs;
 import com.pulumi.confluentcloud.inputs.AccessPointEnvironmentArgs;
 import com.pulumi.confluentcloud.inputs.AccessPointGatewayArgs;
@@ -35,6 +36,21 @@ public Optional<Output<AccessPointAwsEgressPrivateLinkEndpointArgs>> awsEgressPr
         return Optional.ofNullable(this.awsEgressPrivateLinkEndpoint);
     }
 
+    /**
+     * (Optional Configuration Block) supports the following:
+     * 
+     */
+    @Import(name="awsPrivateNetworkInterface")
+    private @Nullable Output<AccessPointAwsPrivateNetworkInterfaceArgs> awsPrivateNetworkInterface;
+
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public Optional<Output<AccessPointAwsPrivateNetworkInterfaceArgs>> awsPrivateNetworkInterface() {
+        return Optional.ofNullable(this.awsPrivateNetworkInterface);
+    }
+
     /**
      * (Optional Configuration Block) supports the following:
      * 
@@ -91,6 +107,7 @@ private AccessPointArgs() {}
 
     private AccessPointArgs(AccessPointArgs $) {
         this.awsEgressPrivateLinkEndpoint = $.awsEgressPrivateLinkEndpoint;
+        this.awsPrivateNetworkInterface = $.awsPrivateNetworkInterface;
         this.azureEgressPrivateLinkEndpoint = $.azureEgressPrivateLinkEndpoint;
         this.displayName = $.displayName;
         this.environment = $.environment;
@@ -136,6 +153,27 @@ public Builder awsEgressPrivateLinkEndpoint(AccessPointAwsEgressPrivateLinkEndpo
             return awsEgressPrivateLinkEndpoint(Output.of(awsEgressPrivateLinkEndpoint));
         }
 
+        /**
+         * @param awsPrivateNetworkInterface (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterface(@Nullable Output<AccessPointAwsPrivateNetworkInterfaceArgs> awsPrivateNetworkInterface) {
+            $.awsPrivateNetworkInterface = awsPrivateNetworkInterface;
+            return this;
+        }
+
+        /**
+         * @param awsPrivateNetworkInterface (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterface(AccessPointAwsPrivateNetworkInterfaceArgs awsPrivateNetworkInterface) {
+            return awsPrivateNetworkInterface(Output.of(awsPrivateNetworkInterface));
+        }
+
         /**
          * @param azureEgressPrivateLinkEndpoint (Optional Configuration Block) supports the following:
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificateAuthority.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificateAuthority.java
index 93879b44..3684aebd 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificateAuthority.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificateAuthority.java
@@ -16,7 +16,7 @@
 import javax.annotation.Nullable;
 
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  * 
  * `confluentcloud.CertificateAuthority` provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.
  * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificatePool.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificatePool.java
index c1fc20a3..bfacdea0 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificatePool.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/CertificatePool.java
@@ -15,7 +15,7 @@
 import javax.annotation.Nullable;
 
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  * 
  * `confluentcloud.CertificatePool` provides a Certificate Pool resource that enables creating, editing, and deleting Certificate Pools on Confluent Cloud.
  * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/ConfluentcloudFunctions.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/ConfluentcloudFunctions.java
index 27118397..0809ef7f 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/ConfluentcloudFunctions.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/ConfluentcloudFunctions.java
@@ -1271,7 +1271,7 @@ public static CompletableFuture<GetByokKeyResult> getByokKeyPlain(GetByokKeyPlai
         return Deployment.getInstance().invokeAsync("confluentcloud:index/getByokKey:getByokKey", TypeShape.of(GetByokKeyResult.class), args, Utilities.withVersion(options));
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
      * 
@@ -1316,7 +1316,7 @@ public static Output<GetCertificateAuthorityResult> getCertificateAuthority(GetC
         return getCertificateAuthority(args, InvokeOptions.Empty);
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
      * 
@@ -1361,7 +1361,7 @@ public static CompletableFuture<GetCertificateAuthorityResult> getCertificateAut
         return getCertificateAuthorityPlain(args, InvokeOptions.Empty);
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
      * 
@@ -1406,7 +1406,7 @@ public static Output<GetCertificateAuthorityResult> getCertificateAuthority(GetC
         return Deployment.getInstance().invoke("confluentcloud:index/getCertificateAuthority:getCertificateAuthority", TypeShape.of(GetCertificateAuthorityResult.class), args, Utilities.withVersion(options));
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
      * 
@@ -1451,7 +1451,7 @@ public static CompletableFuture<GetCertificateAuthorityResult> getCertificateAut
         return Deployment.getInstance().invokeAsync("confluentcloud:index/getCertificateAuthority:getCertificateAuthority", TypeShape.of(GetCertificateAuthorityResult.class), args, Utilities.withVersion(options));
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificatePool` describes a Certificate Pool data source.
      * 
@@ -1500,7 +1500,7 @@ public static Output<GetCertificatePoolResult> getCertificatePool(GetCertificate
         return getCertificatePool(args, InvokeOptions.Empty);
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificatePool` describes a Certificate Pool data source.
      * 
@@ -1549,7 +1549,7 @@ public static CompletableFuture<GetCertificatePoolResult> getCertificatePoolPlai
         return getCertificatePoolPlain(args, InvokeOptions.Empty);
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificatePool` describes a Certificate Pool data source.
      * 
@@ -1598,7 +1598,7 @@ public static Output<GetCertificatePoolResult> getCertificatePool(GetCertificate
         return Deployment.getInstance().invoke("confluentcloud:index/getCertificatePool:getCertificatePool", TypeShape.of(GetCertificatePoolResult.class), args, Utilities.withVersion(options));
     }
     /**
-     * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+     * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
      * 
      * `confluentcloud.CertificatePool` describes a Certificate Pool data source.
      * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/Connector.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/Connector.java
index c5832288..945042a1 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/Connector.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/Connector.java
@@ -47,6 +47,7 @@
  *     }
  * 
  *     public static void stack(Context ctx) {
+ *         // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/managed-datagen-source-connector
  *         var source = new Connector("source", ConnectorArgs.builder()
  *             .environment(ConnectorEnvironmentArgs.builder()
  *                 .id(staging.id())
@@ -106,6 +107,7 @@
  *     }
  * 
  *     public static void stack(Context ctx) {
+ *         // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector
  *         var sink = new Connector("sink", ConnectorArgs.builder()
  *             .environment(ConnectorEnvironmentArgs.builder()
  *                 .id(staging.id())
@@ -149,6 +151,78 @@
  * </pre>
  * &lt;!--End PulumiCodeChooser --&gt;
  * 
+ * ### Example Managed [Amazon S3 Sink Connector](https://docs.confluent.io/cloud/current/connectors/cc-s3-sink.html) that uses a service account to communicate with your Kafka cluster and IAM Roles for AWS authentication
+ * &lt;!--Start PulumiCodeChooser --&gt;
+ * <pre>
+ * {@code
+ * package generated_program;
+ * 
+ * import com.pulumi.Context;
+ * import com.pulumi.Pulumi;
+ * import com.pulumi.core.Output;
+ * import com.pulumi.confluentcloud.Connector;
+ * import com.pulumi.confluentcloud.ConnectorArgs;
+ * import com.pulumi.confluentcloud.inputs.ConnectorEnvironmentArgs;
+ * import com.pulumi.confluentcloud.inputs.ConnectorKafkaClusterArgs;
+ * import com.pulumi.resources.CustomResourceOptions;
+ * import java.util.List;
+ * import java.util.ArrayList;
+ * import java.util.Map;
+ * import java.io.File;
+ * import java.nio.file.Files;
+ * import java.nio.file.Paths;
+ * 
+ * public class App {
+ *     public static void main(String[] args) {
+ *         Pulumi.run(App::stack);
+ *     }
+ * 
+ *     public static void stack(Context ctx) {
+ *         // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector-assume-role
+ *         var sink = new Connector("sink", ConnectorArgs.builder()
+ *             .environment(ConnectorEnvironmentArgs.builder()
+ *                 .id(staging.id())
+ *                 .build())
+ *             .kafkaCluster(ConnectorKafkaClusterArgs.builder()
+ *                 .id(basic.id())
+ *                 .build())
+ *             .configSensitive()
+ *             .configNonsensitive(Map.ofEntries(
+ *                 Map.entry("topics", orders.topicName()),
+ *                 Map.entry("input.data.format", "JSON"),
+ *                 Map.entry("connector.class", "S3_SINK"),
+ *                 Map.entry("name", "S3_SINKConnector_0"),
+ *                 Map.entry("kafka.auth.mode", "SERVICE_ACCOUNT"),
+ *                 Map.entry("kafka.service.account.id", app_connector.id()),
+ *                 Map.entry("s3.bucket.name", "<s3-bucket-name>"),
+ *                 Map.entry("output.data.format", "JSON"),
+ *                 Map.entry("time.interval", "DAILY"),
+ *                 Map.entry("flush.size", "1000"),
+ *                 Map.entry("tasks.max", "1"),
+ *                 Map.entry("authentication.method", "IAM Roles"),
+ *                 Map.entry("provider.integration.id", main.id())
+ *             ))
+ *             .build(), CustomResourceOptions.builder()
+ *                 .dependsOn(                
+ *                     app_connector_describe_on_cluster,
+ *                     app_connector_read_on_target_topic,
+ *                     app_connector_create_on_dlq_lcc_topics,
+ *                     app_connector_write_on_dlq_lcc_topics,
+ *                     app_connector_create_on_success_lcc_topics,
+ *                     app_connector_write_on_success_lcc_topics,
+ *                     app_connector_create_on_error_lcc_topics,
+ *                     app_connector_write_on_error_lcc_topics,
+ *                     app_connector_read_on_connect_lcc_group,
+ *                     main,
+ *                     s3AccessRole)
+ *                 .build());
+ * 
+ *     }
+ * }
+ * }
+ * </pre>
+ * &lt;!--End PulumiCodeChooser --&gt;
+ * 
  * ### Example Managed [Amazon DynamoDB Connector](https://docs.confluent.io/cloud/current/connectors/cc-amazon-dynamo-db-sink.html) that uses a service account to communicate with your Kafka cluster
  * &lt;!--Start PulumiCodeChooser --&gt;
  * <pre>
@@ -176,6 +250,7 @@
  *     }
  * 
  *     public static void stack(Context ctx) {
+ *         // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/dynamo-db-sink-connector
  *         var sink = new Connector("sink", ConnectorArgs.builder()
  *             .environment(ConnectorEnvironmentArgs.builder()
  *                 .id(staging.id())
@@ -218,7 +293,6 @@
  * &lt;!--End PulumiCodeChooser --&gt;
  * 
  * ### Example Custom [Datagen Source Connector](https://www.confluent.io/hub/confluentinc/kafka-connect-datagen) that uses a Kafka API Key to communicate with your Kafka cluster
- * 
  * &lt;!--Start PulumiCodeChooser --&gt;
  * <pre>
  * {@code
@@ -245,6 +319,7 @@
  *     }
  * 
  *     public static void stack(Context ctx) {
+ *         // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/custom-datagen-source-connector
  *         var source = new Connector("source", ConnectorArgs.builder()
  *             .environment(ConnectorEnvironmentArgs.builder()
  *                 .id(staging.id())
@@ -279,13 +354,11 @@
  * </pre>
  * &lt;!--End PulumiCodeChooser --&gt;
  * 
- * &gt; **Note:** Custom connectors are available in **Preview** for early adopters. Preview features are introduced to gather customer feedback. This feature should be used only for evaluation and non-production testing purposes or to provide feedback to Confluent, particularly as it becomes more widely available in follow-on editions.\
- * **Preview** features are intended for evaluation use in development and testing environments only, and not for production use. The warranty, SLA, and Support Services provisions of your agreement with Confluent do not apply to Preview features. Preview features are considered to be a Proof of Concept as defined in the Confluent Cloud Terms of Service. Confluent may discontinue providing preview releases of the Preview features at any time in Confluent’s sole discretion.
- * 
  * ## Getting Started
  * 
  * The following end-to-end examples might help to get started with `confluentcloud.Connector` resource:
  * * `s3-sink-connector`
+ * * `s3-sink-connector-assume-role`
  * * `snowflake-sink-connector`
  * * `managed-datagen-source-connector`
  * * `elasticsearch-sink-connector`
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/FlinkArtifact.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/FlinkArtifact.java
index 4105a7d3..8dad9c76 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/FlinkArtifact.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/FlinkArtifact.java
@@ -69,14 +69,14 @@
  * 
  * ## Import
  * 
- * You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `&lt;region&gt;/&lt;cloud&gt;/&lt;Flink Artifact ID&gt;`. The following example shows how to import a Flink Artifact:
+ * You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `&lt;Environment ID&gt;/&lt;region&gt;/&lt;cloud&gt;/&lt;Flink Artifact ID&gt;`. The following example shows how to import a Flink Artifact:
  * 
  * $ export CONFLUENT_CLOUD_API_KEY=&#34;&lt;cloud_api_key&gt;&#34;
  * 
  * $ export CONFLUENT_CLOUD_API_SECRET=&#34;&lt;cloud_api_secret&gt;&#34;
  * 
  * ```sh
- * $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main us-east-1/aws/fa-123
+ * $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main env-abc123/us-east-1/aws/fa-123
  * ```
  * 
  * !&gt; **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/Gateway.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/Gateway.java
index 2517d2a5..a5642733 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/Gateway.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/Gateway.java
@@ -7,6 +7,7 @@
 import com.pulumi.confluentcloud.Utilities;
 import com.pulumi.confluentcloud.inputs.GatewayState;
 import com.pulumi.confluentcloud.outputs.GatewayAwsEgressPrivateLinkGateway;
+import com.pulumi.confluentcloud.outputs.GatewayAwsPrivateNetworkInterfaceGateway;
 import com.pulumi.confluentcloud.outputs.GatewayAzureEgressPrivateLinkGateway;
 import com.pulumi.confluentcloud.outputs.GatewayEnvironment;
 import com.pulumi.core.Output;
@@ -101,6 +102,20 @@ public class Gateway extends com.pulumi.resources.CustomResource {
     public Output<GatewayAwsEgressPrivateLinkGateway> awsEgressPrivateLinkGateway() {
         return this.awsEgressPrivateLinkGateway;
     }
+    /**
+     * (Optional Configuration Block) supports the following:
+     * 
+     */
+    @Export(name="awsPrivateNetworkInterfaceGateway", refs={GatewayAwsPrivateNetworkInterfaceGateway.class}, tree="[0]")
+    private Output<GatewayAwsPrivateNetworkInterfaceGateway> awsPrivateNetworkInterfaceGateway;
+
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public Output<GatewayAwsPrivateNetworkInterfaceGateway> awsPrivateNetworkInterfaceGateway() {
+        return this.awsPrivateNetworkInterfaceGateway;
+    }
     /**
      * (Optional Configuration Block) supports the following:
      * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/GatewayArgs.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/GatewayArgs.java
index 66fe10f3..152ac808 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/GatewayArgs.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/GatewayArgs.java
@@ -4,6 +4,7 @@
 package com.pulumi.confluentcloud;
 
 import com.pulumi.confluentcloud.inputs.GatewayAwsEgressPrivateLinkGatewayArgs;
+import com.pulumi.confluentcloud.inputs.GatewayAwsPrivateNetworkInterfaceGatewayArgs;
 import com.pulumi.confluentcloud.inputs.GatewayAzureEgressPrivateLinkGatewayArgs;
 import com.pulumi.confluentcloud.inputs.GatewayEnvironmentArgs;
 import com.pulumi.core.Output;
@@ -34,6 +35,21 @@ public Optional<Output<GatewayAwsEgressPrivateLinkGatewayArgs>> awsEgressPrivate
         return Optional.ofNullable(this.awsEgressPrivateLinkGateway);
     }
 
+    /**
+     * (Optional Configuration Block) supports the following:
+     * 
+     */
+    @Import(name="awsPrivateNetworkInterfaceGateway")
+    private @Nullable Output<GatewayAwsPrivateNetworkInterfaceGatewayArgs> awsPrivateNetworkInterfaceGateway;
+
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public Optional<Output<GatewayAwsPrivateNetworkInterfaceGatewayArgs>> awsPrivateNetworkInterfaceGateway() {
+        return Optional.ofNullable(this.awsPrivateNetworkInterfaceGateway);
+    }
+
     /**
      * (Optional Configuration Block) supports the following:
      * 
@@ -83,6 +99,7 @@ private GatewayArgs() {}
 
     private GatewayArgs(GatewayArgs $) {
         this.awsEgressPrivateLinkGateway = $.awsEgressPrivateLinkGateway;
+        this.awsPrivateNetworkInterfaceGateway = $.awsPrivateNetworkInterfaceGateway;
         this.azureEgressPrivateLinkGateway = $.azureEgressPrivateLinkGateway;
         this.displayName = $.displayName;
         this.environment = $.environment;
@@ -127,6 +144,27 @@ public Builder awsEgressPrivateLinkGateway(GatewayAwsEgressPrivateLinkGatewayArg
             return awsEgressPrivateLinkGateway(Output.of(awsEgressPrivateLinkGateway));
         }
 
+        /**
+         * @param awsPrivateNetworkInterfaceGateway (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterfaceGateway(@Nullable Output<GatewayAwsPrivateNetworkInterfaceGatewayArgs> awsPrivateNetworkInterfaceGateway) {
+            $.awsPrivateNetworkInterfaceGateway = awsPrivateNetworkInterfaceGateway;
+            return this;
+        }
+
+        /**
+         * @param awsPrivateNetworkInterfaceGateway (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterfaceGateway(GatewayAwsPrivateNetworkInterfaceGatewayArgs awsPrivateNetworkInterfaceGateway) {
+            return awsPrivateNetworkInterfaceGateway(Output.of(awsPrivateNetworkInterfaceGateway));
+        }
+
         /**
          * @param azureEgressPrivateLinkGateway (Optional Configuration Block) supports the following:
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfig.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfig.java
index eda0cff5..2633812f 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfig.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfig.java
@@ -92,6 +92,7 @@
  *     public static void stack(Context ctx) {
  *         var example = new SchemaRegistryClusterConfig("example", SchemaRegistryClusterConfigArgs.builder()
  *             .compatibilityLevel("FULL")
+ *             .compatibilityGroup("abc.cg.version")
  *             .build());
  * 
  *     }
@@ -119,6 +120,20 @@
  */
 @ResourceType(type="confluentcloud:index/schemaRegistryClusterConfig:SchemaRegistryClusterConfig")
 public class SchemaRegistryClusterConfig extends com.pulumi.resources.CustomResource {
+    /**
+     * The global Schema Registry compatibility group.
+     * 
+     */
+    @Export(name="compatibilityGroup", refs={String.class}, tree="[0]")
+    private Output<String> compatibilityGroup;
+
+    /**
+     * @return The global Schema Registry compatibility group.
+     * 
+     */
+    public Output<String> compatibilityGroup() {
+        return this.compatibilityGroup;
+    }
     /**
      * The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfigArgs.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfigArgs.java
index 3527ec19..ec6df53b 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfigArgs.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/SchemaRegistryClusterConfigArgs.java
@@ -17,6 +17,21 @@ public final class SchemaRegistryClusterConfigArgs extends com.pulumi.resources.
 
     public static final SchemaRegistryClusterConfigArgs Empty = new SchemaRegistryClusterConfigArgs();
 
+    /**
+     * The global Schema Registry compatibility group.
+     * 
+     */
+    @Import(name="compatibilityGroup")
+    private @Nullable Output<String> compatibilityGroup;
+
+    /**
+     * @return The global Schema Registry compatibility group.
+     * 
+     */
+    public Optional<Output<String>> compatibilityGroup() {
+        return Optional.ofNullable(this.compatibilityGroup);
+    }
+
     /**
      * The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -72,6 +87,7 @@ public Optional<Output<SchemaRegistryClusterConfigSchemaRegistryClusterArgs>> sc
     private SchemaRegistryClusterConfigArgs() {}
 
     private SchemaRegistryClusterConfigArgs(SchemaRegistryClusterConfigArgs $) {
+        this.compatibilityGroup = $.compatibilityGroup;
         this.compatibilityLevel = $.compatibilityLevel;
         this.credentials = $.credentials;
         this.restEndpoint = $.restEndpoint;
@@ -96,6 +112,27 @@ public Builder(SchemaRegistryClusterConfigArgs defaults) {
             $ = new SchemaRegistryClusterConfigArgs(Objects.requireNonNull(defaults));
         }
 
+        /**
+         * @param compatibilityGroup The global Schema Registry compatibility group.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(@Nullable Output<String> compatibilityGroup) {
+            $.compatibilityGroup = compatibilityGroup;
+            return this;
+        }
+
+        /**
+         * @param compatibilityGroup The global Schema Registry compatibility group.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(String compatibilityGroup) {
+            return compatibilityGroup(Output.of(compatibilityGroup));
+        }
+
         /**
          * @param compatibilityLevel The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfig.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfig.java
index e4566b61..07a68917 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfig.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfig.java
@@ -54,6 +54,7 @@
  *             .restEndpoint(essentialsConfluentSchemaRegistryCluster.restEndpoint())
  *             .subjectName("proto-purchase-value")
  *             .compatibilityLevel("BACKWARD")
+ *             .compatibilityGroup("abc.cg.version")
  *             .credentials(SubjectConfigCredentialsArgs.builder()
  *                 .key("<Schema Registry API Key for data.confluent_schema_registry_cluster.essentials>")
  *                 .secret("<Schema Registry API Secret for data.confluent_schema_registry_cluster.essentials>")
@@ -94,6 +95,7 @@
  *         var example = new SubjectConfig("example", SubjectConfigArgs.builder()
  *             .subjectName("proto-purchase-value")
  *             .compatibilityLevel("BACKWARD")
+ *             .compatibilityGroup("abc.cg.version")
  *             .build());
  * 
  *     }
@@ -121,6 +123,20 @@
  */
 @ResourceType(type="confluentcloud:index/subjectConfig:SubjectConfig")
 public class SubjectConfig extends com.pulumi.resources.CustomResource {
+    /**
+     * The Compatibility Group of the specified subject.
+     * 
+     */
+    @Export(name="compatibilityGroup", refs={String.class}, tree="[0]")
+    private Output<String> compatibilityGroup;
+
+    /**
+     * @return The Compatibility Group of the specified subject.
+     * 
+     */
+    public Output<String> compatibilityGroup() {
+        return this.compatibilityGroup;
+    }
     /**
      * The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfigArgs.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfigArgs.java
index aadf9144..063a063f 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfigArgs.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/SubjectConfigArgs.java
@@ -18,6 +18,21 @@ public final class SubjectConfigArgs extends com.pulumi.resources.ResourceArgs {
 
     public static final SubjectConfigArgs Empty = new SubjectConfigArgs();
 
