discoveryengine: add acl_enabled to google_discovery_engine_data_store

mmv1/products/discoveryengine/DataStore.yaml

@@ -100,6 +100,13 @@ samples:
       - name: 'discoveryengine_datastore_advanced_site_search_config'
         resource_id_vars:
           data_store_id: 'data-store-id'
+  - name: 'discoveryengine_datastore_acl_config'
+    primary_resource_id: 'acl_config'
+    exclude_basic_doc: true
+    steps:
+      - name: 'discoveryengine_datastore_acl_config'
+        resource_id_vars:
+          data_store_id: 'data-store-id'
 parameters:
   - name: 'location'
     type: String
@@ -190,6 +197,16 @@ properties:
       - 'NO_CONTENT'
       - 'CONTENT_REQUIRED'
       - 'PUBLIC_WEBSITE'
+  - name: 'aclEnabled'
+    type: Boolean
+    description: |
+      Immutable. Whether data in the DataStore has ACL information. If set to `true`,
+      the source data must have ACL. ACL will be ingested when data is ingested by
+      DocumentService.ImportDocuments methods. When ACL is enabled for the DataStore,
+      Document can't be accessed by calling DocumentService.GetDocument or
+      DocumentService.ListDocuments. Currently ACL is only supported in the `GENERIC`
+      industry vertical with non-`PUBLIC_WEBSITE` content config.
+    immutable: true
   - name: 'advancedSiteSearchConfig'
     type: NestedObject
     description: |

mmv1/templates/terraform/samples/services/discoveryengine/discoveryengine_datastore_acl_config.tf.tmpl

@@ -0,0 +1,10 @@
+resource "google_discovery_engine_data_store" "acl_config" {
+  location                     = "global"
+  data_store_id                = "{{index $.ResourceIdVars "data_store_id"}}"
+  display_name                 = "tf-test-acl-datastore"
+  industry_vertical            = "GENERIC"
+  content_config               = "CONTENT_REQUIRED"
+  solution_types               = ["SOLUTION_TYPE_SEARCH"]
+  create_advanced_site_search  = false
+  acl_enabled                  = true
+}