diff --git a/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_rule_test.go.tmpl b/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_rule_test.go.tmpl
index 8aeb58e159cb..a91828b5ca60 100644
--- a/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_rule_test.go.tmpl
+++ b/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_rule_test.go.tmpl
@@ -522,7 +522,7 @@ resource "google_compute_region_security_policy_rule" "policy_rule" {
   security_policy = google_compute_region_security_policy.policy.name
   region          = "us-west2"
   description     = "Rule with preconfiguredWafConfig - create"
-  action   = "deny"
+  action   = "deny(403)"
   priority = "1000"
   match {
     versioned_expr = "SRC_IPS_V1"
@@ -583,7 +583,7 @@ resource "google_compute_region_security_policy_rule" "policy_rule" {
   security_policy = google_compute_region_security_policy.policy.name
   region          = "us-west2"
   description     = "Rule with preconfiguredWafConfig - update"
-  action   = "deny"
+  action   = "deny(403)"
   priority = "1000"
   match {
     versioned_expr = "SRC_IPS_V1"
@@ -641,7 +641,7 @@ resource "google_compute_region_security_policy_rule" "policy_rule" {
   security_policy = google_compute_region_security_policy.policy.name
   region          = "us-west2"
   description     = "Rule with preconfiguredWafConfig - clear"
-  action   = "deny"
+  action   = "deny(403)"
   priority = "1000"
   match {
     versioned_expr = "SRC_IPS_V1"
diff --git a/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_test.go.tmpl b/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_test.go.tmpl
index 0c3469db6d6e..728ed80d4500 100644
--- a/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_test.go.tmpl
+++ b/mmv1/third_party/terraform/services/compute/resource_compute_region_security_policy_test.go.tmpl
@@ -216,7 +216,7 @@ func testAccComputeRegionSecurityPolicy_withRules(context map[string]interface{}
 		type        = "CLOUD_ARMOR"
 
 		rules {
-			action   = "deny"
+			action   = "deny(403)"
 			priority = "1000"
 			match {
 				expr {
@@ -227,7 +227,7 @@ func testAccComputeRegionSecurityPolicy_withRules(context map[string]interface{}
 
 
 		rules {
-			action   = "deny"
+			action   = "deny(403)"
 			priority = "2147483647"
 			match {
 				versioned_expr = "SRC_IPS_V1"
@@ -308,7 +308,7 @@ func testAccComputeRegionSecurityPolicy_withPreconfiguredWafConfig(context map[s
 			type	= "CLOUD_ARMOR"
 
 			rules {
-				action   = "deny"
+				action   = "deny(403)"
 				priority = "1000"
 				match {
 					expr {
@@ -376,7 +376,7 @@ func testAccComputeRegionSecurityPolicy_withPreconfiguredWafConfig_update(contex
 			type	= "CLOUD_ARMOR"
 
 			rules {
-				action   = "deny"
+				action   = "deny(403)"
 				priority = "1000"
 				match {
 					expr {
@@ -824,7 +824,7 @@ resource "google_compute_region_security_policy" "policy" {
 	region      = "us-central1"
 
 	rules {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "3000"
 		match {
 			expr {
@@ -834,7 +834,7 @@ resource "google_compute_region_security_policy" "policy" {
 	}
 
 	rules {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "2147483647"
 		match {
 			versioned_expr = "SRC_IPS_V1"
@@ -881,7 +881,7 @@ resource "google_compute_region_security_policy" "policy" {
 	}
 
 	rules {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "2147483647"
 		match {
 			versioned_expr = "SRC_IPS_V1"
diff --git a/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_rule_test.go b/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_rule_test.go
index e64cce823f63..01116ffd3482 100644
--- a/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_rule_test.go
+++ b/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_rule_test.go
@@ -686,7 +686,7 @@ resource "google_compute_security_policy" "policy" {
 resource "google_compute_security_policy_rule" "policy_rule" {
   security_policy = google_compute_security_policy.policy.name
   description     = "Rule with preconfiguredWafConfig - create"
-  action   = "deny"
+  action   = "deny(403)"
   priority = "1000"
   match {
     expr {
@@ -743,7 +743,7 @@ resource "google_compute_security_policy" "policy" {
 resource "google_compute_security_policy_rule" "policy_rule" {
   security_policy = google_compute_security_policy.policy.name
   description     = "Rule with preconfiguredWafConfig - update"
-  action   = "deny"
+  action   = "deny(403)"
   priority = "1000"
   match {
     expr {
@@ -797,7 +797,7 @@ resource "google_compute_security_policy" "policy" {
 resource "google_compute_security_policy_rule" "policy_rule" {
   security_policy = google_compute_security_policy.policy.name
   description     = "Rule with preconfiguredWafConfig - clear"
-  action   = "deny"
+  action   = "deny(403)"
   priority = "1000"
   match {
     expr {
diff --git a/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_test.go.tmpl b/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_test.go.tmpl
index 6db9b10ee4df..36b7ca68511a 100644
--- a/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_test.go.tmpl
+++ b/mmv1/third_party/terraform/services/compute/resource_compute_security_policy_test.go.tmpl
@@ -1230,7 +1230,7 @@ resource "google_compute_security_policy" "policy" {
 	}
 
 	rule {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "1000"
 		match {
 			expr {
@@ -1296,7 +1296,7 @@ resource "google_compute_security_policy" "policy" {
 	}
 
 	rule {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "1000"
 		match {
 			expr {
@@ -1355,7 +1355,7 @@ resource "google_compute_security_policy" "policy" {
 	}
 
 	rule {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "1000"
 		match {
 			expr {
@@ -1389,7 +1389,7 @@ resource "google_compute_security_policy" "policy" {
 	}
 
 	rule {
-		action   = "deny"
+		action   = "deny(403)"
 		priority = "1000"
 		match {
 			expr {