+    /**
+     * The Compatibility Group of the specified subject.
+     * 
+     */
+    @Import(name="compatibilityGroup")
+    private @Nullable Output<String> compatibilityGroup;
+
+    /**
+     * @return The Compatibility Group of the specified subject.
+     * 
+     */
+    public Optional<Output<String>> compatibilityGroup() {
+        return Optional.ofNullable(this.compatibilityGroup);
+    }
+
     /**
      * The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -88,6 +103,7 @@ public Output<String> subjectName() {
     private SubjectConfigArgs() {}
 
     private SubjectConfigArgs(SubjectConfigArgs $) {
+        this.compatibilityGroup = $.compatibilityGroup;
         this.compatibilityLevel = $.compatibilityLevel;
         this.credentials = $.credentials;
         this.restEndpoint = $.restEndpoint;
@@ -113,6 +129,27 @@ public Builder(SubjectConfigArgs defaults) {
             $ = new SubjectConfigArgs(Objects.requireNonNull(defaults));
         }
 
+        /**
+         * @param compatibilityGroup The Compatibility Group of the specified subject.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(@Nullable Output<String> compatibilityGroup) {
+            $.compatibilityGroup = compatibilityGroup;
+            return this;
+        }
+
+        /**
+         * @param compatibilityGroup The Compatibility Group of the specified subject.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(String compatibilityGroup) {
+            return compatibilityGroup(Output.of(compatibilityGroup));
+        }
+
         /**
          * @param compatibilityLevel The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointAwsPrivateNetworkInterfaceArgs.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointAwsPrivateNetworkInterfaceArgs.java
new file mode 100644
index 00000000..afa6ef24
--- /dev/null
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointAwsPrivateNetworkInterfaceArgs.java
@@ -0,0 +1,136 @@
+// *** WARNING: this file was generated by pulumi-java-gen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+package com.pulumi.confluentcloud.inputs;
+
+import com.pulumi.core.Output;
+import com.pulumi.core.annotations.Import;
+import com.pulumi.exceptions.MissingRequiredPropertyException;
+import java.lang.String;
+import java.util.List;
+import java.util.Objects;
+
+
+public final class AccessPointAwsPrivateNetworkInterfaceArgs extends com.pulumi.resources.ResourceArgs {
+
+    public static final AccessPointAwsPrivateNetworkInterfaceArgs Empty = new AccessPointAwsPrivateNetworkInterfaceArgs();
+
+    /**
+     * (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     * 
+     */
+    @Import(name="account", required=true)
+    private Output<String> account;
+
+    /**
+     * @return (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     * 
+     */
+    public Output<String> account() {
+        return this.account;
+    }
+
+    /**
+     * (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+     * 
+     */
+    @Import(name="networkInterfaces", required=true)
+    private Output<List<String>> networkInterfaces;
+
+    /**
+     * @return (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+     * 
+     */
+    public Output<List<String>> networkInterfaces() {
+        return this.networkInterfaces;
+    }
+
+    private AccessPointAwsPrivateNetworkInterfaceArgs() {}
+
+    private AccessPointAwsPrivateNetworkInterfaceArgs(AccessPointAwsPrivateNetworkInterfaceArgs $) {
+        this.account = $.account;
+        this.networkInterfaces = $.networkInterfaces;
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+    public static Builder builder(AccessPointAwsPrivateNetworkInterfaceArgs defaults) {
+        return new Builder(defaults);
+    }
+
+    public static final class Builder {
+        private AccessPointAwsPrivateNetworkInterfaceArgs $;
+
+        public Builder() {
+            $ = new AccessPointAwsPrivateNetworkInterfaceArgs();
+        }
+
+        public Builder(AccessPointAwsPrivateNetworkInterfaceArgs defaults) {
+            $ = new AccessPointAwsPrivateNetworkInterfaceArgs(Objects.requireNonNull(defaults));
+        }
+
+        /**
+         * @param account (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder account(Output<String> account) {
+            $.account = account;
+            return this;
+        }
+
+        /**
+         * @param account (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder account(String account) {
+            return account(Output.of(account));
+        }
+
+        /**
+         * @param networkInterfaces (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+         * 
+         * @return builder
+         * 
+         */
+        public Builder networkInterfaces(Output<List<String>> networkInterfaces) {
+            $.networkInterfaces = networkInterfaces;
+            return this;
+        }
+
+        /**
+         * @param networkInterfaces (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+         * 
+         * @return builder
+         * 
+         */
+        public Builder networkInterfaces(List<String> networkInterfaces) {
+            return networkInterfaces(Output.of(networkInterfaces));
+        }
+
+        /**
+         * @param networkInterfaces (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+         * 
+         * @return builder
+         * 
+         */
+        public Builder networkInterfaces(String... networkInterfaces) {
+            return networkInterfaces(List.of(networkInterfaces));
+        }
+
+        public AccessPointAwsPrivateNetworkInterfaceArgs build() {
+            if ($.account == null) {
+                throw new MissingRequiredPropertyException("AccessPointAwsPrivateNetworkInterfaceArgs", "account");
+            }
+            if ($.networkInterfaces == null) {
+                throw new MissingRequiredPropertyException("AccessPointAwsPrivateNetworkInterfaceArgs", "networkInterfaces");
+            }
+            return $;
+        }
+    }
+
+}
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointState.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointState.java
index 59c0f1b3..4a520c0e 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointState.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/AccessPointState.java
@@ -4,6 +4,7 @@
 package com.pulumi.confluentcloud.inputs;
 
 import com.pulumi.confluentcloud.inputs.AccessPointAwsEgressPrivateLinkEndpointArgs;
+import com.pulumi.confluentcloud.inputs.AccessPointAwsPrivateNetworkInterfaceArgs;
 import com.pulumi.confluentcloud.inputs.AccessPointAzureEgressPrivateLinkEndpointArgs;
 import com.pulumi.confluentcloud.inputs.AccessPointEnvironmentArgs;
 import com.pulumi.confluentcloud.inputs.AccessPointGatewayArgs;
@@ -34,6 +35,21 @@ public Optional<Output<AccessPointAwsEgressPrivateLinkEndpointArgs>> awsEgressPr
         return Optional.ofNullable(this.awsEgressPrivateLinkEndpoint);
     }
 
+    /**
+     * (Optional Configuration Block) supports the following:
+     * 
+     */
+    @Import(name="awsPrivateNetworkInterface")
+    private @Nullable Output<AccessPointAwsPrivateNetworkInterfaceArgs> awsPrivateNetworkInterface;
+
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public Optional<Output<AccessPointAwsPrivateNetworkInterfaceArgs>> awsPrivateNetworkInterface() {
+        return Optional.ofNullable(this.awsPrivateNetworkInterface);
+    }
+
     /**
      * (Optional Configuration Block) supports the following:
      * 
@@ -90,6 +106,7 @@ private AccessPointState() {}
 
     private AccessPointState(AccessPointState $) {
         this.awsEgressPrivateLinkEndpoint = $.awsEgressPrivateLinkEndpoint;
+        this.awsPrivateNetworkInterface = $.awsPrivateNetworkInterface;
         this.azureEgressPrivateLinkEndpoint = $.azureEgressPrivateLinkEndpoint;
         this.displayName = $.displayName;
         this.environment = $.environment;
@@ -135,6 +152,27 @@ public Builder awsEgressPrivateLinkEndpoint(AccessPointAwsEgressPrivateLinkEndpo
             return awsEgressPrivateLinkEndpoint(Output.of(awsEgressPrivateLinkEndpoint));
         }
 
+        /**
+         * @param awsPrivateNetworkInterface (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterface(@Nullable Output<AccessPointAwsPrivateNetworkInterfaceArgs> awsPrivateNetworkInterface) {
+            $.awsPrivateNetworkInterface = awsPrivateNetworkInterface;
+            return this;
+        }
+
+        /**
+         * @param awsPrivateNetworkInterface (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterface(AccessPointAwsPrivateNetworkInterfaceArgs awsPrivateNetworkInterface) {
+            return awsPrivateNetworkInterface(Output.of(awsPrivateNetworkInterface));
+        }
+
         /**
          * @param azureEgressPrivateLinkEndpoint (Optional Configuration Block) supports the following:
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayAwsPrivateNetworkInterfaceGatewayArgs.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayAwsPrivateNetworkInterfaceGatewayArgs.java
new file mode 100644
index 00000000..f3b7f415
--- /dev/null
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayAwsPrivateNetworkInterfaceGatewayArgs.java
@@ -0,0 +1,175 @@
+// *** WARNING: this file was generated by pulumi-java-gen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+package com.pulumi.confluentcloud.inputs;
+
+import com.pulumi.core.Output;
+import com.pulumi.core.annotations.Import;
+import com.pulumi.exceptions.MissingRequiredPropertyException;
+import java.lang.String;
+import java.util.List;
+import java.util.Objects;
+import java.util.Optional;
+import javax.annotation.Nullable;
+
+
+public final class GatewayAwsPrivateNetworkInterfaceGatewayArgs extends com.pulumi.resources.ResourceArgs {
+
+    public static final GatewayAwsPrivateNetworkInterfaceGatewayArgs Empty = new GatewayAwsPrivateNetworkInterfaceGatewayArgs();
+
+    /**
+     * (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     * 
+     */
+    @Import(name="account")
+    private @Nullable Output<String> account;
+
+    /**
+     * @return (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     * 
+     */
+    public Optional<Output<String>> account() {
+        return Optional.ofNullable(this.account);
+    }
+
+    /**
+     * AWS region of the Private Network Interface Gateway.
+     * 
+     */
+    @Import(name="region", required=true)
+    private Output<String> region;
+
+    /**
+     * @return AWS region of the Private Network Interface Gateway.
+     * 
+     */
+    public Output<String> region() {
+        return this.region;
+    }
+
+    /**
+     * AWS availability zone ids of the Private Network Interface Gateway.
+     * 
+     */
+    @Import(name="zones", required=true)
+    private Output<List<String>> zones;
+
+    /**
+     * @return AWS availability zone ids of the Private Network Interface Gateway.
+     * 
+     */
+    public Output<List<String>> zones() {
+        return this.zones;
+    }
+
+    private GatewayAwsPrivateNetworkInterfaceGatewayArgs() {}
+
+    private GatewayAwsPrivateNetworkInterfaceGatewayArgs(GatewayAwsPrivateNetworkInterfaceGatewayArgs $) {
+        this.account = $.account;
+        this.region = $.region;
+        this.zones = $.zones;
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+    public static Builder builder(GatewayAwsPrivateNetworkInterfaceGatewayArgs defaults) {
+        return new Builder(defaults);
+    }
+
+    public static final class Builder {
+        private GatewayAwsPrivateNetworkInterfaceGatewayArgs $;
+
+        public Builder() {
+            $ = new GatewayAwsPrivateNetworkInterfaceGatewayArgs();
+        }
+
+        public Builder(GatewayAwsPrivateNetworkInterfaceGatewayArgs defaults) {
+            $ = new GatewayAwsPrivateNetworkInterfaceGatewayArgs(Objects.requireNonNull(defaults));
+        }
+
+        /**
+         * @param account (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder account(@Nullable Output<String> account) {
+            $.account = account;
+            return this;
+        }
+
+        /**
+         * @param account (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder account(String account) {
+            return account(Output.of(account));
+        }
+
+        /**
+         * @param region AWS region of the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder region(Output<String> region) {
+            $.region = region;
+            return this;
+        }
+
+        /**
+         * @param region AWS region of the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder region(String region) {
+            return region(Output.of(region));
+        }
+
+        /**
+         * @param zones AWS availability zone ids of the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder zones(Output<List<String>> zones) {
+            $.zones = zones;
+            return this;
+        }
+
+        /**
+         * @param zones AWS availability zone ids of the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder zones(List<String> zones) {
+            return zones(Output.of(zones));
+        }
+
+        /**
+         * @param zones AWS availability zone ids of the Private Network Interface Gateway.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder zones(String... zones) {
+            return zones(List.of(zones));
+        }
+
+        public GatewayAwsPrivateNetworkInterfaceGatewayArgs build() {
+            if ($.region == null) {
+                throw new MissingRequiredPropertyException("GatewayAwsPrivateNetworkInterfaceGatewayArgs", "region");
+            }
+            if ($.zones == null) {
+                throw new MissingRequiredPropertyException("GatewayAwsPrivateNetworkInterfaceGatewayArgs", "zones");
+            }
+            return $;
+        }
+    }
+
+}
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayState.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayState.java
index 30becc1e..50e2390d 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayState.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/GatewayState.java
@@ -4,6 +4,7 @@
 package com.pulumi.confluentcloud.inputs;
 
 import com.pulumi.confluentcloud.inputs.GatewayAwsEgressPrivateLinkGatewayArgs;
+import com.pulumi.confluentcloud.inputs.GatewayAwsPrivateNetworkInterfaceGatewayArgs;
 import com.pulumi.confluentcloud.inputs.GatewayAzureEgressPrivateLinkGatewayArgs;
 import com.pulumi.confluentcloud.inputs.GatewayEnvironmentArgs;
 import com.pulumi.core.Output;
@@ -33,6 +34,21 @@ public Optional<Output<GatewayAwsEgressPrivateLinkGatewayArgs>> awsEgressPrivate
         return Optional.ofNullable(this.awsEgressPrivateLinkGateway);
     }
 
+    /**
+     * (Optional Configuration Block) supports the following:
+     * 
+     */
+    @Import(name="awsPrivateNetworkInterfaceGateway")
+    private @Nullable Output<GatewayAwsPrivateNetworkInterfaceGatewayArgs> awsPrivateNetworkInterfaceGateway;
+
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public Optional<Output<GatewayAwsPrivateNetworkInterfaceGatewayArgs>> awsPrivateNetworkInterfaceGateway() {
+        return Optional.ofNullable(this.awsPrivateNetworkInterfaceGateway);
+    }
+
     /**
      * (Optional Configuration Block) supports the following:
      * 
@@ -82,6 +98,7 @@ private GatewayState() {}
 
     private GatewayState(GatewayState $) {
         this.awsEgressPrivateLinkGateway = $.awsEgressPrivateLinkGateway;
+        this.awsPrivateNetworkInterfaceGateway = $.awsPrivateNetworkInterfaceGateway;
         this.azureEgressPrivateLinkGateway = $.azureEgressPrivateLinkGateway;
         this.displayName = $.displayName;
         this.environment = $.environment;
@@ -126,6 +143,27 @@ public Builder awsEgressPrivateLinkGateway(GatewayAwsEgressPrivateLinkGatewayArg
             return awsEgressPrivateLinkGateway(Output.of(awsEgressPrivateLinkGateway));
         }
 
+        /**
+         * @param awsPrivateNetworkInterfaceGateway (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterfaceGateway(@Nullable Output<GatewayAwsPrivateNetworkInterfaceGatewayArgs> awsPrivateNetworkInterfaceGateway) {
+            $.awsPrivateNetworkInterfaceGateway = awsPrivateNetworkInterfaceGateway;
+            return this;
+        }
+
+        /**
+         * @param awsPrivateNetworkInterfaceGateway (Optional Configuration Block) supports the following:
+         * 
+         * @return builder
+         * 
+         */
+        public Builder awsPrivateNetworkInterfaceGateway(GatewayAwsPrivateNetworkInterfaceGatewayArgs awsPrivateNetworkInterfaceGateway) {
+            return awsPrivateNetworkInterfaceGateway(Output.of(awsPrivateNetworkInterfaceGateway));
+        }
+
         /**
          * @param azureEgressPrivateLinkGateway (Optional Configuration Block) supports the following:
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SchemaRegistryClusterConfigState.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SchemaRegistryClusterConfigState.java
index 1c7e1c4f..e1054c5f 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SchemaRegistryClusterConfigState.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SchemaRegistryClusterConfigState.java
@@ -17,6 +17,21 @@ public final class SchemaRegistryClusterConfigState extends com.pulumi.resources
 
     public static final SchemaRegistryClusterConfigState Empty = new SchemaRegistryClusterConfigState();
 
+    /**
+     * The global Schema Registry compatibility group.
+     * 
+     */
+    @Import(name="compatibilityGroup")
+    private @Nullable Output<String> compatibilityGroup;
+
+    /**
+     * @return The global Schema Registry compatibility group.
+     * 
+     */
+    public Optional<Output<String>> compatibilityGroup() {
+        return Optional.ofNullable(this.compatibilityGroup);
+    }
+
     /**
      * The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -72,6 +87,7 @@ public Optional<Output<SchemaRegistryClusterConfigSchemaRegistryClusterArgs>> sc
     private SchemaRegistryClusterConfigState() {}
 
     private SchemaRegistryClusterConfigState(SchemaRegistryClusterConfigState $) {
+        this.compatibilityGroup = $.compatibilityGroup;
         this.compatibilityLevel = $.compatibilityLevel;
         this.credentials = $.credentials;
         this.restEndpoint = $.restEndpoint;
@@ -96,6 +112,27 @@ public Builder(SchemaRegistryClusterConfigState defaults) {
             $ = new SchemaRegistryClusterConfigState(Objects.requireNonNull(defaults));
         }
 
+        /**
+         * @param compatibilityGroup The global Schema Registry compatibility group.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(@Nullable Output<String> compatibilityGroup) {
+            $.compatibilityGroup = compatibilityGroup;
+            return this;
+        }
+
+        /**
+         * @param compatibilityGroup The global Schema Registry compatibility group.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(String compatibilityGroup) {
+            return compatibilityGroup(Output.of(compatibilityGroup));
+        }
+
         /**
          * @param compatibilityLevel The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SubjectConfigState.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SubjectConfigState.java
index 5d28dc07..1d23eb47 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SubjectConfigState.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/inputs/SubjectConfigState.java
@@ -17,6 +17,21 @@ public final class SubjectConfigState extends com.pulumi.resources.ResourceArgs
 
     public static final SubjectConfigState Empty = new SubjectConfigState();
 
+    /**
+     * The Compatibility Group of the specified subject.
+     * 
+     */
+    @Import(name="compatibilityGroup")
+    private @Nullable Output<String> compatibilityGroup;
+
+    /**
+     * @return The Compatibility Group of the specified subject.
+     * 
+     */
+    public Optional<Output<String>> compatibilityGroup() {
+        return Optional.ofNullable(this.compatibilityGroup);
+    }
+
     /**
      * The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -87,6 +102,7 @@ public Optional<Output<String>> subjectName() {
     private SubjectConfigState() {}
 
     private SubjectConfigState(SubjectConfigState $) {
+        this.compatibilityGroup = $.compatibilityGroup;
         this.compatibilityLevel = $.compatibilityLevel;
         this.credentials = $.credentials;
         this.restEndpoint = $.restEndpoint;
@@ -112,6 +128,27 @@ public Builder(SubjectConfigState defaults) {
             $ = new SubjectConfigState(Objects.requireNonNull(defaults));
         }
 
+        /**
+         * @param compatibilityGroup The Compatibility Group of the specified subject.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(@Nullable Output<String> compatibilityGroup) {
+            $.compatibilityGroup = compatibilityGroup;
+            return this;
+        }
+
+        /**
+         * @param compatibilityGroup The Compatibility Group of the specified subject.
+         * 
+         * @return builder
+         * 
+         */
+        public Builder compatibilityGroup(String compatibilityGroup) {
+            return compatibilityGroup(Output.of(compatibilityGroup));
+        }
+
         /**
          * @param compatibilityLevel The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
          * 
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/AccessPointAwsPrivateNetworkInterface.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/AccessPointAwsPrivateNetworkInterface.java
new file mode 100644
index 00000000..4651172e
--- /dev/null
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/AccessPointAwsPrivateNetworkInterface.java
@@ -0,0 +1,85 @@
+// *** WARNING: this file was generated by pulumi-java-gen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+package com.pulumi.confluentcloud.outputs;
+
+import com.pulumi.core.annotations.CustomType;
+import com.pulumi.exceptions.MissingRequiredPropertyException;
+import java.lang.String;
+import java.util.List;
+import java.util.Objects;
+
+@CustomType
+public final class AccessPointAwsPrivateNetworkInterface {
+    /**
+     * @return (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     * 
+     */
+    private String account;
+    /**
+     * @return (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+     * 
+     */
+    private List<String> networkInterfaces;
+
+    private AccessPointAwsPrivateNetworkInterface() {}
+    /**
+     * @return (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     * 
+     */
+    public String account() {
+        return this.account;
+    }
+    /**
+     * @return (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+     * 
+     */
+    public List<String> networkInterfaces() {
+        return this.networkInterfaces;
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    public static Builder builder(AccessPointAwsPrivateNetworkInterface defaults) {
+        return new Builder(defaults);
+    }
+    @CustomType.Builder
+    public static final class Builder {
+        private String account;
+        private List<String> networkInterfaces;
+        public Builder() {}
+        public Builder(AccessPointAwsPrivateNetworkInterface defaults) {
+    	      Objects.requireNonNull(defaults);
+    	      this.account = defaults.account;
+    	      this.networkInterfaces = defaults.networkInterfaces;
+        }
+
+        @CustomType.Setter
+        public Builder account(String account) {
+            if (account == null) {
+              throw new MissingRequiredPropertyException("AccessPointAwsPrivateNetworkInterface", "account");
+            }
+            this.account = account;
+            return this;
+        }
+        @CustomType.Setter
+        public Builder networkInterfaces(List<String> networkInterfaces) {
+            if (networkInterfaces == null) {
+              throw new MissingRequiredPropertyException("AccessPointAwsPrivateNetworkInterface", "networkInterfaces");
+            }
+            this.networkInterfaces = networkInterfaces;
+            return this;
+        }
+        public Builder networkInterfaces(String... networkInterfaces) {
+            return networkInterfaces(List.of(networkInterfaces));
+        }
+        public AccessPointAwsPrivateNetworkInterface build() {
+            final var _resultValue = new AccessPointAwsPrivateNetworkInterface();
+            _resultValue.account = account;
+            _resultValue.networkInterfaces = networkInterfaces;
+            return _resultValue;
+        }
+    }
+}
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GatewayAwsPrivateNetworkInterfaceGateway.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GatewayAwsPrivateNetworkInterfaceGateway.java
new file mode 100644
index 00000000..9bdb3c56
--- /dev/null
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GatewayAwsPrivateNetworkInterfaceGateway.java
@@ -0,0 +1,108 @@
+// *** WARNING: this file was generated by pulumi-java-gen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+package com.pulumi.confluentcloud.outputs;
+
+import com.pulumi.core.annotations.CustomType;
+import com.pulumi.exceptions.MissingRequiredPropertyException;
+import java.lang.String;
+import java.util.List;
+import java.util.Objects;
+import java.util.Optional;
+import javax.annotation.Nullable;
+
+@CustomType
+public final class GatewayAwsPrivateNetworkInterfaceGateway {
+    /**
+     * @return (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     * 
+     */
+    private @Nullable String account;
+    /**
+     * @return AWS region of the Private Network Interface Gateway.
+     * 
+     */
+    private String region;
+    /**
+     * @return AWS availability zone ids of the Private Network Interface Gateway.
+     * 
+     */
+    private List<String> zones;
+
+    private GatewayAwsPrivateNetworkInterfaceGateway() {}
+    /**
+     * @return (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     * 
+     */
+    public Optional<String> account() {
+        return Optional.ofNullable(this.account);
+    }
+    /**
+     * @return AWS region of the Private Network Interface Gateway.
+     * 
+     */
+    public String region() {
+        return this.region;
+    }
+    /**
+     * @return AWS availability zone ids of the Private Network Interface Gateway.
+     * 
+     */
+    public List<String> zones() {
+        return this.zones;
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    public static Builder builder(GatewayAwsPrivateNetworkInterfaceGateway defaults) {
+        return new Builder(defaults);
+    }
+    @CustomType.Builder
+    public static final class Builder {
+        private @Nullable String account;
+        private String region;
+        private List<String> zones;
+        public Builder() {}
+        public Builder(GatewayAwsPrivateNetworkInterfaceGateway defaults) {
+    	      Objects.requireNonNull(defaults);
+    	      this.account = defaults.account;
+    	      this.region = defaults.region;
+    	      this.zones = defaults.zones;
+        }
+
+        @CustomType.Setter
+        public Builder account(@Nullable String account) {
+
+            this.account = account;
+            return this;
+        }
+        @CustomType.Setter
+        public Builder region(String region) {
+            if (region == null) {
+              throw new MissingRequiredPropertyException("GatewayAwsPrivateNetworkInterfaceGateway", "region");
+            }
+            this.region = region;
+            return this;
+        }
+        @CustomType.Setter
+        public Builder zones(List<String> zones) {
+            if (zones == null) {
+              throw new MissingRequiredPropertyException("GatewayAwsPrivateNetworkInterfaceGateway", "zones");
+            }
+            this.zones = zones;
+            return this;
+        }
+        public Builder zones(String... zones) {
+            return zones(List.of(zones));
+        }
+        public GatewayAwsPrivateNetworkInterfaceGateway build() {
+            final var _resultValue = new GatewayAwsPrivateNetworkInterfaceGateway();
+            _resultValue.account = account;
+            _resultValue.region = region;
+            _resultValue.zones = zones;
+            return _resultValue;
+        }
+    }
+}
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointAwsPrivateNetworkInterface.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointAwsPrivateNetworkInterface.java
new file mode 100644
index 00000000..5ba9e229
--- /dev/null
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointAwsPrivateNetworkInterface.java
@@ -0,0 +1,85 @@
+// *** WARNING: this file was generated by pulumi-java-gen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+package com.pulumi.confluentcloud.outputs;
+
+import com.pulumi.core.annotations.CustomType;
+import com.pulumi.exceptions.MissingRequiredPropertyException;
+import java.lang.String;
+import java.util.List;
+import java.util.Objects;
+
+@CustomType
+public final class GetAccessPointAwsPrivateNetworkInterface {
+    /**
+     * @return (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     * 
+     */
+    private String account;
+    /**
+     * @return (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+     * 
+     */
+    private List<String> networkInterfaces;
+
+    private GetAccessPointAwsPrivateNetworkInterface() {}
+    /**
+     * @return (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     * 
+     */
+    public String account() {
+        return this.account;
+    }
+    /**
+     * @return (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `[&#34;eni-00000000000000000&#34;, &#34;eni-00000000000000001&#34;, &#34;eni-00000000000000002&#34;, &#34;eni-00000000000000003&#34;, &#34;eni-00000000000000004&#34;, &#34;eni-00000000000000005&#34;]`
+     * 
+     */
+    public List<String> networkInterfaces() {
+        return this.networkInterfaces;
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    public static Builder builder(GetAccessPointAwsPrivateNetworkInterface defaults) {
+        return new Builder(defaults);
+    }
+    @CustomType.Builder
+    public static final class Builder {
+        private String account;
+        private List<String> networkInterfaces;
+        public Builder() {}
+        public Builder(GetAccessPointAwsPrivateNetworkInterface defaults) {
+    	      Objects.requireNonNull(defaults);
+    	      this.account = defaults.account;
+    	      this.networkInterfaces = defaults.networkInterfaces;
+        }
+
+        @CustomType.Setter
+        public Builder account(String account) {
+            if (account == null) {
+              throw new MissingRequiredPropertyException("GetAccessPointAwsPrivateNetworkInterface", "account");
+            }
+            this.account = account;
+            return this;
+        }
+        @CustomType.Setter
+        public Builder networkInterfaces(List<String> networkInterfaces) {
+            if (networkInterfaces == null) {
+              throw new MissingRequiredPropertyException("GetAccessPointAwsPrivateNetworkInterface", "networkInterfaces");
+            }
+            this.networkInterfaces = networkInterfaces;
+            return this;
+        }
+        public Builder networkInterfaces(String... networkInterfaces) {
+            return networkInterfaces(List.of(networkInterfaces));
+        }
+        public GetAccessPointAwsPrivateNetworkInterface build() {
+            final var _resultValue = new GetAccessPointAwsPrivateNetworkInterface();
+            _resultValue.account = account;
+            _resultValue.networkInterfaces = networkInterfaces;
+            return _resultValue;
+        }
+    }
+}
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointResult.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointResult.java
index d59ce740..2616b4ab 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointResult.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetAccessPointResult.java
@@ -4,6 +4,7 @@
 package com.pulumi.confluentcloud.outputs;
 
 import com.pulumi.confluentcloud.outputs.GetAccessPointAwsEgressPrivateLinkEndpoint;
+import com.pulumi.confluentcloud.outputs.GetAccessPointAwsPrivateNetworkInterface;
 import com.pulumi.confluentcloud.outputs.GetAccessPointAzureEgressPrivateLinkEndpoint;
 import com.pulumi.confluentcloud.outputs.GetAccessPointEnvironment;
 import com.pulumi.confluentcloud.outputs.GetAccessPointGateway;
@@ -20,6 +21,11 @@ public final class GetAccessPointResult {
      * 
      */
     private List<GetAccessPointAwsEgressPrivateLinkEndpoint> awsEgressPrivateLinkEndpoints;
+    /**
+     * @return (Optional Configuration Block) Supports the following:
+     * 
+     */
+    private List<GetAccessPointAwsPrivateNetworkInterface> awsPrivateNetworkInterfaces;
     /**
      * @return (Optional Configuration Block) supports the following:
      * 
@@ -50,6 +56,13 @@ private GetAccessPointResult() {}
     public List<GetAccessPointAwsEgressPrivateLinkEndpoint> awsEgressPrivateLinkEndpoints() {
         return this.awsEgressPrivateLinkEndpoints;
     }
+    /**
+     * @return (Optional Configuration Block) Supports the following:
+     * 
+     */
+    public List<GetAccessPointAwsPrivateNetworkInterface> awsPrivateNetworkInterfaces() {
+        return this.awsPrivateNetworkInterfaces;
+    }
     /**
      * @return (Optional Configuration Block) supports the following:
      * 
@@ -92,6 +105,7 @@ public static Builder builder(GetAccessPointResult defaults) {
     @CustomType.Builder
     public static final class Builder {
         private List<GetAccessPointAwsEgressPrivateLinkEndpoint> awsEgressPrivateLinkEndpoints;
+        private List<GetAccessPointAwsPrivateNetworkInterface> awsPrivateNetworkInterfaces;
         private List<GetAccessPointAzureEgressPrivateLinkEndpoint> azureEgressPrivateLinkEndpoints;
         private String displayName;
         private GetAccessPointEnvironment environment;
@@ -101,6 +115,7 @@ public Builder() {}
         public Builder(GetAccessPointResult defaults) {
     	      Objects.requireNonNull(defaults);
     	      this.awsEgressPrivateLinkEndpoints = defaults.awsEgressPrivateLinkEndpoints;
+    	      this.awsPrivateNetworkInterfaces = defaults.awsPrivateNetworkInterfaces;
     	      this.azureEgressPrivateLinkEndpoints = defaults.azureEgressPrivateLinkEndpoints;
     	      this.displayName = defaults.displayName;
     	      this.environment = defaults.environment;
@@ -120,6 +135,17 @@ public Builder awsEgressPrivateLinkEndpoints(GetAccessPointAwsEgressPrivateLinkE
             return awsEgressPrivateLinkEndpoints(List.of(awsEgressPrivateLinkEndpoints));
         }
         @CustomType.Setter
+        public Builder awsPrivateNetworkInterfaces(List<GetAccessPointAwsPrivateNetworkInterface> awsPrivateNetworkInterfaces) {
+            if (awsPrivateNetworkInterfaces == null) {
+              throw new MissingRequiredPropertyException("GetAccessPointResult", "awsPrivateNetworkInterfaces");
+            }
+            this.awsPrivateNetworkInterfaces = awsPrivateNetworkInterfaces;
+            return this;
+        }
+        public Builder awsPrivateNetworkInterfaces(GetAccessPointAwsPrivateNetworkInterface... awsPrivateNetworkInterfaces) {
+            return awsPrivateNetworkInterfaces(List.of(awsPrivateNetworkInterfaces));
+        }
+        @CustomType.Setter
         public Builder azureEgressPrivateLinkEndpoints(List<GetAccessPointAzureEgressPrivateLinkEndpoint> azureEgressPrivateLinkEndpoints) {
             if (azureEgressPrivateLinkEndpoints == null) {
               throw new MissingRequiredPropertyException("GetAccessPointResult", "azureEgressPrivateLinkEndpoints");
@@ -168,6 +194,7 @@ public Builder id(String id) {
         public GetAccessPointResult build() {
             final var _resultValue = new GetAccessPointResult();
             _resultValue.awsEgressPrivateLinkEndpoints = awsEgressPrivateLinkEndpoints;
+            _resultValue.awsPrivateNetworkInterfaces = awsPrivateNetworkInterfaces;
             _resultValue.azureEgressPrivateLinkEndpoints = azureEgressPrivateLinkEndpoints;
             _resultValue.displayName = displayName;
             _resultValue.environment = environment;
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayAwsPrivateNetworkInterfaceGateway.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayAwsPrivateNetworkInterfaceGateway.java
new file mode 100644
index 00000000..c730ef32
--- /dev/null
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayAwsPrivateNetworkInterfaceGateway.java
@@ -0,0 +1,108 @@
+// *** WARNING: this file was generated by pulumi-java-gen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+package com.pulumi.confluentcloud.outputs;
+
+import com.pulumi.core.annotations.CustomType;
+import com.pulumi.exceptions.MissingRequiredPropertyException;
+import java.lang.String;
+import java.util.List;
+import java.util.Objects;
+
+@CustomType
+public final class GetGatewayAwsPrivateNetworkInterfaceGateway {
+    /**
+     * @return (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     * 
+     */
+    private String account;
+    /**
+     * @return (Required String) Azure region of the Peering Gateway.
+     * 
+     */
+    private String region;
+    /**
+     * @return (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+     * 
+     */
+    private List<String> zones;
+
+    private GetGatewayAwsPrivateNetworkInterfaceGateway() {}
+    /**
+     * @return (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     * 
+     */
+    public String account() {
+        return this.account;
+    }
+    /**
+     * @return (Required String) Azure region of the Peering Gateway.
+     * 
+     */
+    public String region() {
+        return this.region;
+    }
+    /**
+     * @return (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+     * 
+     */
+    public List<String> zones() {
+        return this.zones;
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    public static Builder builder(GetGatewayAwsPrivateNetworkInterfaceGateway defaults) {
+        return new Builder(defaults);
+    }
+    @CustomType.Builder
+    public static final class Builder {
+        private String account;
+        private String region;
+        private List<String> zones;
+        public Builder() {}
+        public Builder(GetGatewayAwsPrivateNetworkInterfaceGateway defaults) {
+    	      Objects.requireNonNull(defaults);
+    	      this.account = defaults.account;
+    	      this.region = defaults.region;
+    	      this.zones = defaults.zones;
+        }
+
+        @CustomType.Setter
+        public Builder account(String account) {
+            if (account == null) {
+              throw new MissingRequiredPropertyException("GetGatewayAwsPrivateNetworkInterfaceGateway", "account");
+            }
+            this.account = account;
+            return this;
+        }
+        @CustomType.Setter
+        public Builder region(String region) {
+            if (region == null) {
+              throw new MissingRequiredPropertyException("GetGatewayAwsPrivateNetworkInterfaceGateway", "region");
+            }
+            this.region = region;
+            return this;
+        }
+        @CustomType.Setter
+        public Builder zones(List<String> zones) {
+            if (zones == null) {
+              throw new MissingRequiredPropertyException("GetGatewayAwsPrivateNetworkInterfaceGateway", "zones");
+            }
+            this.zones = zones;
+            return this;
+        }
+        public Builder zones(String... zones) {
+            return zones(List.of(zones));
+        }
+        public GetGatewayAwsPrivateNetworkInterfaceGateway build() {
+            final var _resultValue = new GetGatewayAwsPrivateNetworkInterfaceGateway();
+            _resultValue.account = account;
+            _resultValue.region = region;
+            _resultValue.zones = zones;
+            return _resultValue;
+        }
+    }
+}
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayResult.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayResult.java
index 5009b463..8bd62b9c 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayResult.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetGatewayResult.java
@@ -5,6 +5,7 @@
 
 import com.pulumi.confluentcloud.outputs.GetGatewayAwsEgressPrivateLinkGateway;
 import com.pulumi.confluentcloud.outputs.GetGatewayAwsPeeringGateway;
+import com.pulumi.confluentcloud.outputs.GetGatewayAwsPrivateNetworkInterfaceGateway;
 import com.pulumi.confluentcloud.outputs.GetGatewayAzureEgressPrivateLinkGateway;
 import com.pulumi.confluentcloud.outputs.GetGatewayAzurePeeringGateway;
 import com.pulumi.confluentcloud.outputs.GetGatewayEnvironment;
@@ -26,6 +27,11 @@ public final class GetGatewayResult {
      * 
      */
     private List<GetGatewayAwsPeeringGateway> awsPeeringGateways;
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    private List<GetGatewayAwsPrivateNetworkInterfaceGateway> awsPrivateNetworkInterfaceGateways;
     /**
      * @return (Optional Configuration Block) supports the following:
      * 
@@ -59,6 +65,13 @@ public List<GetGatewayAwsEgressPrivateLinkGateway> awsEgressPrivateLinkGateways(
     public List<GetGatewayAwsPeeringGateway> awsPeeringGateways() {
         return this.awsPeeringGateways;
     }
+    /**
+     * @return (Optional Configuration Block) supports the following:
+     * 
+     */
+    public List<GetGatewayAwsPrivateNetworkInterfaceGateway> awsPrivateNetworkInterfaceGateways() {
+        return this.awsPrivateNetworkInterfaceGateways;
+    }
     /**
      * @return (Optional Configuration Block) supports the following:
      * 
@@ -98,6 +111,7 @@ public static Builder builder(GetGatewayResult defaults) {
     public static final class Builder {
         private List<GetGatewayAwsEgressPrivateLinkGateway> awsEgressPrivateLinkGateways;
         private List<GetGatewayAwsPeeringGateway> awsPeeringGateways;
+        private List<GetGatewayAwsPrivateNetworkInterfaceGateway> awsPrivateNetworkInterfaceGateways;
         private List<GetGatewayAzureEgressPrivateLinkGateway> azureEgressPrivateLinkGateways;
         private List<GetGatewayAzurePeeringGateway> azurePeeringGateways;
         private String displayName;
@@ -108,6 +122,7 @@ public Builder(GetGatewayResult defaults) {
     	      Objects.requireNonNull(defaults);
     	      this.awsEgressPrivateLinkGateways = defaults.awsEgressPrivateLinkGateways;
     	      this.awsPeeringGateways = defaults.awsPeeringGateways;
+    	      this.awsPrivateNetworkInterfaceGateways = defaults.awsPrivateNetworkInterfaceGateways;
     	      this.azureEgressPrivateLinkGateways = defaults.azureEgressPrivateLinkGateways;
     	      this.azurePeeringGateways = defaults.azurePeeringGateways;
     	      this.displayName = defaults.displayName;
@@ -138,6 +153,17 @@ public Builder awsPeeringGateways(GetGatewayAwsPeeringGateway... awsPeeringGatew
             return awsPeeringGateways(List.of(awsPeeringGateways));
         }
         @CustomType.Setter
+        public Builder awsPrivateNetworkInterfaceGateways(List<GetGatewayAwsPrivateNetworkInterfaceGateway> awsPrivateNetworkInterfaceGateways) {
+            if (awsPrivateNetworkInterfaceGateways == null) {
+              throw new MissingRequiredPropertyException("GetGatewayResult", "awsPrivateNetworkInterfaceGateways");
+            }
+            this.awsPrivateNetworkInterfaceGateways = awsPrivateNetworkInterfaceGateways;
+            return this;
+        }
+        public Builder awsPrivateNetworkInterfaceGateways(GetGatewayAwsPrivateNetworkInterfaceGateway... awsPrivateNetworkInterfaceGateways) {
+            return awsPrivateNetworkInterfaceGateways(List.of(awsPrivateNetworkInterfaceGateways));
+        }
+        @CustomType.Setter
         public Builder azureEgressPrivateLinkGateways(List<GetGatewayAzureEgressPrivateLinkGateway> azureEgressPrivateLinkGateways) {
             if (azureEgressPrivateLinkGateways == null) {
               throw new MissingRequiredPropertyException("GetGatewayResult", "azureEgressPrivateLinkGateways");
@@ -187,6 +213,7 @@ public GetGatewayResult build() {
             final var _resultValue = new GetGatewayResult();
             _resultValue.awsEgressPrivateLinkGateways = awsEgressPrivateLinkGateways;
             _resultValue.awsPeeringGateways = awsPeeringGateways;
+            _resultValue.awsPrivateNetworkInterfaceGateways = awsPrivateNetworkInterfaceGateways;
             _resultValue.azureEgressPrivateLinkGateways = azureEgressPrivateLinkGateways;
             _resultValue.azurePeeringGateways = azurePeeringGateways;
             _resultValue.displayName = displayName;
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSchemaRegistryClusterConfigResult.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSchemaRegistryClusterConfigResult.java
index 0e89dffd..d2c9eaf1 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSchemaRegistryClusterConfigResult.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSchemaRegistryClusterConfigResult.java
@@ -14,6 +14,11 @@
 
 @CustomType
 public final class GetSchemaRegistryClusterConfigResult {
+    /**
+     * @return (Required String) The global Schema Registry compatibility group.
+     * 
+     */
+    private String compatibilityGroup;
     /**
      * @return (Required String) The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -29,6 +34,13 @@ public final class GetSchemaRegistryClusterConfigResult {
     private @Nullable GetSchemaRegistryClusterConfigSchemaRegistryCluster schemaRegistryCluster;
 
     private GetSchemaRegistryClusterConfigResult() {}
+    /**
+     * @return (Required String) The global Schema Registry compatibility group.
+     * 
+     */
+    public String compatibilityGroup() {
+        return this.compatibilityGroup;
+    }
     /**
      * @return (Required String) The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -62,6 +74,7 @@ public static Builder builder(GetSchemaRegistryClusterConfigResult defaults) {
     }
     @CustomType.Builder
     public static final class Builder {
+        private String compatibilityGroup;
         private String compatibilityLevel;
         private @Nullable GetSchemaRegistryClusterConfigCredentials credentials;
         private String id;
@@ -70,6 +83,7 @@ public static final class Builder {
         public Builder() {}
         public Builder(GetSchemaRegistryClusterConfigResult defaults) {
     	      Objects.requireNonNull(defaults);
+    	      this.compatibilityGroup = defaults.compatibilityGroup;
     	      this.compatibilityLevel = defaults.compatibilityLevel;
     	      this.credentials = defaults.credentials;
     	      this.id = defaults.id;
@@ -77,6 +91,14 @@ public Builder(GetSchemaRegistryClusterConfigResult defaults) {
     	      this.schemaRegistryCluster = defaults.schemaRegistryCluster;
         }
 
+        @CustomType.Setter
+        public Builder compatibilityGroup(String compatibilityGroup) {
+            if (compatibilityGroup == null) {
+              throw new MissingRequiredPropertyException("GetSchemaRegistryClusterConfigResult", "compatibilityGroup");
+            }
+            this.compatibilityGroup = compatibilityGroup;
+            return this;
+        }
         @CustomType.Setter
         public Builder compatibilityLevel(String compatibilityLevel) {
             if (compatibilityLevel == null) {
@@ -113,6 +135,7 @@ public Builder schemaRegistryCluster(@Nullable GetSchemaRegistryClusterConfigSch
         }
         public GetSchemaRegistryClusterConfigResult build() {
             final var _resultValue = new GetSchemaRegistryClusterConfigResult();
+            _resultValue.compatibilityGroup = compatibilityGroup;
             _resultValue.compatibilityLevel = compatibilityLevel;
             _resultValue.credentials = credentials;
             _resultValue.id = id;
diff --git a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSubjectConfigResult.java b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSubjectConfigResult.java
index 44245d4b..f5dd2219 100644
--- a/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSubjectConfigResult.java
+++ b/sdk/java/src/main/java/com/pulumi/confluentcloud/outputs/GetSubjectConfigResult.java
@@ -14,6 +14,11 @@
 
 @CustomType
 public final class GetSubjectConfigResult {
+    /**
+     * @return (Required String) The Compatibility Group of the specified subject.
+     * 
+     */
+    private String compatibilityGroup;
     /**
      * @return (Required String) The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -30,6 +35,13 @@ public final class GetSubjectConfigResult {
     private String subjectName;
 
     private GetSubjectConfigResult() {}
+    /**
+     * @return (Required String) The Compatibility Group of the specified subject.
+     * 
+     */
+    public String compatibilityGroup() {
+        return this.compatibilityGroup;
+    }
     /**
      * @return (Required String) The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      * 
@@ -66,6 +78,7 @@ public static Builder builder(GetSubjectConfigResult defaults) {
     }
     @CustomType.Builder
     public static final class Builder {
+        private String compatibilityGroup;
         private String compatibilityLevel;
         private @Nullable GetSubjectConfigCredentials credentials;
         private String id;
@@ -75,6 +88,7 @@ public static final class Builder {
         public Builder() {}
         public Builder(GetSubjectConfigResult defaults) {
     	      Objects.requireNonNull(defaults);
+    	      this.compatibilityGroup = defaults.compatibilityGroup;
     	      this.compatibilityLevel = defaults.compatibilityLevel;
     	      this.credentials = defaults.credentials;
     	      this.id = defaults.id;
@@ -83,6 +97,14 @@ public Builder(GetSubjectConfigResult defaults) {
     	      this.subjectName = defaults.subjectName;
         }
 
+        @CustomType.Setter
+        public Builder compatibilityGroup(String compatibilityGroup) {
+            if (compatibilityGroup == null) {
+              throw new MissingRequiredPropertyException("GetSubjectConfigResult", "compatibilityGroup");
+            }
+            this.compatibilityGroup = compatibilityGroup;
+            return this;
+        }
         @CustomType.Setter
         public Builder compatibilityLevel(String compatibilityLevel) {
             if (compatibilityLevel == null) {
@@ -127,6 +149,7 @@ public Builder subjectName(String subjectName) {
         }
         public GetSubjectConfigResult build() {
             final var _resultValue = new GetSubjectConfigResult();
+            _resultValue.compatibilityGroup = compatibilityGroup;
             _resultValue.compatibilityLevel = compatibilityLevel;
             _resultValue.credentials = credentials;
             _resultValue.id = id;
diff --git a/sdk/nodejs/accessPoint.ts b/sdk/nodejs/accessPoint.ts
index 99604bbf..0d92da80 100644
--- a/sdk/nodejs/accessPoint.ts
+++ b/sdk/nodejs/accessPoint.ts
@@ -91,6 +91,10 @@ export class AccessPoint extends pulumi.CustomResource {
      * (Optional Configuration Block) supports the following:
      */
     public readonly awsEgressPrivateLinkEndpoint!: pulumi.Output<outputs.AccessPointAwsEgressPrivateLinkEndpoint | undefined>;
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    public readonly awsPrivateNetworkInterface!: pulumi.Output<outputs.AccessPointAwsPrivateNetworkInterface | undefined>;
     /**
      * (Optional Configuration Block) supports the following:
      */
@@ -119,6 +123,7 @@ export class AccessPoint extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState as AccessPointState | undefined;
             resourceInputs["awsEgressPrivateLinkEndpoint"] = state ? state.awsEgressPrivateLinkEndpoint : undefined;
+            resourceInputs["awsPrivateNetworkInterface"] = state ? state.awsPrivateNetworkInterface : undefined;
             resourceInputs["azureEgressPrivateLinkEndpoint"] = state ? state.azureEgressPrivateLinkEndpoint : undefined;
             resourceInputs["displayName"] = state ? state.displayName : undefined;
             resourceInputs["environment"] = state ? state.environment : undefined;
@@ -132,6 +137,7 @@ export class AccessPoint extends pulumi.CustomResource {
                 throw new Error("Missing required property 'gateway'");
             }
             resourceInputs["awsEgressPrivateLinkEndpoint"] = args ? args.awsEgressPrivateLinkEndpoint : undefined;
+            resourceInputs["awsPrivateNetworkInterface"] = args ? args.awsPrivateNetworkInterface : undefined;
             resourceInputs["azureEgressPrivateLinkEndpoint"] = args ? args.azureEgressPrivateLinkEndpoint : undefined;
             resourceInputs["displayName"] = args ? args.displayName : undefined;
             resourceInputs["environment"] = args ? args.environment : undefined;
@@ -150,6 +156,10 @@ export interface AccessPointState {
      * (Optional Configuration Block) supports the following:
      */
     awsEgressPrivateLinkEndpoint?: pulumi.Input<inputs.AccessPointAwsEgressPrivateLinkEndpoint>;
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    awsPrivateNetworkInterface?: pulumi.Input<inputs.AccessPointAwsPrivateNetworkInterface>;
     /**
      * (Optional Configuration Block) supports the following:
      */
@@ -173,6 +183,10 @@ export interface AccessPointArgs {
      * (Optional Configuration Block) supports the following:
      */
     awsEgressPrivateLinkEndpoint?: pulumi.Input<inputs.AccessPointAwsEgressPrivateLinkEndpoint>;
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    awsPrivateNetworkInterface?: pulumi.Input<inputs.AccessPointAwsPrivateNetworkInterface>;
     /**
      * (Optional Configuration Block) supports the following:
      */
diff --git a/sdk/nodejs/certificateAuthority.ts b/sdk/nodejs/certificateAuthority.ts
index b4d797f5..9d43a7a6 100644
--- a/sdk/nodejs/certificateAuthority.ts
+++ b/sdk/nodejs/certificateAuthority.ts
@@ -5,7 +5,7 @@ import * as pulumi from "@pulumi/pulumi";
 import * as utilities from "./utilities";
 
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  *
  * `confluentcloud.CertificateAuthority` provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.
  *
diff --git a/sdk/nodejs/certificatePool.ts b/sdk/nodejs/certificatePool.ts
index 98790a7b..9c2def88 100644
--- a/sdk/nodejs/certificatePool.ts
+++ b/sdk/nodejs/certificatePool.ts
@@ -7,7 +7,7 @@ import * as outputs from "./types/output";
 import * as utilities from "./utilities";
 
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  *
  * `confluentcloud.CertificatePool` provides a Certificate Pool resource that enables creating, editing, and deleting Certificate Pools on Confluent Cloud.
  *
diff --git a/sdk/nodejs/connector.ts b/sdk/nodejs/connector.ts
index d614d835..c86e84a6 100644
--- a/sdk/nodejs/connector.ts
+++ b/sdk/nodejs/connector.ts
@@ -14,6 +14,7 @@ import * as utilities from "./utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as confluentcloud from "@pulumi/confluentcloud";
  *
+ * // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/managed-datagen-source-connector
  * const source = new confluentcloud.Connector("source", {
  *     environment: {
  *         id: staging.id,
@@ -47,6 +48,7 @@ import * as utilities from "./utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as confluentcloud from "@pulumi/confluentcloud";
  *
+ * // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector
  * const sink = new confluentcloud.Connector("sink", {
  *     environment: {
  *         id: staging.id,
@@ -86,11 +88,58 @@ import * as utilities from "./utilities";
  * });
  * ```
  *
+ * ### Example Managed [Amazon S3 Sink Connector](https://docs.confluent.io/cloud/current/connectors/cc-s3-sink.html) that uses a service account to communicate with your Kafka cluster and IAM Roles for AWS authentication
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as confluentcloud from "@pulumi/confluentcloud";
+ *
+ * // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector-assume-role
+ * const sink = new confluentcloud.Connector("sink", {
+ *     environment: {
+ *         id: staging.id,
+ *     },
+ *     kafkaCluster: {
+ *         id: basic.id,
+ *     },
+ *     configSensitive: {},
+ *     configNonsensitive: {
+ *         topics: orders.topicName,
+ *         "input.data.format": "JSON",
+ *         "connector.class": "S3_SINK",
+ *         name: "S3_SINKConnector_0",
+ *         "kafka.auth.mode": "SERVICE_ACCOUNT",
+ *         "kafka.service.account.id": app_connector.id,
+ *         "s3.bucket.name": "<s3-bucket-name>",
+ *         "output.data.format": "JSON",
+ *         "time.interval": "DAILY",
+ *         "flush.size": "1000",
+ *         "tasks.max": "1",
+ *         "authentication.method": "IAM Roles",
+ *         "provider.integration.id": main.id,
+ *     },
+ * }, {
+ *     dependsOn: [
+ *         app_connector_describe_on_cluster,
+ *         app_connector_read_on_target_topic,
+ *         app_connector_create_on_dlq_lcc_topics,
+ *         app_connector_write_on_dlq_lcc_topics,
+ *         app_connector_create_on_success_lcc_topics,
+ *         app_connector_write_on_success_lcc_topics,
+ *         app_connector_create_on_error_lcc_topics,
+ *         app_connector_write_on_error_lcc_topics,
+ *         app_connector_read_on_connect_lcc_group,
+ *         main,
+ *         s3AccessRole,
+ *     ],
+ * });
+ * ```
+ *
  * ### Example Managed [Amazon DynamoDB Connector](https://docs.confluent.io/cloud/current/connectors/cc-amazon-dynamo-db-sink.html) that uses a service account to communicate with your Kafka cluster
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as confluentcloud from "@pulumi/confluentcloud";
  *
+ * // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/dynamo-db-sink-connector
  * const sink = new confluentcloud.Connector("sink", {
  *     environment: {
  *         id: staging.id,
@@ -129,11 +178,11 @@ import * as utilities from "./utilities";
  * ```
  *
  * ### Example Custom [Datagen Source Connector](https://www.confluent.io/hub/confluentinc/kafka-connect-datagen) that uses a Kafka API Key to communicate with your Kafka cluster
- *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as confluentcloud from "@pulumi/confluentcloud";
  *
+ * // https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/custom-datagen-source-connector
  * const source = new confluentcloud.Connector("source", {
  *     environment: {
  *         id: staging.id,
@@ -163,13 +212,11 @@ import * as utilities from "./utilities";
  * });
  * ```
  *
- * > **Note:** Custom connectors are available in **Preview** for early adopters. Preview features are introduced to gather customer feedback. This feature should be used only for evaluation and non-production testing purposes or to provide feedback to Confluent, particularly as it becomes more widely available in follow-on editions.\
- * **Preview** features are intended for evaluation use in development and testing environments only, and not for production use. The warranty, SLA, and Support Services provisions of your agreement with Confluent do not apply to Preview features. Preview features are considered to be a Proof of Concept as defined in the Confluent Cloud Terms of Service. Confluent may discontinue providing preview releases of the Preview features at any time in Confluent’s sole discretion.
- *
  * ## Getting Started
  *
  * The following end-to-end examples might help to get started with `confluentcloud.Connector` resource:
  * * `s3-sink-connector`
+ * * `s3-sink-connector-assume-role`
  * * `snowflake-sink-connector`
  * * `managed-datagen-source-connector`
  * * `elasticsearch-sink-connector`
diff --git a/sdk/nodejs/flinkArtifact.ts b/sdk/nodejs/flinkArtifact.ts
index 47640b25..4f590191 100644
--- a/sdk/nodejs/flinkArtifact.ts
+++ b/sdk/nodejs/flinkArtifact.ts
@@ -28,14 +28,14 @@ import * as utilities from "./utilities";
  *
  * ## Import
  *
- * You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
+ * You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<Environment ID>/<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
  *
  * $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
  *
  * $ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
  *
  * ```sh
- * $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main us-east-1/aws/fa-123
+ * $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main env-abc123/us-east-1/aws/fa-123
  * ```
  *
  * !> **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
diff --git a/sdk/nodejs/gateway.ts b/sdk/nodejs/gateway.ts
index f542ebea..294fcf01 100644
--- a/sdk/nodejs/gateway.ts
+++ b/sdk/nodejs/gateway.ts
@@ -75,6 +75,10 @@ export class Gateway extends pulumi.CustomResource {
      * (Optional Configuration Block) supports the following:
      */
     public readonly awsEgressPrivateLinkGateway!: pulumi.Output<outputs.GatewayAwsEgressPrivateLinkGateway>;
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    public readonly awsPrivateNetworkInterfaceGateway!: pulumi.Output<outputs.GatewayAwsPrivateNetworkInterfaceGateway>;
     /**
      * (Optional Configuration Block) supports the following:
      */
@@ -102,6 +106,7 @@ export class Gateway extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState as GatewayState | undefined;
             resourceInputs["awsEgressPrivateLinkGateway"] = state ? state.awsEgressPrivateLinkGateway : undefined;
+            resourceInputs["awsPrivateNetworkInterfaceGateway"] = state ? state.awsPrivateNetworkInterfaceGateway : undefined;
             resourceInputs["azureEgressPrivateLinkGateway"] = state ? state.azureEgressPrivateLinkGateway : undefined;
             resourceInputs["displayName"] = state ? state.displayName : undefined;
             resourceInputs["environment"] = state ? state.environment : undefined;
@@ -114,6 +119,7 @@ export class Gateway extends pulumi.CustomResource {
                 throw new Error("Missing required property 'environment'");
             }
             resourceInputs["awsEgressPrivateLinkGateway"] = args ? args.awsEgressPrivateLinkGateway : undefined;
+            resourceInputs["awsPrivateNetworkInterfaceGateway"] = args ? args.awsPrivateNetworkInterfaceGateway : undefined;
             resourceInputs["azureEgressPrivateLinkGateway"] = args ? args.azureEgressPrivateLinkGateway : undefined;
             resourceInputs["displayName"] = args ? args.displayName : undefined;
             resourceInputs["environment"] = args ? args.environment : undefined;
@@ -131,6 +137,10 @@ export interface GatewayState {
      * (Optional Configuration Block) supports the following:
      */
     awsEgressPrivateLinkGateway?: pulumi.Input<inputs.GatewayAwsEgressPrivateLinkGateway>;
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    awsPrivateNetworkInterfaceGateway?: pulumi.Input<inputs.GatewayAwsPrivateNetworkInterfaceGateway>;
     /**
      * (Optional Configuration Block) supports the following:
      */
@@ -153,6 +163,10 @@ export interface GatewayArgs {
      * (Optional Configuration Block) supports the following:
      */
     awsEgressPrivateLinkGateway?: pulumi.Input<inputs.GatewayAwsEgressPrivateLinkGateway>;
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    awsPrivateNetworkInterfaceGateway?: pulumi.Input<inputs.GatewayAwsPrivateNetworkInterfaceGateway>;
     /**
      * (Optional Configuration Block) supports the following:
      */
diff --git a/sdk/nodejs/getAccessPoint.ts b/sdk/nodejs/getAccessPoint.ts
index 089a82f1..14f26140 100644
--- a/sdk/nodejs/getAccessPoint.ts
+++ b/sdk/nodejs/getAccessPoint.ts
@@ -53,6 +53,10 @@ export interface GetAccessPointResult {
      * (Optional Configuration Block) supports the following:
      */
     readonly awsEgressPrivateLinkEndpoints: outputs.GetAccessPointAwsEgressPrivateLinkEndpoint[];
+    /**
+     * (Optional Configuration Block) Supports the following:
+     */
+    readonly awsPrivateNetworkInterfaces: outputs.GetAccessPointAwsPrivateNetworkInterface[];
     /**
      * (Optional Configuration Block) supports the following:
      */
diff --git a/sdk/nodejs/getCertificateAuthority.ts b/sdk/nodejs/getCertificateAuthority.ts
index cec92803..81b152c7 100644
--- a/sdk/nodejs/getCertificateAuthority.ts
+++ b/sdk/nodejs/getCertificateAuthority.ts
@@ -5,7 +5,7 @@ import * as pulumi from "@pulumi/pulumi";
 import * as utilities from "./utilities";
 
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  *
  * `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
  *
@@ -96,7 +96,7 @@ export interface GetCertificateAuthorityResult {
     readonly serialNumbers: string[];
 }
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  *
  * `confluentcloud.CertificateAuthority` describes a Certificate Authority data source.
  *
diff --git a/sdk/nodejs/getCertificatePool.ts b/sdk/nodejs/getCertificatePool.ts
index ef647556..32218d0e 100644
--- a/sdk/nodejs/getCertificatePool.ts
+++ b/sdk/nodejs/getCertificatePool.ts
@@ -7,7 +7,7 @@ import * as outputs from "./types/output";
 import * as utilities from "./utilities";
 
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  *
  * `confluentcloud.CertificatePool` describes a Certificate Pool data source.
  *
@@ -69,7 +69,7 @@ export interface GetCertificatePoolResult {
     readonly id: string;
 }
 /**
- * [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+ * [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
  *
  * `confluentcloud.CertificatePool` describes a Certificate Pool data source.
  *
diff --git a/sdk/nodejs/getGateway.ts b/sdk/nodejs/getGateway.ts
index b3466075..d0673140 100644
--- a/sdk/nodejs/getGateway.ts
+++ b/sdk/nodejs/getGateway.ts
@@ -57,6 +57,10 @@ export interface GetGatewayResult {
      * (Optional Configuration Block) supports the following:
      */
     readonly awsPeeringGateways: outputs.GetGatewayAwsPeeringGateway[];
+    /**
+     * (Optional Configuration Block) supports the following:
+     */
+    readonly awsPrivateNetworkInterfaceGateways: outputs.GetGatewayAwsPrivateNetworkInterfaceGateway[];
     /**
      * (Optional Configuration Block) supports the following:
      */
diff --git a/sdk/nodejs/getSchemaRegistryClusterConfig.ts b/sdk/nodejs/getSchemaRegistryClusterConfig.ts
index bb01d25a..a2ec115f 100644
--- a/sdk/nodejs/getSchemaRegistryClusterConfig.ts
+++ b/sdk/nodejs/getSchemaRegistryClusterConfig.ts
@@ -68,6 +68,10 @@ export interface GetSchemaRegistryClusterConfigArgs {
  * A collection of values returned by getSchemaRegistryClusterConfig.
  */
 export interface GetSchemaRegistryClusterConfigResult {
+    /**
+     * (Required String) The global Schema Registry compatibility group.
+     */
+    readonly compatibilityGroup: string;
     /**
      * (Required String) The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
diff --git a/sdk/nodejs/getSubjectConfig.ts b/sdk/nodejs/getSubjectConfig.ts
index 79fbfc01..25db5e5b 100644
--- a/sdk/nodejs/getSubjectConfig.ts
+++ b/sdk/nodejs/getSubjectConfig.ts
@@ -43,6 +43,10 @@ export interface GetSubjectConfigArgs {
  * A collection of values returned by getSubjectConfig.
  */
 export interface GetSubjectConfigResult {
+    /**
+     * (Required String) The Compatibility Group of the specified subject.
+     */
+    readonly compatibilityGroup: string;
     /**
      * (Required String) The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
diff --git a/sdk/nodejs/schemaRegistryClusterConfig.ts b/sdk/nodejs/schemaRegistryClusterConfig.ts
index a7970c2e..5ec75ad9 100644
--- a/sdk/nodejs/schemaRegistryClusterConfig.ts
+++ b/sdk/nodejs/schemaRegistryClusterConfig.ts
@@ -34,7 +34,10 @@ import * as utilities from "./utilities";
  * import * as pulumi from "@pulumi/pulumi";
  * import * as confluentcloud from "@pulumi/confluentcloud";
  *
- * const example = new confluentcloud.SchemaRegistryClusterConfig("example", {compatibilityLevel: "FULL"});
+ * const example = new confluentcloud.SchemaRegistryClusterConfig("example", {
+ *     compatibilityLevel: "FULL",
+ *     compatibilityGroup: "abc.cg.version",
+ * });
  * ```
  *
  * ## Import
@@ -81,6 +84,10 @@ export class SchemaRegistryClusterConfig extends pulumi.CustomResource {
         return obj['__pulumiType'] === SchemaRegistryClusterConfig.__pulumiType;
     }
 
+    /**
+     * The global Schema Registry compatibility group.
+     */
+    public readonly compatibilityGroup!: pulumi.Output<string>;
     /**
      * The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
@@ -108,12 +115,14 @@ export class SchemaRegistryClusterConfig extends pulumi.CustomResource {
         opts = opts || {};
         if (opts.id) {
             const state = argsOrState as SchemaRegistryClusterConfigState | undefined;
+            resourceInputs["compatibilityGroup"] = state ? state.compatibilityGroup : undefined;
             resourceInputs["compatibilityLevel"] = state ? state.compatibilityLevel : undefined;
             resourceInputs["credentials"] = state ? state.credentials : undefined;
             resourceInputs["restEndpoint"] = state ? state.restEndpoint : undefined;
             resourceInputs["schemaRegistryCluster"] = state ? state.schemaRegistryCluster : undefined;
         } else {
             const args = argsOrState as SchemaRegistryClusterConfigArgs | undefined;
+            resourceInputs["compatibilityGroup"] = args ? args.compatibilityGroup : undefined;
             resourceInputs["compatibilityLevel"] = args ? args.compatibilityLevel : undefined;
             resourceInputs["credentials"] = args?.credentials ? pulumi.secret(args.credentials) : undefined;
             resourceInputs["restEndpoint"] = args ? args.restEndpoint : undefined;
@@ -130,6 +139,10 @@ export class SchemaRegistryClusterConfig extends pulumi.CustomResource {
  * Input properties used for looking up and filtering SchemaRegistryClusterConfig resources.
  */
 export interface SchemaRegistryClusterConfigState {
+    /**
+     * The global Schema Registry compatibility group.
+     */
+    compatibilityGroup?: pulumi.Input<string>;
     /**
      * The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
@@ -149,6 +162,10 @@ export interface SchemaRegistryClusterConfigState {
  * The set of arguments for constructing a SchemaRegistryClusterConfig resource.
  */
 export interface SchemaRegistryClusterConfigArgs {
+    /**
+     * The global Schema Registry compatibility group.
+     */
+    compatibilityGroup?: pulumi.Input<string>;
     /**
      * The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
diff --git a/sdk/nodejs/subjectConfig.ts b/sdk/nodejs/subjectConfig.ts
index 1b59cf36..81d075df 100644
--- a/sdk/nodejs/subjectConfig.ts
+++ b/sdk/nodejs/subjectConfig.ts
@@ -22,6 +22,7 @@ import * as utilities from "./utilities";
  *     restEndpoint: essentialsConfluentSchemaRegistryCluster.restEndpoint,
  *     subjectName: "proto-purchase-value",
  *     compatibilityLevel: "BACKWARD",
+ *     compatibilityGroup: "abc.cg.version",
  *     credentials: {
  *         key: "<Schema Registry API Key for data.confluent_schema_registry_cluster.essentials>",
  *         secret: "<Schema Registry API Secret for data.confluent_schema_registry_cluster.essentials>",
@@ -38,6 +39,7 @@ import * as utilities from "./utilities";
  * const example = new confluentcloud.SubjectConfig("example", {
  *     subjectName: "proto-purchase-value",
  *     compatibilityLevel: "BACKWARD",
+ *     compatibilityGroup: "abc.cg.version",
  * });
  * ```
  *
@@ -85,6 +87,10 @@ export class SubjectConfig extends pulumi.CustomResource {
         return obj['__pulumiType'] === SubjectConfig.__pulumiType;
     }
 
+    /**
+     * The Compatibility Group of the specified subject.
+     */
+    public readonly compatibilityGroup!: pulumi.Output<string>;
     /**
      * The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
@@ -116,6 +122,7 @@ export class SubjectConfig extends pulumi.CustomResource {
         opts = opts || {};
         if (opts.id) {
             const state = argsOrState as SubjectConfigState | undefined;
+            resourceInputs["compatibilityGroup"] = state ? state.compatibilityGroup : undefined;
             resourceInputs["compatibilityLevel"] = state ? state.compatibilityLevel : undefined;
             resourceInputs["credentials"] = state ? state.credentials : undefined;
             resourceInputs["restEndpoint"] = state ? state.restEndpoint : undefined;
@@ -126,6 +133,7 @@ export class SubjectConfig extends pulumi.CustomResource {
             if ((!args || args.subjectName === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'subjectName'");
             }
+            resourceInputs["compatibilityGroup"] = args ? args.compatibilityGroup : undefined;
             resourceInputs["compatibilityLevel"] = args ? args.compatibilityLevel : undefined;
             resourceInputs["credentials"] = args?.credentials ? pulumi.secret(args.credentials) : undefined;
             resourceInputs["restEndpoint"] = args ? args.restEndpoint : undefined;
@@ -143,6 +151,10 @@ export class SubjectConfig extends pulumi.CustomResource {
  * Input properties used for looking up and filtering SubjectConfig resources.
  */
 export interface SubjectConfigState {
+    /**
+     * The Compatibility Group of the specified subject.
+     */
+    compatibilityGroup?: pulumi.Input<string>;
     /**
      * The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
@@ -166,6 +178,10 @@ export interface SubjectConfigState {
  * The set of arguments for constructing a SubjectConfig resource.
  */
 export interface SubjectConfigArgs {
+    /**
+     * The Compatibility Group of the specified subject.
+     */
+    compatibilityGroup?: pulumi.Input<string>;
     /**
      * The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
      */
diff --git a/sdk/nodejs/types/input.ts b/sdk/nodejs/types/input.ts
index 5b241aff..74648604 100644
--- a/sdk/nodejs/types/input.ts
+++ b/sdk/nodejs/types/input.ts
@@ -24,6 +24,17 @@ export interface AccessPointAwsEgressPrivateLinkEndpoint {
     vpcEndpointServiceName: pulumi.Input<string>;
 }
 
+export interface AccessPointAwsPrivateNetworkInterface {
+    /**
+     * (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     */
+    account: pulumi.Input<string>;
+    /**
+     * (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+     */
+    networkInterfaces: pulumi.Input<pulumi.Input<string>[]>;
+}
+
 export interface AccessPointAzureEgressPrivateLinkEndpoint {
     /**
      * (Required List of Strings) Domains of the Private Endpoint (if any) based off FQDNs in Azure custom DNS configs, which are required in your private DNS setup, for example: `["dbname.database.windows.net", "dbname-region.database.windows.net"]`.
@@ -495,6 +506,21 @@ export interface GatewayAwsEgressPrivateLinkGateway {
     region: pulumi.Input<string>;
 }
 
+export interface GatewayAwsPrivateNetworkInterfaceGateway {
+    /**
+     * (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     */
+    account?: pulumi.Input<string>;
+    /**
+     * AWS region of the Private Network Interface Gateway.
+     */
+    region: pulumi.Input<string>;
+    /**
+     * AWS availability zone ids of the Private Network Interface Gateway.
+     */
+    zones: pulumi.Input<pulumi.Input<string>[]>;
+}
+
 export interface GatewayAzureEgressPrivateLinkGateway {
     /**
      * Azure region of the Gateway, for example, `eastus`.
diff --git a/sdk/nodejs/types/output.ts b/sdk/nodejs/types/output.ts
index 869a4fd3..7d310160 100644
--- a/sdk/nodejs/types/output.ts
+++ b/sdk/nodejs/types/output.ts
@@ -24,6 +24,17 @@ export interface AccessPointAwsEgressPrivateLinkEndpoint {
     vpcEndpointServiceName: string;
 }
 
+export interface AccessPointAwsPrivateNetworkInterface {
+    /**
+     * (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     */
+    account: string;
+    /**
+     * (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+     */
+    networkInterfaces: string[];
+}
+
 export interface AccessPointAzureEgressPrivateLinkEndpoint {
     /**
      * (Required List of Strings) Domains of the Private Endpoint (if any) based off FQDNs in Azure custom DNS configs, which are required in your private DNS setup, for example: `["dbname.database.windows.net", "dbname-region.database.windows.net"]`.
@@ -495,6 +506,21 @@ export interface GatewayAwsEgressPrivateLinkGateway {
     region: string;
 }
 
+export interface GatewayAwsPrivateNetworkInterfaceGateway {
+    /**
+     * (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     */
+    account: string;
+    /**
+     * AWS region of the Private Network Interface Gateway.
+     */
+    region: string;
+    /**
+     * AWS availability zone ids of the Private Network Interface Gateway.
+     */
+    zones: string[];
+}
+
 export interface GatewayAzureEgressPrivateLinkGateway {
     /**
      * Azure region of the Gateway, for example, `eastus`.
@@ -532,6 +558,17 @@ export interface GetAccessPointAwsEgressPrivateLinkEndpoint {
     vpcEndpointServiceName: string;
 }
 
+export interface GetAccessPointAwsPrivateNetworkInterface {
+    /**
+     * (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+     */
+    account: string;
+    /**
+     * (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+     */
+    networkInterfaces: string[];
+}
+
 export interface GetAccessPointAzureEgressPrivateLinkEndpoint {
     /**
      * (Required List of Strings) Domains of the Private Endpoint (if any) based off FQDNs in Azure custom DNS configs, which are required in your private DNS setup, for example: `["dbname.database.windows.net", "dbname-region.database.windows.net"]`.
@@ -759,6 +796,21 @@ export interface GetGatewayAwsPeeringGateway {
     region: string;
 }
 
+export interface GetGatewayAwsPrivateNetworkInterfaceGateway {
+    /**
+     * (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+     */
+    account: string;
+    /**
+     * (Required String) Azure region of the Peering Gateway.
+     */
+    region: string;
+    /**
+     * (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+     */
+    zones: string[];
+}
+
 export interface GetGatewayAzureEgressPrivateLinkGateway {
     /**
      * (Required String) Azure region of the Peering Gateway.
diff --git a/sdk/python/pulumi_confluentcloud/_inputs.py b/sdk/python/pulumi_confluentcloud/_inputs.py
index 1fa868cd..1ca94d8e 100644
--- a/sdk/python/pulumi_confluentcloud/_inputs.py
+++ b/sdk/python/pulumi_confluentcloud/_inputs.py
@@ -17,6 +17,8 @@
 __all__ = [
     'AccessPointAwsEgressPrivateLinkEndpointArgs',
     'AccessPointAwsEgressPrivateLinkEndpointArgsDict',
+    'AccessPointAwsPrivateNetworkInterfaceArgs',
+    'AccessPointAwsPrivateNetworkInterfaceArgsDict',
     'AccessPointAzureEgressPrivateLinkEndpointArgs',
     'AccessPointAzureEgressPrivateLinkEndpointArgsDict',
     'AccessPointEnvironmentArgs',
@@ -103,6 +105,8 @@
     'FlinkStatementPrincipalArgsDict',
     'GatewayAwsEgressPrivateLinkGatewayArgs',
     'GatewayAwsEgressPrivateLinkGatewayArgsDict',
+    'GatewayAwsPrivateNetworkInterfaceGatewayArgs',
+    'GatewayAwsPrivateNetworkInterfaceGatewayArgsDict',
     'GatewayAzureEgressPrivateLinkGatewayArgs',
     'GatewayAzureEgressPrivateLinkGatewayArgsDict',
     'GatewayEnvironmentArgs',
@@ -514,6 +518,56 @@ def vpc_endpoint_id(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "vpc_endpoint_id", value)
 
 
+if not MYPY:
+    class AccessPointAwsPrivateNetworkInterfaceArgsDict(TypedDict):
+        account: pulumi.Input[str]
+        """
+        (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        """
+        network_interfaces: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+elif False:
+    AccessPointAwsPrivateNetworkInterfaceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AccessPointAwsPrivateNetworkInterfaceArgs:
+    def __init__(__self__, *,
+                 account: pulumi.Input[str],
+                 network_interfaces: pulumi.Input[Sequence[pulumi.Input[str]]]):
+        """
+        :param pulumi.Input[str] account: (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] network_interfaces: (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+        pulumi.set(__self__, "account", account)
+        pulumi.set(__self__, "network_interfaces", network_interfaces)
+
+    @property
+    @pulumi.getter
+    def account(self) -> pulumi.Input[str]:
+        """
+        (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        """
+        return pulumi.get(self, "account")
+
+    @account.setter
+    def account(self, value: pulumi.Input[str]):
+        pulumi.set(self, "account", value)
+
+    @property
+    @pulumi.getter(name="networkInterfaces")
+    def network_interfaces(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
+        """
+        (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+        return pulumi.get(self, "network_interfaces")
+
+    @network_interfaces.setter
+    def network_interfaces(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
+        pulumi.set(self, "network_interfaces", value)
+
+
 if not MYPY:
     class AccessPointAzureEgressPrivateLinkEndpointArgsDict(TypedDict):
         private_link_service_resource_id: pulumi.Input[str]
@@ -2671,6 +2725,76 @@ def principal_arn(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "principal_arn", value)
 
 
+if not MYPY:
+    class GatewayAwsPrivateNetworkInterfaceGatewayArgsDict(TypedDict):
+        region: pulumi.Input[str]
+        """
+        AWS region of the Private Network Interface Gateway.
+        """
+        zones: pulumi.Input[Sequence[pulumi.Input[str]]]
+        """
+        AWS availability zone ids of the Private Network Interface Gateway.
+        """
+        account: NotRequired[pulumi.Input[str]]
+        """
+        (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        """
+elif False:
+    GatewayAwsPrivateNetworkInterfaceGatewayArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class GatewayAwsPrivateNetworkInterfaceGatewayArgs:
+    def __init__(__self__, *,
+                 region: pulumi.Input[str],
+                 zones: pulumi.Input[Sequence[pulumi.Input[str]]],
+                 account: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] region: AWS region of the Private Network Interface Gateway.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] zones: AWS availability zone ids of the Private Network Interface Gateway.
+        :param pulumi.Input[str] account: (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        """
+        pulumi.set(__self__, "region", region)
+        pulumi.set(__self__, "zones", zones)
+        if account is not None:
+            pulumi.set(__self__, "account", account)
+
+    @property
+    @pulumi.getter
+    def region(self) -> pulumi.Input[str]:
+        """
+        AWS region of the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "region")
+
+    @region.setter
+    def region(self, value: pulumi.Input[str]):
+        pulumi.set(self, "region", value)
+
+    @property
+    @pulumi.getter
+    def zones(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
+        """
+        AWS availability zone ids of the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "zones")
+
+    @zones.setter
+    def zones(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
+        pulumi.set(self, "zones", value)
+
+    @property
+    @pulumi.getter
+    def account(self) -> Optional[pulumi.Input[str]]:
+        """
+        (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "account")
+
+    @account.setter
+    def account(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "account", value)
+
+
 if not MYPY:
     class GatewayAzureEgressPrivateLinkGatewayArgsDict(TypedDict):
         region: pulumi.Input[str]
diff --git a/sdk/python/pulumi_confluentcloud/access_point.py b/sdk/python/pulumi_confluentcloud/access_point.py
index 4d76e329..4d570fbc 100644
--- a/sdk/python/pulumi_confluentcloud/access_point.py
+++ b/sdk/python/pulumi_confluentcloud/access_point.py
@@ -24,12 +24,14 @@ def __init__(__self__, *,
                  environment: pulumi.Input['AccessPointEnvironmentArgs'],
                  gateway: pulumi.Input['AccessPointGatewayArgs'],
                  aws_egress_private_link_endpoint: Optional[pulumi.Input['AccessPointAwsEgressPrivateLinkEndpointArgs']] = None,
+                 aws_private_network_interface: Optional[pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs']] = None,
                  azure_egress_private_link_endpoint: Optional[pulumi.Input['AccessPointAzureEgressPrivateLinkEndpointArgs']] = None,
                  display_name: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a AccessPoint resource.
         :param pulumi.Input['AccessPointEnvironmentArgs'] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
         :param pulumi.Input['AccessPointAwsEgressPrivateLinkEndpointArgs'] aws_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
+        :param pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs'] aws_private_network_interface: (Optional Configuration Block) supports the following:
         :param pulumi.Input['AccessPointAzureEgressPrivateLinkEndpointArgs'] azure_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Access Point.
         """
@@ -37,6 +39,8 @@ def __init__(__self__, *,
         pulumi.set(__self__, "gateway", gateway)
         if aws_egress_private_link_endpoint is not None:
             pulumi.set(__self__, "aws_egress_private_link_endpoint", aws_egress_private_link_endpoint)
+        if aws_private_network_interface is not None:
+            pulumi.set(__self__, "aws_private_network_interface", aws_private_network_interface)
         if azure_egress_private_link_endpoint is not None:
             pulumi.set(__self__, "azure_egress_private_link_endpoint", azure_egress_private_link_endpoint)
         if display_name is not None:
@@ -75,6 +79,18 @@ def aws_egress_private_link_endpoint(self) -> Optional[pulumi.Input['AccessPoint
     def aws_egress_private_link_endpoint(self, value: Optional[pulumi.Input['AccessPointAwsEgressPrivateLinkEndpointArgs']]):
         pulumi.set(self, "aws_egress_private_link_endpoint", value)
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterface")
+    def aws_private_network_interface(self) -> Optional[pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs']]:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface")
+
+    @aws_private_network_interface.setter
+    def aws_private_network_interface(self, value: Optional[pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs']]):
+        pulumi.set(self, "aws_private_network_interface", value)
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkEndpoint")
     def azure_egress_private_link_endpoint(self) -> Optional[pulumi.Input['AccessPointAzureEgressPrivateLinkEndpointArgs']]:
@@ -104,6 +120,7 @@ def display_name(self, value: Optional[pulumi.Input[str]]):
 class _AccessPointState:
     def __init__(__self__, *,
                  aws_egress_private_link_endpoint: Optional[pulumi.Input['AccessPointAwsEgressPrivateLinkEndpointArgs']] = None,
+                 aws_private_network_interface: Optional[pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs']] = None,
                  azure_egress_private_link_endpoint: Optional[pulumi.Input['AccessPointAzureEgressPrivateLinkEndpointArgs']] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  environment: Optional[pulumi.Input['AccessPointEnvironmentArgs']] = None,
@@ -111,12 +128,15 @@ def __init__(__self__, *,
         """
         Input properties used for looking up and filtering AccessPoint resources.
         :param pulumi.Input['AccessPointAwsEgressPrivateLinkEndpointArgs'] aws_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
+        :param pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs'] aws_private_network_interface: (Optional Configuration Block) supports the following:
         :param pulumi.Input['AccessPointAzureEgressPrivateLinkEndpointArgs'] azure_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Access Point.
         :param pulumi.Input['AccessPointEnvironmentArgs'] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
         """
         if aws_egress_private_link_endpoint is not None:
             pulumi.set(__self__, "aws_egress_private_link_endpoint", aws_egress_private_link_endpoint)
+        if aws_private_network_interface is not None:
+            pulumi.set(__self__, "aws_private_network_interface", aws_private_network_interface)
         if azure_egress_private_link_endpoint is not None:
             pulumi.set(__self__, "azure_egress_private_link_endpoint", azure_egress_private_link_endpoint)
         if display_name is not None:
@@ -138,6 +158,18 @@ def aws_egress_private_link_endpoint(self) -> Optional[pulumi.Input['AccessPoint
     def aws_egress_private_link_endpoint(self, value: Optional[pulumi.Input['AccessPointAwsEgressPrivateLinkEndpointArgs']]):
         pulumi.set(self, "aws_egress_private_link_endpoint", value)
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterface")
+    def aws_private_network_interface(self) -> Optional[pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs']]:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface")
+
+    @aws_private_network_interface.setter
+    def aws_private_network_interface(self, value: Optional[pulumi.Input['AccessPointAwsPrivateNetworkInterfaceArgs']]):
+        pulumi.set(self, "aws_private_network_interface", value)
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkEndpoint")
     def azure_egress_private_link_endpoint(self) -> Optional[pulumi.Input['AccessPointAzureEgressPrivateLinkEndpointArgs']]:
@@ -190,6 +222,7 @@ def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  aws_egress_private_link_endpoint: Optional[pulumi.Input[Union['AccessPointAwsEgressPrivateLinkEndpointArgs', 'AccessPointAwsEgressPrivateLinkEndpointArgsDict']]] = None,
+                 aws_private_network_interface: Optional[pulumi.Input[Union['AccessPointAwsPrivateNetworkInterfaceArgs', 'AccessPointAwsPrivateNetworkInterfaceArgsDict']]] = None,
                  azure_egress_private_link_endpoint: Optional[pulumi.Input[Union['AccessPointAzureEgressPrivateLinkEndpointArgs', 'AccessPointAzureEgressPrivateLinkEndpointArgsDict']]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  environment: Optional[pulumi.Input[Union['AccessPointEnvironmentArgs', 'AccessPointEnvironmentArgsDict']]] = None,
@@ -249,6 +282,7 @@ def __init__(__self__,
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['AccessPointAwsEgressPrivateLinkEndpointArgs', 'AccessPointAwsEgressPrivateLinkEndpointArgsDict']] aws_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
+        :param pulumi.Input[Union['AccessPointAwsPrivateNetworkInterfaceArgs', 'AccessPointAwsPrivateNetworkInterfaceArgsDict']] aws_private_network_interface: (Optional Configuration Block) supports the following:
         :param pulumi.Input[Union['AccessPointAzureEgressPrivateLinkEndpointArgs', 'AccessPointAzureEgressPrivateLinkEndpointArgsDict']] azure_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Access Point.
         :param pulumi.Input[Union['AccessPointEnvironmentArgs', 'AccessPointEnvironmentArgsDict']] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
@@ -326,6 +360,7 @@ def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  aws_egress_private_link_endpoint: Optional[pulumi.Input[Union['AccessPointAwsEgressPrivateLinkEndpointArgs', 'AccessPointAwsEgressPrivateLinkEndpointArgsDict']]] = None,
+                 aws_private_network_interface: Optional[pulumi.Input[Union['AccessPointAwsPrivateNetworkInterfaceArgs', 'AccessPointAwsPrivateNetworkInterfaceArgsDict']]] = None,
                  azure_egress_private_link_endpoint: Optional[pulumi.Input[Union['AccessPointAzureEgressPrivateLinkEndpointArgs', 'AccessPointAzureEgressPrivateLinkEndpointArgsDict']]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  environment: Optional[pulumi.Input[Union['AccessPointEnvironmentArgs', 'AccessPointEnvironmentArgsDict']]] = None,
@@ -340,6 +375,7 @@ def _internal_init(__self__,
             __props__ = AccessPointArgs.__new__(AccessPointArgs)
 
             __props__.__dict__["aws_egress_private_link_endpoint"] = aws_egress_private_link_endpoint
+            __props__.__dict__["aws_private_network_interface"] = aws_private_network_interface
             __props__.__dict__["azure_egress_private_link_endpoint"] = azure_egress_private_link_endpoint
             __props__.__dict__["display_name"] = display_name
             if environment is None and not opts.urn:
@@ -359,6 +395,7 @@ def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             aws_egress_private_link_endpoint: Optional[pulumi.Input[Union['AccessPointAwsEgressPrivateLinkEndpointArgs', 'AccessPointAwsEgressPrivateLinkEndpointArgsDict']]] = None,
+            aws_private_network_interface: Optional[pulumi.Input[Union['AccessPointAwsPrivateNetworkInterfaceArgs', 'AccessPointAwsPrivateNetworkInterfaceArgsDict']]] = None,
             azure_egress_private_link_endpoint: Optional[pulumi.Input[Union['AccessPointAzureEgressPrivateLinkEndpointArgs', 'AccessPointAzureEgressPrivateLinkEndpointArgsDict']]] = None,
             display_name: Optional[pulumi.Input[str]] = None,
             environment: Optional[pulumi.Input[Union['AccessPointEnvironmentArgs', 'AccessPointEnvironmentArgsDict']]] = None,
@@ -371,6 +408,7 @@ def get(resource_name: str,
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['AccessPointAwsEgressPrivateLinkEndpointArgs', 'AccessPointAwsEgressPrivateLinkEndpointArgsDict']] aws_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
+        :param pulumi.Input[Union['AccessPointAwsPrivateNetworkInterfaceArgs', 'AccessPointAwsPrivateNetworkInterfaceArgsDict']] aws_private_network_interface: (Optional Configuration Block) supports the following:
         :param pulumi.Input[Union['AccessPointAzureEgressPrivateLinkEndpointArgs', 'AccessPointAzureEgressPrivateLinkEndpointArgsDict']] azure_egress_private_link_endpoint: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Access Point.
         :param pulumi.Input[Union['AccessPointEnvironmentArgs', 'AccessPointEnvironmentArgsDict']] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
@@ -380,6 +418,7 @@ def get(resource_name: str,
         __props__ = _AccessPointState.__new__(_AccessPointState)
 
         __props__.__dict__["aws_egress_private_link_endpoint"] = aws_egress_private_link_endpoint
+        __props__.__dict__["aws_private_network_interface"] = aws_private_network_interface
         __props__.__dict__["azure_egress_private_link_endpoint"] = azure_egress_private_link_endpoint
         __props__.__dict__["display_name"] = display_name
         __props__.__dict__["environment"] = environment
@@ -394,6 +433,14 @@ def aws_egress_private_link_endpoint(self) -> pulumi.Output[Optional['outputs.Ac
         """
         return pulumi.get(self, "aws_egress_private_link_endpoint")
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterface")
+    def aws_private_network_interface(self) -> pulumi.Output[Optional['outputs.AccessPointAwsPrivateNetworkInterface']]:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface")
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkEndpoint")
     def azure_egress_private_link_endpoint(self) -> pulumi.Output[Optional['outputs.AccessPointAzureEgressPrivateLinkEndpoint']]:
diff --git a/sdk/python/pulumi_confluentcloud/certificate_authority.py b/sdk/python/pulumi_confluentcloud/certificate_authority.py
index ad9356a2..9562302c 100644
--- a/sdk/python/pulumi_confluentcloud/certificate_authority.py
+++ b/sdk/python/pulumi_confluentcloud/certificate_authority.py
@@ -313,7 +313,7 @@ def __init__(__self__,
                  display_name: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
-        [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
         `CertificateAuthority` provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.
 
@@ -360,7 +360,7 @@ def __init__(__self__,
                  args: CertificateAuthorityArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
         `CertificateAuthority` provides a Certificate Authority resource that enables creating, editing, and deleting Certificate Authorities on Confluent Cloud.
 
diff --git a/sdk/python/pulumi_confluentcloud/certificate_pool.py b/sdk/python/pulumi_confluentcloud/certificate_pool.py
index 4551a027..aa5015d5 100644
--- a/sdk/python/pulumi_confluentcloud/certificate_pool.py
+++ b/sdk/python/pulumi_confluentcloud/certificate_pool.py
@@ -193,7 +193,7 @@ def __init__(__self__,
                  filter: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
-        [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
         `CertificatePool` provides a Certificate Pool resource that enables creating, editing, and deleting Certificate Pools on Confluent Cloud.
 
@@ -241,7 +241,7 @@ def __init__(__self__,
                  args: CertificatePoolArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+        [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
         `CertificatePool` provides a Certificate Pool resource that enables creating, editing, and deleting Certificate Pools on Confluent Cloud.
 
diff --git a/sdk/python/pulumi_confluentcloud/connector.py b/sdk/python/pulumi_confluentcloud/connector.py
index 552713a3..7a517ebc 100644
--- a/sdk/python/pulumi_confluentcloud/connector.py
+++ b/sdk/python/pulumi_confluentcloud/connector.py
@@ -218,6 +218,7 @@ def __init__(__self__,
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/managed-datagen-source-connector
         source = confluentcloud.Connector("source",
             environment={
                 "id": staging["id"],
@@ -249,6 +250,7 @@ def __init__(__self__,
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector
         sink = confluentcloud.Connector("sink",
             environment={
                 "id": staging["id"],
@@ -286,11 +288,56 @@ def __init__(__self__,
                 ]))
         ```
 
+        ### Example Managed [Amazon S3 Sink Connector](https://docs.confluent.io/cloud/current/connectors/cc-s3-sink.html) that uses a service account to communicate with your Kafka cluster and IAM Roles for AWS authentication
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector-assume-role
+        sink = confluentcloud.Connector("sink",
+            environment={
+                "id": staging["id"],
+            },
+            kafka_cluster={
+                "id": basic["id"],
+            },
+            config_sensitive={},
+            config_nonsensitive={
+                "topics": orders["topicName"],
+                "input.data.format": "JSON",
+                "connector.class": "S3_SINK",
+                "name": "S3_SINKConnector_0",
+                "kafka.auth.mode": "SERVICE_ACCOUNT",
+                "kafka.service.account.id": app_connector["id"],
+                "s3.bucket.name": "<s3-bucket-name>",
+                "output.data.format": "JSON",
+                "time.interval": "DAILY",
+                "flush.size": "1000",
+                "tasks.max": "1",
+                "authentication.method": "IAM Roles",
+                "provider.integration.id": main["id"],
+            },
+            opts = pulumi.ResourceOptions(depends_on=[
+                    app_connector_describe_on_cluster,
+                    app_connector_read_on_target_topic,
+                    app_connector_create_on_dlq_lcc_topics,
+                    app_connector_write_on_dlq_lcc_topics,
+                    app_connector_create_on_success_lcc_topics,
+                    app_connector_write_on_success_lcc_topics,
+                    app_connector_create_on_error_lcc_topics,
+                    app_connector_write_on_error_lcc_topics,
+                    app_connector_read_on_connect_lcc_group,
+                    main,
+                    s3_access_role,
+                ]))
+        ```
+
         ### Example Managed [Amazon DynamoDB Connector](https://docs.confluent.io/cloud/current/connectors/cc-amazon-dynamo-db-sink.html) that uses a service account to communicate with your Kafka cluster
         ```python
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/dynamo-db-sink-connector
         sink = confluentcloud.Connector("sink",
             environment={
                 "id": staging["id"],
@@ -327,11 +374,11 @@ def __init__(__self__,
         ```
 
         ### Example Custom [Datagen Source Connector](https://www.confluent.io/hub/confluentinc/kafka-connect-datagen) that uses a Kafka API Key to communicate with your Kafka cluster
-
         ```python
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/custom-datagen-source-connector
         source = confluentcloud.Connector("source",
             environment={
                 "id": staging["id"],
@@ -359,13 +406,11 @@ def __init__(__self__,
             opts = pulumi.ResourceOptions(depends_on=[app_manager_kafka_cluster_admin]))
         ```
 
-        > **Note:** Custom connectors are available in **Preview** for early adopters. Preview features are introduced to gather customer feedback. This feature should be used only for evaluation and non-production testing purposes or to provide feedback to Confluent, particularly as it becomes more widely available in follow-on editions.\\
-        **Preview** features are intended for evaluation use in development and testing environments only, and not for production use. The warranty, SLA, and Support Services provisions of your agreement with Confluent do not apply to Preview features. Preview features are considered to be a Proof of Concept as defined in the Confluent Cloud Terms of Service. Confluent may discontinue providing preview releases of the Preview features at any time in Confluent’s sole discretion.
-
         ## Getting Started
 
         The following end-to-end examples might help to get started with `Connector` resource:
         * `s3-sink-connector`
+        * `s3-sink-connector-assume-role`
         * `snowflake-sink-connector`
         * `managed-datagen-source-connector`
         * `elasticsearch-sink-connector`
@@ -415,6 +460,7 @@ def __init__(__self__,
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/managed-datagen-source-connector
         source = confluentcloud.Connector("source",
             environment={
                 "id": staging["id"],
@@ -446,6 +492,7 @@ def __init__(__self__,
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector
         sink = confluentcloud.Connector("sink",
             environment={
                 "id": staging["id"],
@@ -483,11 +530,56 @@ def __init__(__self__,
                 ]))
         ```
 
+        ### Example Managed [Amazon S3 Sink Connector](https://docs.confluent.io/cloud/current/connectors/cc-s3-sink.html) that uses a service account to communicate with your Kafka cluster and IAM Roles for AWS authentication
+        ```python
+        import pulumi
+        import pulumi_confluentcloud as confluentcloud
+
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/s3-sink-connector-assume-role
+        sink = confluentcloud.Connector("sink",
+            environment={
+                "id": staging["id"],
+            },
+            kafka_cluster={
+                "id": basic["id"],
+            },
+            config_sensitive={},
+            config_nonsensitive={
+                "topics": orders["topicName"],
+                "input.data.format": "JSON",
+                "connector.class": "S3_SINK",
+                "name": "S3_SINKConnector_0",
+                "kafka.auth.mode": "SERVICE_ACCOUNT",
+                "kafka.service.account.id": app_connector["id"],
+                "s3.bucket.name": "<s3-bucket-name>",
+                "output.data.format": "JSON",
+                "time.interval": "DAILY",
+                "flush.size": "1000",
+                "tasks.max": "1",
+                "authentication.method": "IAM Roles",
+                "provider.integration.id": main["id"],
+            },
+            opts = pulumi.ResourceOptions(depends_on=[
+                    app_connector_describe_on_cluster,
+                    app_connector_read_on_target_topic,
+                    app_connector_create_on_dlq_lcc_topics,
+                    app_connector_write_on_dlq_lcc_topics,
+                    app_connector_create_on_success_lcc_topics,
+                    app_connector_write_on_success_lcc_topics,
+                    app_connector_create_on_error_lcc_topics,
+                    app_connector_write_on_error_lcc_topics,
+                    app_connector_read_on_connect_lcc_group,
+                    main,
+                    s3_access_role,
+                ]))
+        ```
+
         ### Example Managed [Amazon DynamoDB Connector](https://docs.confluent.io/cloud/current/connectors/cc-amazon-dynamo-db-sink.html) that uses a service account to communicate with your Kafka cluster
         ```python
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/dynamo-db-sink-connector
         sink = confluentcloud.Connector("sink",
             environment={
                 "id": staging["id"],
@@ -524,11 +616,11 @@ def __init__(__self__,
         ```
 
         ### Example Custom [Datagen Source Connector](https://www.confluent.io/hub/confluentinc/kafka-connect-datagen) that uses a Kafka API Key to communicate with your Kafka cluster
-
         ```python
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
+        # https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/connectors/custom-datagen-source-connector
         source = confluentcloud.Connector("source",
             environment={
                 "id": staging["id"],
@@ -556,13 +648,11 @@ def __init__(__self__,
             opts = pulumi.ResourceOptions(depends_on=[app_manager_kafka_cluster_admin]))
         ```
 
-        > **Note:** Custom connectors are available in **Preview** for early adopters. Preview features are introduced to gather customer feedback. This feature should be used only for evaluation and non-production testing purposes or to provide feedback to Confluent, particularly as it becomes more widely available in follow-on editions.\\
-        **Preview** features are intended for evaluation use in development and testing environments only, and not for production use. The warranty, SLA, and Support Services provisions of your agreement with Confluent do not apply to Preview features. Preview features are considered to be a Proof of Concept as defined in the Confluent Cloud Terms of Service. Confluent may discontinue providing preview releases of the Preview features at any time in Confluent’s sole discretion.
-
         ## Getting Started
 
         The following end-to-end examples might help to get started with `Connector` resource:
         * `s3-sink-connector`
+        * `s3-sink-connector-assume-role`
         * `snowflake-sink-connector`
         * `managed-datagen-source-connector`
         * `elasticsearch-sink-connector`
diff --git a/sdk/python/pulumi_confluentcloud/flink_artifact.py b/sdk/python/pulumi_confluentcloud/flink_artifact.py
index ba601276..97d92a5a 100644
--- a/sdk/python/pulumi_confluentcloud/flink_artifact.py
+++ b/sdk/python/pulumi_confluentcloud/flink_artifact.py
@@ -401,14 +401,14 @@ def __init__(__self__,
 
         ## Import
 
-        You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
+        You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<Environment ID>/<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
 
         $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
 
         $ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
 
         ```sh
-        $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main us-east-1/aws/fa-123
+        $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main env-abc123/us-east-1/aws/fa-123
         ```
 
         !> **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
@@ -452,14 +452,14 @@ def __init__(__self__,
 
         ## Import
 
-        You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
+        You can import a Flink Artifact by using cloud, region, Flink Artifact ID and artifact file, in the format `<Environment ID>/<region>/<cloud>/<Flink Artifact ID>`. The following example shows how to import a Flink Artifact:
 
         $ export CONFLUENT_CLOUD_API_KEY="<cloud_api_key>"
 
         $ export CONFLUENT_CLOUD_API_SECRET="<cloud_api_secret>"
 
         ```sh
-        $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main us-east-1/aws/fa-123
+        $ pulumi import confluentcloud:index/flinkArtifact:FlinkArtifact main env-abc123/us-east-1/aws/fa-123
         ```
 
         !> **Warning:** Do not forget to delete terminal command history afterwards for security purposes.
diff --git a/sdk/python/pulumi_confluentcloud/gateway.py b/sdk/python/pulumi_confluentcloud/gateway.py
index 3f55c02d..9e8e5f4f 100644
--- a/sdk/python/pulumi_confluentcloud/gateway.py
+++ b/sdk/python/pulumi_confluentcloud/gateway.py
@@ -24,18 +24,22 @@ def __init__(__self__, *,
                  display_name: pulumi.Input[str],
                  environment: pulumi.Input['GatewayEnvironmentArgs'],
                  aws_egress_private_link_gateway: Optional[pulumi.Input['GatewayAwsEgressPrivateLinkGatewayArgs']] = None,
+                 aws_private_network_interface_gateway: Optional[pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs']] = None,
                  azure_egress_private_link_gateway: Optional[pulumi.Input['GatewayAzureEgressPrivateLinkGatewayArgs']] = None):
         """
         The set of arguments for constructing a Gateway resource.
         :param pulumi.Input[str] display_name: The name of the Gateway.
         :param pulumi.Input['GatewayEnvironmentArgs'] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
         :param pulumi.Input['GatewayAwsEgressPrivateLinkGatewayArgs'] aws_egress_private_link_gateway: (Optional Configuration Block) supports the following:
+        :param pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs'] aws_private_network_interface_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input['GatewayAzureEgressPrivateLinkGatewayArgs'] azure_egress_private_link_gateway: (Optional Configuration Block) supports the following:
         """
         pulumi.set(__self__, "display_name", display_name)
         pulumi.set(__self__, "environment", environment)
         if aws_egress_private_link_gateway is not None:
             pulumi.set(__self__, "aws_egress_private_link_gateway", aws_egress_private_link_gateway)
+        if aws_private_network_interface_gateway is not None:
+            pulumi.set(__self__, "aws_private_network_interface_gateway", aws_private_network_interface_gateway)
         if azure_egress_private_link_gateway is not None:
             pulumi.set(__self__, "azure_egress_private_link_gateway", azure_egress_private_link_gateway)
 
@@ -75,6 +79,18 @@ def aws_egress_private_link_gateway(self) -> Optional[pulumi.Input['GatewayAwsEg
     def aws_egress_private_link_gateway(self, value: Optional[pulumi.Input['GatewayAwsEgressPrivateLinkGatewayArgs']]):
         pulumi.set(self, "aws_egress_private_link_gateway", value)
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterfaceGateway")
+    def aws_private_network_interface_gateway(self) -> Optional[pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs']]:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface_gateway")
+
+    @aws_private_network_interface_gateway.setter
+    def aws_private_network_interface_gateway(self, value: Optional[pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs']]):
+        pulumi.set(self, "aws_private_network_interface_gateway", value)
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkGateway")
     def azure_egress_private_link_gateway(self) -> Optional[pulumi.Input['GatewayAzureEgressPrivateLinkGatewayArgs']]:
@@ -92,18 +108,22 @@ def azure_egress_private_link_gateway(self, value: Optional[pulumi.Input['Gatewa
 class _GatewayState:
     def __init__(__self__, *,
                  aws_egress_private_link_gateway: Optional[pulumi.Input['GatewayAwsEgressPrivateLinkGatewayArgs']] = None,
+                 aws_private_network_interface_gateway: Optional[pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs']] = None,
                  azure_egress_private_link_gateway: Optional[pulumi.Input['GatewayAzureEgressPrivateLinkGatewayArgs']] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  environment: Optional[pulumi.Input['GatewayEnvironmentArgs']] = None):
         """
         Input properties used for looking up and filtering Gateway resources.
         :param pulumi.Input['GatewayAwsEgressPrivateLinkGatewayArgs'] aws_egress_private_link_gateway: (Optional Configuration Block) supports the following:
+        :param pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs'] aws_private_network_interface_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input['GatewayAzureEgressPrivateLinkGatewayArgs'] azure_egress_private_link_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Gateway.
         :param pulumi.Input['GatewayEnvironmentArgs'] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
         """
         if aws_egress_private_link_gateway is not None:
             pulumi.set(__self__, "aws_egress_private_link_gateway", aws_egress_private_link_gateway)
+        if aws_private_network_interface_gateway is not None:
+            pulumi.set(__self__, "aws_private_network_interface_gateway", aws_private_network_interface_gateway)
         if azure_egress_private_link_gateway is not None:
             pulumi.set(__self__, "azure_egress_private_link_gateway", azure_egress_private_link_gateway)
         if display_name is not None:
@@ -123,6 +143,18 @@ def aws_egress_private_link_gateway(self) -> Optional[pulumi.Input['GatewayAwsEg
     def aws_egress_private_link_gateway(self, value: Optional[pulumi.Input['GatewayAwsEgressPrivateLinkGatewayArgs']]):
         pulumi.set(self, "aws_egress_private_link_gateway", value)
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterfaceGateway")
+    def aws_private_network_interface_gateway(self) -> Optional[pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs']]:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface_gateway")
+
+    @aws_private_network_interface_gateway.setter
+    def aws_private_network_interface_gateway(self, value: Optional[pulumi.Input['GatewayAwsPrivateNetworkInterfaceGatewayArgs']]):
+        pulumi.set(self, "aws_private_network_interface_gateway", value)
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkGateway")
     def azure_egress_private_link_gateway(self) -> Optional[pulumi.Input['GatewayAzureEgressPrivateLinkGatewayArgs']]:
@@ -166,6 +198,7 @@ def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  aws_egress_private_link_gateway: Optional[pulumi.Input[Union['GatewayAwsEgressPrivateLinkGatewayArgs', 'GatewayAwsEgressPrivateLinkGatewayArgsDict']]] = None,
+                 aws_private_network_interface_gateway: Optional[pulumi.Input[Union['GatewayAwsPrivateNetworkInterfaceGatewayArgs', 'GatewayAwsPrivateNetworkInterfaceGatewayArgsDict']]] = None,
                  azure_egress_private_link_gateway: Optional[pulumi.Input[Union['GatewayAzureEgressPrivateLinkGatewayArgs', 'GatewayAzureEgressPrivateLinkGatewayArgsDict']]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  environment: Optional[pulumi.Input[Union['GatewayEnvironmentArgs', 'GatewayEnvironmentArgsDict']]] = None,
@@ -209,6 +242,7 @@ def __init__(__self__,
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['GatewayAwsEgressPrivateLinkGatewayArgs', 'GatewayAwsEgressPrivateLinkGatewayArgsDict']] aws_egress_private_link_gateway: (Optional Configuration Block) supports the following:
+        :param pulumi.Input[Union['GatewayAwsPrivateNetworkInterfaceGatewayArgs', 'GatewayAwsPrivateNetworkInterfaceGatewayArgsDict']] aws_private_network_interface_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input[Union['GatewayAzureEgressPrivateLinkGatewayArgs', 'GatewayAzureEgressPrivateLinkGatewayArgsDict']] azure_egress_private_link_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Gateway.
         :param pulumi.Input[Union['GatewayEnvironmentArgs', 'GatewayEnvironmentArgsDict']] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
@@ -271,6 +305,7 @@ def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  aws_egress_private_link_gateway: Optional[pulumi.Input[Union['GatewayAwsEgressPrivateLinkGatewayArgs', 'GatewayAwsEgressPrivateLinkGatewayArgsDict']]] = None,
+                 aws_private_network_interface_gateway: Optional[pulumi.Input[Union['GatewayAwsPrivateNetworkInterfaceGatewayArgs', 'GatewayAwsPrivateNetworkInterfaceGatewayArgsDict']]] = None,
                  azure_egress_private_link_gateway: Optional[pulumi.Input[Union['GatewayAzureEgressPrivateLinkGatewayArgs', 'GatewayAzureEgressPrivateLinkGatewayArgsDict']]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  environment: Optional[pulumi.Input[Union['GatewayEnvironmentArgs', 'GatewayEnvironmentArgsDict']]] = None,
@@ -284,6 +319,7 @@ def _internal_init(__self__,
             __props__ = GatewayArgs.__new__(GatewayArgs)
 
             __props__.__dict__["aws_egress_private_link_gateway"] = aws_egress_private_link_gateway
+            __props__.__dict__["aws_private_network_interface_gateway"] = aws_private_network_interface_gateway
             __props__.__dict__["azure_egress_private_link_gateway"] = azure_egress_private_link_gateway
             if display_name is None and not opts.urn:
                 raise TypeError("Missing required property 'display_name'")
@@ -302,6 +338,7 @@ def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             aws_egress_private_link_gateway: Optional[pulumi.Input[Union['GatewayAwsEgressPrivateLinkGatewayArgs', 'GatewayAwsEgressPrivateLinkGatewayArgsDict']]] = None,
+            aws_private_network_interface_gateway: Optional[pulumi.Input[Union['GatewayAwsPrivateNetworkInterfaceGatewayArgs', 'GatewayAwsPrivateNetworkInterfaceGatewayArgsDict']]] = None,
             azure_egress_private_link_gateway: Optional[pulumi.Input[Union['GatewayAzureEgressPrivateLinkGatewayArgs', 'GatewayAzureEgressPrivateLinkGatewayArgsDict']]] = None,
             display_name: Optional[pulumi.Input[str]] = None,
             environment: Optional[pulumi.Input[Union['GatewayEnvironmentArgs', 'GatewayEnvironmentArgsDict']]] = None) -> 'Gateway':
@@ -313,6 +350,7 @@ def get(resource_name: str,
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['GatewayAwsEgressPrivateLinkGatewayArgs', 'GatewayAwsEgressPrivateLinkGatewayArgsDict']] aws_egress_private_link_gateway: (Optional Configuration Block) supports the following:
+        :param pulumi.Input[Union['GatewayAwsPrivateNetworkInterfaceGatewayArgs', 'GatewayAwsPrivateNetworkInterfaceGatewayArgsDict']] aws_private_network_interface_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input[Union['GatewayAzureEgressPrivateLinkGatewayArgs', 'GatewayAzureEgressPrivateLinkGatewayArgsDict']] azure_egress_private_link_gateway: (Optional Configuration Block) supports the following:
         :param pulumi.Input[str] display_name: The name of the Gateway.
         :param pulumi.Input[Union['GatewayEnvironmentArgs', 'GatewayEnvironmentArgsDict']] environment: Environment objects represent an isolated namespace for your Confluent resources for organizational purposes.
@@ -322,6 +360,7 @@ def get(resource_name: str,
         __props__ = _GatewayState.__new__(_GatewayState)
 
         __props__.__dict__["aws_egress_private_link_gateway"] = aws_egress_private_link_gateway
+        __props__.__dict__["aws_private_network_interface_gateway"] = aws_private_network_interface_gateway
         __props__.__dict__["azure_egress_private_link_gateway"] = azure_egress_private_link_gateway
         __props__.__dict__["display_name"] = display_name
         __props__.__dict__["environment"] = environment
@@ -335,6 +374,14 @@ def aws_egress_private_link_gateway(self) -> pulumi.Output['outputs.GatewayAwsEg
         """
         return pulumi.get(self, "aws_egress_private_link_gateway")
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterfaceGateway")
+    def aws_private_network_interface_gateway(self) -> pulumi.Output['outputs.GatewayAwsPrivateNetworkInterfaceGateway']:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface_gateway")
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkGateway")
     def azure_egress_private_link_gateway(self) -> pulumi.Output['outputs.GatewayAzureEgressPrivateLinkGateway']:
diff --git a/sdk/python/pulumi_confluentcloud/get_access_point.py b/sdk/python/pulumi_confluentcloud/get_access_point.py
index 40e95ad0..291dd7d4 100644
--- a/sdk/python/pulumi_confluentcloud/get_access_point.py
+++ b/sdk/python/pulumi_confluentcloud/get_access_point.py
@@ -28,10 +28,13 @@ class GetAccessPointResult:
     """
     A collection of values returned by getAccessPoint.
     """
-    def __init__(__self__, aws_egress_private_link_endpoints=None, azure_egress_private_link_endpoints=None, display_name=None, environment=None, gateways=None, id=None):
+    def __init__(__self__, aws_egress_private_link_endpoints=None, aws_private_network_interfaces=None, azure_egress_private_link_endpoints=None, display_name=None, environment=None, gateways=None, id=None):
         if aws_egress_private_link_endpoints and not isinstance(aws_egress_private_link_endpoints, list):
             raise TypeError("Expected argument 'aws_egress_private_link_endpoints' to be a list")
         pulumi.set(__self__, "aws_egress_private_link_endpoints", aws_egress_private_link_endpoints)
+        if aws_private_network_interfaces and not isinstance(aws_private_network_interfaces, list):
+            raise TypeError("Expected argument 'aws_private_network_interfaces' to be a list")
+        pulumi.set(__self__, "aws_private_network_interfaces", aws_private_network_interfaces)
         if azure_egress_private_link_endpoints and not isinstance(azure_egress_private_link_endpoints, list):
             raise TypeError("Expected argument 'azure_egress_private_link_endpoints' to be a list")
         pulumi.set(__self__, "azure_egress_private_link_endpoints", azure_egress_private_link_endpoints)
@@ -56,6 +59,14 @@ def aws_egress_private_link_endpoints(self) -> Sequence['outputs.GetAccessPointA
         """
         return pulumi.get(self, "aws_egress_private_link_endpoints")
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterfaces")
+    def aws_private_network_interfaces(self) -> Sequence['outputs.GetAccessPointAwsPrivateNetworkInterfaceResult']:
+        """
+        (Optional Configuration Block) Supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interfaces")
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkEndpoints")
     def azure_egress_private_link_endpoints(self) -> Sequence['outputs.GetAccessPointAzureEgressPrivateLinkEndpointResult']:
@@ -101,6 +112,7 @@ def __await__(self):
             yield self
         return GetAccessPointResult(
             aws_egress_private_link_endpoints=self.aws_egress_private_link_endpoints,
+            aws_private_network_interfaces=self.aws_private_network_interfaces,
             azure_egress_private_link_endpoints=self.azure_egress_private_link_endpoints,
             display_name=self.display_name,
             environment=self.environment,
@@ -140,6 +152,7 @@ def get_access_point(environment: Optional[Union['GetAccessPointEnvironmentArgs'
 
     return AwaitableGetAccessPointResult(
         aws_egress_private_link_endpoints=pulumi.get(__ret__, 'aws_egress_private_link_endpoints'),
+        aws_private_network_interfaces=pulumi.get(__ret__, 'aws_private_network_interfaces'),
         azure_egress_private_link_endpoints=pulumi.get(__ret__, 'azure_egress_private_link_endpoints'),
         display_name=pulumi.get(__ret__, 'display_name'),
         environment=pulumi.get(__ret__, 'environment'),
@@ -176,6 +189,7 @@ def get_access_point_output(environment: Optional[pulumi.Input[Union['GetAccessP
     __ret__ = pulumi.runtime.invoke_output('confluentcloud:index/getAccessPoint:getAccessPoint', __args__, opts=opts, typ=GetAccessPointResult)
     return __ret__.apply(lambda __response__: GetAccessPointResult(
         aws_egress_private_link_endpoints=pulumi.get(__response__, 'aws_egress_private_link_endpoints'),
+        aws_private_network_interfaces=pulumi.get(__response__, 'aws_private_network_interfaces'),
         azure_egress_private_link_endpoints=pulumi.get(__response__, 'azure_egress_private_link_endpoints'),
         display_name=pulumi.get(__response__, 'display_name'),
         environment=pulumi.get(__response__, 'environment'),
diff --git a/sdk/python/pulumi_confluentcloud/get_certificate_authority.py b/sdk/python/pulumi_confluentcloud/get_certificate_authority.py
index b3b88dbd..38712229 100644
--- a/sdk/python/pulumi_confluentcloud/get_certificate_authority.py
+++ b/sdk/python/pulumi_confluentcloud/get_certificate_authority.py
@@ -160,7 +160,7 @@ def get_certificate_authority(crl_source: Optional[str] = None,
                               id: Optional[str] = None,
                               opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetCertificateAuthorityResult:
     """
-    [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+    [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
     `CertificateAuthority` describes a Certificate Authority data source.
 
@@ -205,7 +205,7 @@ def get_certificate_authority_output(crl_source: Optional[pulumi.Input[Optional[
                                      id: Optional[pulumi.Input[str]] = None,
                                      opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetCertificateAuthorityResult]:
     """
-    [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+    [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
     `CertificateAuthority` describes a Certificate Authority data source.
 
diff --git a/sdk/python/pulumi_confluentcloud/get_certificate_pool.py b/sdk/python/pulumi_confluentcloud/get_certificate_pool.py
index 2d974fe6..0ee82867 100644
--- a/sdk/python/pulumi_confluentcloud/get_certificate_pool.py
+++ b/sdk/python/pulumi_confluentcloud/get_certificate_pool.py
@@ -109,7 +109,7 @@ def get_certificate_pool(certificate_authority: Optional[Union['GetCertificatePo
                          id: Optional[str] = None,
                          opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetCertificatePoolResult:
     """
-    [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+    [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
     `CertificatePool` describes a Certificate Pool data source.
 
@@ -146,7 +146,7 @@ def get_certificate_pool_output(certificate_authority: Optional[pulumi.Input[Uni
                                 id: Optional[pulumi.Input[str]] = None,
                                 opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetCertificatePoolResult]:
     """
-    [![Limited Availability](https://img.shields.io/badge/Lifecycle%20Stage-Limited%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
+    [![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](https://docs.confluent.io/cloud/current/api.html#section/Versioning/API-Lifecycle-Policy)
 
     `CertificatePool` describes a Certificate Pool data source.
 
diff --git a/sdk/python/pulumi_confluentcloud/get_gateway.py b/sdk/python/pulumi_confluentcloud/get_gateway.py
index 30bfb493..5c429c57 100644
--- a/sdk/python/pulumi_confluentcloud/get_gateway.py
+++ b/sdk/python/pulumi_confluentcloud/get_gateway.py
@@ -28,13 +28,16 @@ class GetGatewayResult:
     """
     A collection of values returned by getGateway.
     """
-    def __init__(__self__, aws_egress_private_link_gateways=None, aws_peering_gateways=None, azure_egress_private_link_gateways=None, azure_peering_gateways=None, display_name=None, environment=None, id=None):
+    def __init__(__self__, aws_egress_private_link_gateways=None, aws_peering_gateways=None, aws_private_network_interface_gateways=None, azure_egress_private_link_gateways=None, azure_peering_gateways=None, display_name=None, environment=None, id=None):
         if aws_egress_private_link_gateways and not isinstance(aws_egress_private_link_gateways, list):
             raise TypeError("Expected argument 'aws_egress_private_link_gateways' to be a list")
         pulumi.set(__self__, "aws_egress_private_link_gateways", aws_egress_private_link_gateways)
         if aws_peering_gateways and not isinstance(aws_peering_gateways, list):
             raise TypeError("Expected argument 'aws_peering_gateways' to be a list")
         pulumi.set(__self__, "aws_peering_gateways", aws_peering_gateways)
+        if aws_private_network_interface_gateways and not isinstance(aws_private_network_interface_gateways, list):
+            raise TypeError("Expected argument 'aws_private_network_interface_gateways' to be a list")
+        pulumi.set(__self__, "aws_private_network_interface_gateways", aws_private_network_interface_gateways)
         if azure_egress_private_link_gateways and not isinstance(azure_egress_private_link_gateways, list):
             raise TypeError("Expected argument 'azure_egress_private_link_gateways' to be a list")
         pulumi.set(__self__, "azure_egress_private_link_gateways", azure_egress_private_link_gateways)
@@ -67,6 +70,14 @@ def aws_peering_gateways(self) -> Sequence['outputs.GetGatewayAwsPeeringGatewayR
         """
         return pulumi.get(self, "aws_peering_gateways")
 
+    @property
+    @pulumi.getter(name="awsPrivateNetworkInterfaceGateways")
+    def aws_private_network_interface_gateways(self) -> Sequence['outputs.GetGatewayAwsPrivateNetworkInterfaceGatewayResult']:
+        """
+        (Optional Configuration Block) supports the following:
+        """
+        return pulumi.get(self, "aws_private_network_interface_gateways")
+
     @property
     @pulumi.getter(name="azureEgressPrivateLinkGateways")
     def azure_egress_private_link_gateways(self) -> Sequence['outputs.GetGatewayAzureEgressPrivateLinkGatewayResult']:
@@ -110,6 +121,7 @@ def __await__(self):
         return GetGatewayResult(
             aws_egress_private_link_gateways=self.aws_egress_private_link_gateways,
             aws_peering_gateways=self.aws_peering_gateways,
+            aws_private_network_interface_gateways=self.aws_private_network_interface_gateways,
             azure_egress_private_link_gateways=self.azure_egress_private_link_gateways,
             azure_peering_gateways=self.azure_peering_gateways,
             display_name=self.display_name,
@@ -150,6 +162,7 @@ def get_gateway(environment: Optional[Union['GetGatewayEnvironmentArgs', 'GetGat
     return AwaitableGetGatewayResult(
         aws_egress_private_link_gateways=pulumi.get(__ret__, 'aws_egress_private_link_gateways'),
         aws_peering_gateways=pulumi.get(__ret__, 'aws_peering_gateways'),
+        aws_private_network_interface_gateways=pulumi.get(__ret__, 'aws_private_network_interface_gateways'),
         azure_egress_private_link_gateways=pulumi.get(__ret__, 'azure_egress_private_link_gateways'),
         azure_peering_gateways=pulumi.get(__ret__, 'azure_peering_gateways'),
         display_name=pulumi.get(__ret__, 'display_name'),
@@ -187,6 +200,7 @@ def get_gateway_output(environment: Optional[pulumi.Input[Union['GetGatewayEnvir
     return __ret__.apply(lambda __response__: GetGatewayResult(
         aws_egress_private_link_gateways=pulumi.get(__response__, 'aws_egress_private_link_gateways'),
         aws_peering_gateways=pulumi.get(__response__, 'aws_peering_gateways'),
+        aws_private_network_interface_gateways=pulumi.get(__response__, 'aws_private_network_interface_gateways'),
         azure_egress_private_link_gateways=pulumi.get(__response__, 'azure_egress_private_link_gateways'),
         azure_peering_gateways=pulumi.get(__response__, 'azure_peering_gateways'),
         display_name=pulumi.get(__response__, 'display_name'),
diff --git a/sdk/python/pulumi_confluentcloud/get_schema_registry_cluster_config.py b/sdk/python/pulumi_confluentcloud/get_schema_registry_cluster_config.py
index 4ff2fab4..d18cf949 100644
--- a/sdk/python/pulumi_confluentcloud/get_schema_registry_cluster_config.py
+++ b/sdk/python/pulumi_confluentcloud/get_schema_registry_cluster_config.py
@@ -28,7 +28,10 @@ class GetSchemaRegistryClusterConfigResult:
     """
     A collection of values returned by getSchemaRegistryClusterConfig.
     """
-    def __init__(__self__, compatibility_level=None, credentials=None, id=None, rest_endpoint=None, schema_registry_cluster=None):
+    def __init__(__self__, compatibility_group=None, compatibility_level=None, credentials=None, id=None, rest_endpoint=None, schema_registry_cluster=None):
+        if compatibility_group and not isinstance(compatibility_group, str):
+            raise TypeError("Expected argument 'compatibility_group' to be a str")
+        pulumi.set(__self__, "compatibility_group", compatibility_group)
         if compatibility_level and not isinstance(compatibility_level, str):
             raise TypeError("Expected argument 'compatibility_level' to be a str")
         pulumi.set(__self__, "compatibility_level", compatibility_level)
@@ -45,6 +48,14 @@ def __init__(__self__, compatibility_level=None, credentials=None, id=None, rest
             raise TypeError("Expected argument 'schema_registry_cluster' to be a dict")
         pulumi.set(__self__, "schema_registry_cluster", schema_registry_cluster)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> str:
+        """
+        (Required String) The global Schema Registry compatibility group.
+        """
+        return pulumi.get(self, "compatibility_group")
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> str:
@@ -83,6 +94,7 @@ def __await__(self):
         if False:
             yield self
         return GetSchemaRegistryClusterConfigResult(
+            compatibility_group=self.compatibility_group,
             compatibility_level=self.compatibility_level,
             credentials=self.credentials,
             id=self.id,
@@ -139,6 +151,7 @@ def get_schema_registry_cluster_config(credentials: Optional[Union['GetSchemaReg
     __ret__ = pulumi.runtime.invoke('confluentcloud:index/getSchemaRegistryClusterConfig:getSchemaRegistryClusterConfig', __args__, opts=opts, typ=GetSchemaRegistryClusterConfigResult).value
 
     return AwaitableGetSchemaRegistryClusterConfigResult(
+        compatibility_group=pulumi.get(__ret__, 'compatibility_group'),
         compatibility_level=pulumi.get(__ret__, 'compatibility_level'),
         credentials=pulumi.get(__ret__, 'credentials'),
         id=pulumi.get(__ret__, 'id'),
@@ -192,6 +205,7 @@ def get_schema_registry_cluster_config_output(credentials: Optional[pulumi.Input
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('confluentcloud:index/getSchemaRegistryClusterConfig:getSchemaRegistryClusterConfig', __args__, opts=opts, typ=GetSchemaRegistryClusterConfigResult)
     return __ret__.apply(lambda __response__: GetSchemaRegistryClusterConfigResult(
+        compatibility_group=pulumi.get(__response__, 'compatibility_group'),
         compatibility_level=pulumi.get(__response__, 'compatibility_level'),
         credentials=pulumi.get(__response__, 'credentials'),
         id=pulumi.get(__response__, 'id'),
diff --git a/sdk/python/pulumi_confluentcloud/get_subject_config.py b/sdk/python/pulumi_confluentcloud/get_subject_config.py
index 8498b633..6e2219e5 100644
--- a/sdk/python/pulumi_confluentcloud/get_subject_config.py
+++ b/sdk/python/pulumi_confluentcloud/get_subject_config.py
@@ -28,7 +28,10 @@ class GetSubjectConfigResult:
     """
     A collection of values returned by getSubjectConfig.
     """
-    def __init__(__self__, compatibility_level=None, credentials=None, id=None, rest_endpoint=None, schema_registry_cluster=None, subject_name=None):
+    def __init__(__self__, compatibility_group=None, compatibility_level=None, credentials=None, id=None, rest_endpoint=None, schema_registry_cluster=None, subject_name=None):
+        if compatibility_group and not isinstance(compatibility_group, str):
+            raise TypeError("Expected argument 'compatibility_group' to be a str")
+        pulumi.set(__self__, "compatibility_group", compatibility_group)
         if compatibility_level and not isinstance(compatibility_level, str):
             raise TypeError("Expected argument 'compatibility_level' to be a str")
         pulumi.set(__self__, "compatibility_level", compatibility_level)
@@ -48,6 +51,14 @@ def __init__(__self__, compatibility_level=None, credentials=None, id=None, rest
             raise TypeError("Expected argument 'subject_name' to be a str")
         pulumi.set(__self__, "subject_name", subject_name)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> str:
+        """
+        (Required String) The Compatibility Group of the specified subject.
+        """
+        return pulumi.get(self, "compatibility_group")
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> str:
@@ -91,6 +102,7 @@ def __await__(self):
         if False:
             yield self
         return GetSubjectConfigResult(
+            compatibility_group=self.compatibility_group,
             compatibility_level=self.compatibility_level,
             credentials=self.credentials,
             id=self.id,
@@ -124,6 +136,7 @@ def get_subject_config(credentials: Optional[Union['GetSubjectConfigCredentialsA
     __ret__ = pulumi.runtime.invoke('confluentcloud:index/getSubjectConfig:getSubjectConfig', __args__, opts=opts, typ=GetSubjectConfigResult).value
 
     return AwaitableGetSubjectConfigResult(
+        compatibility_group=pulumi.get(__ret__, 'compatibility_group'),
         compatibility_level=pulumi.get(__ret__, 'compatibility_level'),
         credentials=pulumi.get(__ret__, 'credentials'),
         id=pulumi.get(__ret__, 'id'),
@@ -154,6 +167,7 @@ def get_subject_config_output(credentials: Optional[pulumi.Input[Optional[Union[
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('confluentcloud:index/getSubjectConfig:getSubjectConfig', __args__, opts=opts, typ=GetSubjectConfigResult)
     return __ret__.apply(lambda __response__: GetSubjectConfigResult(
+        compatibility_group=pulumi.get(__response__, 'compatibility_group'),
         compatibility_level=pulumi.get(__response__, 'compatibility_level'),
         credentials=pulumi.get(__response__, 'credentials'),
         id=pulumi.get(__response__, 'id'),
diff --git a/sdk/python/pulumi_confluentcloud/outputs.py b/sdk/python/pulumi_confluentcloud/outputs.py
index 5a68e27a..0cdc49fb 100644
--- a/sdk/python/pulumi_confluentcloud/outputs.py
+++ b/sdk/python/pulumi_confluentcloud/outputs.py
@@ -17,6 +17,7 @@
 
 __all__ = [
     'AccessPointAwsEgressPrivateLinkEndpoint',
+    'AccessPointAwsPrivateNetworkInterface',
     'AccessPointAzureEgressPrivateLinkEndpoint',
     'AccessPointEnvironment',
     'AccessPointGateway',
@@ -60,6 +61,7 @@
     'FlinkStatementOrganization',
     'FlinkStatementPrincipal',
     'GatewayAwsEgressPrivateLinkGateway',
+    'GatewayAwsPrivateNetworkInterfaceGateway',
     'GatewayAzureEgressPrivateLinkGateway',
     'GatewayEnvironment',
     'IdentityPoolIdentityProvider',
@@ -155,6 +157,7 @@
     'TransitGatewayAttachmentEnvironment',
     'TransitGatewayAttachmentNetwork',
     'GetAccessPointAwsEgressPrivateLinkEndpointResult',
+    'GetAccessPointAwsPrivateNetworkInterfaceResult',
     'GetAccessPointAzureEgressPrivateLinkEndpointResult',
     'GetAccessPointEnvironmentResult',
     'GetAccessPointGatewayResult',
@@ -176,6 +179,7 @@
     'GetFlinkComputePoolEnvironmentResult',
     'GetGatewayAwsEgressPrivateLinkGatewayResult',
     'GetGatewayAwsPeeringGatewayResult',
+    'GetGatewayAwsPrivateNetworkInterfaceGatewayResult',
     'GetGatewayAzureEgressPrivateLinkGatewayResult',
     'GetGatewayAzurePeeringGatewayResult',
     'GetGatewayEnvironmentResult',
@@ -349,6 +353,52 @@ def vpc_endpoint_id(self) -> Optional[str]:
         return pulumi.get(self, "vpc_endpoint_id")
 
 
+@pulumi.output_type
+class AccessPointAwsPrivateNetworkInterface(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "networkInterfaces":
+            suggest = "network_interfaces"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in AccessPointAwsPrivateNetworkInterface. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        AccessPointAwsPrivateNetworkInterface.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        AccessPointAwsPrivateNetworkInterface.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 account: str,
+                 network_interfaces: Sequence[str]):
+        """
+        :param str account: (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        :param Sequence[str] network_interfaces: (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+        pulumi.set(__self__, "account", account)
+        pulumi.set(__self__, "network_interfaces", network_interfaces)
+
+    @property
+    @pulumi.getter
+    def account(self) -> str:
+        """
+        (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        """
+        return pulumi.get(self, "account")
+
+    @property
+    @pulumi.getter(name="networkInterfaces")
+    def network_interfaces(self) -> Sequence[str]:
+        """
+        (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+        return pulumi.get(self, "network_interfaces")
+
+
 @pulumi.output_type
 class AccessPointAzureEgressPrivateLinkEndpoint(dict):
     @staticmethod
@@ -1862,6 +1912,47 @@ def principal_arn(self) -> Optional[str]:
         return pulumi.get(self, "principal_arn")
 
 
+@pulumi.output_type
+class GatewayAwsPrivateNetworkInterfaceGateway(dict):
+    def __init__(__self__, *,
+                 region: str,
+                 zones: Sequence[str],
+                 account: Optional[str] = None):
+        """
+        :param str region: AWS region of the Private Network Interface Gateway.
+        :param Sequence[str] zones: AWS availability zone ids of the Private Network Interface Gateway.
+        :param str account: (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        """
+        pulumi.set(__self__, "region", region)
+        pulumi.set(__self__, "zones", zones)
+        if account is not None:
+            pulumi.set(__self__, "account", account)
+
+    @property
+    @pulumi.getter
+    def region(self) -> str:
+        """
+        AWS region of the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "region")
+
+    @property
+    @pulumi.getter
+    def zones(self) -> Sequence[str]:
+        """
+        AWS availability zone ids of the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "zones")
+
+    @property
+    @pulumi.getter
+    def account(self) -> Optional[str]:
+        """
+        (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "account")
+
+
 @pulumi.output_type
 class GatewayAzureEgressPrivateLinkGateway(dict):
     def __init__(__self__, *,
@@ -4906,6 +4997,35 @@ def vpc_endpoint_service_name(self) -> str:
         return pulumi.get(self, "vpc_endpoint_service_name")
 
 
+@pulumi.output_type
+class GetAccessPointAwsPrivateNetworkInterfaceResult(dict):
+    def __init__(__self__, *,
+                 account: str,
+                 network_interfaces: Sequence[str]):
+        """
+        :param str account: (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        :param Sequence[str] network_interfaces: (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+        pulumi.set(__self__, "account", account)
+        pulumi.set(__self__, "network_interfaces", network_interfaces)
+
+    @property
+    @pulumi.getter
+    def account(self) -> str:
+        """
+        (Required String) The AWS account ID associated with the ENIs you are using for the Confluent Private Network Interface, for example: `000000000000`.
+        """
+        return pulumi.get(self, "account")
+
+    @property
+    @pulumi.getter(name="networkInterfaces")
+    def network_interfaces(self) -> Sequence[str]:
+        """
+        (Required List of Strings) List of the IDs of the Elastic Network Interfaces, for example: `["eni-00000000000000000", "eni-00000000000000001", "eni-00000000000000002", "eni-00000000000000003", "eni-00000000000000004", "eni-00000000000000005"]`
+        """
+        return pulumi.get(self, "network_interfaces")
+
+
 @pulumi.output_type
 class GetAccessPointAzureEgressPrivateLinkEndpointResult(dict):
     def __init__(__self__, *,
@@ -5498,6 +5618,46 @@ def region(self) -> str:
         return pulumi.get(self, "region")
 
 
+@pulumi.output_type
+class GetGatewayAwsPrivateNetworkInterfaceGatewayResult(dict):
+    def __init__(__self__, *,
+                 account: str,
+                 region: str,
+                 zones: Sequence[str]):
+        """
+        :param str account: (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        :param str region: (Required String) Azure region of the Peering Gateway.
+        :param Sequence[str] zones: (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+        """
+        pulumi.set(__self__, "account", account)
+        pulumi.set(__self__, "region", region)
+        pulumi.set(__self__, "zones", zones)
+
+    @property
+    @pulumi.getter
+    def account(self) -> str:
+        """
+        (Required String) The AWS account ID associated with the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "account")
+
+    @property
+    @pulumi.getter
+    def region(self) -> str:
+        """
+        (Required String) Azure region of the Peering Gateway.
+        """
+        return pulumi.get(self, "region")
+
+    @property
+    @pulumi.getter
+    def zones(self) -> Sequence[str]:
+        """
+        (Required List of Strings) AWS availability zone ids of the Private Network Interface Gateway.
+        """
+        return pulumi.get(self, "zones")
+
+
 @pulumi.output_type
 class GetGatewayAzureEgressPrivateLinkGatewayResult(dict):
     def __init__(__self__, *,
diff --git a/sdk/python/pulumi_confluentcloud/schema_registry_cluster_config.py b/sdk/python/pulumi_confluentcloud/schema_registry_cluster_config.py
index 15f100c6..b08df775 100644
--- a/sdk/python/pulumi_confluentcloud/schema_registry_cluster_config.py
+++ b/sdk/python/pulumi_confluentcloud/schema_registry_cluster_config.py
@@ -21,16 +21,20 @@
 @pulumi.input_type
 class SchemaRegistryClusterConfigArgs:
     def __init__(__self__, *,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input['SchemaRegistryClusterConfigCredentialsArgs']] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
                  schema_registry_cluster: Optional[pulumi.Input['SchemaRegistryClusterConfigSchemaRegistryClusterArgs']] = None):
         """
         The set of arguments for constructing a SchemaRegistryClusterConfig resource.
+        :param pulumi.Input[str] compatibility_group: The global Schema Registry compatibility group.
         :param pulumi.Input[str] compatibility_level: The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input['SchemaRegistryClusterConfigCredentialsArgs'] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
         """
+        if compatibility_group is not None:
+            pulumi.set(__self__, "compatibility_group", compatibility_group)
         if compatibility_level is not None:
             pulumi.set(__self__, "compatibility_level", compatibility_level)
         if credentials is not None:
@@ -40,6 +44,18 @@ def __init__(__self__, *,
         if schema_registry_cluster is not None:
             pulumi.set(__self__, "schema_registry_cluster", schema_registry_cluster)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        The global Schema Registry compatibility group.
+        """
+        return pulumi.get(self, "compatibility_group")
+
+    @compatibility_group.setter
+    def compatibility_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "compatibility_group", value)
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> Optional[pulumi.Input[str]]:
@@ -89,16 +105,20 @@ def schema_registry_cluster(self, value: Optional[pulumi.Input['SchemaRegistryCl
 @pulumi.input_type
 class _SchemaRegistryClusterConfigState:
     def __init__(__self__, *,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input['SchemaRegistryClusterConfigCredentialsArgs']] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
                  schema_registry_cluster: Optional[pulumi.Input['SchemaRegistryClusterConfigSchemaRegistryClusterArgs']] = None):
         """
         Input properties used for looking up and filtering SchemaRegistryClusterConfig resources.
+        :param pulumi.Input[str] compatibility_group: The global Schema Registry compatibility group.
         :param pulumi.Input[str] compatibility_level: The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input['SchemaRegistryClusterConfigCredentialsArgs'] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
         """
+        if compatibility_group is not None:
+            pulumi.set(__self__, "compatibility_group", compatibility_group)
         if compatibility_level is not None:
             pulumi.set(__self__, "compatibility_level", compatibility_level)
         if credentials is not None:
@@ -108,6 +128,18 @@ def __init__(__self__, *,
         if schema_registry_cluster is not None:
             pulumi.set(__self__, "schema_registry_cluster", schema_registry_cluster)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        The global Schema Registry compatibility group.
+        """
+        return pulumi.get(self, "compatibility_group")
+
+    @compatibility_group.setter
+    def compatibility_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "compatibility_group", value)
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> Optional[pulumi.Input[str]]:
@@ -159,6 +191,7 @@ class SchemaRegistryClusterConfig(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input[Union['SchemaRegistryClusterConfigCredentialsArgs', 'SchemaRegistryClusterConfigCredentialsArgsDict']]] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -191,7 +224,9 @@ def __init__(__self__,
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
-        example = confluentcloud.SchemaRegistryClusterConfig("example", compatibility_level="FULL")
+        example = confluentcloud.SchemaRegistryClusterConfig("example",
+            compatibility_level="FULL",
+            compatibility_group="abc.cg.version")
         ```
 
         ## Import
@@ -212,6 +247,7 @@ def __init__(__self__,
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] compatibility_group: The global Schema Registry compatibility group.
         :param pulumi.Input[str] compatibility_level: The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input[Union['SchemaRegistryClusterConfigCredentialsArgs', 'SchemaRegistryClusterConfigCredentialsArgsDict']] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
@@ -249,7 +285,9 @@ def __init__(__self__,
         import pulumi
         import pulumi_confluentcloud as confluentcloud
 
-        example = confluentcloud.SchemaRegistryClusterConfig("example", compatibility_level="FULL")
+        example = confluentcloud.SchemaRegistryClusterConfig("example",
+            compatibility_level="FULL",
+            compatibility_group="abc.cg.version")
         ```
 
         ## Import
@@ -283,6 +321,7 @@ def __init__(__self__, resource_name: str, *args, **kwargs):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input[Union['SchemaRegistryClusterConfigCredentialsArgs', 'SchemaRegistryClusterConfigCredentialsArgsDict']]] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -296,6 +335,7 @@ def _internal_init(__self__,
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = SchemaRegistryClusterConfigArgs.__new__(SchemaRegistryClusterConfigArgs)
 
+            __props__.__dict__["compatibility_group"] = compatibility_group
             __props__.__dict__["compatibility_level"] = compatibility_level
             __props__.__dict__["credentials"] = None if credentials is None else pulumi.Output.secret(credentials)
             __props__.__dict__["rest_endpoint"] = rest_endpoint
@@ -312,6 +352,7 @@ def _internal_init(__self__,
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            compatibility_group: Optional[pulumi.Input[str]] = None,
             compatibility_level: Optional[pulumi.Input[str]] = None,
             credentials: Optional[pulumi.Input[Union['SchemaRegistryClusterConfigCredentialsArgs', 'SchemaRegistryClusterConfigCredentialsArgsDict']]] = None,
             rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -323,6 +364,7 @@ def get(resource_name: str,
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] compatibility_group: The global Schema Registry compatibility group.
         :param pulumi.Input[str] compatibility_level: The global Schema Registry compatibility level. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input[Union['SchemaRegistryClusterConfigCredentialsArgs', 'SchemaRegistryClusterConfigCredentialsArgsDict']] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
@@ -331,12 +373,21 @@ def get(resource_name: str,
 
         __props__ = _SchemaRegistryClusterConfigState.__new__(_SchemaRegistryClusterConfigState)
 
+        __props__.__dict__["compatibility_group"] = compatibility_group
         __props__.__dict__["compatibility_level"] = compatibility_level
         __props__.__dict__["credentials"] = credentials
         __props__.__dict__["rest_endpoint"] = rest_endpoint
         __props__.__dict__["schema_registry_cluster"] = schema_registry_cluster
         return SchemaRegistryClusterConfig(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> pulumi.Output[str]:
+        """
+        The global Schema Registry compatibility group.
+        """
+        return pulumi.get(self, "compatibility_group")
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> pulumi.Output[str]:
diff --git a/sdk/python/pulumi_confluentcloud/subject_config.py b/sdk/python/pulumi_confluentcloud/subject_config.py
index 741f78f0..b59df6c4 100644
--- a/sdk/python/pulumi_confluentcloud/subject_config.py
+++ b/sdk/python/pulumi_confluentcloud/subject_config.py
@@ -22,6 +22,7 @@
 class SubjectConfigArgs:
     def __init__(__self__, *,
                  subject_name: pulumi.Input[str],
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input['SubjectConfigCredentialsArgs']] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -29,11 +30,14 @@ def __init__(__self__, *,
         """
         The set of arguments for constructing a SubjectConfig resource.
         :param pulumi.Input[str] subject_name: The name of the subject (in other words, the namespace), representing the subject under which the schema will be registered, for example, `test-subject`.
+        :param pulumi.Input[str] compatibility_group: The Compatibility Group of the specified subject.
         :param pulumi.Input[str] compatibility_level: The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input['SubjectConfigCredentialsArgs'] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
         """
         pulumi.set(__self__, "subject_name", subject_name)
+        if compatibility_group is not None:
+            pulumi.set(__self__, "compatibility_group", compatibility_group)
         if compatibility_level is not None:
             pulumi.set(__self__, "compatibility_level", compatibility_level)
         if credentials is not None:
@@ -55,6 +59,18 @@ def subject_name(self) -> pulumi.Input[str]:
     def subject_name(self, value: pulumi.Input[str]):
         pulumi.set(self, "subject_name", value)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Compatibility Group of the specified subject.
+        """
+        return pulumi.get(self, "compatibility_group")
+
+    @compatibility_group.setter
+    def compatibility_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "compatibility_group", value)
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> Optional[pulumi.Input[str]]:
@@ -104,6 +120,7 @@ def schema_registry_cluster(self, value: Optional[pulumi.Input['SubjectConfigSch
 @pulumi.input_type
 class _SubjectConfigState:
     def __init__(__self__, *,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input['SubjectConfigCredentialsArgs']] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -111,11 +128,14 @@ def __init__(__self__, *,
                  subject_name: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering SubjectConfig resources.
+        :param pulumi.Input[str] compatibility_group: The Compatibility Group of the specified subject.
         :param pulumi.Input[str] compatibility_level: The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input['SubjectConfigCredentialsArgs'] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
         :param pulumi.Input[str] subject_name: The name of the subject (in other words, the namespace), representing the subject under which the schema will be registered, for example, `test-subject`.
         """
+        if compatibility_group is not None:
+            pulumi.set(__self__, "compatibility_group", compatibility_group)
         if compatibility_level is not None:
             pulumi.set(__self__, "compatibility_level", compatibility_level)
         if credentials is not None:
@@ -127,6 +147,18 @@ def __init__(__self__, *,
         if subject_name is not None:
             pulumi.set(__self__, "subject_name", subject_name)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Compatibility Group of the specified subject.
+        """
+        return pulumi.get(self, "compatibility_group")
+
+    @compatibility_group.setter
+    def compatibility_group(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "compatibility_group", value)
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> Optional[pulumi.Input[str]]:
@@ -190,6 +222,7 @@ class SubjectConfig(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input[Union['SubjectConfigCredentialsArgs', 'SubjectConfigCredentialsArgsDict']]] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -212,6 +245,7 @@ def __init__(__self__,
             rest_endpoint=essentials_confluent_schema_registry_cluster["restEndpoint"],
             subject_name="proto-purchase-value",
             compatibility_level="BACKWARD",
+            compatibility_group="abc.cg.version",
             credentials={
                 "key": "<Schema Registry API Key for data.confluent_schema_registry_cluster.essentials>",
                 "secret": "<Schema Registry API Secret for data.confluent_schema_registry_cluster.essentials>",
@@ -226,7 +260,8 @@ def __init__(__self__,
 
         example = confluentcloud.SubjectConfig("example",
             subject_name="proto-purchase-value",
-            compatibility_level="BACKWARD")
+            compatibility_level="BACKWARD",
+            compatibility_group="abc.cg.version")
         ```
 
         ## Import
@@ -247,6 +282,7 @@ def __init__(__self__,
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] compatibility_group: The Compatibility Group of the specified subject.
         :param pulumi.Input[str] compatibility_level: The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input[Union['SubjectConfigCredentialsArgs', 'SubjectConfigCredentialsArgsDict']] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
@@ -274,6 +310,7 @@ def __init__(__self__,
             rest_endpoint=essentials_confluent_schema_registry_cluster["restEndpoint"],
             subject_name="proto-purchase-value",
             compatibility_level="BACKWARD",
+            compatibility_group="abc.cg.version",
             credentials={
                 "key": "<Schema Registry API Key for data.confluent_schema_registry_cluster.essentials>",
                 "secret": "<Schema Registry API Secret for data.confluent_schema_registry_cluster.essentials>",
@@ -288,7 +325,8 @@ def __init__(__self__,
 
         example = confluentcloud.SubjectConfig("example",
             subject_name="proto-purchase-value",
-            compatibility_level="BACKWARD")
+            compatibility_level="BACKWARD",
+            compatibility_group="abc.cg.version")
         ```
 
         ## Import
@@ -322,6 +360,7 @@ def __init__(__self__, resource_name: str, *args, **kwargs):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 compatibility_group: Optional[pulumi.Input[str]] = None,
                  compatibility_level: Optional[pulumi.Input[str]] = None,
                  credentials: Optional[pulumi.Input[Union['SubjectConfigCredentialsArgs', 'SubjectConfigCredentialsArgsDict']]] = None,
                  rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -336,6 +375,7 @@ def _internal_init(__self__,
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = SubjectConfigArgs.__new__(SubjectConfigArgs)
 
+            __props__.__dict__["compatibility_group"] = compatibility_group
             __props__.__dict__["compatibility_level"] = compatibility_level
             __props__.__dict__["credentials"] = None if credentials is None else pulumi.Output.secret(credentials)
             __props__.__dict__["rest_endpoint"] = rest_endpoint
@@ -355,6 +395,7 @@ def _internal_init(__self__,
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            compatibility_group: Optional[pulumi.Input[str]] = None,
             compatibility_level: Optional[pulumi.Input[str]] = None,
             credentials: Optional[pulumi.Input[Union['SubjectConfigCredentialsArgs', 'SubjectConfigCredentialsArgsDict']]] = None,
             rest_endpoint: Optional[pulumi.Input[str]] = None,
@@ -367,6 +408,7 @@ def get(resource_name: str,
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] compatibility_group: The Compatibility Group of the specified subject.
         :param pulumi.Input[str] compatibility_level: The Compatibility Level of the specified subject. Accepted values are: `BACKWARD`, `BACKWARD_TRANSITIVE`, `FORWARD`, `FORWARD_TRANSITIVE`, `FULL`, `FULL_TRANSITIVE`, and `NONE`. See the [Compatibility Types](https://docs.confluent.io/platform/current/schema-registry/avro.html#compatibility-types) for more details.
         :param pulumi.Input[Union['SubjectConfigCredentialsArgs', 'SubjectConfigCredentialsArgsDict']] credentials: The Cluster API Credentials.
         :param pulumi.Input[str] rest_endpoint: The REST endpoint of the Schema Registry cluster, for example, `https://psrc-00000.us-central1.gcp.confluent.cloud:443`).
@@ -376,6 +418,7 @@ def get(resource_name: str,
 
         __props__ = _SubjectConfigState.__new__(_SubjectConfigState)
 
+        __props__.__dict__["compatibility_group"] = compatibility_group
         __props__.__dict__["compatibility_level"] = compatibility_level
         __props__.__dict__["credentials"] = credentials
         __props__.__dict__["rest_endpoint"] = rest_endpoint
@@ -383,6 +426,14 @@ def get(resource_name: str,
         __props__.__dict__["subject_name"] = subject_name
         return SubjectConfig(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter(name="compatibilityGroup")
+    def compatibility_group(self) -> pulumi.Output[str]:
+        """
+        The Compatibility Group of the specified subject.
+        """
+        return pulumi.get(self, "compatibility_group")
+
     @property
     @pulumi.getter(name="compatibilityLevel")
     def compatibility_level(self) -> pulumi.Output[str]: